Data governance

How genomic data is held

Selected genomic-result fields use application-layer encryption. Account controls and their current availability are described below.

Clerk auth · genomic-result encryption · account controls

Ownership

Ownership and portability

Genomic data and the results derived from it belong to the user. Account and genome-file export are currently unavailable; data requests can be sent to privacy@herugenomics.com. Full-account deletion is confirmation-gated and completes only after any paid membership is terminal and no hosted checkout remains actionable or unresolved.

Encryption

Encryption & the stack

Genomic results are encrypted at the application layer before storage, on top of provider encryption at rest and in transit.

Authentication

Clerk

Single source of truth for identity

Genomic data

Application-layer encryption

Results encrypted before storage; decrypted only for the owner

Database

Neon Postgres (encrypted at rest)

Accessed via Prisma; no genomic data on disk

File storage

Cloudflare R2 (encrypted at rest)

Raw uploads in encrypted object storage

Transport

TLS

All traffic encrypted in transit

Rate limiting

Upstash Redis

Abuse and brute-force protection

Monitoring

Sentry

Error tracking, no genomic payloads logged

Isolation

Tenant isolation

Identity-scoped routes are forced dynamic and never cached across users. Responses set no-store and vary on the session cookie. Defense-in-depth checks reject any profile row whose owner does not match the authenticated user.

Your controls

Deletion, export & consent

Current availability and limits of account controls.

Export

Currently unavailable

Account and genome-file exports remain disabled. Contact privacy@herugenomics.com for data requests.

Data deletion

Erase derived data

Keeps the account, removes the analysis

Account deletion

Permanent after billing reconciliation

Confirmation-gated; pauses while Whop obligations remain non-terminal

Consent

Granular, revocable

Controls what is discoverable and what is used

Audit

Activity log

Selected activity events; not a complete history of data access

Scope

The clinical boundary

Haeckel is an intelligence and modeling platform. It is not a diagnostic device.

Non-clinical

Statistical modeling only. Non-clinical. Haeckel does not diagnose, treat, or prevent disease, and nothing in it is a substitute for advice from a qualified clinician or genetic counselor.

Policy

What we never do

Genomic data is never sold.
Genomic data is never used for research or model training without explicit, revocable consent.
One user’s data is never exposed to another. Isolation is enforced at the route level.
Genomic data is never stored on the filesystem. Encrypted database and object storage only.

See the methods Open Haeckel