Privacy Policy

1. What We Collect

Genox is designed with a minimal data footprint. Here is exactly what we collect:

We do not collect your name, email, date of birth, or any other personally identifiable information unless you voluntarily provide it (e.g., by contacting us).

2. How We Use Your Data

Your data is used solely to:

• Parse and decode your 23andMe raw data file.
• Query public genomic databases (GWAS, SNPedia, ClinVar) to generate your report.
• Maintain session continuity while you view your results.
• Monitor and improve service reliability and security.

3. Data Sources for Results

Genox generates results by cross-referencing your genetic variants against the following publicly available databases:

Important: These databases reflect population-level research. The data is not 100% certain or complete, and scientific understanding evolves continuously. Results should not be used for clinical or medical decision-making.

4. Data Sharing

We do not sell, trade, rent, or share your genetic data or personal information with any third party, including advertisers, insurance companies, pharmaceutical companies, or government agencies, except when required by law.

Third-party services we use (such as hosting infrastructure) may process request metadata (IP, timestamps) under their own privacy policies, but they do not receive your genetic data.

5. Data Retention

Your uploaded DNA file is stored securely so we can generate your results and let you revisit them. It is automatically and permanently deleted within 48 hours of upload. You can also delete any uploaded file yourself at any time from your files page, which removes it from our servers immediately.

Session tokens and server logs are retained for up to 30 days for security purposes, after which they are automatically deleted.

6. Your Rights

You remain in control of your uploaded data at all times. You have the right to:

• Not upload your data — the Service is entirely opt-in.
• Delete any uploaded file permanently at any time, removing it from our servers immediately.
• Rely on automatic deletion — every file is permanently removed within 48 hours regardless.
• Contact us if you have concerns about how data is handled.

7. Security

We use industry-standard security practices including encrypted connections (HTTPS/TLS) for all data in transit and secure, access-controlled storage for uploaded files. Files are retained only as long as needed and are permanently deleted within 48 hours, minimizing the window in which any data is stored.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated date. We encourage you to review this page periodically.

9. Contact

If you have questions or concerns about this Privacy Policy or our data practices, email us at [email protected]. We are committed to addressing privacy concerns promptly.