Privacy Policy

This Privacy Policy explains how Idicine (“Idicine,” “Company,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects information when you use the Idicine mobile application, website, software, Bio Chats, matching features, communities, and related services, collectively, the “Service.”

Idicine is a peer-support and community platform for self-reported health and wellness experiences. The Service allows users to create and join Bio Chats that may be visible only to people with a high biological match to the creator.

This Privacy Policy is part of our Terms of Use. By using the Service, creating an account, uploading information, using Bio Chats, or otherwise interacting with Idicine, you agree to this Privacy Policy.

If you do not agree, do not use the Service.

1. Important Notice About Health and Genetic Information

Idicine may collect and process sensitive information, including health-related information, blood type, genetic information, biomarker information, supplement experiences, medication experiences, symptoms, wellness experiences, and other self-reported information.

We understand this information is highly sensitive.

Our goal is to use your information to provide a privacy-focused, bio-matched peer-support experience while giving you control over what you submit and how your information is used.

Idicine is not a healthcare provider, health plan, healthcare clearinghouse, laboratory, pharmacy, or emergency service. Unless we expressly state otherwise in a separate written agreement, Idicine is not acting as a HIPAA covered entity or business associate. However, we treat health, genetic, and biomarker information as sensitive and apply privacy and security practices designed for sensitive consumer health information.

2. No Medical Advice

Idicine does not provide medical advice, diagnosis, treatment, prescriptions, clinical recommendations, or emergency services.

Information on the Service, including Bio Chats, match scores, AI-generated content, community signals, product mentions, and user experiences, is for informational and peer-support purposes only.

Always talk to a qualified clinician before changing medication, dosage, supplements, treatment, or health routines.

3. Scope of This Policy

This Privacy Policy applies to information we collect through: the Idicine mobile app; the Idicine website; Bio Chats; user profiles; uploads; forms; surveys; messages; support communications; analytics; marketing pages; and other features connected to the Service.

This Privacy Policy does not apply to third-party websites, apps, products, stores, labs, platforms, payment processors, or services that we do not own or control.

4. Information We Collect

We may collect the following categories of information.

A. Account Information

This may include: name, if provided; email address; phone number, if provided; username; password or authentication credentials; avatar or profile image; age or date of birth; location information you choose to provide; account preferences; notification settings; and account status.

B. Profile Information

This may include: blood type; health goals; wellness interests; symptoms or experiences; supplement experiences; medication experiences; side effects; training, sleep, fatigue, or recovery experiences; self-reported reactions; lifestyle information; and other information you add to your profile.

C. Genetic Information

If you choose to provide it, this may include: raw DNA files; genetic markers; genetic traits; gene-related signals; genotype-related information; interpretations derived from genetic data; or other information related to inherited characteristics.

D. Biomarker and Lab-Related Information

If you choose to provide it, this may include: bloodwork files; lab reports; biomarker values; biomarker ranges; test dates; test names; extracted biomarker signals; and other health-related data from uploaded documents or manual entry.

E. Uploads and Files

This may include: DNA files; bloodwork reports; lab PDFs; screenshots; images; documents; metadata from uploaded files; and text extracted from uploaded files.

You should only upload files that you are legally allowed to provide and that relate to you, unless you have legal authority to provide another person's information.

F. Bio Match and Match Signal Information

We may create or process privacy-safe match signals, match vectors, match traits, or scores based on information you provide. This may include: bio match scores; match thresholds; trait keys; blood type-derived signals; genetic trait-derived signals; biomarker buckets; profile similarity signals; Bio Chat access decisions; and feed ranking signals.

A bio match score is a product feature used to organize peer-support conversations. It is not a medical, clinical, diagnostic, genetic, or treatment determination.

G. Bio Chat and Community Content

This may include: Bio Chats you create; comments; replies; messages; votes; reactions; reports; conversation titles; conversation descriptions; membership in Bio Chats; joined chats; created chats; blocked or locked access events; and other user-generated content.

