Privacy Policy

• Account data: name, email, password hashes, and settings.
• Health data you provide: lab results, biomarkers, notes, documents, and connected source data you choose to import.
• Usage data: device info, logs, and analytics events (pages viewed, features used).
• Support data: information you send to support or feedback channels.

We collect information directly from you, from your connected third-party services (with your authorization), and automatically via cookies and similar technologies.

• Provide, maintain, and improve the Service.
• Display trends, charts, and insights from your lab data.
• Personalize features and content.
• Detect, prevent, and address security or technical issues.
• Communicate with you about updates, security notices, and support.
• Comply with legal obligations.

• Performance of a contract (providing the Service).
• Legitimate interests (e.g., security, product improvement).
• Consent (e.g., connecting data sources, certain analytics).
• Compliance with legal obligations.

• Vendors/Processors that help operate the Service (hosting, analytics, email). (TODO: link subprocessors list if published)
• With your direction (e.g., exporting or sharing certain data).
• For legal reasons (comply with law, protect rights, prevent harm).
• Business transfers (merger, acquisition, reorganization).

We retain information only as long as necessary for the purposes outlined in this Policy, unless a longer period is required by law. You may request deletion of your account data at any time.

We use administrative, technical, and physical safeguards designed to protect your information. No method is 100% secure. (TODO: briefly note key controls you actually use, e.g., encryption in transit/at rest.)

• Access, correct, or delete your data within the app or by contacting us.
• Export your data where available.
• Object to or restrict certain processing, where applicable.
• Withdraw consent where processing relies on consent.
• Manage cookies in your browser settings. (TODO: link to cookie policy/banner if present)

The Service is not directed to children under 13 (or as defined by local law), and we do not knowingly collect data from them.

Your information may be transferred to and processed in countries other than your own. Where required, we use appropriate safeguards for such transfers.

Data Controller: TrackMyLabs, Inc. (TODO: legal entity) Address: 123 Example St, Suite 100, City, State, ZIP, Country (TODO) Email: privacy@trackmylabs.com

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date at the top.