Privacy Policy
Last Updated: September 1, 2026
BioMarker Coach (“BioMarker Coach,” “we,” “us,” or “our”) provides an application that analyzes user-uploaded blood test results against BioMarker Coach’s proprietary nutrition knowledge base, developed from professional nutrition education, peer-reviewed scientific literature, established nutrition resources, and evidence-informed nutrition principles, using artificial intelligence, to generate personalized educational reports (the “Service”). This Privacy Policy explains what personal information and health information we collect, why we collect it, how it’s used, who we share it with, how long we keep it, and the choices and rights available to you.
This Policy applies to all users of BioMarker Coach, wherever you are located, including residents of Canada (all provinces and territories, except Quebec — see below) and the United States (all states). Certain sections apply specifically to residents of particular jurisdictions, as noted.
BioMarker Coach is not currently available to residents of Quebec, given the additional requirements of Quebec’s Law 25 (including French-language obligations); we are considering launching there in the future. Account creation is blocked for anyone who selects Quebec as their province at signup.
1.1 Information we collect
Account information. When you create an account, we collect your email address and authentication credentials (or, if you sign in with Google, the name, email address, and profile identifier Google provides). We do not receive or store your Google password.
Health and lab information.When you use the Service, we collect the blood test files or values you upload, the marker values extracted from them, and the answers you provide to our health and lifestyle questionnaire (for example, age, sex, height, weight, symptoms, diet, exercise, sleep, stress, and medication or supplement use). Marker values only ever come from an uploaded document or your questionnaire answers — there is no manual marker-entry feature. This is sensitive information, and under Washington’s My Health My Data Act, Nevada’s and Connecticut’s equivalent laws, and similar state statutes, it is treated as “consumer health data.”
AI-generated reports. We store the personalized reports our Service generates from your lab values and questionnaire answers, so you can view your history over time.
Payment information. If you purchase Single Report access or a subscription on our website, our payment processor, Stripe, collects your payment card details directly — we do not receive or store your full card number, only limited billing metadata such as subscription status and transaction history. If you purchase inside the iOS or Android app instead, Apple or Google collects your payment details directly and we never see them at all.
Gift purchases.If you purchase a gift, you may provide the recipient’s email address so that we can deliver the gift code and related delivery communications. The recipient is not automatically registered for an account and must create their own account to redeem the gift. As the purchaser, you will not receive the recipient’s health information, reports, or analysis results. The recipient’s email address may be processed by our payment, email-delivery, hosting, or fraud-prevention providers, and will not be used for marketing communications unless the recipient separately provides any consent required by applicable law.
Technical and usage information. We automatically collect standard technical information needed to operate the Service, such as IP address (used only transiently for request handling and security), browser/device type, basic error/diagnostic logs, and — on the marketing site only — advertising cookie data as described in our Cookie Policy.
Push notification token. If you use the native iOS or Android app and allow notifications, we (via Firebase Cloud Messaging) store a device token used only to notify you when a report finishes processing. This token is a device identifier, not health data.
1.2 Why we collect it, and the legal bases we rely on
We collect and use your information to: create and maintain your account and authenticate you; process your uploaded lab results and questionnaire answers to generate your personalized report; maintain your report history; provide customer support; process payments; send a push notification when a submitted report finishes, if enabled; detect and prevent fraud and abuse; comply with legal obligations; and communicate with you about your account, the Service, and (only with your separate opt-in) marketing.
For Canadian users, our legal basis is your consent (see our Informed Consent document for how we obtain it for health information specifically) and, in limited cases, legitimate business interests where permitted under PIPEDA. For users in U.S. states with consumer-health-data laws, we collect and process consumer health data only with your affirmative opt-in consent, or where strictly necessary to provide the Service you’ve requested.
1.3 How your information is processed — including by AI
To generate your report, the marker values extracted from your uploaded lab results and relevant questionnaire answers are sent to Anthropic PBC’s Claude API, a third-party large language model service, along with BioMarker Coach’s proprietary nutrition knowledge base, developed from professional nutrition education, peer-reviewed scientific literature, established nutrition resources, and evidence-informed nutrition principles. This knowledge base was developed by BioMarker Coach’s founder, a nutritionist, based on her professional nutrition education and experience in nutrition practice — see our Methodology page for more detail. Anthropic processes this information to generate the text of your report and, under our agreement with them, does not use your data to train their models. Anthropic is based in the United States; your health information is transmitted to and processed in the United States as part of generating your report, regardless of where you are located. See Section 1.7 for more detail.
We do not use your health information for automated decision-making that produces legal or similarly significant effects about you, and BioMarker Coach reports are not a medical diagnosis.
1.4 Who we share your information with
We do not sell your personal information or your health information. We share information only with the following categories of recipients, each acting as our service provider/processor under contract:
- Supabase — database, authentication, and real-time infrastructure.
