Privacy Policy

1. Who We Are

YourGenome.ai is developed and operated by YourGenome.ai ("we," "us," or "our"). We are based in Huntsville, Alabama, United States.

Questions about this policy: privacy@yourgenome.ai

2. The Genomic Data Architecture

This section describes how your genomic data is handled. Read this carefully — it is the most important part of this policy.

What happens on your device:

• Your genome file (VCF, 23andMe export, or AncestryDNA export) is imported and processed entirely on your device.
• A SQLite index is built locally and stored in your app's sandboxed storage.
• All variant lookups, searches, and reports are performed locally against this index.
• Your raw genome file is never read by our servers. It never leaves your device.
• Your SQLite index never leaves your device (except for iCloud sync between your own Apple devices — see Section 5).

What crosses the network:

• When you use the AI Insights feature, we send the names of genes and your genotype calls (e.g., "APOE e2/e3," "TCF7L2 rs7903146 C/T") to the Claude API operated by Anthropic, Inc. This is population-level information that does not uniquely identify you.
• Knowledge base delta updates — containing only published scientific research, variant annotations, and polygenic risk score weights — are downloaded from our servers to your device.
• If you create an account or subscribe, standard account information (email address, subscription status) is transmitted and stored on our servers.

What we never do:

• We never upload your genome file to any server.
• We never store your SQLite genome index on our servers.
• We never transmit sequences, variant lists, or raw genomic data off your device.
• We never sell genomic information of any kind.

3. Information We Collect

Account information (if you create an account):

• Email address
• Subscription status and payment history (payment processing handled by Apple via the App Store)

Usage analytics (anonymous):

• App crash reports and diagnostic data (collected via Apple's standard crash reporting, subject to your device's analytics sharing settings)
• General feature usage patterns — which features are used, not what data you searched for

What we explicitly do not collect:

• Your search queries (gene names you've searched are stored locally on your device only)
• Your variant findings or report contents
• Any genomic data of any kind
• Your name, age, location, or other identifying personal information beyond email

4. AI Features and Third-Party AI Processing

YourGenome.ai uses the Claude API, operated by Anthropic, Inc., to power AI Insights. When you use this feature:

• We transmit a structured prompt containing gene names and your genotype calls for those genes — for example, "APOE e2/e3, BRCA2 rs169547 normal, TCF7L2 rs7903146 C/T."
• We do not include your name, date of birth, or any information that identifies you as an individual.
• Anthropic's use of data submitted via the API is governed by Anthropic's API Terms of Service and Privacy Policy. As an API customer, we have a data processing agreement with Anthropic that prohibits use of API inputs for training.

You can use all app features except AI Insights without any data leaving your device.

5. iCloud Sync

If you enable iCloud sync, your SQLite genome index is synced between your own Apple devices via iCloud Drive. This sync:

• Uses Apple's iCloud infrastructure, encrypted in transit and at rest per Apple's iCloud security standards.
• Transfers your index only between devices signed in to your Apple ID — we have no access to this data.
• Can be disabled at any time in your device's Settings → iCloud → YourGenome.ai.

Your raw genome file is never synced via iCloud — only the processed index.

6. Knowledge Base Updates

Subscribers receive periodic knowledge base updates containing new variant annotations, updated polygenic risk score weights, and new research findings. These updates:

• Contain only population-level published research — no user data of any kind.
• Are downloaded to your device over an encrypted connection (HTTPS).
• Are applied locally — the update process does not transmit any data from your device to our servers.

7. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information.

We may share limited information in the following circumstances:

• Service providers: We use Apple's App Store for payment processing. We use Anthropic's API for AI features. Both operate under data processing agreements.
• Legal requirements: We may disclose information if required by law, court order, or to protect the rights, property, or safety of our users or others. Because we do not store your genomic data, we cannot disclose what we do not have.
• Business transfers: If YourGenome.ai is acquired or merges with another company, this privacy policy and its commitments will transfer with the product. We will notify users of any material changes.

8. Data Retention and Deletion

Your genomic data (genome file and SQLite index) exists only on your device. Deleting the app removes all genomic data from that device. We have nothing to delete on our end because we never received it.

Account information (email, subscription history) is retained for the life of your account and for a reasonable period after cancellation as required for billing records. You may request deletion of your account by contacting us at privacy@yourgenome.ai.

9. Children's Privacy

YourGenome.ai is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.

10. Security

Because your genomic data never leaves your device, it is protected by your device's native security — including iOS encryption, Secure Enclave, Face ID / Touch ID, and Apple's app sandboxing.

Account information transmitted to our servers is protected in transit by TLS encryption. We follow industry-standard security practices for server-side data.

11. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal data including the right to access, correct, or delete your information. Because we do not hold your genomic data, these rights primarily apply to account information.

To exercise any of these rights, contact us at privacy@yourgenome.ai. We will respond within 30 days.

12. Changes to This Policy

We will notify you of material changes to this policy via the app or by email. The architectural commitments in Section 2 — that your raw genome never leaves your device — are fundamental to the product and will not change without explicit notice and your consent.

The effective date at the top of this page reflects the most recent update.