Laymen Inc. is a Delaware corporation building a personal genomics platform at laymen.com. We take privacy seriously — not because lawyers tell us to, but because the entire premise of what we're building requires you to trust us with the most personal data in existence. This policy explains exactly what we do with your information today, and what we will do when the product launches.
This policy applies to information collected at www.laymen.com and any sub-domains we operate. It covers US residents only. We do not currently serve EU or UK residents, and we are not subject to the GDPR or UK GDPR at this time.
Information we collect
Information you give us
When you join the waitlist, you give us your email address. Optionally, you may also provide your first and last name, country, ZIP code, your tier preference (Genome or Orchestrator), and any notes about why you want to use the product. None of the optional fields are required to join the waitlist.
Information we collect automatically
When you visit the site, we automatically receive your IP address, device type, browser version, operating system, pages visited, and referring URL. We collect this through Vercel Analytics, a privacy-focused analytics tool that anonymizes IP addresses and does not use cross-site tracking cookies or build personal profiles for advertising. We do not load third-party advertising scripts, pixels, or tracking tags.
Information we may collect in the future
This section describes forward-looking plans, not current practice. When the laymen product launches, we plan to collect whole-genome sequencing data obtained through our lab partner network, lab results you choose to connect or upload, wearable and health data you authorize from third-party apps, and health notes you enter into the product. Genetic data is sensitive personal information under applicable US state laws. We will update this policy before we collect any genetic data, and we will seek your explicit informed consent at that time.
How we use information
- To manage the waitlist.We store your email to track your place in line and contact you when we're ready to let you in.
- To send you updates about laymen. We may email you about product developments, launch timing, and significant company news. Every email includes an unsubscribe link. We will never use your email to send third-party marketing.
- To improve the site.Aggregate, anonymized analytics data helps us understand what's working and what's not.
- To comply with law. We retain and disclose information when required to do so by applicable law, court order, or valid legal process.
- Future product use.When the product launches, we will use your health and genomic data to provide the personalized health interpretation service you sign up for. That use will be described in full in an updated policy and in the product's consent flow.
How we share information
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising, as that term is defined under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). Here is everyone who may receive your data:
- Supabase. We store waitlist signup data in Supabase, a hosted PostgreSQL platform. Supabase acts as a data processor on our behalf under their standard data processing terms.
- Vercel. Our site is hosted on Vercel. Vercel processes request logs and analytics data as described in their privacy policy.
- Legal compliance. We may disclose your information to courts, law enforcement, or government authorities when we determine in good faith that disclosure is required by law or is necessary to protect our rights, your safety, or the safety of others. Where permitted, we will notify you before complying.
- Business transfers. If Laymen Inc. is acquired, merged, or undergoes a material asset transfer, your information may be transferred as part of that transaction. We will notify you by email or site notice at least 30 days before such a transfer takes effect, and you will have the opportunity to delete your data before the transfer.
Your rights
California residents (CCPA / CPRA)
If you are a California resident, you have the following rights with respect to your personal information:
- Right to know. You can ask what personal information we have collected about you, the categories of sources, the purposes for collection, and the categories of third parties we share it with.
- Right to delete. You can ask us to delete your personal information. We will honor this request except where we are required to retain data by law.
- Right to correct. You can ask us to correct inaccurate personal information we hold about you.
- Right to opt out of sale or sharing. We do not sell your personal information and we do not share it for cross-context behavioral advertising. There is nothing to opt out of.
- Right to limit use of sensitive personal information. Once we begin collecting sensitive personal information (including genetic data), you will have the right to direct us to use it only for providing the core service and as otherwise permitted by the CPRA.
- Right to non-discrimination. We will not discriminate against you for exercising any of these rights.
Other US state residents
Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), and Oregon (OCPA) have similar rights: the right to access, correct, delete, and obtain a copy of their personal data; the right to opt out of targeted advertising and the sale of personal data (we do neither); and the right to appeal a decision we make about their data request. Contact us using the information below to exercise any of these rights.
How to exercise your rights
Email privacy@laymen.comwith the subject line “Privacy Rights Request”. Include your full name and the email address you used to sign up so we can verify your identity. We will respond within 45 days. If we need more time (up to 90 days total), we will let you know.
Sensitive personal information
We do not currently collect sensitive personal information. When we launch the product and begin collecting genetic data, that data will be classified as sensitive personal information under applicable state laws (including the CPRA and California Genetic Information Privacy Act). We will not use your genetic information for any purpose beyond the core service you sign up for unless you explicitly opt in to additional uses (such as research participation). See our Genetic Information & GINA Notice for a full description of our commitments around genetic data.
Data retention
We keep your waitlist data for as long as you remain on the waitlist. If you unsubscribe or ask to be removed, we will delete your personal information from our active systems within 30 days. Anonymized aggregate data (e.g., total waitlist signups per day) may be retained indefinitely because it cannot be linked back to you. We may retain certain information longer where required by applicable law or to resolve disputes.
Security
We protect your information using industry-standard security measures: all data in transit is encrypted over HTTPS (TLS 1.2 or higher); data at rest is encrypted in Supabase using AES-256; access to our database is restricted to authorized personnel and service accounts; we review our security practices regularly. No system is completely secure. If we ever become aware of a breach that affects your personal information, we will notify you as required by applicable state breach notification laws.
Children
Our site and waitlist are not directed to children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe a minor has submitted information to us, please contact us at privacy@laymen.com and we will delete it promptly.
International users
We operate in the United States. If you access the site from outside the US, your information will be transmitted to and processed in the United States. US privacy law may offer different protections than the laws of your country. We do not currently accept signups from EU or UK residents.
Do Not Track
Some browsers send a “Do Not Track” (DNT) signal to websites. There is no industry-wide standard for how sites should respond to DNT signals, and we do not currently alter our data collection practices in response to them. We do, however, use privacy-respecting analytics that do not track you across sites regardless of your DNT setting.
Changes to this policy
We may update this policy from time to time. For material changes — such as new categories of data collection or new sharing arrangements — we will notify you by email at least 30 days before the change takes effect. The “Last updated” date at the top of this page reflects the most recent revision.
Contact us
Questions about this policy or your data? Email us at privacy@laymen.com. We read every message.
Laymen Inc.
A Delaware corporation
Mailing address: 1813 S Tyler Road, St. Charles, IL 60174
privacy@laymen.com