LabDrive Privacy Policy

Last Updated: July 7, 2026

Company: TinyUtility Limited
Address: 15 A Street, Belize City, Belize
Contact: [email protected]

1. Introduction

LabDrive is a personal health record app that helps you store, organize, and understand your laboratory test results. Because LabDrive handles health information, this policy is deliberately specific about what data exists, where it lives, and what — if anything — ever leaves your device.

The short version: your health data is stored on your device, not on our servers. The only time any of it is transmitted anywhere is when you explicitly use an AI feature, after giving explicit consent, and even then it is processed transiently and never stored by us.

2. Data Stored on Your Device Only

The following data is stored in a local database on your device and is never transmitted to TinyUtility or stored on any server we operate:

• Your lab test results (test names, values, units, reference ranges, dates)
• Lab report documents you import (PDFs and photos) and text extracted from them
• Diagnoses and medications you record
• Your app lock passcode (stored only as a salted cryptographic hash in your device's secure storage)
• Your settings and preferences

If you delete the app, this data is deleted with it. You can export a complete copy of your data from Settings at any time.

3. Biometric Data

If you enable Face ID or Touch ID lock, biometric authentication is performed entirely by Apple's operating system. LabDrive only receives a yes/no answer. We never receive, store, or have any access to your biometric data.

4. AI Features and What They Transmit

LabDrive offers optional AI features: extracting results from lab reports, explaining what tests mean, analyzing patterns across your results, and a health education chat. These features require your explicit consent before first use, and you can withdraw consent in Settings at any time.

When — and only when — you use an AI feature, the relevant content (for example, the text of a lab report you asked to be parsed, or the lab values you asked to be analyzed) is transmitted over an encrypted connection to our processing service (Google Cloud Functions), which forwards it to Google's Gemini API for processing. This data:

• is processed transiently to generate the response you requested;
• is not stored by TinyUtility — we operate no database of your health information;
• is handled by Google as a data processor under the Google Cloud Terms of Service, which prohibit Google from using this API data to train their models;
• is never sold, shared with advertisers, or used for any purpose other than generating your response.

If you never grant AI consent, no health data ever leaves your device.

5. Anonymous Identifiers and Service Data

To operate the AI service fairly and prevent abuse, LabDrive signs in to our backend anonymously. This creates a random identifier that is not linked to your name, email, or any other personal detail — we do not know who you are. Associated with this identifier we store only usage counters (how many AI requests were made, for rate limiting). No request content is stored.

6. Crash Reporting

LabDrive uses Sentry to collect crash reports so we can fix bugs. Crash reports contain technical information (device model, OS version, app version, and the technical state of the app when it crashed). Crash reporting is designed not to include your health data.

7. Usage Analytics

The current version of LabDrive transmits no usage analytics. The "share anonymous usage data" preference in Settings records your choice for potential future versions; if a future version begins collecting anonymized usage analytics, this policy will be updated first and the preference will be honored.

8. What We Never Do

• We never sell your data — there is nothing to sell; we don't have it.
• We never show ads or share data with advertisers or data brokers.
• We never track you across other apps or websites.
• We never use your health data to train AI models.

9. Medical Disclaimer

LabDrive is an organizational and educational tool. It is not a medical device and does not provide medical advice, diagnosis, or treatment. AI-generated explanations are educational information about lab tests in general, not clinical interpretation of your health. Always consult a qualified healthcare provider about your results.

10. Your Rights

Because your data lives on your device, you exercise most rights directly: view everything in the app, export everything from Settings, and erase everything by deleting the app. To request deletion of the anonymous usage counters associated with your anonymous identifier, or for any privacy question, contact [email protected]. Depending on your jurisdiction (including the EU/EEA under GDPR and California under CCPA), you may have additional rights to access, correction, deletion, and portability, which we honor.

11. Children

LabDrive is not directed at children under 13, and we do not knowingly collect information from children under 13.

12. Security

Health data is stored in your device's app sandbox; the app lock passcode is stored as a salted hash in the device's secure storage (Keychain). All network communication uses TLS encryption. AI requests are authenticated and rate-limited server-side.

13. Changes to This Policy

We will post any changes on this page and update the "Last Updated" date. Material changes affecting how health data is handled will additionally be surfaced in the app before they take effect.

14. Contact

TinyUtility Limited · 15 A Street, Belize City, Belize · [email protected]