Privacy

What is kept

Your account. Your ClackID id, a copy of your email address and your timezone. ClackID signs you in; Biomarkd never sees a password.

Sessions. A fingerprint of the cookie that keeps you signed in, and when it expires. Never your IP address or browser.

Your date of birth and the ranges you chose. Optional. They pick the typical range for a result whose lab printed none, by your age on the day of the draw. The Bloods page also keeps which range you compare with and how it is ordered, and Trends keeps how far back you chose to look and which compounds you pinned.

Blood draws. The day, and the time, lab, whether you fasted and a note if you give them.

Results. Each marker's value and unit as you entered it, the lab's range if you gave it, and whether you marked it unreliable. A correction keeps the earlier value, so you can see what changed; deleting a result deletes every version of it.

People on Biomarkd. If you compare with other people, the range shown is the middle 80% of everybody's latest trusted result for that marker, among people with the same reference set. It is worked out when you look and never stored, shown only when at least 20 people have a result, and never shows anybody's own value. Your latest results count towards it for others in the same way.

Your protocol. Each compound you add, a name for it if you give one, and every plan: the amount, unit, route and schedule, from the day it applies. A change keeps the earlier plan.

Doses. What you took, how much, the day and time, the route and the injection site if you give it. A correction keeps the earlier entry; deleting a dose deletes every version of it.

Withings, if you connect it. Your Withings account id, and the keys Withings gives Biomarkd to read your measurements, sealed so the database alone cannot use them. Biomarkd reads weigh-ins, body composition, blood pressure, pulse, oxygen saturation and temperature, marks each with where it came from so it is never copied twice, and never writes anything to Withings. Disconnecting deletes the keys; the readings already copied stay in your log until you delete them.

Hevy, if you connect it. Your Hevy API key, sealed so the database alone cannot use it, and a fingerprint of the webhook token if you set one up (never the token itself). From Hevy: each training session's title, day, start and end, and every set with its exercise, type, weight, reps, distance, time and RPE. The session's description and your exercise notes are not kept. With them, the names, equipment and muscle groups of your exercises, to tell which exercise each one is; and your routines (their exercises, sets, rep ranges and rest), read only when you ask Biomarkd to start a programme from them. Biomarkd only reads from Hevy and never writes to it. Disconnecting deletes the key and the token; the sessions already copied stay in your log until you delete your account.

Apple Health, if you turn uploads on. A fingerprint of your upload key (never the key itself) and when the last upload came. From what your phone sends: body measurements and heart and vitals readings with their time and source; for sleep, steps and active energy, one figure a day, with the samples it was added up from kept for 30 days. A reading already here from another source is not stored twice. Turning uploads off makes the key stop working; what was uploaded stays in your log until you delete it.

The Biomarkd iPhone app, if you connect it. For each iPhone: the name it gives itself, when it was connected and last sent anything, and fingerprints of the keys it signs in with (never the keys themselves). A code that connects a phone lasts five minutes and is kept only as a fingerprint. From Apple Health the app sends the same readings as above, each marked with Apple's own id so it is never stored twice; the device's model and software versions it also reports are dropped, and its sync reports (battery, memory) are not kept. The app shows your trends, latest results, today's doses, your open symptoms and the week of a run of your plans under way, and only to the phone you connected; symptoms you note or check in on there are kept as on the website. Disconnecting, in Settings or in the app, makes its keys stop working; what it sent stays in your log until you delete it.

Assistants, if you connect one. Off until you switch it on. Whether assistants may read your log, and the areas you switched off (training, body, recovery, protocol, bloods, symptoms, and the coach where it is switched on for you; an area added later is shared unless you switch it off). For each assistant you connect: the name it gave itself, when you connected it and when it last read anything, and fingerprints of the keys it signs in with (never the keys themselves, never your IP address or device). A code that connects one lasts five minutes and is kept only as a fingerprint. How many reads each area had on each day, kept 35 days, so Settings can show what was read. A change an assistant prepares (logging a dose, adding to, changing or stopping something on your protocol, checking in on a symptom, or a change to your goal, programme, journal, check-in or measurements) waits for your yes for ten minutes; what was asked and what came of it are kept a week. What an assistant adds or changes on your protocol, goal, programme or journal, and a dose or measurement it logs, are marked with the name it gave itself, kept with them and deleted with them. What an assistant reads is sent to it and kept by it under its own terms. Disconnecting, in Settings or in the assistant, makes its keys stop working at once.

