Privacy
Consumer health data policy
The laws of Washington, Nevada and Connecticut give special protection to “consumer health data”. This page says what of it we collect and how we handle it. We apply it to everyone who uses Indaga, wherever they live.
Last updated 26 September 2026.
What we collect, and why
- Genetic data: the raw DNA file you upload, the genotypes read from it, and the results in your report (traits, polygenic scores and drug-response notes). We use it only to build your report.
- Health readings and notes from our iOS app, if you use it and allow it: the Apple Health data you choose to share and the notes you type. We use them only to show you your own readings.
We collect it only with your consent (the box on the upload page), or where it is needed for a service you asked for: showing your Apple Health readings in our iOS app after you allow it.
Where it comes from
From you: the file you upload, and the readings your phone sends when you use our iOS app. We don't buy or collect health data about you from anyone else.
Who it is shared with
We never sell consumer health data, and we don't share it with any third party for their own use. Two services handle some of it for us:
- Worldstream (Netherlands) hosts our server and backups.
- Cloudflare carries the traffic between your browser and our server, without storing it.
Your genetic data is analysed only on our server and is not sent to any outside database or service. We have no affiliates that receive it. We use no geofencing around places where people get health care.
Your rights, and how to use them
- Confirm and access: ask whether we hold consumer health data about you, get a copy, and get the list of every third party and service that has handled it.
- Withdraw consent: at any time. We stop using the data within 15 days.
- Delete: we delete it within 30 days and tell the services above to delete their copies. Our encrypted backups expire within about 8 weeks.
- Appeal: if we turn a request down, reply with the word “appeal”. We answer within 45 days. If we still say no, you can complain to your state's Attorney General; in Washington, at atg.wa.gov/file-complaint.
To withdraw and delete, use the button on your dashboard. For any of these requests, email support@indaga.ai from the address you sign in with. We answer within 45 days at the latest, and usually much sooner. We won't charge you or treat you differently for using these rights.
More
The full privacy notice covers everything else we collect, including account and payment data. The short version for your DNA file is on Your DNA file at Indaga. Indaga is a product of CryptoSvit (Ruslan Plakhuta, eenmanszaak, KVK 89565568), Soesterberghof 102, 2631 LH Nootdorp, Netherlands.