- Anthropic PBC (Claude API) — processes lab values and questionnaire answers to generate your report.
- Google LLC — if you sign in with Google, shares your name, email, and profile identifier with us.
- Firebase Cloud Messaging (Google) — delivers push notifications; processes your device’s push token only.
- Stripe, Inc. — processes payment card details for website purchases; does not receive your health information.
- Apple Inc. and Google LLC (as app marketplaces) — process in-app purchases directly; share only purchase/subscription status with us.
- Render — hosts the application infrastructure.
- PostHog — product analytics; processes app usage events (e.g. pages visited, a report being uploaded or opened, how long a report was viewed, how many questions were asked in the report chat) tied to your account id, plus your responses to optional in-app feedback surveys. PostHog never receives your lab results, marker values, questionnaire answers, or the text of anything you ask in the report chat. Please don’t include personal health details in open-text survey answers, since those are stored by PostHog like any other survey response.
- Zoho Corporation — provides our business email; may process the contents of messages you send us.
- Resend — delivers transactional emails, such as gift codes to a gift recipient’s email address; processes only the recipient’s email address and the gift-code message content, never your health information.
- Meta Platforms, Inc. — our public marketing pages (never the app itself, and never any health-data page) use Meta’s advertising pixel for ad measurement and retargeting. See our Cookie Policy.
- Mailchimp — if you subscribe to our newsletter or a marketing sign-up, stores and sends to that email address on our behalf.
- Law enforcement or regulators, only where required by law, or to protect the rights, property, or safety of BioMarker Coach, our users, or others.
- A successor entity, in the event of a merger, acquisition, or sale of assets — you’ll be notified before your information becomes subject to a different privacy policy.
We do not share your data with data brokers, and we do not share information for cross-context behavioral advertising beyond the specific, disclosed Meta Pixel use above on our public marketing pages.
Our social media accounts (Instagram, TikTok, YouTube, and Facebook) are also governed by each platform’s own privacy policy for any interaction that happens there, such as direct messages, comments, or follows. Please don’t share health details, including your blood test results, over direct message — DMs from us are used only to send you a link to create your account, and all report-related activity happens securely within the Service.
1.5 How long we keep your information
We retain your account information, questionnaire answers, and report history for as long as your account is active. If you delete your account, see our Account & Data-Deletion Policy for what’s deleted immediately versus on request. We retain limited billing records for as long as required by Canadian and U.S. tax law (generally up to 7 years).
1.6 Your rights
All users. You can access, update, or correct your account information at any time from your profile page. You can request a copy of your data, or ask us to correct or delete it, by emailing support@thebiomarkercoach.com.
Canada. Under PIPEDA, you have the right to access the personal information we hold about you, request correction, withdraw your consent at any time, and file a complaint with the Office of the Privacy Commissioner of Canada.
California (CCPA/CPRA). California residents have the right to know, delete, correct, and opt out of the sale or sharing of personal information — including opting out of the Meta Pixel described above — and to limit the use of sensitive personal information, which includes your health information.
Washington, Nevada, Connecticut, and similar states. You have the right to confirm what consumer health data we hold, withdraw consent at any time, and request deletion (including from backups) within 45 days of a verified request. We do not sell consumer health data or use geofencing around healthcare facilities.
Other U.S. states generally provide similar rights. Contact us at support@thebiomarkercoach.com regardless of which state you live in — we will honor the request under whichever law provides you the strongest protection.
We will need to verify your identity before fulfilling most of these requests, typically by confirming account ownership through your registered email.
1.7 Cross-border data transfers
Because our service providers operate infrastructure in the United States, your information, including health information, will be transferred to and processed in the United States even if you are located in Canada. This is permitted under PIPEDA provided we remain accountable for your information and are transparent with you about the transfer, which this section is intended to do.
1.8 Security
We use industry-standard safeguards including encryption in transit (HTTPS/TLS), row-level security policies restricting database access to each user’s own records, and authentication via Supabase Auth. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
1.9 Children’s privacy
The Service is intended for adults 18 years of age and older only. We do not knowingly collect personal information, including health information, from anyone under 18. Account creation requires an affirmative confirmation that you are 18 or older; if we learn we’ve collected information from someone under 18 despite this, we will delete it.
1.10 Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through an in-app notice before the changes take effect.
1.11 Contact us
Questions, requests, or complaints about this Privacy Policy can be sent to support@thebiomarkercoach.com or by mail to 15751608 Canada Inc., 62 Mary Street, Brampton, Ontario, Canada, L6W 2R3.
Designated Privacy Officer: Tatiana Kuznetsova, founder of BioMarker Coach, is designated as the Privacy Officer responsible for privacy-related questions, requests, and complaints, reachable at the email address above.