H. Usage and Device Information

We may collect: device type; operating system; app version; browser type; IP address; general location derived from IP address; device identifiers; advertising identifiers where permitted; pages or screens viewed; buttons tapped; features used; session length; crashes; performance data; referring URLs; landing page interactions; and other analytics data.

I. Payment and Subscription Information

If paid features are offered, payment may be processed by Apple, Stripe, RevenueCat, or another payment provider. We may receive limited information such as: subscription status; purchase history; transaction identifiers; entitlement status; renewal or cancellation status; and payment-related metadata.

We generally do not receive full payment card numbers when payments are processed by third-party payment providers.

J. Communications With Us

If you contact us, we may collect: your email address; message content; support requests; feedback; survey responses; bug reports; and any information you choose to provide.

K. Marketing, Referral, and Ad Information

We may collect: campaign source; ad click data; referral codes; landing page events; install attribution; email engagement; waitlist activity; and related marketing analytics.

L. Affiliate and Product Interaction Information

If we display product mentions, product links, affiliate links, or third-party offers, we may collect: links clicked; products viewed; conversion events reported by affiliate partners; general campaign performance; and related analytics.

We do not use product interactions to provide medical advice.

5. Information We Do Not Intend to Collect

Unless a feature specifically asks for it, you should not submit: Social Security numbers; government ID numbers; full medical records unrelated to the feature; insurance account numbers; financial account numbers; information about other people without authority; or emergency medical information.

Idicine is not an emergency service and should not be used to request emergency help.

6. How We Collect Information

We collect information when: you create an account; you build a bio profile; you enter blood type, genetic, biomarker, supplement, medication, or experience data; you upload files; you create or join Bio Chats; you comment, react, message, or vote; you use the app or website; you contact support; you subscribe or make purchases; you click affiliate or third-party links; you interact with ads or marketing pages; or third-party service providers provide us with information on your behalf.

7. How We Use Information

A. Provide the Service

This includes: creating and managing your account; building your bio profile; creating Bio Chats; determining whether you can see or join a Bio Chat; calculating bio match scores; showing feeds; enabling comments, replies, votes, messages, and notifications; storing uploads; processing files; and providing customer support.

B. Personalize and Organize the Experience

This includes: ranking Bio Chats; showing conversations unlocked by your bio match; suggesting relevant Bio Chats; improving onboarding; remembering preferences; and making the Service easier to use.

C. Create Privacy-Safe Match Signals

We may process raw information you provide into privacy-safe match signals. For example, we may transform raw genetic, blood, or biomarker information into trait keys, buckets, or match vectors used to determine whether a Bio Chat should be visible to you.

We design these signals to support matching without showing raw files, raw biomarker values, or raw genetic files to other users.

D. Process Uploads

We may use uploaded files to: extract relevant information; create match signals; improve bio matching; display information back to you; support requested features; and operate the Service.

AI processing: When you upload a file for analysis (such as a lab report, bloodwork PDF, or genetic data file), the content of that file is processed by AI software running on Idicine-controlled servers. No uploaded file content is transmitted to third-party AI providers for processing. The file is deleted from our servers after processing is complete.

E. Support Bio Chats and Community Safety

We may use information to: moderate content; detect spam, abuse, fraud, harassment, misinformation, or unsafe content; enforce community rules; review reports; restrict accounts; and protect users.

F. Improve and Develop the Service

We may use information to: debug issues; analyze usage; improve matching; improve user experience; test features; develop new features; measure performance; and understand what users find helpful.

G. Communicate With You

We may send: account notices; security alerts; privacy notices; legal notices; support responses; Bio Chat notifications; match notifications; product updates; marketing communications where permitted; and subscription or transaction messages.

H. Marketing and Growth

We may use information to: measure ad campaigns; understand landing page performance; attribute installs; manage referrals; test messaging; and improve conversion funnels.

We do not use raw genetic files, raw biomarker values, or raw uploaded health files for third-party advertising without your separate consent where required by law.

I. Affiliate and Product Features

We may use product interaction information to: display product mentions; measure affiliate link performance; understand what users click; and improve product-related features.

Product mentions and affiliate links are not medical advice or recommendations.

J. Research and Aggregated Insights

Where permitted by law and subject to consent where required, we may use information to create aggregated, de-identified, or anonymized insights, including trends about self-reported experiences.

We do not publish information intended to identify individual users without permission.

K. Legal, Security, and Compliance

We may use information to: comply with law; respond to lawful requests; enforce our Terms; protect rights, safety, and security; investigate misuse; prevent fraud; detect security incidents; and maintain records.

8. Legal Bases for Processing

For users in jurisdictions requiring a legal basis for processing, we may process information based on: your consent; performance of a contract; legitimate interests; legal obligations; protection of vital interests; or other lawful bases.

For sensitive information, including certain health or genetic information, we rely on consent where required by applicable law.

9. How Bio Matching Works From a Privacy Perspective

Bio matching is designed to determine whether certain Bio Chats are visible or joinable based on your match to the creator or other permitted matching criteria.

Other users should not see your raw DNA files, bloodwork files, biomarker values, or uploaded documents unless you intentionally share information through a public or community feature.

A Bio Chat may display information such as “84% bio match with creator,” “Visible to 80%+ matches,” “Unlocked by bio match,” or similar access-related information. This does not mean the other user can see your raw data.

However, you understand that any matching system can reveal some contextual information. For example, if you join a highly specific Bio Chat, other users may infer that you have some interest or possible similarity related to that topic. You should consider this before joining or posting.

To give you control over this, you can choose to make your Bio Chat membership non-visible to other users through your privacy settings. When this setting is enabled, other users will not see which Bio Chats you have joined.

10. What Other Users May See

Depending on features and settings, other users may see: your username; avatar; Bio Chats you create; comments you post; replies; votes or reactions where visible; membership or participation in certain chats; self-reported experiences you choose to share; and match-related labels or scores where displayed by the Service.

Other users should not see: your raw DNA files; your raw bloodwork files; your uploaded documents; your full biomarker values; your private account email; or private data not intentionally shared by you, except as described in this Privacy Policy or where required by law.

11. Your Choices and Controls

Depending on available features, you may be able to: create or delete your account; edit your profile; change privacy settings; hide or delete certain content; control whether certain data is used for matching; opt in or opt out of certain upload uses; control push notifications; unsubscribe from marketing emails; request access to your information; request deletion; or request correction.

Some features may not work if you disable certain data uses. For example, if you do not provide blood type, genetic, or biomarker signals, you may see fewer Bio Chats.

12. Consent for Genetic and Biomarker Data

Where required by law, we will seek express consent before collecting, using, maintaining, or disclosing genetic data for specific purposes.

13. Sharing of Information

A. With Other Users

We share information with other users when you choose to post, comment, create Bio Chats, join conversations, or otherwise make content available through the Service.

B. With Service Providers

We may share information with vendors and service providers that help us operate the Service. These providers are authorized to use information only as needed to provide services to us.

AI processing: AI extraction of match signals from uploaded files runs on Idicine-controlled infrastructure. No uploaded file content is transmitted to third-party AI providers. See Section 7D for details.

C. With Payment and Subscription Providers

If you purchase paid features, we may share or receive information from Apple, RevenueCat, Stripe, or other payment providers to manage subscriptions, purchases, receipts, refunds, and entitlements.

D. With Analytics and Marketing Providers

We may use analytics and attribution tools to understand usage, performance, installs, and campaigns. We do not allow these providers to use raw genetic files, raw biomarker values, or raw uploaded health files for their own advertising purposes.

E. With Affiliate Partners

If you click an affiliate link, the affiliate partner or retailer may receive information such as click identifiers, referral source, product page, or conversion information. Affiliate partners do not receive your raw genetic files, raw biomarker values, or uploaded files from us through affiliate links.

F. With Research Partners

We may share aggregated, de-identified, or anonymized information for research, analytics, or product development purposes where permitted by law and subject to consent where required. When we de-identify data, we apply methods consistent with recognized standards, including the methods set out in 45 C.F.R. § 164.514(b) (the HIPAA Safe Harbor and Expert Determination methods) and the de-identification standard under the Washington My Health My Data Act, which prohibits re-identification or any attempt to re-identify de-identified data. We contractually require recipients of de-identified information not to attempt re-identification and to maintain the de-identified status of the information. Our public commitment not to re-identify de-identified consumer health data is published in our Consumer Health Data Privacy Policy. You may opt out of your de-identified information being used for research purposes by contacting us at privacy@idicine.com.

G. For Legal and Safety Reasons

We may disclose information if we believe it is reasonably necessary to: comply with law; respond to legal process; enforce our Terms; protect rights, privacy, safety, or security; investigate fraud, abuse, or misuse; prevent harm; or respond to government requests.

H. Business Transfers

If Idicine is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law and this Privacy Policy.

I. With Your Consent

We may share information with your consent or at your direction.

14. Sale or Sharing of Personal Information

We do not sell your raw genetic files, raw DNA files, raw bloodwork files, raw biomarker values, or uploaded health documents.

15. Targeted Advertising

We may use general app and website activity, campaign data, device information, or landing page interactions to measure and improve marketing. We do not use raw genetic files, raw biomarker values, or uploaded health files for targeted advertising without separate consent where required by law.

16. Cookies and Tracking Technologies

Our website may use cookies, pixels, SDKs, local storage, and similar technologies to: operate the website; remember preferences; analyze traffic; measure campaigns; improve performance; prevent fraud; and support marketing.

17. Push Notifications

If you enable push notifications, we may send notifications about Bio Chats, matches, replies, account activity, product updates, security notices, or other Service features. You can disable push notifications through your device settings.

18. Data Retention

We retain information for as long as reasonably necessary to provide the Service, maintain your account, support matching, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud or abuse, maintain security, and support legitimate business purposes.

We aim to delete raw uploaded files from our servers within 24 hours of processing. Match signals and biological profile data derived from your uploads are retained for as long as your account remains active. When you delete your account, we initiate deletion of your personal data within 30 days, subject to legal hold obligations.

19. Deletion

You may request deletion of your account or certain information through the Service or by contacting us at privacy@idicine.com.

We may need to verify your identity before processing the request.

20. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. These may include: encryption in transit; encryption at rest where appropriate; access controls; authentication; logging; monitoring; least-privilege access; vendor review; and security processes.

No system is perfectly secure. We cannot guarantee that information will never be accessed, disclosed, altered, or destroyed.

21. Breach Notification

If we discover a security incident involving your information, we will evaluate the incident and notify affected users and regulators as required by applicable law, including state breach notification statutes.

To the extent Idicine qualifies as a vendor of personal health records or a related entity, we will comply with the Federal Trade Commission's Health Breach Notification Rule (16 C.F.R. Part 318), as updated by the FTC in 2024 to expressly cover health and wellness applications. Where the rule applies, we will notify affected users, the Federal Trade Commission, and, where required, prominent media outlets, within the timeframes required by the rule.

22. Children

The Service is not intended for children under 18. We do not knowingly collect personal information from anyone under 18.

23. State Privacy Rights

Depending on where you live, you may have rights under state privacy laws. To submit a request, contact us at privacy@idicine.com or use available in-app tools.

24. California Privacy Notice

This section supplements the rest of this Privacy Policy for California residents. In the past 12 months, we may have collected: identifiers; account information; internet or electronic network activity; geolocation information at a general level; commercial information; inferences; sensitive personal information including health information, genetic information, account credentials; user-generated content; and other information you provide.

G. California Genetic Privacy

California law includes specific requirements for the collection, use, maintenance, and disclosure of genetic data, including the requirement for express, affirmative consent for specific purposes. We treat genetic data as requiring clear, granular, and affirmative consent before any processing.

H. Right to Limit Use of Sensitive Personal Information

California residents have the right to request that we limit our use and disclosure of sensitive personal information — including health information, genetic information, and account credentials — to uses necessary to provide the Service. To exercise this right, contact us at privacy@idicine.com or use the data controls available in the app under Settings.

