Privacy Policy

• Most of the site works with no account and no data collection.
• If you use the Truth Tracker, your health data is private to your account.
• We never sell or rent your personal or health data.
• We do not accept raw genome / DNA files.
• You can ask us to export or delete everything, any time.

Nothing, for browsing. Reading the graded content and using the free tools (the protocol builder, reconstitution calculator) does not require an account and does not collect personal data.

If you create an account: your email address, and whatever health data you choose to put in the Truth Tracker, such as bloodwork and DEXA results you upload, and values you type in.

No third-party analytics. We do not run Google Analytics or any ad-network tracker. If we ever add analytics, it will be cookieless and first-party, with nothing sent to advertising networks, and we will say so right here.

Genetic data carries special legal and personal risk, so we designed around it. Ground Truth does not ask for or support raw genome or DNA files(for example, 23andMe or AncestryDNA exports). We don't provide a way to upload one, and if one reaches us by mistake we delete it rather than store or process it.

Where genetics is relevant, you may choose to type in a specific result you already know (for example, a single gene variant). That self-reported value is treated as sensitive health data under this policy, and you can delete it at any time. We are not a genetic-testing service and we do not sequence, interpret, or resell genetic information.

We use it only to provide the Tracker to you: to store your results, read the numbers off a document you upload, and chart your markers over time. That's it.

We do not use your health data to train AI models, to advertise to you, or to sell to anyone.

One exception you control: if you use Ask Ground Truth while signed in, your recent markers are attached to your question so the assistant can speak to your own numbers. That means they are sent to our AI processor (Anthropic) to generate that one answer, and are not used to train models. Use Ask while signed out to keep your markers out of it entirely.

To turn a lab PDF into charted numbers, the document (or the values in it) is processed by a third-party AI provider (Anthropic)acting as our processor, solely to extract the data you asked us to chart. It is not used to train their models. If you 'd rather not have a document processed this way, don't upload it, you can always enter values manually.

Your data is stored with our infrastructure provider (Supabase) in an encrypted-at-rest database and private storage. Access is enforced by row-level security, so your records are readable only by your own authenticated account. Uploaded files live in a private bucket, not on any public URL.

We don't sell or rent your data. We rely on a small number of vetted processors that make the service run: hosting/database (Supabase), the AI extraction provider (Anthropic), and email delivery for account messages. Each handles data only to perform its function. We may also disclose data if required by law, and we'll push back on overbroad requests.

You can view your data in your account any time. To export or permanently deleteit, email us and we will action it within 30 days, including the raw files in storage. Self-serve export and delete are on the way. If you're in a jurisdiction with specific privacy rights (California, the EU/UK, and others), those rights apply and you can exercise them by contacting us.

We keep your data only as long as your account is active or as needed to provide the Tracker. Where we can, we keep less: once values are extracted from a document, you can ask us to delete the original file and keep only the numbers. We honor deletion requests promptly.

We use the minimum cookies needed to keep you signed in and to keep the site secure. We do not use third-party advertising or cross-site tracking cookies.

Ground Truth is for adults 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor has given us data, contact us and we'll delete it.

No system is perfectly secure. In the event of a data breach affecting your information, we will notify affected users and regulators as required by applicable law, including the FTC Health Breach Notification Rule and state breach-notification laws.

We'll update this policy as the service evolves; the "last updated" date above reflects the current version, and we'll flag material changes on the site. Privacy questions, data requests, or concerns: hello@groundtruthpeptides.com.