Your data

Your data, in plain words

A short version of our Privacy Policy. The policy itself is the full, binding text.

What we keep

What
Why
How long
Your profile answers: about you, health background, what you're open to
So your profile is ready for studies that could fit
Until you delete them
Every earlier version of those answers
So you can see and trust your own history
Until you delete your account
Email address
To send your sign-in links and account emails
Until you delete your account
Contact details and signature, if you add them
So you're quick to reach when studies open
Until you delete them
Agreements you accepted, with version and date
To show what you agreed to, and when
Until you delete your account
Browsers you're signed in on
So you can see them and sign them out
90 days after a session ends
A log of emails we sent: kind and time, never the address or content
To notice when email stops working
90 days
Signup steps reached, counted by a random device identifier
To learn where people give up, so we can fix it
13 months

Who can see it

You
Everything above is shown to you, and you can download all of it.
Nobody else is shown your profile
There's no screen for study teams, companies or our staff to browse profiles. The dashboards we use to run the site show counts, never people.
Never sold
We don't sell data, and there are no third-party advertising or tracking scripts on the site.

What you can do

Download
Account settings → Your data gives you a readable copy of everything, and a machine-readable file.
Pause
Pause your profile from your profile page at any time.
Delete
Account settings → Delete account starts a 30-day window. You can restore your account from the email we send. After 30 days, everything is permanently removed and we email a receipt.

About HIPAA

HIPAA covers medical records held by healthcare providers, insurers and their contractors. What you tell us is self-reported, so HIPAA doesn't apply. We still keep it private, and the choices above are yours. If you're in the EU, UK or another place with its own data protection law, that law applies too.