LEGAL

U.S. Consumer Health Data Privacy Policy

Effective date: August 25, 2026

1. Who we are

Operator: DENISKIN OLEKSANDR, Italian sole proprietorship (Ditta Individuale), VAT No. 14745720962, Via Pordenone 13, Milano (MI), Italy.

Privacy, Consumer Health Data and support contact: support@labcarehealth.com

2. What Consumer Health Data means

“Consumer Health Data” means personal information considered consumer health data under applicable U.S. law. Depending on use of the Service, this may include laboratory results, biomarkers, measurements, health or wellness information, uploaded health-related documents, health history, and information derived or inferred from information a user provides.

3. Categories of Consumer Health Data we may collect

4. Sources of Consumer Health Data

We primarily obtain Consumer Health Data directly from you and from processing information you choose to submit to LabCare. We do not seek to obtain your medical records directly from an insurer, employer or healthcare provider unless a future feature expressly enables that functionality with appropriate notice and authorization.

5. Purposes for collecting and using Consumer Health Data

6. Categories of Consumer Health Data shared and categories of recipients

LabCare does not sell Consumer Health Data. To provide the Service, limited Consumer Health Data may be disclosed to processors acting on our behalf. Categories of recipients may include secure cloud/database/storage providers, serverless hosting providers, server-side analysis providers, authentication/security providers and communications providers. Payment processors receive commerce and billing information but are not intended to receive laboratory values or private health reports as payment metadata.

7. Current service-provider categories

The current or planned technical stack may include Supabase, Netlify, OpenAI, Stripe and transactional email providers such as Resend. Access is limited to what is reasonably necessary for the relevant function. LabCare does not authorize these providers to use Consumer Health Data for their own unrelated advertising or marketing purposes.

8. No sale and no independent advertising use

LabCare does not sell Consumer Health Data. LabCare does not provide private laboratory reports, biomarker values, My Health Timeline, Health Scores or personalized health analysis to insurers, employers, healthcare providers or healthcare companies, data brokers, advertisers or pharmaceutical companies for their independent use, profiling or marketing.

9. Advertising boundary

Advertising and conversion-measurement technologies may be used on appropriate public marketing pages subject to applicable consent requirements. They are not intended to collect laboratory reports, biomarker values, Health Scores, private timeline information or personalized recommendations from authenticated health-data areas.

10. Security

LabCare uses administrative and technical safeguards designed to protect Consumer Health Data, including authenticated access, private storage, database row-level access controls, restricted service permissions, server-side secrets and security monitoring. No Internet-connected system can guarantee absolute security.

11. Retention

Consumer Health Data is retained only as reasonably necessary to provide requested functionality, maintain My Health Timeline where enabled, protect security and integrity, and meet applicable legal obligations. Different data categories may have different retention periods.

12. Your rights

Depending on applicable state law, you may have rights to confirm whether LabCare collects, shares or sells Consumer Health Data; access Consumer Health Data; receive information about processing and recipients; withdraw consent where applicable; request deletion; and appeal certain decisions. Requests may be sent to support@labcarehealth.com. We may authenticate a request before disclosing or deleting data.

13. Deletion requests

Subject to applicable law, a validated deletion request may require deletion from active systems and notification to processors or other recipients where required. Limited information may be retained where legally permitted or required for security, fraud prevention, accounting, legal compliance or legal claims.

14. Consent

Where applicable law requires consent before collecting or sharing Consumer Health Data, LabCare will request the required consent before the processing. Consent for collection and consent for sharing will be handled separately where required.

15. Changes and contact

We may update this Policy when data practices, technology or law changes. Where required, we will provide additional notice or obtain consent before materially changing how Consumer Health Data is processed. Contact: support@labcarehealth.com.