Privacy

The short version

Your history is yours. We store what you upload so you can see it back, and nothing you upload is used to train outside models, sold to anyone, or shared with advertisers. You can delete your entire account, and everything in it, whenever you like.

What we store

• The documents you upload (lab PDFs, referral letters, procedure notes) and the structured data we extract from them.
• The basics you add yourself — name, sex, date of birth, ethnicity, height, lifestyle, medications, conditions — so we can interpret your results.
• Vitals you log manually such as blood pressure and weight.
• Account essentials: email, password (hashed), and authentication session cookies.

Who sees your data

Only you. Database access is scoped per-user at the row level so one account can't read another's data, and our infrastructure providers (hosting and database) see only encrypted data at rest. When you generate an insight report, a redacted summary of your own results is sent to the model provider that produces the report text; that content is processed to produce your report and is not retained for training.

Deleting your data

Settings → Delete account removes every report, test result, insight, vital, medication, condition, and setting tied to your account in a single transaction. There's no 30-day grace period and no recovery path — gone means gone.

Contact

Questions about data handling? Email contact@bloodtracer.com.