What we do and do not do with your personal information, and how to exercise every right you have.
WE DO NOT SELL OR SHARE YOUR PERSONAL INFORMATION
ReadYourDNA does not sell your personal information, and does not share it for cross-context behavioral advertising - as those terms are defined by the California Consumer Privacy Act (CCPA/CPRA) and comparable US state privacy laws. We have never done so and have no plans to. There is therefore nothing for you to opt out of, but the choices below are always available to you.
We also do not use your genetic data for research, to train models, or for any other secondary purpose. It is used only to generate and show you your own reports.
YOUR SENSITIVE PERSONAL INFORMATION
Your genetic data is sensitive personal information under California law, and a special category of personal data under the GDPR. We use it solely to produce the educational reports you request, and for the security and service purposes needed to deliver them. We do not use or disclose it to infer characteristics about you for advertising or profiling. Because our use stays within these permitted purposes, the CCPA does not require us to offer a separate “Limit the Use of My Sensitive Personal Information” option. You can nevertheless withdraw consent, or delete the data entirely, at any time.
THE CHOICES YOU ALWAYS HAVE
Know and access - see what we hold about you, and download a machine-readable copy, from Settings.
Delete - permanently delete your genetic data, or your entire account, from Settings. Your DNA file and its results are excluded from every backup, so deletion cannot be undone by a restore. The account record itself clears the encrypted operational archive on our server within 30 days, and its copy on a Hetzner storage server in Helsinki and our encrypted offline copy within 37 days. If you bought, the receipt for your order (order number, email address, amount, date and payment reference, no genetic data) is kept for seven years under Austrian tax law, then deleted.
Correct - update your account details in Settings.
Withdraw consent - withdraw any consent you gave (for example, to analyze your DNA file, or to use the optional AI assistant) at any time.
Opt out of sale or sharing - not applicable, because we never sell or share your personal information. If that ever changed, we would obtain your explicit consent first and post a working opt-out here.
Non-discrimination - we will never deny you service, charge you a different price, or give you a lower quality of service for exercising any of these rights.
HOW TO MAKE A REQUEST
The fastest route is Settings, where access, export, and deletion are self-service and take effect immediately. You can also email support@readyourdna.com from the address on your account. We respond within the shortest deadline that applies to you: 45 days under the CCPA, extendable once where permitted; one month under the GDPR and the UK GDPR; 30 days in Canada, Australia and India; 20 working days in New Zealand; and 15 days in Brazil. Making a request is free.
Authorized agents. You may use an authorized agent to make a request on your behalf. We will ask for written permission signed by you, and may ask you to verify your own identity directly, before we act on the request.
Verification. Because genetic data is sensitive, we verify that a request comes from the account holder before we disclose or delete anything - normally by confirming control of the account email, and for deletion by re-entering your password.
Appeals. If we decline your request, reply to our response and we will re-review it. If you are still unsatisfied, you may complain to the data-protection regulator for the country or US state where you live. Because our operator is established in the European Union, you may also complain to the Austrian Data Protection Authority. Our Privacy Policy names the regulators of the countries whose law adds its own rules, with their contact details, under “Your Rights By Country”.
Full detail is in our Privacy Policy and, for health-related data, our Consumer Health Data Privacy Policy.
Last updated: October 2026
Raw DNA Data Reports for 23andMe & AncestryDNA · About ReadYourDNA · FAQ · Methodology & Science · Pricing · Support and complaints · Legal & Contact · Health Traits · Pharmacogenomics · Carrier Status · Variant Explorer · The Human Karyotype · Privacy Policy · Terms of Service · Accessibility · Consumer Health Data Privacy · Your Privacy Choices · Editorial Standards · Your Data, Checkable · Sample Report · ReadYourDNA and Promethease compared · What is inside a 23andMe raw data file · What is inside an AncestryDNA raw data file · What a chatbot can and cannot do with your raw DNA file · Where a raw DNA file can still be uploaded in 2026
Written, maintained and operated by Martin Pechhacker, sole proprietor, Vienna, Austria. Trade register GISA 40064420. support@readyourdna.com