Privacy Policy

DNA Bank mobile app (package: androidapp.dnabankgroup.com), operated by DNA Corporation.

Effective date: 2024-04-01
Last updated: 2026-09-03

Introduction

This Privacy Policy outlines our policies regarding the collection, use, disclosure, retention, and deletion of personal information when you use our application and website (https://dnabankgroup.com).

We do store and retain user data as described below. We do not claim that we store no user data.

Information We Collect

We collect the following types of information:

• Personal Information: Information that you provide us, including your name, email address, account credentials, order and payment information, and DNA / genetic test data and reports.
• Usage Data: Information on how the application is accessed and used, including your device information, IP address, and usage patterns.

Use of Information

We use the collected information for various purposes, including:

• To provide and maintain our application.
• To notify you about changes to our application.
• To allow you to participate in interactive features of our application.
• To provide customer support.
• To gather analysis or valuable information so that we can improve our application.
• To monitor the usage of our application.
• To detect, prevent, and address technical issues.

Data Retention

This section discloses our data retention practices. We retain personal information only for as long as needed to provide the DNA Bank service, to fulfill the purpose for which it was collected, or as required by applicable law. We do not retain user data indefinitely without a purpose.

Retention periods:

• Account, name, email, and profile data: Stored while your account is active. Deleted or anonymized within 30 days after you delete your account or we complete a valid deletion request, unless a longer period is required by law.
• DNA / genetic test data and reports: Stored while your account is active so we can provide test results. Deleted or anonymized within 30 days after account deletion or a valid deletion request, except where we must retain records for legal, medical-record, or regulatory reasons.
• Order, payment, and transaction records: Stored for up to 5 years as required by applicable commercial, tax, and e-commerce laws, then deleted or anonymized.
• Customer complaint and dispute records: Stored for up to 3 years, then deleted or anonymized.
• Device information, IP address, and usage logs: Stored for up to 12 months for security, fraud prevention, and troubleshooting, then deleted or anonymized.
• Session cookies and login sessions: Stored until you sign out or the session expires (typically within 30 days at most for website sessions; shorter for administrative sessions).

When a retention period ends, we delete or irreversibly anonymize the data. Backups containing deleted data are overwritten on the next backup cycle, generally within 90 days.

If you request deletion, we delete associated user data. We do not merely freeze the account. If we must retain specific records for security, fraud prevention, or regulatory compliance, we keep only that limited data for the period stated above and do not use it for other purposes.

Account and data deletion

You may request deletion of your account and personal data by emailing info@dnabankgroup.com from the email address on your account. You may also use account settings on https://dnabankgroup.com where available. We will process verified requests within 30 days.

Disclosure of Information

We may disclose personal information in the following situations:

• To comply with a legal obligation.
• To protect and defend our rights or property.
• To prevent or investigate possible wrongdoing in connection with the application.
• To protect the personal safety of users of the application or the public.
• To protect against legal liability.
• To payment processors and infrastructure providers only as needed to operate the service.

Data Security

The security of your data is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Your Data Protection Rights

Depending on your location, you may have the following data protection rights:

• The right to access, update, or delete the information we have on you.
• The right to rectification.
• The right to object.
• The right of restriction.
• The right to data portability.
• The right to withdraw consent.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date.

Contact Us

If you have any questions about this Privacy Policy, data retention, or deletion requests, please contact us:

• Email: info@dnabankgroup.com
• Address: 28 bay view dr, San Carlos, CA
• Korea: 467-3, Seokyo-dong, Mapo-gu, Seoul