Legal

Privacy Policy

Your lab results are among the most sensitive data you have. This policy explains what we collect, why, how we protect it, and how you stay in control.

Last updated: July 4, 2026

1. Who we are

Bloodwise (“we”, “us”, “our”) provides a service that helps you upload blood test reports, extract and organise biomarker results, and ask questions about your own results (the “Service”). This policy applies to the Bloodwise website and application.

For any privacy question or request, contact us at privacy@bloodwise.app.

2. Information we collect

Information you provide

  • Account information — your email address and authentication details when you create an account (including via Google or Facebook sign-in, which share your name and email with us).
  • Health documents — blood test reports and other lab documents you upload, and the biomarker data extracted from them (values, units, reference ranges, and dates).
  • Chat content — questions you ask and conversations you have within the Service.
  • Preferences — settings such as summary style and display options.

Information collected automatically

  • Usage and log data — basic technical information such as IP address, browser type, pages visited, and timestamps, used for security and to keep the Service running reliably.
  • Cookies — we use essential cookies to keep you signed in. We do not use advertising or cross-site tracking cookies.

3. How we use your information

  • To provide the Service: extracting biomarkers from your documents, generating summaries and explanations, and answering your questions with the context of your own reports.
  • To maintain security, prevent abuse, and debug problems.
  • To communicate with you about your account and important changes to the Service.
  • To improve the Service using aggregated, de-identified usage patterns.

We do not sell your personal data. We do not use your health documents or chat content to advertise to you, and we do not permit our AI providers to train their models on your data.

4. AI processing

Bloodwise uses third-party AI models to read uploaded documents, extract biomarkers, and generate summaries and chat responses. When you upload a document or send a message, relevant content is transmitted to our AI provider (currently OpenAI) solely to produce your results. We use API services that are contractually prohibited from training on this data. AI output can be imperfect — extracted values carry confidence scores, and anything uncertain is flagged for your review.

5. How your data is protected

  • Data is encrypted in transit (TLS) and at rest.
  • Every document, biomarker, and conversation is scoped to your account using database row-level security, so it is only accessible to you.
  • Sharing with family members requires an accepted invite. After that, trusted markers are visible to the connection unless you set them to Private, and either person can disconnect at any time.

You can read more on our security page.

6. Service providers

We rely on a small number of infrastructure providers to run the Service: hosting and database services (including Supabase for authentication and data storage) and AI model providers for document processing and chat. Each provider processes data only on our instructions and only to the extent needed to deliver the Service.

7. Data retention and deletion

  • Your documents and extracted results are retained until you delete them or your account.
  • You can delete individual documents at any time; the associated biomarker data and document content are removed with them.
  • You can delete your account at any time, which removes your documents, biomarker results, conversations, and preferences. Residual copies in encrypted backups are purged on a rolling basis.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, restrict, or delete your personal data, and to object to certain processing. You can exercise most of these directly in the app, or by contacting privacy@bloodwise.app. If you are in the EU/EEA or UK, you also have the right to lodge a complaint with your supervisory authority.

9. Children

The Service is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we will delete it.

10. Changes to this policy

We may update this policy as the Service evolves. If we make material changes, we will notify you by email or an in-app notice before the changes take effect. The “Last updated” date above reflects the latest revision.

11. Contact

Questions about this policy or your data? Email privacy@bloodwise.app.