Privacy Policy

Biomark is built on a simple principle: your health data belongs to you. We collect only what we need to make the app work, we never sell it, and we never will.

Who We Are

Biomark is operated by David Beaton, based in Queensland, Australia. Contact: support@getbiomark.com

What We Collect

• Account Information: Your name and email address, provided via Sign in with Apple. If you use Apple's private relay, we receive a masked email address only.
• Health Data: Blood test results and biomarker values you choose to upload. This includes PDF reports and CSV files you provide.
• Usage Data: Basic information about how you use the app (screens visited, features used) to help us improve the product.
• Device Information: Crash logs and performance data to identify and fix technical issues.

What We Do Not Collect

We do not collect your location, contacts, camera, or microphone data. We do not use advertising trackers or third-party analytics platforms that profile you across other apps or websites.

How We Use Your Data

• To provide the core service: extracting biomarkers, generating AI insights, and producing GP reports.
• To improve the app: understanding which features are used helps us prioritise what to build next.
• To provide support: if you contact us, we use your email to respond.

We never use your health data to train AI models or share it with third parties for any commercial purpose.

Data Security

All data is encrypted in transit (TLS) and at rest. Authentication is handled exclusively through Sign in with Apple — we never store passwords. Access to your health data is strictly limited to your account. We conduct regular reviews of our security practices.

Data Sharing

We do not sell, rent, or trade your personal or health data. We use the following service providers to operate the platform, each bound by strict data processing agreements:

• RevenueCat — subscription management (no health data shared)
• Anthropic Claude API — AI insight generation (data processed transiently, not stored or trained on)
• Replit — hosting infrastructure

Your Rights Under Australian Privacy Law

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Request corrections to inaccurate information
• Request deletion of your account and all associated data
• Export your data at any time via the GP Report export feature
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

Data Retention

Your data is retained for as long as your account is active. When you delete your account, all personal and health data is permanently removed from our systems within 30 days.

Children

Biomark is not intended for use by anyone under the age of 18. We do not knowingly collect data from minors.

Changes to This Policy

We will notify you of material changes to this policy via the app or email. Continued use of Biomark after changes constitutes acceptance of the updated policy.

Contact

For any privacy questions or requests, contact support@getbiomark.com