Privacy Policy

• Account information — your email address, a username (handle), and optional demographics you choose to provide (date of birth, ethnicity, height, weight, smoking and alcohol use).
• Test data — the photo you capture during a scan, the color measurements and Cum Capacity Index (CCI) computed from it, and any optional context you log with a sample.
• Connected-service data — if you choose to connect a third-party account such as Oura, we read a limited set of your own wellness metrics (for example sleep, readiness, and heart-rate variability). See “Connected services” below.
• Approximate location — a country and region derived from your IP address, used for regional leaderboards.

Some of what you provide is sensitive — the scan photo, the results computed from it, and demographics such as ethnicity and date of birth. We treat it that way: it is visible only to you (leaderboards show only your handle and score), we never sell it, and we apply the access controls and encryption described below.

We never ask for your real name. Your email is used only to sign you in and contact you; everywhere others can see you — leaderboards, chat — you appear only as your handle.

• To compute and show you your results and how they change over time.
• To show how your results relate to context and connected-service metrics — visible only to you.
• To power leaderboards, which display your handle and score (never your email or the underlying sample).
• To operate, secure, and improve the test and the service.

Connecting a third-party account is entirely optional and happens only after you authorize it. When you connect Oura, we access your data on a read-only basis using tokens you grant us, which we store encrypted. We keep a short-term cache of daily metrics and a small set of summary values attached to your scans so we can show your correlations quickly.

We use connected-service data only to show you your own data. We do not sell it, we do not aggregate it across users, and we never use it to train any model. You can disconnect at any time from the Account page; when you do, we delete that provider's tokens, its cached metrics, and the values we derived from it and stored on your past scans — within 72 hours, and in practice right away. Deleting your account removes all of it.

We do not sell your personal data. We share it only with service providers that run our infrastructure (such as our hosting and database providers) and only as needed to operate the service, and where required by law. Leaderboards show your handle and score by design.

We use only essential cookies — the ones that keep you signed in and protect the sign-in flow. We don't use third-party advertising or cross-site tracking cookies, and we don't currently run third-party analytics. If that changes, we'll update this policy.

We keep your data while your account is active. You can ask us to delete your account and associated data at any time by emailing cumomics.ops@gmail.com. Disconnecting a wearable deletes its tokens, cached metrics, and any values derived from it, within 72 hours.

You can access, correct, or delete your data and export a copy — much of this is on your Account page, and you can email us for anything else. We don't sell personal data, so there's nothing to opt out of there. California residents have these rights under the CCPA; we extend them to everyone, wherever you live, and we won't discriminate against you for exercising them.

Cumomics is for adults. The service is intended only for people 18 or older, and we don't knowingly collect data from anyone under 18. If you believe a minor has given us data, email us and we'll delete it.

We protect data in transit and at rest, enforce per-user access controls at the database level, and encrypt third-party access tokens. No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of the data.

The CCI and any related figures are for personal, informational, and entertainment purposes. They are not a medical or diagnostic measurement and should not be used to diagnose, treat, or make decisions about any health condition.

We may update this policy; we'll revise the effective date above when we do. For any privacy question or request, contact cumomics.ops@gmail.com.