Privacy Policy
How Labgist collects, uses and protects your information. Effective 30 October 2026.
Who we are
Labgist is operated by an independent developer, who is the controller of your personal data. Contact: support@labgist.com.
What we collect
| Data | Details | Why |
|---|---|---|
| Account | Name, email address and profile photo from Google or Apple sign-in (Apple may give a private relay address), and an account ID. | Sign you in and keep your data separate from everyone else’s. |
| Health data you upload | Lab report files (PDF or images), the results extracted from them (test names, values, units, reference ranges, dates, lab name) and report type. | Provide the app: read your reports and build your timeline. |
| Patient profiles | Name, relation, avatar colour, and optionally date of birth and gender, for each person you add. | Keep each person’s results separate and give age-aware summaries. |
| AI-generated content | Summaries, watch-list items and general suggestions generated from your results. | Show you what changed. |
| Usage counters | How many reports you analysed today and this month. | Apply free-plan limits and prevent abuse. |
| Subscription status | Plan, expiry, renewal status and a purchase reference from Google Play or the App Store. We never receive your card details. | Unlock Premium and keep it in sync. |
| Technical logs | Standard server logs such as IP address and error details kept by our hosting providers. | Security and fixing problems. |
| Launch-list email (website) | The email address you enter on the website, and the page you signed up on. | Email you once when the app launches. |
The app has no advertising SDKs and no third-party analytics. This website sets no cookies and uses no trackers.
Health data and your consent
Lab results are sensitive health information. We process them only to provide the features you ask for, and only after you upload them. By uploading a report you give us explicit consent to process it for that purpose. You can withdraw consent at any time by deleting the report, the person or your account.
Who processes your data
- Google Firebase / Google Cloud (authentication, database, file storage, server functions and website hosting) stores your account, reports and results.
- Google Gemini API reads your report files and generates summaries.
- OpenAI API is used as a fallback if the primary AI provider fails.
- Google and Apple provide sign-in and, through Google Play and the App Store, subscription payments.
These providers act on our instructions to deliver the service. Please read their policies for how they handle API data: Google, OpenAI, Apple. We do not use your data to train our own AI models.
Sharing and selling
We do not sell your personal data, we do not share it for advertising, and we do not give it to anyone else except the processors above and where the law requires it.
International transfers
Our providers operate globally, so your data may be processed in countries other than your own. We rely on the safeguards our providers publish for such transfers.
How long we keep data
We keep your data until you delete it. Deleting a person removes their reports, results, summaries and files. Deleting your account removes your profile, all people, reports, results, summaries, files, subscription records and your sign-in. Copies in provider backups and logs are removed on the schedules those providers operate. Launch-list emails are kept until we send the launch email or you ask us to remove them.
Security
Data is encrypted in transit and at rest by our cloud provider. Access rules allow only your signed-in account to read your data, and server code checks who is asking before it acts. No system is perfectly secure, so we cannot guarantee absolute security.
Your rights
Depending on where you live (including under the GDPR, UK GDPR, California law and India’s Digital Personal Data Protection Act), you may have the right to access, correct, delete or export your data, to object to or restrict processing, to withdraw consent, and to complain to your data protection authority. Most of this you can do directly in the app. For anything else email support@labgist.com. We respond within the time the law requires.
We use your data on these bases: to perform our contract with you (providing the app), your consent (health data you upload) and our legitimate interests (security and abuse prevention).
Consumer health data notice
For residents of places with consumer health data laws, such as Washington State: we collect health information only that you upload, to provide the service you asked for, we do not sell it, and we share it only with the processors listed above. You can ask us to access or delete it at any time.
Children
Labgist is for adults. It is not directed to anyone under 18, and we do not knowingly collect their data. If a parent or guardian adds a child’s records to their own account, they are responsible for doing so lawfully.
Changes
If we change this policy in a way that matters, we will update the date above and tell you in the app or by email before the change takes effect.
Contact
Labgist · support@labgist.com