What we can and cannot see
Your family record is encrypted on your device before it reaches our servers, under a key derived from a passphrase we never receive. What our servers hold is ciphertext, a hash of your email, sign-in times and billing state. Nothing readable about any relative. An employee with full admin access sees the same. The security white paper lists every field, names what each adversary could learn, and states the cost of that design: lose both your passphrase and your recovery code and the record is gone, because there is no key on our side to recover it with.
We don't sell your data or license it to anyone. Subscriptions are how we are paid.
What GINA does and doesn't cover
The Genetic Information Nondiscrimination Act of 2008 (GINA) protects against health-insurance and employment discrimination based on family medical history. It is the reason a positive family history of cancer cannot be used by a health insurer to raise your premium or deny coverage, and it is the reason employers (15+ employees) cannot use it in hiring or promotion decisions.
GINA does not extend to life insurance, long-term-care insurance, or disability insurance. It also does not apply to the military or to employers with fewer than 15 employees. Some U.S. states (Florida and California among them) extend additional protections, but coverage is patchy.
Practically: when you share family history with a clinician, that information may enter your medical record and could be discoverable in life, LTC, or disability insurance underwriting via routine medical-records requests. This is a consequence of where the data flows once it leaves the app — not of how we handle your data inside the app.
You can read more about how we use clinical guidelines and AI to surface insights on our methodology page.
Full privacy policy
The full privacy policy is available as a PDF: Download Privacy Policy (PDF) .
Questions?
Reach the team at [email protected].