1. Introduction

BloodSight.com ("we", "us", "our") operates a web-based personal data organization tool for lab results (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service. For questions, contact support@bloodsight.com.

2. Information We Collect

Account Data

Name, email address, and authentication method (email/password or Google sign-in).

Profile Data

Name, date of birth, biological sex, height, and weight — provided optionally to improve the accuracy of organized results.

Uploaded Lab Data

Values, units, reference ranges, and plain-language descriptions extracted from the lab result documents you upload. We treat this as sensitive personal information.

Usage Data

IP address, browser type, device information, and timestamps collected automatically through server logs.

Billing Data

Subscription status and transaction identifiers. Payment details (credit card numbers, billing addresses) are handled entirely by Freemius and are never stored on our servers.

3. How We Use Your Information

• Providing the lab result organization service
• Storing your record history for trend tracking
• Having your report read and analyzed by the AI service providers that do this work on our behalf
• Sending transactional emails (processing completion, billing notifications)
• Maintaining security and preventing abuse of the Service

4. AI Processing

Your report is processed automatically to produce the explanations and trends you see in the Service. That processing covers the report as you uploaded it, the lab data recovered from it, and basic profile information such as age and sex.

No company involved in this processing receives your data for its own use. The AI companies performing the work act solely as our service providers, under contract and on our instructions: they may use your report and its lab data only to produce your analysis, never to train their models or for any purpose of their own. Automated analysis may contain errors and is provided for informational purposes only.

5. Service Providers

We do not share or sell your data with third parties. Running the Service takes a small number of companies working on our behalf, each bound by contract to use your data only to provide that service to us. They are service providers, not independent recipients. Nobody receives your results to use for their own purposes, and they never go to advertisers, insurers, employers, data brokers, or your laboratory.

• AI service providers — read your report and analyze the lab data it contains
• Freemius — our Merchant of Record, handles payment processing and billing. See Freemius's privacy policy for details.
• Google — provides optional sign-in authentication
• Infrastructure providers — hosting and data storage

We do not sell your personal data.

6. Data Retention and Deletion

• Uploaded files — deleted together with extracted data when you delete a report or your account
• Extracted lab data and your results analysis — retained until you delete the specific report or your account
• Account data — retained while your account is active. Permanently deleted when you delete your account
• Billing records — retained as required by applicable tax and accounting laws

When you delete a report, all associated data — the uploaded file, extracted values, and your results analysis — is permanently removed. When you delete your account, all your data is permanently deleted.

7. Data Security

Stored files and database records are encrypted at rest with AES-256 by our hosting infrastructure, and everything travels over encrypted connections (HTTPS/TLS). Passwords are hashed, and access controls limit who can reach your records. While we implement industry-standard security measures, no method of electronic storage is 100% secure. We cannot guarantee absolute security.

8. Shared Links

You may create shareable links to your reports. Anyone with the link URL can view the shared report. You can deactivate shared links at any time. Shared links have expiration dates.

9. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected data from a minor, we will promptly delete it. If you believe a minor has provided us with personal information, please contact support@bloodsight.com.

10. Your Rights

You have the right to:

• Access your data — your record history and profile information are visible in your dashboard
• Delete your data — delete individual reports or your entire account from settings
• Export your data — contact support@bloodsight.com to request a data export
• Withdraw from AI processing — you may cancel your subscription and delete your data at any time

11. Cookies

We use minimal cookies for essential functionality only:

• Session cookie — maintains your login session (functional, required)
• Sidebar preference — remembers your sidebar state (functional, optional)
• Google Analytics cookies (_ga, _ga_*) — measure aggregate site usage and attribute advertising campaign performance. See Google's privacy policy for details.

We do not use cookies for behavioral advertising retargeting.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email. The "Effective" date at the top of this page indicates the latest revision.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at support@bloodsight.com.