Privacy policy

1. What we collect

Account: your email address, an encrypted password, language and time zone.

Family profiles you create: name, relation, sex, date of birth, color, an optional photo, and optional height, weight and waist.

Lab reports: the photos or PDF files you upload, the values we read from them, the readings we produce and your answers to follow-up questions.

Sleep from Apple Health, only if you connect it: nightly sleep time, bedtime and sleep stages. We only read; we never write to Apple Health.

Device and usage: device model, system and app version, a push notification token, and in-app events (for example “report uploaded”) that help us fix problems and improve the app.

We do not collect your location, contacts or advertising identifier, and there are no third-party advertising or tracking tools in the app.

2. How we use it

To read your reports, calculate clinical indices, write your reading, compare it with earlier reports and prepare recommendations.

To keep your account and family profiles in sync across devices, send the notifications you allow, answer support requests and keep the service secure.

To improve Labless using aggregated statistics. We never sell your data, never share it with advertisers and never use it for advertising.

3. AI processing

Readings are produced with artificial intelligence. Before your first reading the app asks for your explicit consent. With it, your report files and the age and sex of the person they belong to are sent to an external AI service provider that reads the values and writes the explanation for us.

The provider acts on our instructions under a data processing agreement. It may use your data only to produce your reading, does not use it to train AI models and deletes it within 30 days.

You can withdraw this consent at any time in Profile → AI analysis. New readings then stop; readings you already have stay in your account until you delete them.

4. Apple Health

Sleep data from Apple Health is used only to explain your blood results (for example, how short sleep affects insulin and inflammation). It is never used for advertising, never sold, never shared for marketing and never disclosed to third parties except the service providers below that need it to run the app.

You can disconnect sleep in the app at any time, which deletes the sleep data stored by Labless, and revoke access in the Health app.

5. Who processes your data

We use a small number of service providers, each bound by a contract to use your data only to provide their service to us: a cloud database and file storage provider, an application hosting provider, an AI processing provider and a push notification delivery service.

Authorized Labless staff can access account data only when needed to provide support, investigate abuse or keep the service secure.

We may disclose data when required by law. If Labless is ever sold or merged, your data would move to the new owner under this policy, and we would tell you first.

Sharing with a care, testing or research partner happens only if you ask for it, separately for each partner.

6. Where data is stored

Our providers store and process data mainly in the United States. When data moves across borders we rely on contractual safeguards such as the EU Standard Contractual Clauses.

7. How long we keep it

We keep your data while your account exists. When you delete a report, a family profile or your account, the data is deleted from our systems immediately and from backups within 30 days.

8. Your rights and choices

Delete your account and everything in it at any time: Profile → Delete account.

Withdraw AI consent, turn notifications off or disconnect sleep in Profile.

You can also ask us for a copy of your data, a correction or a deletion by writing to info@labless.dilami.pro. We answer within 30 days.

If you are in the EU, UK or a similar jurisdiction, you have the rights to access, rectification, erasure, restriction, portability and objection, and you can complain to your data protection authority. We process health data on the basis of your explicit consent, and other data to provide the service you asked for or for our legitimate interest in keeping it secure.

If you live in California, Washington, Nevada or another US state with health or consumer privacy laws: we do not sell or share personal data for targeted advertising, we use consumer health data only to provide the service you request, and you can access or delete it as described above.

9. Children

You must be 18 or older to create an account. Parents and guardians may add profiles for their children and upload their reports; the parent controls that data and can delete it at any time. We do not knowingly collect data directly from children.

10. Security

Data is encrypted in transit and at rest. Each account can reach only its own data, enforced in the database, and access by staff is limited and logged. No system is perfectly secure, so we will notify you and the authorities as the law requires if a breach affects your data.

11. Changes and contact

If we change this policy in a way that matters, we will tell you in the app before the change takes effect.

Questions or requests: info@labless.dilami.pro.