DNA privacy

Genetic information is unusually personal.

Bioanalytix is therefore designed to minimise the genetic information that needs to leave your device and to keep genetic processing separate from ordinary account and financial information wherever practical.

Your raw DNA file

When you select a supported DNA file for Bioanalytix, the file is processed locally in your browser to identify the genetic observations currently supported by the Bioanalytix evidence model.

The complete raw DNA file does not need to be uploaded to Bioanalytix for this process.

Instead, only the much smaller set of supported genetic observations required for analysis is sent to the Bioanalytix service.

This follows a data-minimisation principle:

process what is needed, rather than retaining an entire genome file simply because it is available.

What Bioanalytix receives

The information sent for genetic analysis consists of observations relevant to the genetic markers supported by Bioanalytix, together with the information required to validate and govern that analysis.

The server then performs the authoritative interpretation of those observations against the supported evidence model.

This separation is deliberate:

your browser extracts observations; Bioanalytix interprets evidence.

Why interpretation occurs on the server

Scientific interpretation changes as evidence develops.

Keeping the governed interpretation layer on the Bioanalytix service allows the platform to apply a consistent evidence model, validation rules and updated interpretations without requiring the raw DNA file to be retained.

Consent

Genetic processing requires explicit consent.

Consent to genetic processing is distinct from simply having a Bioanalytix account.

Where the platform provides controls to withdraw genetic-data consent, withdrawing consent should not require a user to delete their entire Bioanalytix account.

Deleting genetic data

Bioanalytix is designed so that genetic data can be deleted separately from the account itself.

This distinction matters.

A user may wish to continue using financial-planning functionality while no longer retaining genetic information within Bioanalytix.

Deleting genetic data may remove genetic observations and derived genetic information from the active Bioanalytix service in accordance with the platform's applicable deletion and retention processes.

Account deletion

Account deletion is a broader action.

It is intended for users who no longer wish to maintain their Bioanalytix account.

Because account deletion and genetic-data deletion serve different purposes, Bioanalytix treats them as separate controls.

Data minimisation

The privacy model follows several principles:

• do not upload the complete raw DNA file when it is unnecessary;
• extract only supported observations required by the evidence model;
• authenticate users before accessing genetic functionality;
• associate genetic information with the authorised user or household;
• enforce ownership on server-side operations;
• require consent for genetic processing; and
• provide mechanisms for genetic-data deletion.

No genetic result is completely anonymous

Genetic information is inherently identifying.

Removing a person's name from genetic information does not necessarily make the underlying genetic data anonymous.

Bioanalytix therefore treats genetic information as sensitive data rather than relying on claims of complete anonymity.

Your control matters

The purpose of genetic analysis in Bioanalytix is to provide additional evidence for users who choose to use it.

DNA is not required to begin financial planning with Bioanalytix.

Users should be able to understand what information is being processed, why it is being processed and what controls are available to them.

For the legally binding terms governing personal information, retention and user rights, refer to the Bioanalytix Privacy Policy and applicable Terms of Service.