Last updated: September 2026
The short version
- Your data is yours. You can download it any time.
- Only you can see it. It is encrypted and locked to your account.
- We never sell it, and we never use it for ads.
- No one trains AI on your face, body, bloods or DNA.
- Delete your account and all your data is deleted.
1. Who we are
BioElle is run by The Pink Place Group Ltd, a company in the UK. We decide how your data is used, so we are its "controller" under UK data law (UK GDPR). Questions about your data go to hello@bioelle.app.
2. What we collect
We only collect what you give us, or what you let us import.
- Your account: your name, email address and sign-in details.
- Your body and health data: weight and measurements, DEXA scan results, blood test results, your cycle, and your daily check-in (sleep, energy, mood, recovery and stress). This includes reports you upload and NHS App exports you choose to import.
- What you take and do: supplements, medicines, peptides, training, nutrition, HRT and procedures you log, plus your goals.
- Your DNA (optional): only the wellness markers BioElle matched, never your raw DNA file. See section 4.
- Progress photos (optional): stored privately and blurred on screen until you choose to show them.
- Apple Health (optional): sleep, heart rate, HRV, steps, workouts, weight and cycle data, only with your permission.
- Waitlist: your email address, if you join the waitlist, and the country you signed up from. We work out the country from your internet connection. We don't keep your IP address.
- Technical basics: the device and browser details needed to run the app, and error reports when something breaks.
3. Why we use it
- To run the app for you. We use your data to show your numbers, scores and patterns, and to sync your devices.
- Health and DNA data need your consent. UK law treats health and genetic data as "special category" data. We only use it because you choose to add it. You can withdraw consent at any time by deleting that data or your account.
- To keep the app working. Error reports help us find and fix bugs. They have personal and health details removed before they leave the app.
- To email you. Account emails, and a note when BioElle opens if you joined the waitlist.
We do not sell, rent or share your personal health data with third parties for marketing. We do not show ads.
4. Your DNA data
DNA reading is in private preview. If you use it, this is what happens:
- We ask for your consent first, and record which version of the wording you agreed to.
- Your raw DNA file is read on your own device. It never leaves your phone or browser.
- We keep only the small set of wellness markers we matched.
- We also keep a one-way code made from your file (a SHA-256 hash). It stops the same file being added twice. It cannot be turned back into your DNA.
- Disease-risk and medicine-response markers are blocked. BioElle never reads them.
- You can delete your DNA data at any time, on its own or with your account.
5. Who else handles your data
We use a small number of trusted services to run BioElle. Each one only gets what it needs for its job.
- Supabase stores your account and data, and runs sign-in.
- Anthropic (AI). Two features send some health data to Anthropic to produce a result:
- Reading uploaded reports. When you upload a blood test or DEXA report, we first try to read it with our own tools. If we can't, the report's text is sent to Anthropic to read it for you. This is a live feature.
- The Read. To write your personal summary, The Read, the relevant health data is sent to Anthropic. This is switched on only while we test the app. It stays switched off in the live app until it has passed clinical and legal review.
Your files are read on your own device. Only the extracted text is sent, from our secure servers over an encrypted connection, never from your device or browser directly. Anthropic processes it in the United States, on our behalf, only to return the result. It does not use it to train its AI models.
- US National Library of Medicine (RxNorm). When you add a medicine by name, we check the name against this public medicines list. Only the name you type is sent, from our servers. Never your identity or other health data. The check never gives a dose or a recommendation.
- Open Food Facts. If you scan a product barcode, only the barcode number is sent, to look up the product.
- Apple. Apple Health (with your permission), App Store payments and push notifications.
- RevenueCat and Stripe handle subscriptions and payments. We never see your full card number.
- Sentry receives error reports, with personal and health details removed.
- Vercel hosts our website, counts page visits without cookies, and tells us which country a visitor is in, so we can show the right prices.
- Resend sends our emails.
We do not share your data with advertising platforms.
6. Data sent outside the UK
Some of these services process data outside the UK, for example Anthropic in the United States. When health information leaves the UK, it is protected by the legal safeguards UK law requires.
7. Keeping it safe
Your data is encrypted when it is stored and when it moves over the internet (HTTPS). Access is locked to your account, so only you can see your data. We store numbers in metric and convert them for display only.
8. How long we keep it
- We keep your data while your account is open.
- When you delete your account, all your data is deleted. That includes your health records, DNA markers, photos, protocols and your sign-in. Backup copies clear on their normal schedule.
- Cancelling a subscription does not delete anything. Your data stays until you delete your account.
- Waitlist emails are kept until you ask us to remove yours. Email hello@bioelle.app.
9. Your rights
Under UK law, you have the right to:
- See the data we hold about you. It's all in the app.
- Correct it, from Settings.
- Download it as CSV, JSON or a PDF report, from Settings, then Data Export.
- Delete it, from Settings, then Delete Account. This is permanent.
- Withdraw consent for health or DNA data at any time.
- Object to or limit how we use your data.
- Complain to the Information Commissioner's Office (ICO) at ico.org.uk. We'd like the chance to fix it first, at hello@bioelle.app.
10. Age
BioElle is for adults aged 18 and over. We do not knowingly collect data from anyone under 18.
11. Changes to this policy
If we change this policy, we will update the date at the top. We will tell you in the app about any big change.