Direct links: Limit the Use of My Sensitive Personal Information · Do Not Sell or Share My Personal Information

25. Washington, Nevada, Connecticut, Colorado, and Other Consumer Health Data Laws

This section supplements the rest of this Privacy Policy for users covered by state consumer health data laws, including the Washington My Health My Data Act (“MHMDA”), the Nevada Consumer Health Data Privacy Law (SB 370), the Connecticut Data Privacy Act and its 2023 health-data amendments (SB 3), and the Colorado Privacy Act, including its consumer health data provisions.

A. Categories of Consumer Health Data We Collect

Consumer health data covered by these laws may include: blood type; genetic data; biomarker information; bloodwork and lab-related information; symptoms; medications; supplements; reactions; mental and physical health experiences; biometric information derived from uploads; precise location only where you provide it; and other information that identifies a consumer's past, present, or future physical or mental health status. We collect this information directly from you, from files you upload, and from your interactions with the Service.

B. Purposes of Collection and Use

We use consumer health data only for purposes disclosed in this Privacy Policy and the Genetic, Biomarker and Bio-Matching Consent: to provide the Service; to compute privacy-safe match signals; to determine Bio Chat visibility; for safety and moderation; for legitimate business operations; and to comply with law.

C. Sharing of Consumer Health Data

We do not sell consumer health data. We share consumer health data only with: (i) service providers and processors that help us operate the Service under written contracts limiting their use of the data — AI extraction of match signals from uploaded files is performed by Idicine on Idicine-controlled infrastructure and is not shared with any third-party AI provider; (ii) parties to whom you direct disclosure; and (iii) parties to whom disclosure is required by law. Where applicable state law requires separate, valid authorization before collecting, sharing, or selling consumer health data, we will obtain that authorization.

D. Your Rights Under State Consumer Health Data Laws

Depending on your state of residence, you may have the right to: (i) confirm whether we are collecting, using, sharing, or selling your consumer health data; (ii) access your consumer health data; (iii) withdraw consent for the collection or sharing of your consumer health data; (iv) request deletion of your consumer health data; and (v) appeal a denial of any of these rights.

E. How to Exercise These Rights

You may exercise these rights by contacting privacy@idicine.com or by using available in-app tools. We will respond within the timeframes required by applicable law. We will not discriminate against you for exercising these rights.

F. Washington My Health My Data Act — Additional Notice

For Washington residents and consumers whose consumer health data is collected in Washington: (1) the categories of consumer health data we collect and the purposes for which they are used are described above and in this Privacy Policy; (2) the categories of sources from which we collect consumer health data are: directly from you, from files you upload, and from your interactions with the Service; (3) the categories of consumer health data we share, and the categories of recipients, are described in Section C above; (4) you have the right to confirm whether we are collecting, sharing, or selling your consumer health data, to access it, to withdraw consent for its collection or sharing, and to request deletion as described above; and (5) you may exercise these rights as described in Section E. We do not sell consumer health data as defined under MHMDA, and we will obtain your separate, valid authorization before any disclosure of your consumer health data that would constitute “sharing” under MHMDA.

26. International Users

The Service is intended primarily for users in the United States. If you access the Service from outside the United States, your information may be transferred to, stored in, or processed in the United States or other countries.

27. Do Not Track

Some browsers transmit “Do Not Track” signals. Because there is no uniform standard for responding to these signals, we may not respond to Do Not Track signals unless required by law.

28. Automated Decision-Making and Profiling

We may use automated systems to: calculate bio match scores; determine Bio Chat visibility; rank content; moderate content; detect spam or abuse; personalize the Service; or organize information. These automated features are used for product functionality and safety. They are not medical diagnoses, treatment recommendations, or clinical decisions.

If you believe an automated decision has significantly affected your access to Bio Chats or other features, you may contact us at privacy@idicine.com to request a review of that decision by a member of our team.

29. Your Responsibilities

You are responsible for: choosing what information to share; using privacy settings; keeping your account secure; not sharing other users' private information; not posting content that identifies others without consent; and not using Idicine as a substitute for medical care.

