Privacy
You decide who ever touches your genome.
Most of consumer health-tech depends on keeping your raw data. Indaga gives you the choice instead — and tells you, plainly, exactly what each choice shares. We won't claim we never touch your data; that isn't true of a hosted app, and pretending otherwise is the bio-babble we're against.
What we learned from 23andMe
When a health-data company fails, your data is the asset.
In 2025, 23andMe filed for bankruptcy. The genetic data of roughly 15 million customers — already exposed once in a 2023 breach — became part of a ~$305M sale, and a coalition of state attorneys general went to court to block the transfer of that data without explicit consent. Privacy regulators advised customers to delete their accounts.
Your raw genetic data is the most permanent, most personal data you will ever generate. It identifies your relatives. It cannot be changed after a leak. It should never sit on a company’s balance sheet — and it should never become a transferable asset. We are building Indaga so you decide who ever holds it, and so that scenario can’t happen to you.
The model
You choose how private.
Three surfaces, three custody choices — stated honestly, never as a false absolute.
Agent — nothing leaves your device
The open-source engine runs entirely on your own machine. No account, no upload, no server — your raw genome is never sent anywhere at all.
App & Connect — encrypted, and yours to delete
Choose a hosted surface and we hold an encrypted record, isolated to you, with a key unique to you. Never sold, never used to train AI. Delete destroys the key — so the data becomes unrecoverable, not just hidden.
Connect — the trade-off, stated
Using your own AI (Claude, ChatGPT, Gemini) means its provider sees the answers Indaga returns — never your raw genome. We say so plainly. Want zero third-party sharing? Use the Agent.
- Agent
- Only on your device
- Nothing. No account.
- Nothing. No account.
- App
- Encrypted, on our infrastructure
- Only inside Indaga. Never sold or used to train AI. Delete or export anytime.
- Only inside Indaga. Never sold or used to train AI. Delete or export anytime.
- Connect
- Encrypted digest, on our infrastructure
- We return answers to your AI — so your AI provider sees those answers. Zero sharing? Use the Agent.
- We return answers to your AI — so your AI provider sees those answers. Zero sharing? Use the Agent.
In practice
What that means for your rights.
- The Agent phones home to no one.No analytics, no tracking, no background reporting — the local engine isn’t watching you use it.
- Hosted means encrypted, with a key that’s yours. On the app and Connect, your record is encrypted at rest with a key unique to you. Deleting your account destroys that key, which makes the data cryptographically unrecoverable.
- Never an asset. Your genome is not sold, not used to train AI, and — the lesson of 23andMe — is not a transferable asset in an acquisition or bankruptcy.
- Export and deletion, on your terms. Export everything in an open format; delete everything; any time.
- GDPR by design. Built by an EU-based team; genetic data is treated as special-category. Data-residency and the exact security architecture are being finalised and counsel-reviewed before any hosted surface launches.
Every concrete claim on this page is reviewed before launch so that it is exactly true. If you ever find a gap between this promise and the product, that is a bug.
Indaga is in active development.
We’re building it in the open — privacy-first, cited, and honest about what it can and can’t see.