Privacy Policy
Last updated: September 11, 2026
This policy describes what TraumaScore collects, why we collect it, who else processes it, and how to have it removed.
Who we are
TraumaScore (“we”, “us”) builds a saliva-based recovery biomarker reader and companion app, and is a pre-launch project. This policy covers the TraumaScore website and web app. To reach the people responsible for the data described here, use the contact address at the end of this policy.
What we collect
If you join the email list
We store the email address you submit, and:
- a name, if you provide one;
- a short label recording where the signup came from (for example, which part of the page you used);
- the date and time you joined.
You do not need an account to join the list, and we do not ask for anything else at signup.
If you create an account
Authentication is handled by Clerk, which holds your login credentials — we never receive or store your password. In our own database we keep your Clerk identifier, email address, name, and plan tier.
If you use a reader or connected device
The app is built to store health and biosensor data associated with your account:
- Device records — device name, serial number, firmware version, connection status, and last sync time.
- Measurements from the handheld reader — the raw sensor trace from each test, the derived S100B estimate, and the resulting TraumaScore.
- Sensor readings — where a connected wearable provides them: heart rate, heart rate variability, electrodermal activity, skin temperature, and movement.
- Derived scores and insights — daily scores and any recommendations generated from the above.
Technical data
When you submit the email list form, your IP address is used as a temporary key to limit how many submissions can come from one source per minute. It is passed to our rate-limiting provider for that purpose and is not written to our database or linked to your email address. Our hosting provider keeps standard server logs.
Why we use it
- To send you the updates you asked for when you joined the email list.
- To operate your account and show you your own measurements and history.
- To keep the service working and protect it from bots and abuse.
- To improve the product — in aggregate, not by reading individual records for unrelated purposes.
We do not sell personal information, and we do not share your health data with advertisers, employers, insurers, or leagues.
Who processes it
We use a small number of service providers. They process data on our instructions and for no other purpose:
| Provider | What it handles |
|---|---|
| Clerk | Account authentication and identity |
| Supabase | The application database (PostgreSQL) |
| Netlify | Website hosting and delivery |
| Upstash | Rate limiting on public forms |
| Resend | Confirmation and list email |
We may also disclose information where the law requires it, or to protect the rights and safety of users.
How long we keep it
Email list entries are kept until you unsubscribe or ask us to remove them. Account and health data are kept for as long as your account is open, and deleted when you close it or ask us to delete it.
Your choices
- Leave the email list — use the unsubscribe link in any email we send, or write to us.
- Get a copy of your data, correct it, or have it deleted — email us and we will action it. Deletion covers our database and your Clerk account record.
Depending on where you live you may have additional rights under laws such as the GDPR or the CCPA. Contact us and we will honour them.
Children
TraumaScore is not directed to children under 13, and we do not knowingly collect their personal information. Because youth sport is a setting where this product may be used, we want to be explicit: a minor should only be tested with the consent and supervision of a parent, guardian, or the responsible adult at their organisation. If you believe a child has given us personal information, contact us and we will delete it.
Security
Data is transmitted over encrypted connections and stored with our providers named above. No system is perfectly secure, and we cannot guarantee absolute security — but if a breach affects your data, we will tell you.
Health information
TraumaScore is a wellness product, not a healthcare provider, and we are not generally a HIPAA covered entity. See our medical disclaimer for what the product does and does not do.
Changes
If we change this policy we will update the date at the top of this page, and for material changes we will notify people on the email list.
Contact
Privacy questions and data requests: patrickj@traumascore.com.