Ask, if you switch it on. Off until you switch it on, in Settings under Assistants. When you ask a question, Biomarkd sends it to Anthropic, who run the Claude model, as our processor, with today's date, your time zone, which areas you share, your last few questions and answers in the same conversation, and the results of the reads made to answer it, from the areas you share with assistants only. Your name, email, ClackID account and our ids for you are never sent. Kept here: your questions and the answers, with the reads each answer made, for 30 days, deleted sooner with Clear in Settings or with your account; a count of answers and tokens each month, kept 13 months, never what was asked; each change Ask prepared and what you answered, open for 14 days; and a paragraph Ask wrote on a review or a debrief, for 30 days. Ask cannot change anything without your yes: a change it prepares waits for you to press Yes or No, and what it makes is marked as Ask's.

Body measurements. Weight, body fat, muscle mass, waist and tape measurements (chest, shoulders, upper arm, forearm, hips, thigh, calf, neck) as you enter them, the day and time, and the scale or device if you name it.

Training you log here. A session logged in Biomarkd is kept beside those from Hevy: its title, day, start and end, the routine it ran, your note on it, and every set with its exercise, type, weight, reps and RPE. A session logged in both is counted once; Hevy's copy stays stored, is left out, and counts again if you delete the one logged here.

The coach, where it is switched on for you. Your goal and its targets; your programme, its routines and phases, and every change to an exercise in them with its reason and who made it; the exercises you added and which exercise each of your Hevy exercises is; what you chose to do about something the coach found, the figures it started from and the day to look again; a finding you answered Not now or Never; your journal; and how each week felt. What the coach finds, the targets for your next session, a session's debrief and a week's review are worked out when you look and are not kept.

Food, where it is switched on for you. Your own foods, from their labels: the name, the figures per 100 g or 100 ml (energy, protein, carbohydrate, fat, and fibre and alcohol if you give them) and a serving's size and name if you give one; deleting one keeps it only so days already logged still name it. Your saved meals and their items, each a food and an amount. What you ate each day: the part of the day, the food or the name of a quick add, the amount, and its figures copied when you logged it, so changing a food later never changes a day already eaten; a change keeps the earlier entry. The days you marked as not fully logged. Your protein and energy targets live on your goal, with the coach's. Your day's totals, whether a target was met, the trend and the energy your log says you need are worked out when you look and never stored. The catalogue of foods is the government's CoFID, kept in code, and searching it sends nothing anywhere. When you scan a barcode in the iPhone app, Biomarkd sends the barcode's number, and nothing about you, to Open Food Facts (a public database of product labels) to read the product's figures; nothing is kept from its answer unless you save the food, and then the barcode is kept with your own food so the next scan finds it here. No photo is taken or kept. Food is never in a reminder or an email. Deleting your account deletes all of it.

Your notes. What you write on a medication or a dose, and its day. An edit keeps the earlier wording; deleting a note deletes every version. Only you see them.

Your saved plans. Each planned run you save: its name, length and note, each compound in it with a name if you give one, and every step (the amount, unit, route and schedule from a day of the plan). Each time you run one: the day it starts and ends, the day you stop it early, your note on it, and which of your protocols each compound went on. Starting a plan writes its plans onto your protocol, marked with the run they came from. Deleting a saved plan deletes it and its runs; the plans it wrote and the doses you logged stay on your protocol.

Your symptoms. Each one you note, in the list's words or your own, how strong it was, the day and a note if you give one, and which change to your protocol or which dose you linked to it with "Because of". What was running when it began, the bloods nearest it and the days that followed a change are worked out when you look and never stored. Deleting an entry deletes every version of it; deleting a plan or a dose deletes its links. Symptoms are never in a reminder or an email.

Your suggestions. A medication or marker you add because it was missing: its name and the details you give. It is yours to log against at once. When we review suggestions we see those details and how many people sent the same name, never who. If one joins the shared list, your entries move across to it and the shared entry records no name; if it is merged into an entry that already exists, your entries move to that one.

Dose reminders. Off until you turn them on. For each browser you turn them on in: the address its push service gave it and the keys to encrypt to it, nothing about the device. For the iPhone app, if you turn them on there: the push token Apple gave it, sent through Apple's push service. What we send says only a part of the day, like "Your morning check-in", never what you take. Which parts remind you, your timezone and when each part starts are kept with your account. Turning reminders off forgets every browser and phone; which reminders went out is kept for a week so none is sent twice.

What Today suggests from your log. Worked out from your own doses each time Today opens, for you only, and never stored: a routine you could add to your protocol, a part of the day that starts earlier or later than you log it, a reminder you rarely need, and, while a planned run is under way, a symptom that began in the same week of an earlier run of it. When you answer Not now or Never, that answer is kept (what it was about and until when) so the suggestion stays away. A run's review, what you noted before at a similar dose, and the estimated level when a symptom began are worked out when you look and never stored.

Deleting it

Deleting your account in Settings removes all of it at once.

Biomarkd is a product of Clackis Ltd.