Law enforcement & government access
How we respond when the government asks for your data. The short version: we don't hand anything over without valid legal process, we tell you when we legally can, and we count every request on this page.
Valid legal process only
We disclose user data only when compelled by valid legal process — a search warrant, court order, or subpoena that is lawful, properly signed, and addressed to the right entity. We do not hand data over voluntarily, and we refuse requests that are defective or outside their lawful scope.
We push back
Every request is reviewed before anything is produced. Overbroad or indefinite demands are challenged or narrowed to the minimum the law actually requires. A request for "everything on a user" gets a response scoped to what the process lawfully reaches — no more.
We tell you
Unless we are legally prohibited from doing so, we notify the affected user before producing any data — with enough detail for you to object, seek counsel, or challenge the request yourself. Gag orders are the only thing that silences that notice, and we disclose them when the order lifts.
No standing access
There are no real-time data feeds, no backdoors, and no standing arrangements with any government agency. Nothing in our architecture exists for voluntary surveillance, and we will not build any.
US-only storage
All data is stored and processed exclusively in the United States, so no foreign government can reach it through a data-localization demand aimed at infrastructure we use abroad. We do not respond to extraterritorial requests that don't follow valid legal process.
We can't produce what we don't hold
Raw files are purged on a fixed retention schedule by default, deletion is user-initiated and immediate, and retained genotypes are stored pseudonymized and encrypted. Some of the data a request asks for may simply no longer exist — and we say so.
Transparency report
As of September 2026: zero. We have received no government or law-enforcement requests for user data since launch.
This section is updated whenever a request is received, and at least annually with a count of requests received, the types of legal process involved, and how many users we were able to notify. If we are ever subject to a gag order that prevents reporting a request, we will disclose that fact as soon as the order permits.
Questions about this policy can be sent to privacy@geneticcoding.com. For the full data-handling model, see Data Architecture.