Privacy Policy

TrackMyMarkers (“we”, “us”, or “our”) operates trackmymarkers.com, a longitudinal biomarker tracking platform that helps you organize, track, and understand your laboratory results over time. This Privacy Policy explains what data we collect, how we use it, how it is stored, and the rights you have over your information.

By creating an account and using our service, you agree to the practices described in this policy.

We collect only the information necessary to provide the service. This includes:

• Account informationName, email address, and password (stored as a hashed value). Used for authentication and account management.
• Lab reportsPDF or image files you upload from any laboratory, along with extracted test names, values, units, reference ranges, and dates.
• Biomarker resultsIndividual marker values you verify or manually enter, including numeric values, units, dates, and category tags.
• NotesPersonal notes you attach to markers, reports, or dates to provide context for your own tracking.
• PreferencesNotification and reminder settings, display preferences, and family profile configurations.
• Usage dataBasic service telemetry such as login times and feature interactions, used to maintain and improve the platform.

Your data is used solely to deliver and improve the TrackMyMarkers service. Specifically, we use your data to:

• Build and maintain your longitudinal marker history and timeline.
• Generate AI-powered summaries, comparisons, and answers to questions about your recorded data.
• Send you notifications and reminders you have explicitly configured.
• Produce exportable reports (such as doctor visit summaries) from your verified results.
• Maintain account security, authenticate your identity, and prevent abuse.
• Improve extraction accuracy, marker matching, and the overall user experience.

We do not use your health data to train shared or public AI models. AI processing operates on your authorized data only, as described in our AI Disclosure.

Your data is stored with industry-standard protections:

• Encryption. Data is encrypted in transit (TLS) and at rest in the database and file storage layers.
• Row-level security (RLS). Every table that stores user data is protected by row-level security policies that ensure you can only access your own records. No other user can read or modify your data.
• Private file storage. Uploaded lab reports are stored in access-controlled object storage with signed URLs. Files are never publicly accessible.
• Infrastructure. Our infrastructure provider maintains SOC 2 Type II and ISO 27001 compliance, with regular security audits and monitoring.

The only circumstances under which data may be disclosed are:

• To our infrastructure and AI processing providers, solely to operate the service, under agreements that restrict their use of your data.
• When required by law, court order, or legal process, and only to the extent necessary to comply.
• With your explicit consent, such as when you choose to export and share a report with your healthcare professional.

We do not share data with insurance companies, employers, or data brokers under any circumstances.

5. Your Rights

You maintain full control over your data at all times. You have the right to:

To exercise any of these rights, sign in to your account or contact us at privacy@trackmymarkers.com.

We use a minimal set of cookies and similar technologies to keep you signed in, remember your preferences, and understand how the service is used. We do not use cookies for cross-site advertising tracking. For full details, see our Cookie Policy.

TrackMyMarkers uses AI to extract results from uploaded reports, map them to known biomarkers, generate educational summaries, and answer questions about your recorded data. When AI processes your data:

• AI operates only on data you have authorized within your account.
• Your data is never used to train shared, public, or third-party AI models.
• AI distinguishes between verified results (confirmed by you) and unverified extractions, and clearly labels which is which.
• AI outputs are educational summaries, not medical advice, diagnoses, or treatment recommendations.

See our AI Disclosure for a complete explanation of how AI is used in the platform.

TrackMyMarkers is not directed to children under the age of 16, and we do not knowingly collect personal or health data from children. The Track Family plan allows an account holder to create profiles for family members, but the account holder is responsible for ensuring they have the authority to manage those profiles. If you believe a child’s data has been added to the platform without proper authorization, please contact us at privacy@trackmymarkers.com and we will take steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the features of the service. When we do, we will update the “Last updated” date at the top of this page. For significant changes, we will notify you through the service or by email. We encourage you to review this page periodically.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us: