Privacy

Geographic scope

The Genome Computer Company offers its service to residents of the United States, Canada, the United Kingdom, Australia, New Zealand, and Singapore. This Privacy Policy applies to customers of the service in those jurisdictions and to visitors of our website. If you visit our marketing site from outside supported countries, we may collect basic browsing information for analytics purposes, and you may choose to provide us with your email address by joining our waitlist, but we do not collect or process genomic data from users outside our service jurisdictions.

What we collect

When you place an order we collect your name, email, shipping address, billing address, and payment method (processed by Stripe — we never see or store your card details). When you return a sample, it is de-identified before sequencing. Our CLIA/CAP-accredited laboratory partner receives no personally identifiable information or protected health information with your sample. The laboratory generates genomic data from your sample, which is delivered to you as a .genome bundle and retained by us in active systems for 90 days after delivery to support redelivery and customer service, then deleted by default. The biological sample itself is handled separately — see Data retention and deletion below.

If you join our international waitlist (for jurisdictions outside supported countries), we collect your email address and country or region of residence. We use this information only to notify you when the service becomes available in your region and to understand which international markets may be of interest for future expansion.

If you use Genome Explorer, including Genome Chat, we collect the prompts and questions you submit, your selected model and response style, relevant excerpts retrieved from your hosted .genome, model-generated responses, chat history, citations and source metadata, usage and security logs, and any health document or other file you choose to attach. Depending on what you ask or upload, this information may include genetic data, laboratory results, medication information, family history, symptoms, or other sensitive health information.

If you connect a genome to an API client, we collect the identity of that client, the client's opaque user reference, the genome you select, the connection and access status, and related security and audit records. We do not require the client to send us your name or email address through the API.

If you connect ChatGPT, Claude, or another app through our Model Context Protocol (MCP) service, we also process the questions and other information the app sends in tool requests, context you ask us to save, and account authorization and connection records. The data exchanged and your controls are described in ChatGPT, Claude, and other connected apps (MCP/OAuth) below.

What we don't do

We do not sell your data. We do not share your data with researchers, pharmaceutical companies, insurers, or law enforcement except where compelled by valid legal process (see Legal process). We do not use your identifiable genomic data to train AI models, and we do not license your genomic data to third parties for model training or research. We do not sell, license, or commercially distribute aggregated or de-identified genomic datasets. Our accredited laboratory partner may use de-identified data from samples they process only for internal quality assurance and method improvement, as is standard for accredited laboratories; they are contractually prohibited from selling, licensing, commercially distributing, or using your sample-derived data for unrelated research, product development, or third-party data products. There is no "optional research program."

We do not opt your Genome Explorer prompts, retrieved genome context, attachments, or model responses into model training. We use commercial API services whose published terms state that API inputs and outputs are not used to train their general models by default. Those providers may retain API data for limited safety, abuse-prevention, legal, or service-operation purposes as described below. These commercial API terms apply to Genome Explorer; ChatGPT, Claude, and other connected apps process data under the terms and settings of your account with that service, as described below.

What we are not

The Genome Computer Company is a sequencing and software service. We sequence your sample and deliver the resulting genomic data to you. We do not author health reports, medical assessments, diagnoses, or clinical interpretations from your data. Genome Explorer can retrieve relevant context and display a response generated by the third-party AI model you select. That response is generated by the selected model provider, and any interpretation in it is the provider model's output, not an interpretation authored by Genetic Superintelligence Company. We do not review, validate, endorse, or adopt it as our own interpretation. If chat history is enabled, we retain the displayed response so you can reopen the conversation; retention does not turn it into a Genome Computer health assessment.

Genome Explorer and model providers

Genome Explorer is optional. When you choose a model and submit a prompt, you direct us to send the selected model provider the information needed to answer that request. This may include your prompt, relevant excerpts and evidence retrieved from your hosted .genome, recent conversation history, and the complete contents of any file you attach to that conversation. In normal operation, we retrieve and send bounded, relevant .genome context rather than transmitting your entire source .genome bundle. We do not intentionally include your name, email, shipping address, or payment information unless you put that information in a prompt or attached file.

