Privacy
How we look after your reports
What we keep
- Your name, email and password. The password is kept only as a scrambled hash, never as text.
- The family members you add: name, relation, and, if you give them, birth year and sex.
- The report files you upload, and what is read from them: the lab, the date, the name printed on it, and every test value.
- The explanations and doctor briefs written for you, any values you correct, and the doctor links you make.
- One cookie that keeps you signed in. No advertising, no tracking, and we never sell your data.
Why we keep it
Only to do what you ask: read your reports, explain them, show how results change over time, and make a summary for your doctor. Before your first upload we ask you to agree to this, and we note which version of this notice you agreed to and when.
When you add a family member, please make sure they are happy for their reports to be kept here. For a child, that is you as their parent.
Where it is stored
The database and the report files are kept with Neon, in Singapore. Every file is encrypted before it is stored, each with its own key, so the files are unreadable without our server. Only your account can see your family's reports.
Who else handles it
- Anthropic, when reading is switched on: each report is sent to Claude, Anthropic's AI, to be read and explained. Anthropic does not use it to train its models. On the public demo the AI is switched off, so no report is sent anywhere.
- Render runs our server and Vercel runs the website. Your data passes through them on its way to and from the database.
How long we keep it
- Demo accounts, and everything in them, are deleted after 24 hours.
- Your own account is kept until you delete it. Deleting a report, a family member or the whole account removes it, and its files, straight away.
- A doctor link shows the values it was made with. So deleting a report, or moving it to someone else, also turns off every doctor link for that person. You can make a new one.
Your rights, and how to use them
India's Digital Personal Data Protection Act, 2023 gives you these rights. Most of them are a button in the app.
- See your data
- Everything is on your reports and timeline pages. To take a copy, use Download all my data on the Account page: one ZIP with the original files, a spreadsheet of every value, and the rest.
- Correct it
- If a value was read wrongly, tap the pencil beside it on the report and type the right one. You can edit a family member's details on the Family page, and move a report to the right person.
- Erase it, or take back your consent
- Delete any report or family member, or delete your whole account on the Account page. Everything, including the files, is removed.
- Complain or ask a question
- Open an issue on our GitHub repository. Please don't put any health details in it, since issues are public. If you are not happy with our answer, you can go to the Data Protection Board of India.
Contact
For anything about your data, open an issue on the ReportSaathi GitHub repository.