OmicEdgeLegal
Draft

This document is a working draft and has not been reviewed by legal counsel. Do not rely on it for regulatory purposes.

Health Data Processing Notice

Effective date: 15 April 2026

This notice explains specifically how OmicEdge processes your special-category health data under Article 9 of the GDPR. It supplements our general Privacy Policy.

1. Legal basis

We process your health data on the basis of your explicit consent(Art. 9(2)(a) GDPR), given during onboarding. You can withdraw this consent at any time from your profile settings; withdrawal stops further processing but does not affect the lawfulness of processing carried out before withdrawal.

2. Categories of health data

  • Blood biomarker results from the Core Panel.
  • Biometric data from connected wearables (heart rate, HRV, sleep, SpO2).
  • Lifestyle inputs you enter (nutrition, exercise, subjective symptoms).
  • Sex at birth and date of birth, used for reference-range interpretation.

3. Purposes

  • Reporting your biomarker results to you in the dashboard.
  • Generating evidence-based lifestyle recommendations based on peer-reviewed literature.
  • Benchmarking you against your own previous results over time.
  • Aggregated, de-identified research — only with a second, separate consent.

4. Who sees your health data

  • You, always, through the dashboard.
  • Our specialist EU laboratory partner, who performs the blood analysis under a Data Processing Agreement.
  • Our infrastructure providers(Supabase, AWS eu-central-1) as processors only — they cannot read your raw results.
  • OmicEdge clinical staff, only where necessary to resolve a support request you have raised.

We do not share health data with insurers, employers, or advertisers.

5. International transfers

Health data stays within the European Economic Area. No transfers to third countries are made for biomarker or biometric data.

6. Retention

Biomarker results are retained for 10 years by default to make longitudinal tracking meaningful. You may request deletion at any time from the profile settings or by emailing privacy@omicedge.com. Deletion is irreversible.

7. Automated decision-making

The Service uses AI models to surface lifestyle recommendations. These recommendations are informational only and do not constitute a medical decision; no automated decision producing legal or similarly significant effects is made about you under Art. 22 GDPR.

8. Your rights

In addition to the general GDPR rights listed in the Privacy Policy, you specifically have the right to:

  • Withdraw consent to health-data processing at any time.
  • Export your full biomarker history in a machine-readable format.
  • Request correction of any laboratory result you believe to be in error (we will coordinate with the lab).

9. Contact

Email privacy@omicedge.com for anything related to your health data.