Available model providers currently include OpenAI and Anthropic. Only the provider of the model you select receives the information for that request. We connect through their commercial API services, not through a personal consumer account. Their published commercial API terms state that inputs and outputs are not used to train their general models by default. See OpenAI's API data controls and Anthropic's commercial model-training policy. Their published policies currently describe 30-day default or abuse-monitoring periods for relevant commercial API content, with possible different or longer periods for certain endpoints, files, safety matters, legal requirements, or contractual configurations. See Anthropic's commercial data retention information. Available providers and models may change; we will update this policy before introducing a materially different category of data recipient.

When useful, Genome Explorer may also query trusted public scientific sources such as NCBI, ClinVar, PubMed, MedlinePlus, and CPIC. Those lookups use limited scientific search terms, such as a gene, variant identifier, medication, or topic. We do not intentionally send those sources your identity, full prompt, attached file, or complete .genome bundle. We may retain the search results and citations with the conversation.

You can stop future disclosures to model providers by not using Genome Explorer. You may also request deletion of your Genome Intelligence history and attachments by emailing contact@genome.computer. Deleting information from our systems does not reverse processing already completed by a provider or immediately remove information held during that provider's applicable retention period. We will assist with a provider-related privacy request where required by law and available under our provider agreement.

Connections to API clients

When you continue through a hosted connection flow, you direct us to give the named API client access to the genome you select. Unless the flow says otherwise, this shares the full genome and may allow the client to retrieve genomic data and download genome files. You continue to own the genome; the client receives access rather than ownership.

The API client is an independent recipient and may already know who you are because you began the flow inside its signed-in service. We return the client's own opaque reference, connection status, and a client-scoped genome identifier through the API, but not your Genome Computer account name or email address. The client's handling of data it receives is also governed by its own privacy practices.

Ending the client's future access does not remove copies it previously downloaded or otherwise received. We retain the durable connection record, including which genome was connected and whether access is active or has ended, for security, audit, support, and relationship integrity purposes.

ChatGPT, Claude, and other connected apps (MCP/OAuth)

Connecting Genome Computer to ChatGPT (provided by OpenAI), Claude (provided by Anthropic), or another compatible app is optional. The connection uses MCP to let the app request information and actions from Genome Computer, and OAuth to authorize access to your Genome Computer account without sharing your Genome Computer sign-in credentials with the app. The purpose is to help the app answer your questions using your genomic evidence and personal context, retrieve reports, and remember information you approve for future answers. You sign in with us, choose a default genome bundle, and review the requested permissions before allowing access. These permissions may include reading bundle information, querying genomic evidence and your personal model, obtaining reports, reading saved living context, and proposing or saving context updates. Access is limited to the permissions granted and bundles your account is authorized to use.

What connected apps may receive. The provider of the app you use, including OpenAI for ChatGPT or Anthropic for Claude, receives the prompts, questions, files, and conversation content you provide directly in that app. When the app uses the connection, it may also receive the following information from Genome Computer, depending on the tool used and permissions you grant:

• Relevant genomic evidence, variants, gene findings, medication response information, polygenic scores, citations, and supporting bundle metadata;
• Your genome-derived personal model and saved living context, including identity, values, goals, preferences, routines, relationships, and lived experience, as well as optional health, medication, symptom, measurement, and family-history information;
• Report content and summaries, and a short-lived download link returned by the report tool. That link can provide access to the full .genome bundle and currently expires after 15 minutes;
• Context-update proposals, saved updates and corrections, and confirmations of actions requested through the connection.

This information may contain genetic data and other sensitive health information about you or your biological relatives, including health-related inferences. Ordinary query tools return bounded results, but repeated queries can disclose more information, and the report download link can allow retrieval of the full bundle. Removing direct identifiers does not make genomic information anonymous.

What we receive and why. ChatGPT, Claude, or another connected app may send us your question or relevant prompt text, tool parameters, and context from your conversation needed to carry out a request. The connection does not automatically send us your entire conversation in that app. We use the information to authenticate and authorize requests, retrieve genomic evidence, return personal-model context and report content, save context updates you approve, and maintain and protect the service. We retain connection records, including your sign-in email, connected app, granted permissions, default bundle, token records, and connection activity, to manage and secure access.

