Skip to content / דלג לתוכן

    Privacy Policy

    Your privacy and data security are our highest priorities. Learn how we protect and handle your information.

    Last updated: 4 September 2026

    Not Analysed

    While it is only stored, nothing reads your report: no text extraction, no interpretation, and never any model training.

    AES-256-GCM at Rest

    Bank-level security for all your medical data

    Secure Storage

    Stored encrypted on Cloudflare infrastructure, in a private store with no public URL

    Information We Collect

    • Personal information you provide (name, email, account details)
    • Medical data from uploaded blood test reports
    • Usage data and analytics to improve our service
    • Device and browser information for security purposes

    How We Protect Your Data

    • Your report is encrypted with AES-256-GCM before it is stored, and can only be downloaded by you while signed in
    • There is no public or shareable link to any uploaded file
    • Storage keys are random, so no file can be found by guessing an id, a name or an email
    • We hold the encryption key, so this is encryption at rest — not end-to-end encryption

    How We Use Your Information

    • Store the report and show it back to you in your dashboard. Storage is free, and a stored report is not read: no text extraction, no OCR, no interpretation, nothing
    • Produce an explanation — and only when you have a subscription and click to ask for one, on the single report you asked about. To write it, that report is sent to Google's Gemini model on Vertex AI. This is the only circumstance in which anything reads your report
    • Your report is never used to train, fine-tune or evaluate any model, by us or by Google
    • We do not keep or log the contents of your report: the explanation is returned to you, and the report stays encrypted where it was
    • Send you two transactional emails: your sign-in code, and confirmation that your report is stored

    Your Rights and Choices

    • Download the original file you uploaded, at any time
    • Delete any report — the encrypted file is erased from storage immediately
    • Delete your whole account, which erases every report you have stored along with it
    • A report uploaded without an account is deleted automatically after 7 days if nobody claims it

    Data Sharing and Third Parties

    We do NOT sell or share your personal medical data with third parties.

    We may share anonymized, aggregated data for research purposes to improve healthcare outcomes, but this data cannot be used to identify individuals.

    We only share data when required by law or with your explicit consent.

    Questions About Privacy?

    Our privacy team is here to answer any questions about how we handle your data.

    Email: [email protected]