A question goes out to many devices; one noised total comes back. Researchers never see your DNA unless you choose to donate it.
Researcher asks
How common is lactase persistence?
Sending to devices…
0 of 24 answered
answered, encryptedworking it outdidn’t allow level 2
What comes back
—
Waiting for 20 answers
1
The question travels
A researcher writes a question. It goes only to devices whose owners allowed that kind of question.
2
Each device answers privately
Your device works out its answer from your genome and encrypts it before it leaves.
3
One noised total returns
Answers are added up while still encrypted. Nothing is released until 20 people answer, and the total carries privacy noise.
03 Your choice
You decide what leaves your device.
Reading your genome never needs it to leave. Anything more is a choice you make, one step at a time. You can stop sharing whenever you like, but copies already out — an encrypted copy on public storage, a donated genome, answers already released — can’t be called back.
Nothing
Default
Your genome is read on this device and stays here.
What leaves
What we can readNothing
Anonymous markers
You pick a few markers to give to research, without your name.
What leaves
What we can readThose markers
Encrypted genome
Keep an encrypted copy on public storage (IPFS), locked with a key that never reaches us.
What leaves
What we can readNothing — we hold only ciphertext
Full donation
Give your genome to research. It’s kept sealed on our servers, researchers can open it, and copies they’ve fetched can’t be called back.
What leaves
What we can readYour genome — we and researchers can
For research questions, set a sensitivity level.
Every question is labelled 0 to 7 by how much it could reveal. Pick the highest you’re comfortable with.
Level 2
Ancestry & lineage
For example
Who it can tell about
You
Blood relativesparents, siblings, children
A partnerif you’re planning children
Questions at levels 0–2 can reach you. Levels 3–7 never will. A research question can never ask above the level you allowed.
04 Radically honest
Four things we’d rather say than have you find out.
Readings are information, not a diagnosis.
A reading says what a marker usually means; a clinician says what it means for you.
An aggregate is not automatically anonymous — so nothing is released below 20 people, and every answer carries privacy noise.
Small groups can give people away. Twenty is our floor.
A public genome is public forever.
Once others have a copy, it can’t be called back.
Your DNA is also your relatives’ DNA.
What you learn or share can say something about them too.
05 Before you start
Will my file work?
Drop it here and we’ll tell you in a second.
Where do I get my file?
23andMe
In your account settings, find Download raw data. You’ll get a .zip — drop it into Cipher as it is.
AncestryDNA
In your DNA settings, choose Download DNA data. Drop the .zip into Cipher as it is (or the AncestryDNA.txt inside).
Whole-genome or exome sequencing
Your provider’s download page usually offers a VCF (often .vcf.gz). Choose that, not BAM, CRAM or FASTQ.