Saved living context. Context supplied for one answer is not automatically added to your saved living context. When you ask the app to remember something, it can stage a proposal for your review and save accepted facts after your approval. Saved context belongs to your account and genome bundle and can be read by other connected apps you authorize to read context; it is not confined to the app where you first saved it. Retention, correction, and deletion are described in Data retention and deletion below.

Third-party processing and retention. This connection uses your account with the connected service. OpenAI for ChatGPT, Anthropic for Claude, or the provider of another connected app processes information it receives under its own terms, privacy policy, and the data controls applicable to your account or workspace. Its retention, deletion, and model-training practices may differ from the commercial API practices described for Genome Explorer. Our API agreements do not determine how your account with a connected app handles this information. Review the applicable provider policy, including OpenAI's Privacy Policy for ChatGPT or Anthropic's Privacy Policy for Claude, along with your account or workspace data controls before connecting. Each provider and its service providers may process the shared information in the United States or other locations described in that provider's policies.

Revoking access and deleting data. To revoke access for ChatGPT, Claude, or another connected app, open Genome Computer Settings, find the relevant app under Connected apps, and choose Disconnect. This revokes the app's existing authorization for your sign-in email and blocks subsequent MCP tool calls unless you authorize it again. You can also manage the connection in the app you connected, such as ChatGPT or Claude. Revocation does not delete your saved Genome Computer context or reports, remove information already received by the connected app, or invalidate a bundle download link already issued before its expiry. To delete data we hold, email contact@genome.computer. To delete conversations or other copies held by OpenAI, Anthropic, or another app provider, use that provider's deletion controls or privacy request process. Deleting data with Genome Computer or an app provider does not automatically delete the other service's copies. We will assist with third-party privacy requests where required by law.

Consumer health data notice

Where applicable, including under Washington's My Health My Data Act, information handled through Genome Explorer or our connected apps service may be consumer health data. Categories may include genetic information, laboratory results, medications, symptoms, family history, health-related questions, inferences contained in model responses, and information in uploaded files and saved living context. We collect this information from you, from apps you connect, from the .genome produced for or hosted for you, and from the model and scientific sources used at your direction.

We use this information to authenticate you, retrieve relevant genome context, route your request to the model you select, display and save the response and supporting sources, maintain conversation history, protect the service, troubleshoot, and comply with law. We share the information necessary for a request with the selected provider — currently OpenAI or Anthropic — and with our hosting, storage, security, and other service providers as needed to operate Genome Explorer and our connected apps service. When you authorize ChatGPT, Claude, or another connected app, we also share the information returned through that connection with its provider for the purposes described above. We do not sell consumer health data, use it for targeted advertising, provide it to data brokers, insurers, or employers, or use it to make eligibility or other significant decisions about you.

Subject to applicable law, you may confirm whether we collect or share your consumer health data, access it, obtain a list of relevant third parties, withdraw consent for future collection or sharing, and request deletion. Email contact@genome.computer to exercise these rights. We will not discriminate against you for doing so. If we deny a request, you may appeal by replying to our decision.

Consent and jurisdiction

By placing an order, you provide express consent for us to collect, process, and store your biological sample and the genomic data derived from it, solely for the purpose of delivering your results to you and supporting the services you have requested. You confirm at checkout that you are a resident of a country where the service is currently available, with your primary residence in that jurisdiction.

Genome Explorer is optional. When you select a model and submit a prompt, you request and direct us to process the sensitive data needed for that request and disclose it to the selected provider as described above. You may withdraw consent for future optional Genome Explorer processing by no longer using the feature and may request deletion of information we retain. Withdrawal does not undo processing already completed at your direction and is subject to legal retention requirements and other rights described in this policy.

For ChatGPT, Claude, and other connected apps, approving the OAuth connection authorizes the access and disclosures covered by the permissions you grant, including sensitive information returned by permitted tools. You can withdraw that authorization by disconnecting the app as described above. Saving living-context proposals requires your separate approval.

