Privacy Policy

TechTwin Ltd (“TechTwin”, “we”, “us”) builds a personalised physiological model from the health, training, and genetic information you choose to provide. Because that includes sensitive data, we take privacy seriously. This policy explains what we collect, why, how we protect it, and the rights you have over it. It applies to our website and application (the “Service”).

1. Information we collect

We only collect what you give us or explicitly connect:

• Account & profile — name, email, and the profile details you enter (age, sex, height, weight, body composition, fitness level, race times).
• Health & biometric data — training logs, heart-rate variability, resting heart rate, sleep, VO₂max, weight, blood-biomarker results you upload, and (if you use it) menstrual-cycle data.
• Genetic data — if you upload a DNA file (e.g. 23andMe/AncestryDNA). See the highlighted note below on how this is handled.
• Connected sources — data you import from third parties such as Apple Health, Garmin, Oura, Fitbit, Strava, or nutrition apps.
• Usage & technical data — basic logs needed to operate, secure, and debug the Service.

How your DNA is handled

Your raw genetic file is parsed entirely in your browser and is never transmitted to or stored on our servers. Only the small set of derived, de-identified trait modifiers (for example, an aerobic-response score) is saved to your account. We cannot reconstruct your genome from what we store.

2. How we use your information

• To build and continuously calibrate your digital twin and generate forecasts, insights, and protocol recommendations.
• To power AI features you invoke (for example, estimating a meal's nutrition or writing a personalised report).
• To operate, secure, maintain, and improve the Service.
• To communicate with you about your account and respond to your requests.

3. Legal bases

Where the GDPR or similar laws apply, we rely on: your explicit consent for processing special-category data (health and genetic information); performance of our contractwith you to provide the Service; and our legitimate interestsin operating and securing it. You can withdraw consent at any time (see “Your rights”).

4. AI processing

Some features send the relevant inputs (for example, your metrics, a meal description, or a food photo) to a third-party AI provider that returns the result. These inputs are processed under contractual confidentiality, are used only to generate your output, and are not used to train the provider's models. Food photos submitted for nutrition estimation are used only to produce the estimate and are not retained by us.

5. How we share information

We do not sell your personal data. We share it only with service providers who help us run the Service — including cloud hosting, database/authentication, and AI-processing providers — and only to the extent needed to deliver it to you. These providers act on our instructions under data-protection agreements. We may also disclose information where required by law.

6. Data retention

We keep your data for as long as your account is active. If you delete your account or ask us to erase your data, we delete it from our live systems and instruct our providers to do the same, except where we must retain limited records to meet legal obligations.

7. Security

Data is encrypted in transit, access to your records is restricted to your authenticated account through row-level security, and we limit internal access. No system is perfectly secure, but we work to protect your information using industry-standard measures.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your data, to restrict or object to processing, and to withdraw consent. To exercise any of these, email us at team.techtwin@gmail.com and we will respond within the timeframe required by applicable law.

9. International transfers

Our providers may process data in countries other than yours. Where we transfer personal data internationally, we rely on appropriate safeguards such as standard contractual clauses.

10. Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this policy

We may update this policy as the Service evolves. We will revise the “Last updated” date and, for material changes, take reasonable steps to notify you.

12. Contact

Questions or requests about your privacy? Email team.techtwin@gmail.com.