Privacy
Your data, plainly.
Last updated: June 4, 2026
What we collect
If you create an account, we store your email address and an authentication record. If you save a report, we store the decoded results (marker names, values, units, ranges, status, and the plain-English explanations).
We do not keep the original PDF or image you upload. It is sent once to our AI provider for analysis, then discarded.
Third-party AI processing
To decode your report we send the uploaded file to the Lovable AI Gateway, which routes it to Google's Gemini model. Your file is processed transiently and not used to train models. By uploading, you consent to this processing.
Where data lives
Account data and saved reports live in our managed database, hosted in the United States. Access is scoped per user — only you can read your own reports.
What we don't do
- We don't sell your data.
- We don't share it with insurers, employers, or advertisers.
- We don't use your reports to train AI.
- We don't claim HIPAA coverage — please don't upload data you're contractually required to keep under a BAA.
Your rights
You can delete any saved report from your library at any time. You can also permanently delete your account and all associated data from the library page. EU/UK users have additional rights under GDPR (access, rectification, portability, objection) — email us and we'll honor them within 30 days.
Contact
Questions? hello@blooddecoder.com