Security

Per-User Isolation, Enforced by the Database

The bionico iOS app stores your health records in a dedicated PostgreSQL database hosted on Supabase in Zurich, Switzerland (eu-central-2). Every table is protected by Row Level Security: access rules enforced by the database engine itself, not by application code. Every query runs as you, authenticated by your personal token, and can only ever return your own rows.

There is no shared data pool, no cross-user analytics, and no way for one account to read another's records — the database refuses it at the lowest level.

Authenticated on Every Call

Every request from the app to our servers carries your personal, short-lived access token, which is cryptographically verified server-side on every single function invocation before any data is touched. The pilot is additionally invite-gated: accounts outside the cohort cannot use data-processing features at all.

How Your Data Meets AI

bionico's intelligence runs on Anthropic's Claude models. Before any of your health data is sent for AI processing, the app discloses this and obtains your explicit consent. Under Anthropic's commercial terms, your inputs and outputs are not used to train models; under Anthropic's default API policy they are retained for up to 30 days for trust-and-safety monitoring, then deleted. Requests are assembled on our servers in Zurich and carry no name, e-mail, genome file or genotype — genetic markers reach the model as interpretations only.

• AI credentials live exclusively in server-side functions — the app on your phone never holds an API key
• Every AI call is authenticated, metered, and subject to per-user and platform-wide spending limits
• Abuse controls (invite gating, rate caps, input-size limits) bound what any account — or any attacker — can consume

Clinician Report Links

When you create a clinician report, bionico freezes a snapshot of exactly what you approved and issues a private link. The link's token is stored only as a cryptographic hash — we could not reconstruct your link if we wanted to.

• Links expire automatically (7 or 30 days, your choice)
• You can revoke a link at any moment, with immediate effect
• Every open is counted and visible to you
• Reports are view-only; genetics appear as a summary — genotypes and raw identifiers are never included

bionico.swiss is a static site hosted on Netlify (SOC 2 Type II certified), with automatic HTTPS, DDoS protection, and strict security headers on every page:

• X-Content-Type-Options: nosniff — prevents MIME-sniffing attacks
• X-Frame-Options: SAMEORIGIN — prevents clickjacking
• Referrer-Policy: strict-origin-when-cross-origin — protects against referrer leakage
• Permissions-Policy — blocks camera, microphone, and geolocation APIs

Zero third-party tracking: no analytics trackers, no advertising SDKs, no social pixels, no session recording, no fingerprinting. The only form on this site is the access request: its contact fields are stored by our website host (Netlify, Inc., USA) until we have processed them, and its health-related answers go straight to our EU database.

• Invite-only pilot: no growth funnels, no marketing lists, no email harvesting
• Your phone's raw location and calendar text never leave your device — only derived signals (like "travel day") are stored
• Account deletion is available in-app, is irreversible, and removes your records
• No browser fingerprinting, no persistent cross-session tracking

bionico GmbH is a Swiss company subject to the nFADP (Bundesgesetz über den Datenschutz — Federal Act on Data Protection), and processes health data under GDPR Article 9(2)(a) — explicit consent. This includes:

• Strict limitations on data collection and processing
• Explicit consent required for sensitive health data
• Right to access, correction, deletion, and portability of personal data
• Data protection impact assessments for high-risk processing
• Swiss Federal Data Protection Commissioner oversight

Full details, including our AI sub-processor and international transfer safeguards, are in the privacy policy.