Privacy Policy

Our privacy policy and how we use your data

What we keep

The file you upload, the readings taken from it, your corrections, and the date the sample was collected. That is the whole of it. We do not ask for a diagnosis, a medication list, or anything else about your health, and there is nowhere to enter one.

Who can see it

You. Your reports and readings are stored against your account and access is enforced by the database itself on every single query, not by a check somewhere in the application that could be forgotten. Files are encrypted in transit and at rest.

Who we do not give it to

Your results are never public, and they are never shared with a laboratory, an insurer, or an employer. We do not sell data and we do not use your readings to advertise to you. If a laboratory referral is ever offered, the laboratory runs the test and we read the report you bring back — they receive nothing from us. There is one exception, and it only exists if you create it yourself: an AI assistant you deliberately connect. That is described below.

Connecting an AI assistant

You can connect an assistant such as ChatGPT or Claude to your account. If you do, it can read your lab reports, your readings, your tracked markers and your programmes, along with our marker and intervention reference library, and it can track or untrack a marker. It cannot change a measured value, upload anything, or see another person’s data. You approve this once, on a single screen that names the application asking. Two things are worth knowing before you approve. Once a value has been read by an assistant, it sits with that assistant’s provider under their terms, not ours — disconnecting stops any further access, but it cannot recall what was already read. And we keep a record of which tool was called and when, so you can see what a connected assistant has been doing; that record deliberately stores no marker names and no values. You can disconnect at any time from your settings, and it takes effect immediately.

Deleting it

Delete a single report, including the original file, or close the account and take everything with it. Export first if you want your own copy. Deletion is not a request queued for review — it removes the rows and the stored file.

The formal policy

The plain-language description above is what the product does today. The formal privacy notice — the legal basis for processing health data, our retention periods, our processors and your statutory rights — is being prepared for review and will be published here before launch. Until it is, write to us for anything this page does not answer.