Genetic Superintelligence Company is a Delaware Public Benefit Corporation operating from San Francisco, California. This policy is governed by California law for US customers, including the California Genetic Information Privacy Act (GIPA). Where they apply, we also comply with other applicable US state genetic privacy, consumer health data, biometric, and comprehensive privacy laws — including, where applicable, Washington's My Health My Data Act, Montana's Genetic Information Privacy Act, and the genetic privacy and comprehensive privacy laws of Texas, Virginia, Utah, Tennessee, Arizona, Kentucky, Maryland, Wyoming, and other states with relevant privacy or genetic privacy laws.

For Canadian customers, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), the Personal Information Protection Act of British Columbia, the Personal Information Protection Act of Alberta, and the Act respecting the protection of personal information in the private sector of Quebec ("Law 25"), as applicable to the customer's province of residence.

Security

Genomic data files, Genome Explorer chat history, and uploaded attachments are encrypted at rest and in transit. Access is restricted to authorised personnel on a least-privilege basis and audited. A request is transmitted only to the provider of the model you select. We maintain data processing agreements with every subprocessor. In the event of a confirmed personal information breach affecting your data, we will notify affected customers without undue delay and as required by applicable law, including the FTC Health Breach Notification Rule where applicable. For customers in Quebec, we will additionally report confidentiality incidents to the Commission d'accès à l'information du Québec as required by Law 25 where the incident presents a risk of serious injury.

Data retention and deletion

We retain your genomic data files in active systems for 90 days after delivery to support redelivery requests, then delete them by default. Collection devices and residual samples are destroyed five days after the associated results are delivered. DNA samples and sequencing deliverables are retained by our laboratory partner for 90 days after delivery, then deleted. You may request earlier deletion at any time.

We retain Genome Explorer conversations, model responses, supporting source metadata, and private attachments while your account is active and as reasonably needed to provide conversation history and follow-up responses, maintain security, resolve support issues, and comply with law. You may request deletion at any time. Model providers apply their own limited retention periods to data already sent to them, as described in Genome Explorer and model providers above.

We retain saved living context and its revision history while your account is active and as needed to provide the service, until you request deletion. Correcting or asking an app to forget an item changes the current context but retains previous values in revision history; it is not a full deletion request. Unaccepted context proposals expire after 24 hours by default and are removed by scheduled cleanup. When a proposal is committed or discarded, its rejected, unselected, and source content is removed. Connection and security records are retained as reasonably needed to manage access, investigate misuse, resolve support issues, and comply with law. Report content we hold is retained with the underlying genomic data or saved conversation, as applicable. Conversations in ChatGPT, Claude, or another connected app and copies of evidence, context, or reports received by a connected app follow that provider's retention and deletion practices, even after you disconnect.

You may request earlier deletion at any time by emailing contact@genome.computer. We will:

• Delete your genomic data files, Genome Explorer conversation history, uploaded attachments, saved living context and its revision history, context proposals, report content we hold, connection records, and associated account and order records from active systems within 14 days, and purge backup copies within 90 days of deletion from active systems;
• Confirm destruction of your biological sample, or confirm that it has already been destroyed under normal laboratory workflow; and
• Retain only the minimum transaction records required by tax and accounting law, with no genomic content.

For California residents, you may request destruction of your biological sample within 30 days of consent revocation in accordance with the California Genetic Information Privacy Act.

Your rights

You may request access to the personal data we hold about you, correction of inaccurate data, a portable copy of your data, or deletion as described above. You may also withdraw consent for future optional Genome Explorer processing and sharing. Email contact@genome.computer. We respond within 30 days.

Residents of US states with applicable genetic privacy or comprehensive privacy laws have rights under their respective state laws, including access, correction, deletion, portability, and opt-out from certain processing activities. We honor all such rights to the extent required by applicable law.

Canadian customers

For customers in Canada, this Privacy Policy describes how we collect, use, and disclose personal information consistent with the Personal Information Protection and Electronic Documents Act (PIPEDA), the Personal Information Protection Act of British Columbia, and the Personal Information Protection Act of Alberta, as applicable.

