Initializing Vogelview...
Performing medical cross-referencing...
Initializing Vogelview...
Performing medical cross-referencing...
Loading...
No legalese. No buried clauses. This page walks through every step your DNA file or lab report takes inside Vogelview, and it tells you exactly where the off switch is at each stage.
Prefer the legal version? Privacy Policy · Security technical details · Terms of Service
Cascading delete
When you hit delete, your record goes through a real shredder — raw file, parsed variants, findings, all of it. Strips, not folders.
The five stops
It travels from your device to our servers over an encrypted tunnel (TLS 1.3). No one in between can read it — not your coffee-shop Wi-Fi, not us in transit.
Your raw file lands in a private folder that only your account can open. We label it with your user ID and a random token. If anyone ever peeked at the storage bucket directly, they would see locked boxes — no names, no emails, no lab details.
What you control
You can delete the file any time from Settings. One click, no approval needed.
Our system opens the file, extracts the variants or biomarker values, and matches them against our curated knowledge base.
This is the only moment the data is "decoded" — and it happens inside a secured server process, not on your browser, and not on a third party. We never send your raw DNA or full lab results to any AI provider. We do send anonymous snippets (a trait name, a level bucket like "low" or "normal") to our AI backend so it can help write the plain-English explanation.
What you control
You can opt out of AI-enhanced summaries in Settings → Privacy. The template-based report still works without any AI call.
After interpretation, your raw file and your parsed results live in two different places.
The raw file is cold storage — rarely touched after the first parse. The parsed results (your variants, biomarkers, and the rendered findings) live in a per-user locked Firestore collection. Everything sensitive is encrypted at rest with AES-256. We never use your real name or email as a database key — just an opaque user ID.
What you control
You can export everything as JSON or CSV at any time, and you can delete any single upload without losing your other reports.
When you open your report, a server process verifies your identity, unlocks your data, renders the report just for you, and sends it back over the same encrypted tunnel.
No other user can ever load your report, not even one who guesses your report ID. Every API request is verified server-side against your Firebase identity token. Admin staff cannot browse user reports casually — any production read is recorded in an audit log. Affiliate partners never see your data: we send them a click, they send us a paid-conversion ping. Nothing else.
What you control
You can generate a share link to send a report to your doctor or a family member. You choose whether it is view-only and when it expires. Revoke with one click.
Deletion is a cascade — the raw file, the parsed variants, the findings, the recommendations, the notifications tied to that report. All gone.
A permanent, irreversible purge starts the moment you click delete. Backups follow on a 30-day rolling window — once the window rolls past, nothing can be recovered. We do not keep a "just in case" copy. We do not keep a "for research" copy.
What you control
You can delete anything from one upload up to your entire account and every piece of history. The delete-account button actually deletes.
Retention windows
Everything below either has a clear expiry or a one-click delete. Nothing is “kept forever just in case.”
| What | How long | Why |
|---|---|---|
While your account is active Your uploads and reports stay as long as you want them, or until you delete them. | You decide | Your uploads and reports stay as long as you want them, or until you delete them. |
Auto-delete option Turn on an automatic shredder for uploads in Settings → Privacy. Great if you want to look once and move on. | 30 / 90 / 365 days | Turn on an automatic shredder for uploads in Settings → Privacy. Great if you want to look once and move on. |
Anonymous leads from the free quiz If you try the quiz without creating an account, your responses auto-delete after 30 days. | 30 days | If you try the quiz without creating an account, your responses auto-delete after 30 days. |
Account closed A cascading delete begins immediately. Encrypted backup rotation completes within 30 days. | Within 30 days | A cascading delete begins immediately. Encrypted backup rotation completes within 30 days. |
Payment records Required by accounting regulations. No health data — only transaction IDs, amounts, and dates. | 7 years | Required by accounting regulations. No health data — only transaction IDs, amounts, and dates. |
Anonymous usage metrics Aggregate numbers (e.g. "400 reports generated this week") only. No individual data, no way to link back to you. | Retained | Aggregate numbers (e.g. "400 reports generated this week") only. No individual data, no way to link back to you. |
Things we will never do
Email privacy questions, request a copy of everything we hold about you, or ask how a specific step works. We reply within three business days.