Privacy Policy

Account information

• Your name, email address and, if you add one, a profile photo.
• Sign-in details from the method you choose: Sign in with Apple, Google Sign-In, email and password, or a passkey. With Sign in with Apple you can hide your email; we then receive a private relay address.
• Optional profile details you add, such as gender and date of birth.

Health information you add

• Lab reports you scan or import, including photos and PDFs of them.
• The results read from them: test names, values, units, reference ranges and report dates.
• Notes, tags, favorites, reminders and review status you set on your results.
• Results for other people you track in family profiles. Only add information about someone else if you have the right to, for example as their parent, guardian or caregiver.

Apple Health

If you allow it, LabSnaps reads lab results from the health records you've connected in Apple Health, and saves results you scan to Health. It only accesses the Health data you permit, and you can change this anytime in the Health app. See Apple Health data below.

Technical information

• Device type, iOS version and app version.
• Crash reports and usage analytics, such as which screens are opened. These don't include your lab values or contact details.

• To read, organize and display your lab results, and chart them over time.
• To sync your data across your devices, if you turn on cloud sync.
• To provide the optional AI features, only if you turn them on.
• To manage your account and any Premium subscription.
• To find and fix bugs, and to understand which features are used so we can improve them.
• To respond when you contact us for support.

By default, LabSnaps reads your reports on your iPhone, using Apple's on-device text recognition and, on devices that support it, Apple's on-device language model. Photos, PDFs and the results read from them stay on your device unless you turn on cloud sync or one of the AI features below.

These features send data to Google's Gemini models. Each is off by default, and each asks for your consent on a screen that explains what is sent before it's used for the first time. You can turn them off anytime in the app.

• AI Parsing sends a photo of the report page you upload so Gemini can read it. The image is sent as-is and is not anonymized: the page layout is needed to read the results table, so everything printed on the page goes with it, including your name, date of birth and any record or accession numbers. It's used only to return the results for that upload. On-device parsing is the default and sends nothing.
• AI Insights sends the details of a result you ask about, such as the test, value, unit and reference range, and, if you've added them, an age group and gender, to generate general educational context. It doesn't send your name, email or other identifiers.

How Google handles this data

• Requests run on Google Cloud's Vertex AI (Gemini Enterprise Agent Platform), reached through Firebase AI Logic.
• Under Google Cloud's terms for this service, Google does not use your content to train its models.
• Google may keep request content for a limited time only to detect and prevent abuse and security violations.
• Requests are processed within the United States, on Google Cloud's US multi-region.

AI features are limited to a small number of requests per day unless you have Premium.

Cloud sync is off by default. If you turn it on, your results, report photos and related details are encrypted on your device with AES-256 before they're uploaded to Google Firebase. The encryption key is kept in your iCloud Keychain, which Apple end-to-end encrypts and syncs to your other devices. We store only the encrypted copy and can't read it.

Some information is stored in readable form, not encrypted: your account identifier, sign-in details, your first and last name, the gender on your own profile if you add it, and when records were last updated. Your email address, date of birth, and family members' names and details are encrypted.

We have signed Google Cloud's HIPAA Business Associate Addendum, which covers the Google Cloud services that store your account and synced data (Identity Platform, Cloud Firestore and Cloud Storage). The optional AI features use a Google service that the addendum does not cover. LabSnaps is a personal health records app and is not a HIPAA covered entity.

• Data in transit is protected with TLS.
• Access to cloud data is limited to your own signed-in account.
• Face ID, Touch ID or your passcode can lock the app.
• Your results are hidden in the app switcher and while the screen is being recorded or mirrored.

No method of storage or transmission is completely secure, but we work to protect your information.

• LabSnaps uses Health data only to show and organize your lab results in the app, as you direct.
• We never use Health data for advertising or marketing, never sell it, and never share it with third parties for those purposes.
• Health data is stored on your device, and in encrypted form in cloud sync only if you turn sync on. It's never stored in iCloud.
• You can revoke LabSnaps' access anytime in the Health app.

We never sell, rent or trade your personal or health information, and LabSnaps has no advertising. We share information only in these cases:

• Service providers that run parts of LabSnaps for us, under their own privacy and security terms: Google (Firebase Authentication with Identity Platform, Cloud Firestore, Cloud Storage, App Check, Crashlytics, Analytics, and the AI features above) and Apple (Sign in with Apple, iCloud Keychain, App Store purchases).
• When you choose to, for example by sharing a PDF report with your doctor or exporting your data.
• Legal requirements, when we're required to by law, court order or a valid government request.
• Safety, to protect the rights, property or safety of our users, others, or LabSnaps.
• Business transfers, such as a merger or acquisition, in which case we'll notify you before your information becomes subject to a different privacy policy.

LabSnaps Premium is billed by Apple through your Apple ID. We never receive your payment details; we only receive whether your subscription is active.

• See and correct your information in the app at any time.
• Export your results as a PDF report or in FHIR format.
• Turn off cloud sync, AI Parsing or AI Insights in the app; turning off sync lets you delete your cloud copy and keep the one on your device.
• Delete your account in the app's Account settings. This deletes your cloud data, profile, profile photo and sign-in account right away. Deleting the app removes the data stored on your device.
• Depending on where you live, you may have other rights, such as to access, delete or port your data, or to object to or restrict how it's used. Contact us at support@labsnaps.com to use them. We won't treat you differently for doing so.

We keep your information while your account is active, and delete it when you delete your account, except where the law requires us to keep something longer. Crash reports and analytics are kept by Google for its standard retention period. They don't include your lab values.

LabSnaps accounts are not intended for children under 13, and we don't knowingly collect personal information from them. A parent or guardian may keep a child's results in a family profile on their own account. If you believe a child has created an account, contact us at support@labsnaps.com and we'll delete it.

LabSnaps is operated from the United States, and our service providers process information in the United States and other countries. If you use LabSnaps from outside the United States, your information will be transferred there.

labsnaps.com uses Vercel Web Analytics and Speed Insights to count visits and measure page performance. They don't use cookies or track you across other sites, and you can turn them off in the banner at the bottom of the page.

If you use our contact form, we receive the name, email address and message you send, and use them only to reply.

We may update this policy. We'll change the date at the top of this page and, for material changes, tell you in the app before they take effect.

Questions about this policy or your data? Email us at support@labsnaps.com.