By placing an order, you provide express consent for us to collect, process, and store your biological sample and the genomic data derived from it, solely for the purpose of delivering your results to you and supporting the services you have requested.

If you use Genome Explorer, you separately choose the model and direct the related processing and disclosure described in this policy. The feature is optional and is not required to receive your .genome bundle.

Cross-border transfer of personal information.Your source .genome and related account information will be stored and processed in the United States by Genetic Superintelligence Company and our US-based laboratory partner. If you use Genome Explorer, the selected model provider and its subprocessors may process the prompt, bounded genome context, conversation history, and attachments in the United States or other locations described in that provider's documentation and our contractual arrangements. While Canadian privacy law generally permits cross-border transfers of personal information for processing purposes, your data may be subject to the law and lawful access rights of the place where it is processed. We protect your data with the security measures described in this policy and through contractual data protection commitments with our service providers.

Your rights under Canadian law. You have the right to access the personal information we hold about you, request correction of inaccurate information, withdraw your consent for further processing (subject to legal and contractual restrictions), receive a portable copy of your data, and file a complaint with the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner. To exercise these rights, contact contact@genome.computer.

Response timeline. We will respond to access, correction, and other rights requests within 30 days as required by PIPEDA.

Quebec residents

If you are a resident of Quebec, you have additional rights under the Act respecting the protection of personal information in the private sector ("Law 25"). The following provisions apply to your personal information.

Person Responsible for Personal Information Protection. Our Privacy Officer is the Person Responsible for Personal Information Protection. You can contact our Privacy Officer at contact@genome.computer for any questions about how we handle your personal information.

Sensitive personal information and express consent. Your genomic data is sensitive personal information under Law 25. By placing an order, you provide express consent for us to collect, process, store, and use your biological sample and the genomic data derived from it, solely for the purpose of delivering your results to you and supporting the services you have requested.

If you use Genome Explorer, you separately choose the model and direct the processing and disclosure of sensitive information needed for that request. The feature is optional and is not required to receive your .genome bundle.

Cross-border transfer of personal information.Your source .genome and related account information will be communicated outside Quebec and processed in the United States by Genetic Superintelligence Company and our US-based laboratory partner. If you use Genome Explorer, the selected model provider and its subprocessors may process the prompt, bounded genome context, conversation history, and attachments in the United States or other locations described in that provider's documentation and our contractual arrangements. Before communicating your personal information outside Quebec, we consider the sensitivity and purpose of the information, the applicable contractual and technical protections, and the legal framework in the receiving jurisdiction. You consent to the order-related transfer by placing an order and direct the optional Genome Explorer transfer when you select a model and submit a prompt.

Your rights under Law 25. You have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate, incomplete, or equivocal information;
• Withdraw your consent for the processing of your personal information (subject to legal and contractual restrictions);
• Receive a portable copy of your data in a structured, commonly used technological format;
• Request that personal information about you be deindexed or that its dissemination cease, where the dissemination causes you serious injury to your reputation or privacy and the cessation is not contrary to law or the public interest;
• Be informed about and contest any decision made about you based exclusively on automated processing of your personal information.

Automated decision-making. Our service involves automated bioinformatic processing of your genetic data to produce the .genome bundle. Genome Explorer also displays a model-generated response when you ask for one. We do not use either process to make a decision about you that produces legal effects or another significant impact. A Genome Explorer response is informational output from the model provider you select; we do not review or adopt it as a decision by Genetic Superintelligence Company. You can choose not to use Genome Explorer and can request information about how our processing works by contacting contact@genome.computer.

Confidentiality incident reporting.If we become aware of a confidentiality incident affecting your personal information, we will take reasonable measures to reduce the risk of injury and to prevent new incidents of the same nature. Where the incident presents a risk of serious injury, we will report it to the Commission d'accès à l'information du Québec and notify affected individuals as required by Law 25.

Filing a complaint.You may file a complaint with the Commission d'accès à l'information du Québec if you believe your rights under Law 25 have not been respected. The Commission's contact information is available at www.cai.gouv.qc.ca.

