GeneLeaf

Privacy Policy

Effective October 1, 2026

This policy covers the GeneLeaf website at www.geneleaf.com and the GeneLeaf pedigree editor at app.geneleaf.com (together, “GeneLeaf”). The short version: GeneLeaf does not collect or keep your pedigrees, and the only personal information it receives is what Google or Microsoft tells it when you sign in.

Not for sensitive or patient data

GeneLeaf is a test and demonstration application. Do not enter protected health information, real patient information, or other sensitive personal data. GeneLeaf is not offered as a HIPAA-compliant service, and we do not sign business associate agreements. Use fictional or fully de-identified examples.

What we receive and why

Sign-in. When you sign in with Google or Microsoft (including Outlook and other Microsoft accounts), the provider sends us your name, your email address, and an account identifier. We use them only to let you in and to show your name in the app. They are kept in a signed cookie in your browser; we do not store them in a database or keep a copy.

Your pedigrees. Pedigrees are created and held in your browser. We do not receive, store or access them. When you save a pedigree it is downloaded to your device as a file, and you keep it. Uploading a file opens it in your browser only.

Narrative analysis. At present this feature runs against an AI model on your own computer, so the text you type is not sent to us. If we later offer a hosted version, we will update this policy before enabling it.

Saved ratings. If you rate a generated pedigree, the rating is stored in your browser’s local storage on your device. It is not sent to us.

Website analytics. The marketing site (www.geneleaf.com) uses Google Analytics to count visits. It uses cookies and collects information such as the pages viewed, your approximate location, and your device and browser type. See how Google uses information from sites that use its services. You can opt out with the Google Analytics opt-out add-on. The marketing site shows no ads.

Server logs. Our hosting provider, Cloudflare, processes requests (including your IP address) in order to deliver and secure the site. See Cloudflare’s privacy policy.

Cookies

Google and Microsoft user data

We ask Google and Microsoft only for your basic profile (the openid, email and profile scopes). See also Microsoft’s privacy statement. GeneLeaf’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this information, share it with third parties, use it for advertising, or use it for anything beyond signing you in.

Sharing

We do not sell your information. It is processed only by the services that run GeneLeaf: Google and Microsoft (sign-in), Google (analytics) and Cloudflare (hosting).

Your choices

Signing out removes the session cookie. You can revoke GeneLeaf’s access at any time: for Google at myaccount.google.com/permissions, for Microsoft at account.microsoft.com/privacy/app-access. Because we keep no account records, there is nothing further to delete. You can clear saved ratings by clearing site data in your browser.

Children

GeneLeaf is not directed at children under 13, and we do not knowingly collect information from them.

Terms

Use of GeneLeaf is also subject to our Terms of Service.

Changes

If this policy changes, we will update the date at the top of this page.

Contact

Questions: contact@geneleaf.com.