Privacy.
THE CODE complies with the Digital Personal Data Protection Act 2023. The principles below apply to every member interaction.
What we collect
- Contact information you provide (name, email, phone).
- Broad biomarker themes produced by the public assessment, when you choose to submit them with a membership request. Individual questionnaire answers remain in your browser session and are not sent to THE CODE.
- Panel results from our processing partner (Redcliffe Labs), with your explicit consent.
- Operational data — when you log in, what you view on the dashboard, what you search.
Public assessment
The assessment is educational and not diagnostic. Your individual answers are kept only in temporary browser session storage so you can move between questions or reload the page. They are cleared after submission or when the browser session ends.
If you join the waitlist from the result screen, we store your contact details, up to 3 broad result themes, campaign attribution and your consent choices. An optional mobile number is encrypted before storage. These details are used only to respond to your membership request unless you separately opt in to marketing updates.
Why we collect it
- To operate the membership — schedule panels, deliver reports, bill fees.
- To interpret your data — generate commentary, identify trends, flag abnormal values.
- To improve the service — aggregate, anonymised analysis of dashboard usage. No member is identified in any such analysis.
How we store it
- Health data is stored in India.
- Encrypted at rest (AES-256) and in transit (TLS 1.3).
- Access is role-based, logged, and auditable.
Your rights
- Access any data we hold on you.
- Correct any inaccurate data.
- Withdraw consent at any time, in which case your account is closed and your data deleted within thirty days subject to legal retention obligations.
- Request a portable copy of your data.
How to reach us
Email hello@thecode.health with any data request.
Breach notification
In the event of a personal data breach affecting your information, we will notify you and the Data Protection Board of India in accordance with the Digital Personal Data Protection Act 2023.