1. Introduction

At BloodPanel.Info, we prioritize your privacy and data security above all else. This Privacy Policy explains our minimal data collection practices, how we anonymize your health information, and the security measures we implement to protect your data.

Please read this Privacy Policy carefully. By accessing or using our service, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

2. Minimal Data Collection

2.1 Email Address Only

We intentionally limit the personal data we collect to just your email address. We do not collect:

• Names
• Physical addresses
• Phone numbers
• Payment information (handled by our secure third-party payment processor)
• Social security numbers or other government identifiers
• Demographic information

Your email is only used for account authentication, sending you analysis results, and essential service communications.

2.2 Anonymized Health Data

When you upload blood test results, we process and store this health data in an anonymized format:

• Blood biomarker values are stored separately from your account information
• All identifying information from test results (name, doctor, medical ID numbers) is stripped during processing
• Biomarker data is referenced through randomized identifiers that cannot be traced back to your identity without access to multiple secured systems
• Original test files are processed and then permanently deleted after extraction of relevant data

2.3 Limited Usage Data

We collect minimal technical information necessary for service functionality:

• Basic access logs (IP address, browser type, pages visited)
• Session information for maintaining your login state

This information is not used for tracking or profiling purposes and is automatically purged after 30 days.

3. Data Security and Encryption

We employ industry-leading security measures to protect your data:

• End-to-end encryption for all data in transit using TLS 1.3
• AES-256 encryption for all sensitive data at rest
• Database segmentation that separates personal identifiers from health data
• Regular security audits and penetration testing
• Multi-factor authentication for all internal admin access

Your data is stored on secure servers with encryption both in transit and at rest. Even in the unlikely event of a security breach, your health data cannot be linked to your identity.

4. How We Use Your Information

We use the limited data we collect exclusively for:

• Providing our blood test analysis service
• Authenticating your account
• Sending you your analysis results
• Improving our algorithms (using only anonymized data)
• Ensuring the security and reliability of our service

We never sell your data to third parties or use it for advertising purposes.

5. Data Retention

We have a minimal data retention policy:

• Your email address is retained only while you maintain an active account
• Original uploaded files are processed and then immediately deleted
• Anonymized biomarker data is retained for providing trend analysis but can be deleted at your request
• If you delete your account, all your personal data is permanently erased

6. Limited Data Sharing

6.1 No Data Selling

We never sell your data to third parties, advertisers, or data brokers under any circumstances.

6.2 Essential Service Providers

We use a limited number of trusted third-party providers for essential services like:

• Cloud infrastructure (with encryption and strict access controls)
• Email delivery services (with minimal data sharing)

These providers are bound by strict confidentiality agreements and only process data as necessary to provide their specific service.

6.3 Legal Requirements

We may be required to disclose information in response to a valid legal process, such as a court order or subpoena. In such cases, we will notify you unless prohibited by law and will only disclose the minimum information required.

7. GDPR and Privacy Rights

We respect and uphold your data privacy rights regardless of your location. You have the right to:

• Access - Request a copy of your personal data
• Rectification - Correct inaccurate information
• Erasure - Request deletion of your data
• Restriction - Limit how we use your data
• Portability - Receive your data in a machine-readable format
• Objection - Contest our data processing

You can exercise these rights by contacting us at [email protected] or by using the Data Subject Request Form.

8. Children's Privacy

Our service is not intended for use by children under the age of 18. We do not knowingly collect any personal information from children.

9. Changes to This Privacy Policy

We may update our Privacy Policy to reflect changes in our practices or for legal reasons. We will notify you of any material changes by email and by posting a notice on our website.

10. Contact Us

If you have any questions about our privacy practices or wish to exercise your rights, please contact our Privacy Officer at [email protected].