Privacy

Geographic scope

The Genome Computer Company offers its service to residents of the United States and Canada. This Privacy Policy applies to customers of the service in both jurisdictions and to visitors of our website. If you visit our marketing site from outside the United States or Canada, we may collect basic browsing information for analytics purposes, and you may choose to provide us with your email address by joining our waitlist, but we do not collect or process genomic data from users outside our service jurisdictions.

What we collect

When you place an order we collect your name, email, shipping address, billing address, and payment method (processed by Stripe — we never see or store your card details). When you return a sample, our CLIA/CAP-accredited laboratory partner generates genomic data from your sample, which is delivered to you as a .genome bundle and retained by us in active systems for up to 12 months to support redelivery and customer service. The biological sample itself is handled separately — see Data retention and deletion below.

If you join our international waitlist (for jurisdictions outside the United States and Canada), we collect your email address and country or region of residence. We use this information only to notify you when the service becomes available in your region and to understand which international markets may be of interest for future expansion.

What we don't do

We do not sell your data. We do not share your data with researchers, pharmaceutical companies, insurers, or law enforcement except where compelled by valid legal process (see Legal process). We do not use your identifiable genomic data to train AI models, and we do not license your genomic data to third parties for model training or research. We do not sell, license, or commercially distribute aggregated or de-identified genomic datasets. Our accredited laboratory partner may use de-identified data from samples they process only for internal quality assurance and method improvement, as is standard for accredited laboratories; they are contractually prohibited from selling, licensing, commercially distributing, or using your sample-derived data for unrelated research, product development, or third-party data products. There is no "optional research program."

What we are not

The Genome Computer Company is a sequencing service. We sequence your sample and deliver the resulting genomic data to you. We do not generate health reports, medical assessments, or clinical interpretations from your data. We do not retain or generate any health assessment about you. If you choose to interpret your genomic data using third-party tools, that interpretation is your responsibility and is not part of our service.

Consent and jurisdiction

By placing an order, you provide express consent for us to collect, process, and store your biological sample and the genomic data derived from it, solely for the purpose of delivering your results to you and supporting the services you have requested. You confirm at checkout that you are a resident of the United States or Canada, with your primary residence in one of these jurisdictions.

Humankind Bio, Inc. is a Delaware Public Benefit Corporation operating from San Francisco, California. This policy is governed by California law for US customers, including the California Genetic Information Privacy Act (GIPA). Where they apply, we also comply with other applicable US state genetic privacy, consumer health data, biometric, and comprehensive privacy laws — including, where applicable, Washington's My Health My Data Act, Montana's Genetic Information Privacy Act, and the genetic privacy and comprehensive privacy laws of Texas, Virginia, Utah, Tennessee, Arizona, Kentucky, Maryland, Wyoming, and other states with relevant privacy or genetic privacy laws.

For Canadian customers, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), the Personal Information Protection Act of British Columbia, the Personal Information Protection Act of Alberta, and the Act respecting the protection of personal information in the private sector of Quebec ("Law 25"), as applicable to the customer's province of residence.

Security

Genomic data files are encrypted at rest and in transit. Access is restricted to authorised personnel on a least-privilege basis and audited. We maintain data processing agreements with every subprocessor. In the event of a confirmed personal information breach affecting your data, we will notify affected customers without undue delay and as required by applicable law. For customers in Quebec, we will additionally report confidentiality incidents to the Commission d'accès à l'information du Québec as required by Law 25 where the incident presents a risk of serious injury.

Data retention and deletion

We retain your genomic data files in active systems for up to 12 months after delivery to support redelivery requests. Your biological sample is retained by our laboratory partner for the minimum period required by their accreditation standards and then destroyed according to CLIA/CAP protocols; it is not retained indefinitely for any purpose.

You may request earlier deletion at any time by emailing contact@genome.computer. We will:

• Delete your genomic data files and associated order records from active systems within 14 days, and purge backup copies within 90 days of deletion from active systems;
• Confirm destruction of your biological sample, or confirm that it has already been destroyed under normal laboratory workflow; and
• Retain only the minimum transaction records required by tax and accounting law, with no genomic content.

For California residents, you may request destruction of your biological sample within 30 days of consent revocation in accordance with the California Genetic Information Privacy Act.

Your rights

You may request access to the personal data we hold about you, correction of inaccurate data, a portable copy of your data, or deletion as described above. Email contact@genome.computer. We respond within 30 days.

Residents of US states with applicable genetic privacy or comprehensive privacy laws have rights under their respective state laws, including access, correction, deletion, portability, and opt-out from certain processing activities. We honor all such rights to the extent required by applicable law.

Canadian customers

For customers in Canada, this Privacy Policy describes how we collect, use, and disclose personal information consistent with the Personal Information Protection and Electronic Documents Act (PIPEDA), the Personal Information Protection Act of British Columbia, and the Personal Information Protection Act of Alberta, as applicable.

By placing an order, you provide express consent for us to collect, process, and store your biological sample and the genomic data derived from it, solely for the purpose of delivering your results to you and supporting the services you have requested.

Cross-border transfer of personal information. Your personal information, including your genomic data, will be stored and processed in the United States by Humankind Bio, Inc. and our US-based laboratory partner. While Canadian privacy law generally permits cross-border transfers of personal information for processing purposes, your data may be subject to US law while processed in the United States, including US law enforcement access rights. We protect your data with the security measures described in this policy and through contractual data protection commitments with our service providers.

Your rights under Canadian law. You have the right to access the personal information we hold about you, request correction of inaccurate information, withdraw your consent for further processing (subject to legal and contractual restrictions), receive a portable copy of your data, and file a complaint with the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner. To exercise these rights, contact contact@genome.computer.

