This policy explains what the Labis mobile app ("Labis", "we", "us") collects, why, who it is shared with, and the choices you have. It applies to the Labis app for iOS (the "App").
Who we are: the publisher of the Labis app ("we"), who decides how your information is used (the data controller). Website: https://labis.health.
Contact for anything about privacy: support@labis.health.
The short version
- Labis is a private archive for your laboratory results and medical documents. We store what you import and enter so you can see it on any device you sign in to. Almost all of it is health information.
- Your records are private to you. Nobody else, including family members, can see a profile unless its owner grants them access, and the owner can change or remove that access at any time.
- We don't sell your data, we don't show ads, and we don't use advertising trackers.
- AI processing is optional. Your documents and questions are sent to our AI provider, OpenAI, only after you turn AI processing on, and OpenAI does not use them to train its models.
- Crash reports (Sentry) and product analytics (PostHog) never include your test results, document contents or names, and we don't record your screen.
- Labis is a subscription app. Payments go through Apple; RevenueCat tells us whether your subscription is active.
- You can export everything and delete your account and all your data in the App at any time.
1. Information we collect
Information you give us
- Account: Email address and password (stored only as a hash). With Sign in with Apple: your Apple user identifier and the email or private relay address Apple shares.
- Profiles: The health profiles you create or manage (your own and, where you are allowed to, those of family members), with the name and the details you choose to add, such as date of birth and sex where a laboratory's reference range depends on them.
- Documents: The laboratory reports, photos and other medical documents you import, kept as original files.
- Results: The tests, values, units, laboratory reference ranges, collection dates, laboratory names and source pages read from your documents or entered by you, your corrections, and the history of each record.
- Plans and visits: Reminders for future tests or visits, questions you prepare for a clinician, and the doctor reports you create.
- Family access: Invitations you send or accept, the people you share a profile with, and the permissions you give them.
- Assistant: Questions you send to the AI assistant. Your chat is kept on your iPhone, not in your Labis account, until you delete it in the App.
- Kept only on your iPhone: the avatar and relationship tag you pick for a person, your onboarding answers, your chat with the assistant and a few display preferences. They are not uploaded and are removed when you delete the App.
- Your choices: Whether you turned on AI processing, when, and which version of this policy you saw; when you acknowledged the notice that Labis is not a medical service; for a profile you manage for another adult, your confirmation of consent or authority.
- Support: Anything you send us by email.
Information collected automatically
- Product analytics (PostHog, US Cloud — stored in the United States): which screens you open and what you do in the App (for example "document imported" or "report created"), app version, device model, iOS version, approximate location derived from your IP address (country/region) and your account ID. Analytics events never include test names, values, document contents, notes or anyone's name. Session recording (screen replay) is turned off.
- Crash and performance reports (Sentry, stored in the United States): when the App crashes or runs into an error, details such as the error, app version, device model, iOS version and your account ID. They contain no health data: no results, documents, notes or messages.
- Subscription status (RevenueCat): plan, trial and renewal state, purchase dates, the App Store transaction identifiers and your account ID, so the App can tell whether your subscription is active. We never receive your card or payment details; Apple handles payment.
- Push token and device platform, so we can deliver the notifications you turned on.
- Technical logs on our servers, such as request time, IP address and errors, used for security and debugging.
Location (only when you use Find a lab)
When you search for laboratories or urgent care near you, the App uses your approximate location once (or the city or address you type) and sends only those coordinates or that text, through our search service (labs.labis.health, run on Cloudflare), to OpenStreetMap search services (Nominatim, Overpass and Photon, run by the OpenStreetMap Foundation, komoot and community servers) to find places nearby. If our service can't be reached, your iPhone asks those services directly. Nothing about your health or your account is sent with it. We don't store your location: search answers for an area are cached for up to a week, without anything that identifies you.
What we don't collect
We don't store your location, and we don't collect contacts or your advertising identifier. We don't use advertising SDKs, and analytics are never used for advertising or shared with data brokers.
Device permissions
- Camera and Photos: only when you scan or choose a document to import.
- Notifications: only after you turn on a reminder.
- Location: only when you use Find a lab (see above).
- Apple Health: only if you connect it (section 4a).
You can change these permissions in iOS Settings at any time.
2. How we use your information
- To create your account and sign you in.
- To store your original documents and show your results, each with the laboratory's own reference range and the page it came from.
- To read the values out of the documents you import, when AI processing is on, so you can review and confirm them.
- To show the history of each test, compare two dates, and keep your reminders and visit questions.
- To create doctor reports and full exports when you ask for them.
- To answer you in the AI assistant, using only the records you are allowed to see.
- To give the people you invite the access you chose, and nothing more.
- To send the notifications you turned on.
- To manage subscriptions: Labis needs an active subscription to use the App after setup. Without one, you can still sign out, restore a purchase and delete your account from the subscription screen, and you can ask us for a copy of your data (section 9).
- To understand how the App is used and improve it (product analytics).
- To keep the App secure, prevent abuse, enforce usage limits and fix problems.
- To respond to support requests and meet legal obligations.
We don't use your data for advertising, and we don't make decisions about you that have legal or similarly significant effects based solely on automated processing.
