How does SelfDecode protect user data?
Is My Data Secure at SelfDecode?
Yes. Protecting your privacy — and especially your genetic data — is a top priority at SelfDecode. We do not sell, rent, or share your genetic data with third parties. Our business is selling tools that help you understand and optimize your health, not selling your information.
Our data protection commitments
- We never sell or share your DNA data.
- We only collect the personal information we actually need.
- Your data is stored securely, with tightly controlled access.
- You can delete your data whenever you choose.
How we protect your data
Limited access
Only vetted, trusted SelfDecode employees can reach our administrative and backend systems. Access is tightly controlled and logged, and your genetic data files are stored with very limited internal access.
Secure cloud infrastructure
Your genetic data is stored on Amazon Web Services (AWS), a leading cloud provider used by healthcare and financial institutions worldwide.
Secure payments
Payments are handled by trusted, industry-standard providers including Stripe and PayPal. SelfDecode never stores your full payment details.
What personal information we collect
We ask for the minimum we need to build your reports and run your account:
- Your name — you're welcome to use a pseudonym or your initials
- Your email address
- Your birth date
- Your ethnicity
- Your birth sex
Your birth date, ethnicity, and birth sex are used to interpret your genetic results accurately, since risk and reference data differ across these groups. Everything else is just what we need to reach you and keep your account secure.
We ask for a shipping address only when we're sending you a DNA kit.
Our security practices
Our infrastructure is designed to meet modern security standards, including:
- Secure, SSL-certified connections
- Hardened application and system security, including script protection, disk write protections, and restricted plugin access
- Encryption of all backup media
- Continuous audit logging and monitoring
- Regular penetration testing by external security firms
- Annual SAS 70 Type II examinations
Can I delete my data?
Yes. You can request complete deletion of your genetic and personal data from our systems at any time — just email support@selfdecode.com and our team will take care of it. See here for more information.
Before you request deletion, please note:
- Deletion takes up to 24 hours to finalize.
- Once complete, deletion cannot be reversed. Your genetic data and reports can't be recovered, and you'd need a new account and subscription to use SelfDecode again.
Still have questions?
Email us at support@selfdecode.com and we'll answer them.