Response timeline. We will respond to rights requests within 30 days as required by Law 25.

Your data after delivery

Once your genomic data has been delivered, you control how it is used. When you use Genome Explorer or connect an app through MCP/OAuth, this policy applies to our handling of the data and the selected provider's terms and privacy practices apply to its processing described above. If you independently upload your data to other software, AI systems, websites, or services, their privacy practices apply. We are not responsible for how an independently selected third party handles data you provide directly to it, including any identification, re-identification, or inference about you or your biological relatives that results from such use.

Legal process

We do not share your data with law enforcement except where compelled by valid legal process. Where legally permitted, we will notify you before any disclosure so that you have the opportunity to challenge the request. We construe all such requests narrowly and will resist overbroad demands. We do not voluntarily share genomic data with any government agency under any circumstance.

Minors

Our service is available only to adults aged 18 and over. We do not knowingly collect data from minors. The service is not directed to or intended for children. We comply with the Children's Online Privacy Protection Act (COPPA) and applicable laws regarding minors' privacy. If you believe a minor has provided data to us, contact contact@genome.computer and we will delete it.

International visitors

The Genome Computer Company currently offers its service only to residents of supported countries. If you are located in the European Economic Area, Switzerland, or another unsupported region, you may visit our marketing site and join our waitlist, but we do not provide the service to you and do not process your genomic or sensitive personal data.

International visitors must not purchase the service, submit a biological sample, or use another person's address or identity in a supported country to access the service.

Browsing data (such as IP address) collected when you visit our marketing site is handled as described in What we collect. Waitlist data is handled as described above. If you have questions about your data, contact contact@genome.computer.

Data location

Your source .genome bundle is stored and processed in the United States by Genetic Superintelligence Company and our US-based laboratory and hosting providers. In normal Genome Explorer operation, we do not send the selected model provider your entire source .genome bundle. As described above, the prompt, bounded relevant genome context, conversation history, and attachments may be processed by the provider of the model you select and its subprocessors in the United States or other locations identified in that provider's documentation and our contractual arrangements. Account, payment, and operational data may also be processed by our service providers where needed to provide the service.

For Canadian customers, including Quebec residents, this means personal information may be transferred from Canada to the United States and, for optional Genome Explorer requests or connected-app use, to other provider processing locations. The cross-border transfers are described above in Canadian customers and Quebec residents.

Subprocessors

We rely on subprocessors in the following categories:

• CLIA/CAP-accredited laboratory services in the United States
• Payment processing
• Private cloud hosting, databases, object storage, and order records
• Email delivery
• Commercial AI model API providers selected by the user, currently OpenAI and Anthropic

Each subprocessor is bound by a data processing agreement and may use your data only to provide services to us, except that our accredited laboratory partner also acts as an independent controller for the sample retention, quality assurance, and regulatory-compliance activities required by their own accreditation. Any subcontractor used by our laboratory partner is subject to applicable contractual data-protection requirements, and our laboratory partner remains responsible for its acts and omissions. A current named list of subprocessors is available on request to contact@genome.computer.

Trusted public scientific sources queried using limited search terms are described in Genome Explorer and model providers. These sources may operate as independent recipients of the limited query information rather than as our subprocessors.

ChatGPT, Claude, and other apps you independently connect through MCP/OAuth receive data at your direction under your relationship with those services. Their handling of that data is governed by their own terms and privacy policies, rather than our commercial API subprocessor arrangements.

Privacy Officer

For privacy matters, including the exercise of rights under Canadian or Quebec privacy law, contact our Privacy Officer:

Email: contact@genome.computer

The Privacy Officer is the Person Responsible for Personal Information Protection as required under Law 25.

Changes to this policy

We will notify you by email of any material changes to this policy before they take effect. Non-material changes (typographical corrections, clarifications that do not alter your rights) will be reflected in the "Last updated" date above.

Contact

Genetic Superintelligence Company
535 Mission Street, 14th floor
San Francisco, CA 94105
United States

Questions, deletion requests, or concerns: contact@genome.computer