Privacy Policy

Effective date: August 25, 2026

1. Introduction

LabCare Health (“LabCare”, “we”, “us”) provides a consumer health-information service that helps users organize, understand and track laboratory results, biomarkers, health trends and related information. We recognize that laboratory and health-related information is sensitive. This Privacy Policy explains what information we process, why we process it, how it is protected, when it may be disclosed, and the choices and rights available to users.

2. Who we are

Operator: DENISKIN OLEKSANDR, Italian sole proprietorship (Ditta Individuale), VAT No. 14745720962, Via Pordenone 13, Milano (MI), Italy.

Privacy, Consumer Health Data and support contact: support@labcarehealth.com

3. Information we process

Depending on how you use the Service, we may process account information such as email address, internal account identifiers, authentication events and account settings; laboratory reports and uploaded documents; biomarker names, values, units, reference ranges and test dates; health scores, summaries, trends, timeline information, insights and recommendations; subscription and limited billing identifiers; support communications; and limited technical/security information such as IP address, browser/device information, timestamps, logs and error information.

Uploaded documents may contain information supplied by a laboratory or healthcare provider. Users should avoid uploading information that is unnecessary for the requested Service.

4. How information is associated with your account

LabCare uses internal account identifiers to associate information with an authenticated user account. The Service is designed so authenticated users access information associated with their own accounts. LabCare should not be understood as a fully anonymous service: health information may be associated with an internal account identifier and, where necessary, account information such as an email address.

5. How we use information

• provide and operate LabCare Health
• process uploaded laboratory reports and extract biomarker information
• generate summaries, trends, Health Scores, My Health Timeline views and informational recommendations
• authenticate users and maintain account functionality
• manage subscriptions and payment status
• provide support and requested communications
• protect the Service, investigate abuse and diagnose technical problems
• comply with applicable legal obligations and maintain system integrity

6. My Health Timeline and retention

My Health Timeline is designed to maintain longitudinal laboratory and biomarker history for signed-in users. Relevant structured information may remain associated with the account so users can compare changes over time. Deleting an original uploaded file does not necessarily remove every structured data point previously derived from that file unless the applicable deletion function or request covers those records. Account, subscription and health-data deletion are separate actions.

7. How we protect information

LabCare uses technical and organizational safeguards designed to protect personal and health-related information, including authentication controls, private file storage, row-level access controls, restricted service access, hardened server-side functions, operational monitoring and security review. No Internet-connected service can guarantee absolute security.

8. No sale of health data

LabCare Health does not sell your laboratory or health data. We do not provide your private laboratory reports, biomarker history, Health Score, My Health Timeline or personalized health analysis to insurance companies, employers, healthcare providers or healthcare companies, data brokers, advertisers or pharmaceutical companies for their independent use, profiling or marketing.

9. Service providers

We use service providers where necessary to operate the Service. Current or planned providers may include Supabase for database, authentication and private storage infrastructure; Netlify for hosting and serverless functions; OpenAI for server-side processing used to analyze uploaded laboratory content; Stripe for payments and subscription management; and email/communications providers such as Resend. These providers may process only information reasonably necessary to perform the applicable service and may have their own legal obligations and privacy terms. We do not authorize them to use Consumer Health Data for unrelated advertising or marketing.

10. Payments

Where Stripe or another payment processor is used, LabCare does not need to store complete payment-card numbers or security codes. We may retain limited identifiers such as Stripe customer/subscription IDs, plan, payment or subscription status, billing period and related account linkage needed to provide paid access.

11. Advertising and analytics

LabCare may use advertising or analytics technologies on public marketing pages. We do not intentionally transmit uploaded laboratory reports, individual biomarker values, Health Scores, My Health Timeline information or personalized health recommendations to advertising platforms for independent advertising profiling. Advertising trackers are not intended to be deployed on authenticated health-data surfaces.

12. Email and communications

We may send account verification, security notices, requested reports, billing notices, service communications and reminders enabled by the user. Marketing communications, if introduced, will use an appropriate legal basis and an unsubscribe mechanism. Marketing consent will not be treated as a condition for receiving essential account or transactional communications.

13. Data retention and deletion

We retain information only for as long as reasonably necessary to provide the Service, maintain requested longitudinal features, meet legal/accounting obligations, resolve disputes and protect security and integrity. Users may request deletion at support@labcarehealth.com. We may need to verify the requester. Limited information may be retained where required or permitted for legal compliance, accounting, fraud prevention, security or legal claims. Secure backups may persist for a limited period until overwritten or deleted under backup-retention procedures.

14. Your privacy rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to certain processing, request portability, withdraw consent where applicable, and complain to an appropriate authority. Rights may be subject to legal exceptions. Requests may be sent to support@labcarehealth.com.

15. European users

Where GDPR or related European data-protection law applies, LabCare processes personal data only where an appropriate legal basis exists. Health information may constitute special-category data and may require an additional legal basis, including explicit consent where required. Where international transfers require safeguards, LabCare will use an appropriate transfer mechanism.

16. U.S. Consumer Health Data

Certain U.S. states provide additional protections for Consumer Health Data outside HIPAA. The separate U.S. Consumer Health Data Privacy Policy supplements this Policy and describes categories, sources, purposes, disclosures and rights applicable to Consumer Health Data.

17. HIPAA

LabCare is a consumer-facing health-information service. The presence of health information does not by itself make the Service a HIPAA covered healthcare provider. Unless expressly stated in a separate agreement, LabCare does not represent that it is a HIPAA-covered provider or that all information processed through the Service constitutes HIPAA-protected health information.

18. Children and minors

LabCare is not intended for independent use by children where such use would violate applicable age, consent or privacy requirements. We may restrict use or require appropriate authorization where required by law.

19. Legal disclosures and business transfers

We may disclose information where reasonably necessary to comply with law, a valid legal process, protect users or the Service, investigate fraud or security incidents, or establish or defend legal claims. Information may also be transferred in a merger, acquisition, financing, restructuring or sale where permitted by law and subject to applicable privacy requirements.

20. Security incidents

If we identify a security incident affecting personal information, we will investigate and take appropriate remedial steps. Where applicable law requires notification to users, regulators or other authorities, LabCare will provide the required notification.

21. Changes and contact

We may update this Policy as the Service or legal requirements change. Material changes will receive additional notice or consent where required. Questions and privacy requests may be sent to support@labcarehealth.com.