Your biology stays yours
S.O.U.V.E.R.A.I.N. Labs ("we," "us," or "Labs") operates the S.O.U.V.E.R.A.I.N. biological intelligence platform. This Privacy Policy explains how we handle your data — with the foundational principle that your most sensitive biological information never leaves your device.
Data we collect
Account data
When you create an account, we collect your email address, display name, and encrypted authentication credentials. We do not collect government IDs, payment card numbers directly (handled by our PCI-compliant processor), or unnecessary personal identifiers.
Usage and telemetry
We collect anonymised, aggregated telemetry about feature usage, session duration, and error events to improve the platform. This data cannot be linked back to your identity or biological data. You may opt out of telemetry at any time in Settings → Privacy.
Support communications
If you contact our team, we retain those communications to resolve your issue and improve our service. You may request deletion of support records at any time.
How we handle your biological data
Biological data — including HRV readings, blood glucose levels, genomic sequences, proteomic profiles, epigenetic methylation data, and wearable telemetry — is processed entirely on your local device by the S.O.U.V.E.R.A.I.N. kernel.
What we never see
- Raw genomic or DNA sequences
- Blood biomarker values or lab results
- Wearable sensor streams (HRV, SpO2, skin temperature)
- Epigenetic methylation patterns
- Intervention outcomes or protocol responses
- Digital Twin simulation results
What the cloud receives
Our servers receive only encrypted model weight updates (federated learning), anonymised aggregate statistics (e.g. "89% of intervention suggestions accepted" — never linked to a user), and your account metadata required to authenticate your session.
Local-first, zero-knowledge architecture
The S.O.U.V.E.R.A.I.N. kernel runs entirely on your hardware. Your biometric index, epigenetic embeddings, and causal inference models are stored in an encrypted local database using AES-256-GCM with keys derived from your device's secure enclave.
Our cloud infrastructure operates in a verifiable zero-knowledge mode. Technical attestation reports are available to enterprise customers and security researchers upon request.
Data retention
Account data is retained for the duration of your subscription plus 90 days following cancellation, after which it is permanently deleted. Anonymised aggregate telemetry may be retained indefinitely as it cannot be linked to individuals.
Biological data exists only on your device. Deleting the S.O.U.V.E.R.A.I.N. application removes all local biological data permanently. We have no copy to delete.
Your rights
Depending on your jurisdiction, you may have the right to access, rectify, erase, or port your personal data. To exercise these rights, contact privacy@souverain.bio. We respond within 30 days.
For GDPR purposes, S.O.U.V.E.R.A.I.N. Labs Ltd is the data controller for account data. Our EU representative is reachable through the contact page.
Security practices
We maintain a responsible disclosure programme. Security researchers who discover vulnerabilities may report them to security@souverain.bio. We commit to acknowledging reports within 24 hours and resolving critical findings within 72 hours.
Our infrastructure undergoes annual penetration testing by independent security firms. Results are available to enterprise customers under NDA.
Privacy contact
Questions about this policy or your data: privacy@souverain.bio
For all other enquiries: Contact page →