Privacy policy

Last updated: 31 October 2026

This page explains which personal data we process through this website, why, and for how long. The Swiss Federal Act on Data Protection (FADP) applies. If you visit from the EU or EEA, the GDPR applies as well.

1. Who is responsible

The controller is:

P001 AI LLC 30 N Gould St, Ste R Sheridan, WY 82801 USA

Email: hello@dontdielabs.com

Send any privacy question to this address.

2. What we process today, and what we don’t

Right now we run a waitlist. This website does not collect health data, blood results or payment details.

How we will handle order and health data once ordering opens is described in section 13.

3. Visiting the website

When you open the website, our hosting provider Vercel processes technical data: IP address, date and time, the page you requested, browser and operating system. This is needed to deliver the page and block attacks. Vercel keeps these logs only for a short time.

For visitor statistics we use Vercel Web Analytics. It sets no cookies and works with aggregated data. We can see, for example, how many people visited a page and which website sent them, but not who you are. We also count individual actions, such as waitlist sign-ups or clicks on “Apply”, without linking them to a person.

With Vercel Speed Insights we measure how fast pages load for visitors. It sets no cookies either.

Fonts load from our own server. There is no connection to Google Fonts.

4. Cookies

We set one cookie, called “lang”. It remembers for one year whether you want the site in German or English. The site needs it to work, and it contains nothing about you. We use no advertising or tracking cookies.

5. Waitlist

When you join the waitlist, we store:

  • your email address
  • the site language and where on the site you signed up
  • campaign parameters from the link (utm_source and similar), if any
  • your browser identifier (user agent) and the time you signed up

We use this to email you when ordering opens and to learn which channels work. We don’t send a newsletter and we don’t pass your address on.

For each new sign-up we get a push message through ntfy.sh. It contains only your email domain (for example “gmail.com”) and where you signed up, not the full address.

You can leave the list at any time. Use the link in any of our emails or send us a short message.

6. Contacting us by email

When you write to us, we process your message and contact details to reply. We keep the correspondence as long as the request needs it or the law requires.

7. Job applications

If you apply for a role (by email to careers@dontdielabs.com), we use your documents only for the application. If we don’t work together, we delete them no later than three months after the process ends, unless you allow us to keep them longer.

8. Legal bases (GDPR)

For people in the EU or EEA we rely on:

  • Waitlist: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time
  • Running, securing and measuring the website: our legitimate interest in a safe, working site (Art. 6(1)(f) GDPR)
  • Email enquiries and applications: steps before a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering you

9. Service providers and transfers abroad

We work with these providers. They process data only on our behalf:

  • Vercel Inc., USA: hosting and visitor statistics, server functions in Frankfurt (EU)
  • Neon Inc., USA: waitlist database, servers in Frankfurt (EU)
  • ntfy.sh: push notification for new sign-ups, email domain only
  • Resend Inc., USA: sending email
  • Cloudflare Inc., USA: receiving and forwarding email sent to our addresses

Under Swiss law the USA does not always offer adequate data protection. We therefore transfer data only to providers certified under the Swiss-U.S. or EU-U.S. Data Privacy Framework, or on the basis of standard contractual clauses recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC) and the European Commission.

10. How long we keep data

We keep waitlist data until you leave the list, and at most two years after our last email to you. Then we delete it. Vercel deletes server logs automatically after a short time.

11. Your rights

At any time you can:

  • ask which data we hold about you
  • have wrong data corrected
  • ask us to delete your data
  • object to processing or withdraw your consent
  • get your data in a common format

Email hello@dontdielabs.com to do any of this. We reply within 30 days.

If you disagree with our answer, you can complain to the FDPIC (www.edoeb.admin.ch). In the EU, the data protection authority of your country is responsible.

12. No automated decisions

We make no decisions about you based solely on automated processing, and we don’t build advertising profiles.

13. Orders and health data (once ordering opens)

This section applies once you can order a test. When you order, we process:

  • name, delivery address, email address and phone number
  • date of birth and biological sex, because reference ranges depend on them
  • order and payment details (we never see your card details, they stay with Stripe)
  • your blood sample, the lab values and the report

Lab values are health data, which the law treats as sensitive. We process them only with your explicit consent, which you give at checkout (Art. 6(7) FADP, Art. 9(2)(a) GDPR). You can withdraw it at any time. Analyses already done are not affected.

We use this data only to fulfil your order, have your sample analysed, show you your report and, if you test again, show how your values change.

Your gym, your employer and your health insurer never see your results. We don’t sell health data and don’t use it for advertising.

On top of the providers in section 9, these are involved in orders:

  • an ISO 15189 accredited partner laboratory in Switzerland or Germany: analyses the sample and medically releases the report. You see the laboratory’s name at checkout before you order.
  • Stripe Payments Europe Ltd., Ireland: payment processing
  • Swiss Post: shipping the kit and returning the sample

Under Swiss law, Germany and the EU offer adequate data protection.

We keep reports and lab values while you have an account with us, so you can see your history. If you delete your account, we delete them within 30 days. The laboratory keeps test records as long as the law requires. We keep invoices and accounting records for ten years (Art. 958f Swiss Code of Obligations).

14. Changes

We update this policy when our service changes, and before ordering opens at the latest. The version on this page applies.