Sub-processor Registry

Version: 2026-07-12-v1 Effective: July 12, 2026 Last updated: July 12, 2026

AskYourGenes and Helios ("we," "the Service") use a small set of third-party providers ("sub-processors") to operate. This page lists each provider, the data they receive, and why. Our Privacy Policy and Data Consent reference this page as the canonical, current list.

We keep this registry versioned and dated. When we add any provider that receives your genetic data, we update this page, record a new consent version, and ask affected users to consent again before any data flows to that provider.

Providers we currently use

Supabase — database, authentication, and storage

Receives: Your account information (including email), the genetic markers parsed from your file, and your original uploaded genome file (kept in encrypted archive storage). Purpose: To run your account, store your genome and results, and serve them back to you. Privacy policy: https://supabase.com/privacy

Anthropic — AI interpretation and chat

Receives: Your genetic markers (genotypes) and the derived interpretations relevant to your results, sent when you use our AI features — including generating your gene stories and our AI chat. Purpose: To generate answers and interpretations of your results. Privacy policy: https://www.anthropic.com/legal/privacy

Resend — email delivery

Receives: Your email address and the contents of messages we send you. Purpose: To send you account and protocol-related email. Privacy policy: https://resend.com/legal/privacy-policy

Google — sign-in and calendar

Receives (sign-in): If you choose to sign in with Google, Google verifies your identity and we receive your email address to create your account. Google does not receive your genetic data. Receives (calendar — Helios only): The daily protocol content Helios writes to the Google Calendar you connect. This is your own Google account, which you connect and can disconnect at any time. Purpose: To let you sign in with Google and to deliver your personalized daily protocol to your own calendar. Privacy policy: https://policies.google.com/privacy

Infrastructure and hosting

Receives: Data in transit and at rest, incidental to running the Service. Providers: Railway (application hosting for both AskYourGenes and Helios). Purpose: To host and operate the Service.

Not yet active

Payment processing. We do not currently process payments. When we enable paid subscriptions, our payment processor will be listed here and affected users will be asked to consent before any billing data is collected.

Genetic cross-reference partners. If we ever offer optional cross-referencing of your results against another genetics service, that provider will be listed here as a separate, opt-in choice — never bundled into the core service — and you will be asked to consent specifically to it.

Changes to this page

We post updates here with a new version number and date. Material changes affecting genetic data trigger a new consent request.

Questions: ryder@hpcla.com