Privacy Policy

1. Who we are

MyBioMark ("we", "us") operates the MyBioMark website and the MyBioMark app: a personal biomarker platform that turns realtime body data into insight on your energy, recovery, sleep, stress, performance and longevity. MyBioMark is part of the Biomarker Database ecosystem. We are the controller for the personal data described in this policy.

2. What data we collect

Depending on how you use MyBioMark, we process:

• Waitlist data — your email address, your name if you choose to share it, your language preference and the time of signup.
• Account data (app) — the details you provide when creating an account, such as name and email address.
• Biomarker and health data (app) — measurements collected through your wearable or connected sensor (such as heart rate, heart rate variability, blood oxygen, temperature, sleep and activity), your daily check-ins and the answers you give in the health questionnaire.
• Technical data — limited log data needed to keep the website and app secure and working, such as IP address, device type and error reports.

3. Why we process your data

• To provide the service — turning your measurements into personal insights, trends and baselines (performance of our contract with you).
• To manage the waitlist — confirming your signup and inviting you when a spot opens up (your consent, which you can withdraw at any time).
• To improve the platform — using anonymised, aggregated data that can no longer be linked to you (legitimate interest).
• To meet legal obligations — where laws require us to keep or disclose certain records.

4. Health data needs extra care

Biomarker and health data are special-category data under the GDPR. We only process them with your explicit consent, which you give in the app before any measurement is collected. You can withdraw that consent at any time in the app; we then stop collecting and delete the associated health data, subject to any legal retention duties.

5. Who we share data with

We do not sell your personal data. Ever. We share data only with:

• Processors who help us run the platform (such as hosting and email-delivery providers), bound by data-processing agreements.
• The Biomarker Database ecosystem — only in anonymised, aggregated form that cannot be traced back to you, to improve insights and predictive models.
• Authorities, if and only to the extent the law requires it.

6. Where your data is stored

We store and process personal data within the European Economic Area where possible. If a provider processes data outside the EEA, we make sure appropriate safeguards (such as EU Standard Contractual Clauses) are in place.

7. How long we keep your data

• Waitlist data — until you join the platform or ask us to remove you, and at most two years after your last interaction.
• Account and health data — for as long as you have an account. When you delete your account, your personal data is deleted or irreversibly anonymised within 30 days.
• Technical logs — at most 12 months.

8. How we protect your data

Your data is encrypted in transit and at rest. Access is limited to people who need it to operate the service, and we apply industry-standard organisational and technical measures appropriate to the sensitivity of health data.

9. Your rights

Under the GDPR you have the right to access, correct, delete and receive a copy of your personal data, to restrict or object to processing, and to withdraw consent at any time. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). To exercise your rights, contact us — we respond within one month.

10. Contact & changes

Questions about this policy or your data? Contact us at info@mybiomark.app. We may update this policy from time to time; the latest version is always published on this page with its revision date.