Privacy Policy

Gene Wizard (“we,” “us,” or “our”) analyzes raw genetic data from direct-to-consumer genomics companies (23andMe, AncestryDNA) and whole-genome sequencing VCF files. This Privacy Policy describes how we collect, use, and protect your information when you use genewizard.net (the “Service”).

Your file is never stored, and your results are auto-deleted after 12 hours

When you upload a genotype file, it is parsed entirely in memory. The file you upload is never written to disk, and is discarded immediately after processing.

Your analysis results — including your key SNPs, predicted pharmacogenomic phenotypes, and polygenic risk scores — are saved to our database so you can view them on the dashboard, but they are automatically and permanently deleted 12 hours after upload. Your dashboard displays a live countdown to deletion. You can also delete your results at any time before the 12-hour window by clicking the “Delete All My Data” button on the dashboard page.

Account Information

Authentication is handled by Clerk, a third-party authentication provider. Clerk collects and manages your authentication credentials, which may include your email address, if you elect to provide it for account recovery. If you provide your email Gene Wizard is able to view it but we never share user's emails.

Device & Usage Information

We use a web analytics provider to collect anonymous usage data, including page views and general device information. This data does not include any genetic information and is used solely to understand how people use the service.

We do not use third-party advertising trackers or sell usage data.

How We Use Your Information

• Generate your analysis results — the primary purpose of the Service
• Communicate with you — to respond to support requests, when given permission to look at your data.

Data Sharing

We do not sell, share, or provide your genetic information or analysis results to any third party.

We use the following service providers to operate the Service:

• Clerk — authentication and account management
• Vercel — frontend hosting and analytics
• Railway — backend hosting and database

These providers process data only as necessary to deliver the Service and are contractually prohibited from using your data for their own purposes.

Data Retention & Deletion

Analysis results are retained for a maximum of 12 hours after upload, after which they are automatically and permanently deleted by an unattended background process. You may also delete all of your data manually at any time from your dashboard before the 12-hour window elapses. Deletion — automatic or manual — is immediate and irreversible; we do not retain backup copies of individual user data.

Your Rights

Under applicable privacy law, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correct — request correction of inaccurate information
• Delete — permanently delete all your analysis results at any time from your dashboard
• Withdraw consent — you may withdraw consent and delete your data at any time; withdrawal does not affect prior processing

To exercise your access or correction rights, contact us using the email below. If you believe your privacy rights have been violated, you may also file a complaint with the Office of the Privacy Commissioner of Canada.

Security

All data in transit is encrypted via HTTPS/TLS. Authentication is handled by Clerk with industry-standard security practices. While no system is perfectly secure, we strive to make our platform as secure as possible.

Children

This service is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the date at the top of this page. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.