Response timeline. We will respond to access, correction, and other rights requests within 30 days as required by PIPEDA.

Quebec residents

If you are a resident of Quebec, you have additional rights under the Act respecting the protection of personal information in the private sector ("Law 25"). The following provisions apply to your personal information.

Person Responsible for Personal Information Protection. Our Privacy Officer is the Person Responsible for Personal Information Protection. You can contact our Privacy Officer at contact@genome.computer for any questions about how we handle your personal information.

Sensitive personal information and express consent. Your genomic data is sensitive personal information under Law 25. By placing an order, you provide express consent for us to collect, process, store, and use your biological sample and the genomic data derived from it, solely for the purpose of delivering your results to you and supporting the services you have requested.

Cross-border transfer of personal information. Your personal information, including your genomic data, will be communicated outside Quebec and processed in the United States by Humankind Bio, Inc. and our US-based laboratory partner. Before communicating your personal information outside Quebec, we have considered: the sensitivity of the information; the purposes for which it is to be used; the protection measures, including contractual measures, that would apply to it; and the legal framework applicable in the receiving state. We have determined that our processing arrangements provide adequate protection for your personal information. You consent to this cross-border transfer by placing an order.

Your rights under Law 25. You have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate, incomplete, or equivocal information;
• Withdraw your consent for the processing of your personal information (subject to legal and contractual restrictions);
• Receive a portable copy of your data in a structured, commonly used technological format;
• Request that personal information about you be deindexed or that its dissemination cease, where the dissemination causes you serious injury to your reputation or privacy and the cessation is not contrary to law or the public interest;
• Be informed about and contest any decision made about you based exclusively on automated processing of your personal information.

Automated decision-making.Our service involves automated bioinformatic processing of your genetic data to produce the .genome bundle. This processing is not used to make decisions about you in the sense contemplated by Section 12.1 of Law 25 — we do not use automated processing to make decisions that produce legal effects or significant impacts on you. The processing is the service itself: bioinformatic analysis that produces the data you receive. You can request information about how our processing works by contacting contact@genome.computer.

Confidentiality incident reporting.If we become aware of a confidentiality incident affecting your personal information, we will take reasonable measures to reduce the risk of injury and to prevent new incidents of the same nature. Where the incident presents a risk of serious injury, we will report it to the Commission d'accès à l'information du Québec and notify affected individuals as required by Law 25.

Filing a complaint.You may file a complaint with the Commission d'accès à l'information du Québec if you believe your rights under Law 25 have not been respected. The Commission's contact information is available at www.cai.gouv.qc.ca.

Response timeline. We will respond to rights requests within 30 days as required by Law 25.

Your data after delivery

Once your genomic data has been delivered, you control how it is used. If you upload your data to third-party software, AI systems, websites, or services, their privacy practices apply. We are not responsible for how third parties handle your data after you provide it to them, including any identification, re-identification, or inference about you or your biological relatives that results from such use.

Legal process

We do not share your data with law enforcement except where compelled by valid legal process. Where legally permitted, we will notify you before any disclosure so that you have the opportunity to challenge the request. We construe all such requests narrowly and will resist overbroad demands. We do not voluntarily share genomic data with any government agency under any circumstance.

Minors

Our service is available only to adults aged 18 and over. We do not knowingly collect data from minors. The service is not directed to or intended for children. We comply with the Children's Online Privacy Protection Act (COPPA) and applicable US state and Canadian provincial laws regarding minors' privacy. If you believe a minor has provided data to us, contact contact@genome.computer and we will delete it.

International visitors

The Genome Computer Company currently offers its service only to residents of the United States and Canada. If you are located in the European Economic Area, United Kingdom, Switzerland, Australia, or other regions outside the United States and Canada, you may visit our marketing site and join our waitlist, but we do not provide the service to you and do not process your genomic or sensitive personal data.

International visitors must not purchase the service, submit a biological sample, or use another person's US or Canadian address or identity to access the service.

Browsing data (such as IP address) collected when you visit our marketing site is handled as described in What we collect. Waitlist data is handled as described above. If you have questions about your data, contact contact@genome.computer.

Data location

All genomic data is stored and processed in the United States by Humankind Bio, Inc. and our US-based laboratory partner. We do not transfer customer genomic data outside the United States. Account, payment, and operational data may be processed by US-based service providers; we do not use any service provider that requires customer genomic data to be transferred outside the United States.

For Canadian customers (including Quebec residents), this means your personal information is transferred from Canada to the United States for processing. The cross-border transfer is described above in Canadian customers and Quebec residents.

Subprocessors

We rely on subprocessors in the following categories:

• CLIA/CAP-accredited laboratory services in the United States
• Payment processing
• Hosting and order records
• Email delivery

Each subprocessor is bound by a data processing agreement and may use your data only to provide services to us, except that our accredited laboratory partner also acts as an independent controller for the sample retention, quality assurance, and regulatory-compliance activities required by their own accreditation. A current named list of subprocessors is available on request to contact@genome.computer.

Privacy Officer

For privacy matters, including the exercise of rights under Canadian or Quebec privacy law, contact our Privacy Officer:

Email: contact@genome.computer

The Privacy Officer is the Person Responsible for Personal Information Protection as required under Law 25.

Changes to this policy

We will notify you by email of any material changes to this policy before they take effect. Non-material changes (typographical corrections, clarifications that do not alter your rights) will be reflected in the "Last updated" date above.

Contact

Humankind Bio, Inc.
535 Mission Street, 14th floor
San Francisco, CA 94105
United States

Questions, deletion requests, or concerns: contact@genome.computer