3. Health information
Your laboratory results and medical documents are health information. We process them only to provide the App to you and to the people you choose to share them with, and only with your consent. Labis is an organizer and an educational tool. It does not diagnose, treat or give medical advice, and it is not a substitute for a clinician. Labis is not a medical service and we are not medical professionals. Explanations are general information, not medical advice — always check information yourself and talk to a qualified clinician.
4. AI processing (optional)
AI processing is off until you turn it on, and you can turn it off at any time in Settings. While it is off, you can still import, store, view, enter and export your records; values are then entered or confirmed by you.
When it is on, we send to OpenAI, through our servers:
- the pages of a laboratory report you import, to read the tests, values, units and reference ranges for you to review;
- your question to the assistant and the saved records it needs to answer, limited to the profiles you are allowed to see;
- the latest confirmed results of a person (test names, values, units, laboratory ranges and dates, without names or documents) to write the short health summary shown on Home and on a report.
We don't send your email or your password. Data sent through OpenAI's API is not used to train its models; OpenAI may keep requests for a limited period (currently up to 30 days) to detect abuse, then deletes them. Assistant chats are kept on your iPhone, not on our servers.
The assistant explains terms and helps you find your records. It does not diagnose, rule out conditions or suggest treatment, and its answers may be inaccurate; see the Terms of Use.
OpenAI processes this information only on our behalf, to return a result, under a data processing agreement that requires it to protect your information.
4a. APPLE HEALTH (OPTIONAL)
If your version of the App offers it and you connect it, Labis reads the lab results in your health records and the blood glucose readings you choose to import from Apple Health, and saves them in your Labis account next to your other reports. When you choose Export to Apple Health, Labis writes the blood glucose results from your lab reports to Apple Health. Data from Apple Health is used only to provide these features to you. It is never used for advertising or marketing, never sold, and never shared with anyone except the service providers that run the App for you (section 6) and the people you share a profile with. You can disconnect Labis in the Health app at any time.
5. Family profiles and sharing
- A profile's records are visible only to its owner and to the people the owner has invited. An invitation must be accepted before anything is shared.
- Each person gets only the permissions the owner grants (for example viewing, adding records, using the assistant or exporting). The owner can change or remove access at any time, and removal takes effect immediately in the App.
- A parent or guardian can manage a profile for a child they are legally responsible for.
- An adult can manage a profile for another adult (for example a parent) with that person's consent or legal authority (power of attorney, guardianship). We store the manager's confirmation, its basis, date and wording version. The profile is labelled as managed, and can be handed over to the person: when they accept, they own it and decide whether the former manager keeps any access.
- A copy that someone has already downloaded or exported can't be recalled.
- Doctor reports and exports are created on your iPhone at your request. You decide who receives them.
7. Where your data is stored and international transfers
Your data is stored on our providers' servers, which may be located outside your country, including in the United Kingdom (London — our main database and document storage) and the United States (OpenAI, RevenueCat, Sentry, PostHog). Original documents are kept in private storage and are opened only through short-lived, authorised links. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.
8. How long we keep it
- We keep your data for as long as your account exists, also when your subscription ends. Your records stay yours: if you no longer have a subscription, you can still delete your account in the App, and we'll send you a full export of your data if you ask us (section 9).
- When you delete a document, a record or a profile, it is removed from the App. When you delete your account, your profiles you own, documents, results, plans, visit questions, reports, saved assistant items, sharing permissions and push tokens are permanently deleted. Residual copies in backups and logs expire within about 30 days.
- We may keep limited records where the law requires it, for example transaction records, and Apple and RevenueCat keep purchase records under their own policies.
- Support emails are kept for as long as needed to handle your request.
9. Your choices and rights
In the App you can:
- view, correct and delete your documents and results;
- turn AI processing on or off;
- invite people to a profile, change their permissions or remove them;
- export everything, including your original documents and your structured results (while you have access to the App; otherwise email us and we'll send you the export);
- delete your account and all data from Settings. This is permanent. An active subscription must be cancelled separately in your Apple ID settings.
To have your analytics and crash data deleted, email us.
Depending on where you live (for example the EEA, UK, California and other U.S. states) you may have the right to access, correct, delete or export your data, to restrict or object to processing, to withdraw consent, and to complain to your local data protection authority. We don't discriminate against anyone for using these rights.
To make a request, or if you can't access the App, email support@labis.health from the address on your account. We reply within 30 days.
Legal bases (EEA and UK): performing our contract with you (running the App), your explicit consent (health information, AI processing, notifications, camera and photos), our legitimate interests (security, preventing abuse, improving the App through analytics) and legal obligations.
10. Security
We use encryption in transit, access rules on every profile and record so that each person can reach only what they are allowed to, private storage for original documents, server-side checks on permissions and paid features, and restricted access to production systems. No system is perfectly secure, and we can't guarantee absolute security. If a breach affects you, we'll notify you as the law requires.
11. Children
An account is for adults aged 18 and over. A parent or guardian may keep a child's records in a profile they manage; the child does not have an account. We don't knowingly let anyone under 18 create an account. If you believe a minor has created one, contact us and we'll delete it.
12. Changes to this policy
We may update this policy. We'll change the date above and, for significant changes, tell you in the App or by email. If what AI processing receives changes, the App asks for your permission again.
13. Contact
Labis — support@labis.health