30. Data About Other People

You may not upload or submit another person's health, genetic, biomarker, or personal information unless you have legal authority to do so and all required consents.

31. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as required by law.

32. Research and Pattern Discovery

Idicine operates an internal research program designed to identify statistical associations between bio-signatures (combinations of blood type, biomarker, and genetic features) and self-reported outcomes shared in Bio Chats. We refer to this program as the Bio-Outcome Intelligence Engine. Participation is strictly opt-in and is controlled by two granular toggles in the in-app Settings:

• Research participation — when enabled, the data you provide (uploaded biomarker, genetic, and blood-type information together with the content of Bio Chat messages you author) may be included, in pseudonymized form, in internal pattern-discovery pipelines. Pseudonymization separates your identity from the bio and behavioral features used for analysis. Any statistical output that includes you is required to satisfy k-anonymity ≥ 5, meaning no row or cell may describe fewer than five distinct users.
• Research partner sharing — when enabled (and only available when research participation is also enabled), Idicine may share fully de-identified aggregate insights — never raw or identifiable data — with contractually bound research partners under a written Data Processing Agreement. De-identification follows the HIPAA Safe Harbor methodology, informed by the principles of the Expert Determination standard under 45 C.F.R. § 164.514(b), and we publicly commit not to attempt re-identification of de-identified data and to require the same commitment of every recipient.

Backend-only commitment. Outputs of pattern-discovery models, including any predictions, associations, or scores, are not returned to individual users through the Service. The Service does not present personalized predictions, health recommendations, or clinical interpretations. The only product-facing effect of the program is improved internal ranking quality for Bio Chat surfacing, which is a peer-support feature and is not medical advice. This design is deliberate and serves both regulatory safety (so that the engine is not classified as a clinical decision support tool or a software-as-a-medical-device) and our commitment to keep medical decisions in the hands of users and their clinicians.

Lawful basis. The lawful basis for this processing is your explicit opt-in consent (Washington My Health My Data Act, RCW 19.373; California Consumer Privacy Act, Cal. Civ. Code § 1798 et seq.; California Genetic Information Privacy Act; Nevada SB 370; Connecticut SB 3; Colorado Privacy Act; and, where applicable, GDPR Article 9(2)(a)).

Infrastructure. All pattern-discovery compute runs on Idicine-controlled infrastructure. No data covered by research consent is processed by any third-party AI provider. Aggregate outputs that are shared with research partners pass through an internal pseudonymization and de-identification pipeline before any external transfer.

Withdrawal. You may withdraw research consent at any time from Settings, by deleting your account, or by emailing privacy@idicine.com. Withdrawal stops all future inclusion of your data in research processing within a reasonable operational window. Aggregates and model artifacts that have already been computed and that no longer permit re-identification of you are retained under the de-identification standard above; this approach is permitted under MHMDA, NV SB 370, and the FTC Health Breach Notification Rule (16 C.F.R. Part 318).

No sale. Aggregate research insights are not sold to data brokers, advertisers, insurers, or employers. Where a research partnership involves commercial consideration, that consideration is for the production of insights for a specific research purpose under a DPA; we do not treat such partnerships as a sale of personal information for purposes of CCPA Cal. Civ. Code § 1798.140(ad). If this interpretation changes for any product or partnership in the future, we will update this policy and provide the opt-out mechanisms required by law.

Where to read more. Operational details of how data flows through the Bio-Outcome Intelligence Engine are described in our Genetic, Biomarker and Bio-Matching Consent document. The de-identification, contractual, and security obligations that apply to research partners are described in our Data Processing Agreement.

33. Contact Us

For all privacy requests, legal notices, and regulatory correspondence, email is the preferred and most reliable contact method. Please use privacy@idicine.com for privacy matters and legal@idicine.com for legal notices.

Idicine
5214F Diamond Hts Blvd
San Francisco, CA 94131
support@idicine.com
Email: privacy@idicine.com

For support: support@idicine.com

For legal notices: legal@idicine.com