Privacy
Your DNA file at Indaga
What happens to the raw DNA file you upload, who can reach it, and how to take it back. The consent box on the upload page refers to this page.
What you agree to
The box you tick on the upload page says:
I agree that Indaga analyses this DNA file to make my report and keeps it encrypted on its server in the Netherlands until I ask for it to be deleted. I can withdraw at any time. It is my own file, and I am 18 or older.
- What happens to it: We read your genotypes to build your report: traits, polygenic scores and drug-response notes. We don’t use it for research or advertising, and we never sell it.
- Who can reach it: The Indaga team members who run the service, only when needed; Worldstream, which hosts our server in the Netherlands; and Cloudflare, which carries the traffic to it without storing it. Your DNA data is analysed only on our server and is not sent to any outside database.
- Never: Your DNA data never goes to an employer, an insurer or anyone who advises them. It goes to police or other authorities only with a warrant or court order, and we tell you unless we are forbidden to.
- Changing your mind: You can withdraw at any time, with the button on your dashboard or by emailing support@indaga.ai. With the button we stop using your DNA data straight away; by email, within 15 days. We delete it within 30 days, and our encrypted backups expire within about 8 weeks.
- Who we are: Indaga is a product of CryptoSvit (Ruslan Plakhuta, eenmanszaak, KVK 89565568), Soesterberghof 102, 2631 LH Nootdorp, the Netherlands.
The rest of this page says more about each of these.
What you give us
The raw data file from your DNA service: 23andMe, AncestryDNA, MyHeritage or FamilyTreeDNA. If it arrives as a .zip or .gz, we unpack it and keep only the DNA file inside. Signing in with Google gives us your email address and account IDs, nothing else.
What we do with it
We read your genotypes to build your report: traits, polygenic scores and drug-response notes. That is the only use. We don't use your DNA data for research or advertising, we never sell it, and we will not start using it in a new way without asking you first.
What we keep, and why
We keep the DNA file, and what we build from it, until you ask us to delete them. We keep the file so that your report can be rebuilt when our methods improve, without asking you to upload it again. We also keep your sign-in email, your account IDs and a record of each upload and payment.
Where it is, and how it is protected
On our server in the Netherlands (EU), which we rent from Worldstream. Everything personal on it sits on an encrypted disk, and our backups are encrypted before they leave the server. The disk is unlocked while the server runs, so the encryption protects a removed drive or a switched-off server, not a break-in to the running server. There is no separate key for each person.
Who can reach it
The Indaga team members who run the service, only when needed. Worldstream, which hosts the server, and Cloudflare, which carries the traffic between your browser and it without storing it. Your DNA data is analysed only on our server and is not sent to any outside database or service.
Your DNA data never reaches these services: Google, which handles sign-in; Stripe, which takes payment on its own page; and our email provider, whose messages to you carry no genetic information.
What we never do
Your DNA data is never sold, and never used for advertising or research. It never goes to an employer, an insurer or anyone who advises them. It goes to police or other authorities only with a warrant or court order, and we tell you unless we are forbidden to.
Changing your mind
You can withdraw your consent at any time, with the button on your dashboard or by emailing support@indaga.ai from the address you sign in with. With the button we stop using your DNA data straight away; by email, within 15 days. We delete the file and everything built from it within 30 days, and confirm when it is done. Our encrypted backups expire within about 8 weeks. Withdrawing does not undo what was done with your consent before it.
Who we are
Indaga is a product of CryptoSvit (Ruslan Plakhuta, eenmanszaak, KVK 89565568), Soesterberghof 102, 2631 LH Nootdorp, the Netherlands. CryptoSvit decides how your data is used and answers for it. If you think we have handled your data wrongly, tell us first; you can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority where you live.
Questions
Write to support@indaga.ai. Indaga is wellness information, not medical advice. Back to Indaga