Privacy Policy
Verinome was built so that your DNA data never leaves your device. This is not a promise about how carefully we store your genome, it is an architecture in which we never receive it in the first place. This policy explains that design plainly, and lists the only data we do handle.
The one thing to know first
Your genetic file is read entirely inside your own web browser. It is never uploaded, never transmitted to us or anyone else, never stored on our servers, and never sold or shared. We could not hand it over, lose it in a breach, or be compelled to produce it, because we never have it.
When you drag your raw data file into Verinome, the parsing, analysis, and report generation all happen locally in your browser on your device. The genetic data and everything derived from it (your traits, PGx readouts, scorecards, and PDF) exist only on your device. You can verify this yourself: Verinome shows a live "0 requests sent" indicator, and you can confirm zero outbound transmission of your file in your browser’s network inspector or with the app fully offline.
What we actually collect
We collect only the minimum needed to run the site and process a purchase. Your genome is not on this list.
| Data | Why we have it | Where it lives | Retention |
|---|---|---|---|
| Payment details (name, email, billing country, card), for paid purchases | To take payment and honor your lifetime license and refund rights | Handled by Stripe as processor; we never see full card numbers | Per Stripe + our tax/accounting duties |
| Your email + order record | Only to send your receipt and a private link to your report, and to honor refunds and support. Never marketing. | Our order records | While needed for the purchase/support/legal duties, then deleted |
| Privacy-respecting analytics (pages viewed, referrer, coarse country, device type), no cookies, no cross-site tracking, no ad profiles, no fingerprinting | To understand aggregate site usage and fix problems | Our analytics provider, in aggregate | Aggregate / short retention |
| Essential technical logs (security, error, abuse prevention) | Keep the site up and safe | Our infrastructure | Short |
We never collect, and by design cannot collect: your raw genotype file, your genotype, or any health/trait/PGx result derived from it. These are special-category / sensitive personal data (genetic and health data) under GDPR Art. 9 and are treated as "sensitive personal information" under laws such as the CCPA/CPRA. Our answer to the heightened duties those laws impose is structural: we do not process this category of data at all. Because the analysis runs on your own device under your control, Verinome is not a controller or processor of your genetic data.
What we never do
- We never upload, transmit, receive, or store your DNA file or your results.
- We never sell, rent, license, or share your genetic data, with anyone, for any purpose, ever. (We can’t; we don’t have it.)
- We never share it with insurers, employers, advertisers, data brokers, or law enforcement. There is nothing to share.
- We do not use third-party advertising or cross-site tracking cookies.
- We never add your email to a mailing list, send you marketing, or contact you again after your purchase. The only emails tied to your order are your Stripe receipt and a private link to reopen your report. We ask for your email for that one reason, and delete it once it is no longer needed to deliver your order.
Payments (Stripe)
Purchases are processed by Stripe, Inc. When you pay, you provide your payment details directly into Stripe’s payment form. Stripe processes them as an independent controller/processor under Stripe’s Privacy Policy. We receive a confirmation and limited billing metadata (such as your email and billing country) to fulfill your order, never your full card number.
Cookies
Verinome uses only strictly necessary functionality (for example, keeping you in a checkout session). Our analytics are cookieless. We do not use advertising or tracking cookies. Your report and any settings are kept in your browser’s local storage on your device, under your control, and can be cleared by you at any time.
Your rights
Depending on where you live (for example under GDPR or CCPA/CPRA), you have rights over the limited personal data we do hold, such as the right to access, correct, delete, port, or object to processing, and the right not to be discriminated against for exercising them. To exercise any right, email privacy@verinome.org. Because we do not hold your genetic data, requests about that data are answered by pointing you to the copy on your own device, which only you control.
International users
We do not transfer your genetic data internationally because we never receive it. For the limited account/payment data described above, our processors (e.g., Stripe and our analytics provider) may process data in other countries under appropriate safeguards (such as Standard Contractual Clauses).
Children
Verinome is not directed to, and may not be used by, anyone under 18.
Changes
We will post any changes here with an updated date. Material changes to what we collect will be highlighted.
Contact
Questions about this policy: privacy@verinome.org.
← Back to Verinome