Privacy

No account, no profile

Using this site does not create an account. We do not ask for your name, email address, phone number or a password, and we do not build a profile of you. There is nothing to log in to, because there is nothing stored under your name.

What happens to your report

Your report is processed temporarily to create the explanation. It is not added to a permanent report library and is scheduled for deletion after the session.

• The uploaded file is deleted as soon as the values have been extracted from it.
• Page images used for checking your values are deleted when the session ends.
• Extracted values and the explanation are deleted when the session ends or expires, at most an hour after it starts.
• Deletion also runs on a schedule, so closing the tab does not leave anything behind.

Nothing is kept for you

Confirmed values are not saved as a personal history. Once a session expires, the explanation cannot be recovered by us or by you. Download anything you want to keep before you leave the page.

Where processing happens

Which of these applies depends on the file you give us, so it is worth being precise.

• A PDF your laboratory generated. The values are read in your browser and the file is never sent anywhere. It is not uploaded, not scanned and not stored.
• A scan or a photograph. The image of the page is sent to an AI service to be read — including anything printed on it that you did not cover up, such as a name or a date of birth. Removing them first is not possible on this path, because the text does not exist until the service returns it. We ask before sending anything, and you can enter the values by hand instead. The file is deleted as soon as the values have been read from it.
• Values you type in. No file is involved at all.

Written explanations for supported markers come from reviewed content shipped with the site. Where an AI service is used to write additional explanation, it receives only the values, units and ranges, with identifiers removed.

Subprocessors

The services that process report content on our behalf are listed on the subprocessors page, with what each one does and where it runs. Every one is contractually required not to use your content to train models, and provider-side retention is disabled or kept inside the session window.

What we never do

• Health information is never sold.
• Health information is never used for advertising or marketing.
• Health information is never added to analytics.
• Report contents never appear in our logs.

Redact what you do not need to send

Your name, date of birth and record number are not needed to explain your results. Cover or remove them before uploading if you would rather they were never sent. Where we detect them, we remove them before anything is sent to a subprocessor, and you can remove them yourself during the checking step.

Security logs

Our hosting provider keeps ordinary connection logs, and we count requests per connection to limit abuse. Those counters are keyed to a one-way, daily-rotating hash of the network address rather than the address itself, expire within an hour, and contain no report contents and no health information.

Your rights

Because we hold no identifiable record of you after a session ends, there is usually nothing to access, correct or delete on request. You can delete everything at any time during a session with the Finish and delete button. See data rights for how to contact us.