Privacy Policy for XYGene Web Extension

Last Updated: 15 April 2026

1. Overview

The XYGene Web Extension (“Extension”) assists authorized users in transferring limited patient demographic information from supported web applications into the locally installed XYGene desktop application, as part of legitimate clinical and laboratory workflows.

This Privacy Policy explains what data the Extension accesses, how it is collected, where it is sent, and how it is protected, in accordance with Firefox Addons data disclosure requirements.

1. Websites on Which the Extension Operates

The Extension:

Is restricted to a predefined list of supported websites configured by XYGene
Does not run on arbitrary or unrelated websites
Does not monitor or collect general browsing activity
Access is limited strictly to pages where the Extension is explicitly enabled and required for its function.

1. Data Collected and Accessed

When active on supported sites, the Extension may access and collect limited patient demographic information visible on the page, including:

Patient name
Sex
Date of birth
Postal address
Email address
Phone number
Important clarifications:

No medical, clinical, diagnostic, genomic, billing, or treatment data is accessed
No hidden fields, protected records, or data outside the visible page content are collected
Data access occurs exclusively when a user navigates to patient information pages on predefined and restricted list of supported websites.
4. Method of Data Collection

The Extension collects the above data by reading and extracting (scraping) relevant onscreen information from supported web pages in the user’s browser.

This process:

Occurs locally in the browser
Is limited to clearly defined page elements
Does not involve background monitoring or automated crawling
5. Data Transmission Flow

Data collected by the Extension is handled as follows:

Extracted demographic data is sent only to the XYGene desktop application installed on the same user’s device
The Extension does not send data directly to any remote servers
The XYGene desktop application is responsible for:
Secure transmission to XYGene backend services
Encryption in transit
Backend access control enforcement
The Extension does not communicate with thirdparty services.

1. Data Not Collected

The XYGene Web Extension does not:

Collect medical or health records
Collect test results, diagnoses, or genomic information
Record keystrokes or mouse activity
Access browser history beyond the active supported page
Track user behavior for analytics, advertising, or profiling
Store patient data persistently within the browser
7. Data Storage

The Extension does not permanently store patient data
Any data held in memory exists only for the duration necessary to complete the user requested action
Removing or disabling the Extension immediately stops all access and data transfer
8. Security Practices

To protect user and patient data:

The Extension follows the principle of least privilege
Access is scoped to specific sites and page contexts
No credentials or sensitive data are logged
All downstream communications handled by the XYGene desktop application use encrypted channels
9. User Control and Consent

Users retain full control:

The Extension can be enabled or disabled at any time
The Extension only operates on supported sites
Data extraction occurs only through explicit user interaction
10. Compliance Statement

While the Extension itself does not store or process medical records, it is designed to support workflows that may be subject to healthcare data protection requirements. Compliance obligations (including HIPAA, where applicable) are enforced at the XYGene platform and infrastructure level.

1. Changes to This Policy

This Privacy Policy may be updated to reflect changes in functionality or regulatory guidance. Any updates will be indicated by the “Last Updated” date above.

1. Contact Information

For questions regarding privacy or data handling:

Organization: XYGene
Email: info@xygene.net
Website: https://xygene.net