What this site collects, and why.

This website is operated by Prognostyx ("Prognostyx", "we", "us"). This policy explains what information we collect through prognostyx.ai and its waitlist, how we use it, and the choices you have.

It covers this website only. Nexyx, the product we are building, will have its own privacy notice when it becomes available, and that notice will govern any health information handled in the product.

We do not ask for medical information on this website and we do not want to receive it here. Please do not include details about your health, diagnoses, treatment or anyone else's in the waitlist form or in an email to us.

This website is not a service of a healthcare provider, and information you submit here is not a medical record. If you send us health information anyway, we will delete it where we reasonably can.

• Waitlist, patients and families: your name, email address, whether you are a patient, caregiver or family member, and optionally your state.
• Waitlist, clinics and care teams: your name, work email address, organization, role, type of organization, and an optional note.
• The date and time you joined and confirmed you want to hear from us, and where on the site you signed up.
• Email: if you write to us, we receive your email address and whatever you choose to send.

• Usage: the pages you view, the links and buttons you use, the site that referred you, and general device and browser details. This is collected with PostHog. What you type into a form is not recorded.
• A random identifier stored in your browser (a cookie and local storage) so that visits from the same browser can be counted as one visitor. It does not contain your name or email, and we do not link it to your waitlist details.
• Error reports: if something breaks, technical details about the error are sent to Sentry. A short recording of the page may be included; in it, all text, everything typed, and all images are masked.
• Server logs: like any website, our hosting provider records your IP address, the time, and the page requested, for security and reliability.

If your browser sends a Global Privacy Control or Do Not Track signal, we do not load analytics for your visit.

• To contact you about Nexyx: when it is ready for you or your organization, and occasional updates you would expect from joining a waitlist.
• To reply when you write to us, including about partnerships and jobs.
• To understand how the site is used and improve it.
• To keep the site secure, find and fix faults, and prevent abuse.
• To meet legal obligations.

We do not use your information for advertising, we do not build advertising profiles, and we do not make automated decisions about you.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only as follows.

• Service providers who process it for us, under contract, to run this site: Cloudflare (hosting), Neon (the database that holds the waitlist), PostHog (analytics), Sentry (error reports), and Microsoft (email). Waitlist names and email addresses are not sent to PostHog or Sentry.
• When the law requires it, or to protect the rights, safety or property of people or of the company.
• If the company is involved in a merger, acquisition or sale of assets, in which case this policy continues to apply to your information unless you are told otherwise.

We use a small number of first-party cookies and local storage entries for analytics, described above. We do not use advertising cookies or third-party advertising trackers.

You can block or delete cookies in your browser settings; the site works without them. Sending a Global Privacy Control or Do Not Track signal turns analytics off for your visit.

• Waitlist details: until Nexyx has launched to the people on the list, or until you ask us to remove you, whichever comes first.
• Emails you send us: as long as needed to deal with your request and for our records.
• Analytics and error data: for the retention periods set in those services, generally no longer than about a year.

Information is encrypted in transit and at rest by the providers that host it, access is limited to the people at the company who need it, and the waitlist is kept separate from analytics. No system is perfectly secure; if we learn of a breach affecting your information we will tell you as the law requires.

You can ask us at any time to show you what we hold about you, correct it, delete it, or stop emailing you. Email hello@prognostyx.ai from the address you signed up with and we will act on it, normally within 30 days. We will not treat you differently for making a request.

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or similar laws in other US states, including the right to know, delete and correct personal information, and to appeal a decision about your request. We do not sell or share personal information as those laws define the terms.

If you are in the European Economic Area or the United Kingdom, we rely on your consent for waitlist emails and on our legitimate interests for running and securing the site, and you may also object to or restrict processing, ask for a copy of your data, or complain to your data protection authority.

This website is for adults. The waitlist is intended for people 18 and over, and we do not knowingly collect personal information from children under 13. A parent or guardian can join the waitlist on behalf of a child. If you believe a child has given us information, contact us and we will delete it.

We and our service providers process information in the United States. If you use the site from elsewhere, your information will be transferred to and processed in the United States.

If we change this policy we will post the new version here and update the effective date. If a change is significant, we will also email people on the waitlist.

Questions or requests about privacy: hello@prognostyx.ai.