Consent Policy

Last Updated: December 2024 | Version 1.0

Important Notice

By using Humanome.AI services, you consent to the collection, processing, and storage of your genetic data and personal health information as described in this policy. Please read this document carefully before proceeding.

1. Overview

Humanome.AI ("we," "us," or "our") is committed to protecting your privacy and ensuring the secure handling of your genetic information and personal health information (collectively, "Protected Health Information" or "PHI"). This Consent Policy explains how we collect, use, store, and protect your data in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable regulations.

2. Information We Collect

When you use our services, we may collect the following types of information:

2.1 Genetic Information

  • DNA sequence data from whole genome sequencing (WGS) or whole exome sequencing (WES)
  • Variant call files (VCF)
  • Genetic test results and classifications
  • Pharmacogenomic (PGx) profiles

2.2 Personal Health Information

  • Medical history provided through health surveys
  • Family health history
  • Lifestyle information (diet, exercise, smoking, alcohol use)
  • Medication information
  • Demographic information (age, sex, ethnicity)

2.3 Identifiable Information

  • Name and contact information
  • Date of birth
  • Billing and payment information

3. How We Use Your Information

We use your information for the following purposes:

  • Genomic Analysis: To analyze your DNA and provide variant classification using ACMG/AMP guidelines
  • Personalized Insights: To generate health reports and recommendations based on your genetic profile and health survey responses
  • Sentinel Monitoring: To continuously re-analyze your data against new research and clinical findings
  • Genetic Counseling: To support consultations with certified genetic counselors (Concierge package only)
  • Service Improvement: To improve our AI algorithms and services (using de-identified data only)

4. Data Protection Measures

Encryption

AES-256 encryption at rest and TLS 1.3 in transit

Access Controls

Role-based access and multi-factor authentication

Audit Logging

Comprehensive logging of all data access

HIPAA Compliance

Full compliance with HIPAA Privacy and Security Rules

5. Data Sharing and Disclosure

We will NOT share your identifiable genetic or health information except:

  • With your explicit written consent
  • With our laboratory partner (Quest Diagnostics) for sample processing
  • With genetic counselors you choose to consult
  • When required by law or legal process
  • In de-identified form for research purposes (with your separate consent)

We will NEVER sell your genetic data to third parties.

6. Your Rights

Under HIPAA and applicable privacy laws, you have the right to:

  • Access and download your genetic data and health information
  • Request corrections to your information
  • Request deletion of your data ("right to be forgotten")
  • Receive a copy of this consent policy
  • Withdraw consent at any time (prospectively)
  • File a complaint with the HHS Office for Civil Rights

7. Data Retention

We retain your genetic data and health information for as long as your account is active or as needed to provide services. If you request deletion of your account, we will delete or de-identify your data within 30 days, except where retention is required by law.

8. Consent Declaration

By checking the consent box during registration, you acknowledge that:

  • You have read and understood this Consent Policy
  • You voluntarily consent to the collection, processing, and storage of your genetic and health information as described
  • You understand that genetic testing may reveal unexpected information
  • You understand that you may withdraw consent at any time by contacting us

Questions or Concerns?

If you have questions about this policy or wish to exercise your rights, please contact our Privacy Officer.

Contact Us