Privacy Policy

Data We Collect

• Account data: Email address, password (hashed), display name
• Health profile: Demographics, medical history, lifestyle factors (provided by you)
• Genetic data: VCF files you upload, scan results, condition cards
• Blood test data: Biomarker values you enter or extract from lab reports
• Chat data: Conversations with the AI Health Assistant
• Supplement data: Supplements you track

How We Use Your Data

Your data is used exclusively to:

• Generate personalized health insights and recommendations
• Compute longevity scores and convergence analysis
• Provide context to the AI Health Assistant
• Display biomarker trends and heatmaps

We do not sell, share, or monetize your individual health data. We do not use your data for advertising.

Research Participation (Opt-In)

With your explicit, separate opt-in, bioArc may include your de-identified biomarker results in aggregate population statistics — for example, the median and quartiles of a lab value across consenting members — so we can show you how your results compare to the community and improve the platform.

• Aggregate only. We compute group statistics. Your individual records are never sold, shared, or shown to anyone else.
• Suppressed for small groups.No statistic is computed or shown for a group of fewer than 20 consenting members, so you can't be singled out.
• De-identified. The aggregates store no name, email, or per-user identifier.
• Biomarkers only. This covers lab/biomarker values. Genetic data is not included.
• Optional and reversible. It is off by default, never required to use bioArc, and you can withdraw any time in Settings — withdrawing removes you from all future statistics.

Data Storage & Security

• All data is stored in encrypted databases on secured servers
• Passwords are hashed using bcrypt
• API access requires JWT authentication
• VCF files are stored on the server filesystem with per-user isolation
• Database connections use TLS in production

Third-Party Services

• AI Chat (OpenRouter):Chat messages are sent to AI model providers for response generation. Messages include relevant health context. Review OpenRouter's privacy policy for their data handling practices.

Your Rights

• Data export: You can export all your data at any time from settings
• Data deletion: You can request complete deletion of your account and all associated data
• Data portability: Export your data in JSON format

Contact

For privacy-related inquiries, contact us at [email protected].