Privacy Policy
Last updated: February 2026
Our Privacy Commitment
Your health data is among the most sensitive information you have. We treat it with the utmost care and respect. We never sell your data, never use it for advertising, and give you complete control over your information.
This Privacy Policy describes how LabSense Health ("we," "us," or "our") collects, uses, and shares information when you use our website, mobile applications, and services (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Information You Provide
- Account Information: Email address, name, and password when you create an account
- Profile Information: Date of birth, gender, and other health profile details you choose to provide
- Health Documents: Lab reports, prescriptions, and medical documents you upload for analysis
- Payment Information: Billing address and payment method details (processed securely by Razorpay)
- Communications: Messages, feedback, and support inquiries you send us
Information Collected Automatically
- Usage Data: Pages visited, features used, and actions taken within the Service
- Device Information: Device type, operating system, browser type, and unique device identifiers
- Log Data: IP address, access times, and referring URLs
- Cookies: Small data files stored on your device for authentication and preferences
2. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Process and analyze your uploaded health documents
- Generate personalized health insights and explanations
- Process payments and manage your subscription
- Send important service updates and notifications
- Respond to your support requests and inquiries
- Detect, prevent, and address technical issues and security threats
- Comply with legal obligations
What We Don't Do: We do NOT use your health data to train AI models, sell to third parties, share with advertisers, or for any purpose other than providing you with the Service.
3. Data Storage and Security
We implement industry-standard security measures to protect your data:
- Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
- Access Controls: Strict role-based access with multi-factor authentication for staff
- Infrastructure: Data stored in SOC 2 compliant cloud infrastructure
- Monitoring: 24/7 security monitoring and intrusion detection
- Backups: Regular encrypted backups with secure offsite storage
Your data is stored in secure data centers located in the United States. We use Supabase for database storage with Row Level Security (RLS) ensuring only you can access your data.
4. Data Sharing
We only share your information in these limited circumstances:
- Service Providers: Trusted vendors who help us operate the Service (cloud hosting, payment processing, email delivery)
- AI Processing: Our AI processes your documents to extract data (documents are processed securely and not stored)
- Legal Requirements: When required by law, legal process, or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified)
- With Your Consent: When you explicitly authorize us to share information
We never sell your personal information or health data to third parties.
5. Your Rights and Choices
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and all associated data
- Export: Download your data in a portable format
- Opt-out: Unsubscribe from marketing emails at any time
- Restrict Processing: Limit how we use your data in certain circumstances
To exercise these rights, contact us at privacy@labsense.health. We will respond within 30 days.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. When you delete your account, we permanently delete your personal information and health data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our agreements).
7. Cookies and Tracking
We use cookies for:
- Essential Cookies: Required for authentication and security
- Preference Cookies: Remember your settings and preferences
- Analytics Cookies: Understand how you use the Service to improve it
We do NOT use advertising or tracking cookies. You can control cookies through your browser settings.
8. Children's Privacy
The Service is not intended for children under 18. We do not knowingly collect personal information from children. If you are a parent managing health data for your minor child, you must do so under your own account using our Family plan features.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses approved by relevant authorities.
10. California Privacy Rights (CCPA)
California residents have additional rights under the CCPA, including the right to know what personal information we collect, the right to delete, and the right to opt-out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact privacy@labsense.health.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will also send an email notification.
12. Contact Us
If you have questions about this Privacy Policy or our privacy practices:
Privacy Inquiries: privacy@labsense.health
General Support: support@labsense.health