Your data is under your control

Your genetic and medical data is among the most sensitive information you own. We have designed every part of Vogelview around the principle that you should always know what we have, why we have it, and how to take it back.

Last updated: April 2026 · privacy@vogelview.health

What data we collect

Your email address and account profile (name, optional avatar)
DNA raw data files you upload (23andMe, AncestryDNA, VCF, etc.)
Medical lab results you upload or enter manually
Parsed variants and biomarkers extracted from your files (stored separately from raw files)
Basic usage analytics — pages visited, features used — to improve the product
Payment records via Stripe (we never see or store your full card details)

How we protect it

All data is encrypted in transit using TLS 1.3
Files and parsed data are encrypted at rest using AES-256
Your files are stored in user-scoped Firebase Storage buckets — no other user can access them
API endpoints require server-side authentication verification on every request
No personally identifiable information is written to application logs
Our internal team access to production data is restricted and audit-logged

What we never do

Sell your genetic or medical data to any third party — ever
Share your data with insurance companies, employers, or pharmaceutical companies
Use your DNA or medical data for advertising targeting
Train AI or machine learning models on your personal data without explicit opt-in consent
Allow affiliate partners to access any of your data
Retain your data after you request deletion

Your rights

Download: Export all your data at any time from Settings → Privacy → Export My Data
Delete: Remove individual files, reports, or your entire account — permanently
Portability: Your parsed data can be exported as JSON or CSV
Correction: Update or correct any profile information at any time
Objection: Opt out of analytics tracking in Settings → Privacy
Access: Request a full log of all data we hold about you via email

Data retention

Uploaded files are retained for as long as your account is active, unless you delete them
Auto-delete can be configured in Settings: 30 days, 90 days, or 365 days after upload
Reports are retained until you delete them or close your account
Account closure triggers a full deletion cascade across all associated records within 30 days
Anonymized, aggregate analytics (no PII) may be retained for product improvement
Payment records are retained per applicable financial regulations (typically 7 years)

Privacy questions

If you have a question about this policy, want to exercise any of your data rights, or want to report a privacy concern, email us at privacy@vogelview.health. We aim to respond within 3 business days. For general support, use our contact form.