GeneLeaf

Privacy Policy

Effective October 3, 2026

This policy covers the GeneLeaf website at www.geneleaf.com and the GeneLeaf pedigree editor at app.geneleaf.com (together, “GeneLeaf”). The short version: GeneLeaf does not keep your pedigrees or narratives unless you choose to send them as feedback. The personal information it receives is what Google or Microsoft tells it when you sign in. When you send feedback you are shown exactly what is sent and asked to confirm, and it is stored with nothing that identifies you (see “Feedback” below).

Not for sensitive or patient data

GeneLeaf is a test and demonstration application. Do not enter protected health information, real patient information, or other sensitive personal data. GeneLeaf is not offered as a HIPAA-compliant service, and we do not sign business associate agreements. Use fictional or fully de-identified examples.

What we receive and why

Sign-in. When you sign in with Google or Microsoft (including Outlook and other Microsoft accounts), the provider sends us your name, your email address, and an account identifier. We use them only to let you in and to show your name in the app. They are kept in a signed cookie in your browser; we do not store them in a database or keep a copy.

Guest access. If you continue as a guest, GeneLeaf creates a random guest code and stores it together with the time it expires (24 hours later) so that you can come back with it until then. Nothing else about you is stored: no name and no email address. Expired codes are deleted. The network address you sign up from is used only to limit how many guests can sign up at once and is not kept by us. Guest accounts have lower usage limits than registered accounts.

Your pedigrees. Pedigrees are created and held in your browser. We do not receive, store or access them, except feedback you choose to send (see “Feedback”). When you save a pedigree it is downloaded to your device as a file, and you keep it. Uploading a file opens it in your browser only.

Narrative analysis. When you click Analyze Narrative, the text in the narrative box is sent to our server and processed by an AI model run on our behalf by Cloudflare (Workers AI) to draw the pedigree. We do not keep that text: it is used to produce the answer and discarded, unless you choose to send it as feedback. Generate Narrative does not send anything you wrote: it shows you one of our own fictional sample narratives.

Website demo. Narratives submitted through the live demo on www.geneleaf.com are sent to our server to generate a pedigree. Manually entered narratives request processing without caching. The fictional sample story button uses the demo cache, so its request may be served from or added to that cache. Do not enter identifiable patient information. If you rate a demo pedigree with the thumbs, we store your rating, the kinds of problem you tick, any note you write, the narrative text, the pedigree drawn from it and what the AI extracted from the narrative, with nothing that identifies you (the same terms as “Feedback” below); the page says so next to the buttons. If you ask for a redraw, your note and the earlier extraction are sent to the AI model so it can draw the pedigree again.

Learn mode. In Learn mode you are shown one of our fictional sample narratives and draw its pedigree. When you press Submit, the pedigree you drew is sent to our server so it can be checked against the answer for that case; it is not stored. Your score is kept only in your browser. If you press Report issue, a box shows exactly what would be stored and asks you to confirm: if you do, we store your note, the case number, what the check said about your drawing, and your drawing as JSON, with nothing that identifies you, and the case is set aside until someone reviews it.

Feedback. After the editor draws a pedigree you can rate it with a thumbs up or down. Before anything is sent, a box shows exactly what would be stored and asks you to confirm; if you cancel, nothing is recorded or sent. If you confirm, we store your rating, any comment you add, the narrative text, the pedigree JSON the editor drew from it and, if you changed the drawing, your corrected pedigree JSON, together with the AI model and prompt used and, when the narrative was one of our sample narratives, the sample’s identifier. We use this to measure and improve the narrative analysis, including to train or fine-tune AI models. Please do not send real patient or personal information: the box asks you to confirm there is none. Feedback is not linked to you: we do not store your name, email address or account identifier with it, so we cannot find a particular submission afterwards by who sent it. If you sent something by mistake, email us the text and we will look for it. If you use Report a problem to say what is wrong with a pedigree, we also store the kinds of problem you ticked and what the AI extracted from the narrative before the pedigree was built; if you corrected the drawing first, your corrected pedigree is the most useful part and can be turned into an example for training AI models. The same box shows exactly what would be stored and asks you to confirm. Your browser also keeps a full copy of your own ratings on your device, which you can clear by clearing site data.

Website analytics. The marketing site (www.geneleaf.com) uses Google Analytics to count visits. It uses cookies and collects information such as the pages viewed, your approximate location, and your device and browser type. See how Google uses information from sites that use its services. You can opt out with the Google Analytics opt-out add-on. The marketing site shows no ads.

Cloudflare Web Analytics. Both sites (www.geneleaf.com and app.geneleaf.com) also use Cloudflare Web Analytics, a privacy-focused service that counts visits. It does not use cookies or similar browser storage and does not follow you across other websites. It records things like the page you visited, the page that referred you, your approximate location (country), your device and browser type, and how quickly the page loaded. We use it only to see how much the sites are used. Some browsers and extensions block it, and you can too. See Cloudflare’s privacy policy.

Server logs. Our hosting provider, Cloudflare, processes requests (including your IP address) in order to deliver and secure the site. See Cloudflare’s privacy policy.

Cookies

Cloudflare Web Analytics sets no cookies.

Google and Microsoft user data

We ask Google and Microsoft only for your basic profile (the openid, email and profile scopes). See also Microsoft’s privacy statement. GeneLeaf’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this information, share it with third parties, use it for advertising, or use it for anything beyond signing you in.

Sharing

We do not sell your information. It is processed only by the services that run GeneLeaf: Google and Microsoft (sign-in), Google (analytics on www.geneleaf.com) and Cloudflare (hosting, visit counts, and the AI model that analyzes narratives).

Your choices

Signing out removes the session cookie. You can revoke GeneLeaf’s access at any time: for Google at myaccount.google.com/permissions, for Microsoft at account.microsoft.com/privacy/app-access. Because we keep no account records, there is nothing further to delete. Feedback we keep is not linked to you, so we cannot look one up by who sent it (see “Feedback”); you can clear the copy in your browser by clearing site data.

Children

GeneLeaf is not directed at children under 13, and we do not knowingly collect information from them.

Terms

Use of GeneLeaf is also subject to our Terms of Service.

Changes

If this policy changes, we will update the date at the top of this page.

Contact

Questions: contact@geneleaf.com.