Privacy policy
Version 2026-09-01 · last updated 1 September 2026
What Vitalog holds
Your email address, the name you give, your date of birth, the laboratory values you confirm, the notes printed on your reports, the permissions you grant, and a record of actions taken on your account. Nothing else.
Where it is held
In a managed database and private file storage located in Mumbai, India. Data is encrypted while stored and while travelling between your device and the service.
Who can see it
Only you. Administrators can see your email address, your account status and the concerns you raise. They cannot see your laboratory values, your reports or your files. If you need help with a specific report, you can grant a named 24-hour or 72-hour window for support to view that one report. It expires by itself and the grant is logged.
How reports are read
The PDF is opened on your own device. Your name, phone number, address, patient number and the laboratory's identifiers are removed there. Only the cleaned text, or page images when the file is a scan, is sent to the model that transcribes the values. The transcription is shown to you for confirmation and nothing is saved until you confirm it.
How long it is kept
Your values stay until you delete them. The original PDF is discarded once the values are saved unless you choose to keep it. Records of actions on your account are kept for at least a year because we are required to be able to account for them.
Your choices
You can download everything, correct anything, withdraw an optional permission, name a person to contact, or delete every trace of your data immediately from your profile page. Deletion is irreversible.
What Vitalog never does
It does not interpret your results, advise you, sell your data, advertise to you, or send you anything you did not ask for.
The notice shown at registration
Vitalog collects your name, email address, date of birth and the contents of the laboratory reports you choose to upload. That is all.
Your reports and results are readable only by you. Administrators can see your name, email address, account status and how many reports you hold, and cannot open your results or your files.
Everything is kept until you delete your account. Deletion is immediate and permanent, and takes your reports, results and files with it.
You can download everything, correct a stored value, withdraw a permission or delete the account at any time from your privacy centre.
- Keep my test results in my account
- Vitalog stores the test names, values, units and printed reference ranges from the reports you upload, so your timeline survives between visits. Kept until you delete your account.
- Read my reports with an automated extraction service
- The text of an uploaded report is sent to a model provider through Lovable's AI service to be transcribed into structured values. Your name, address, phone number, patient identifier and laboratory identifier are removed on your device before the text leaves it. Nothing is kept by the provider for training.
- Keep the original PDF after extraction
- Off by default. When off, the uploaded file is discarded once you have saved the results, and only the values remain. When on, the file stays in a private store that only you can open.
- Email me about my account and my grievances
- Access decisions, replies to a grievance you raised, and security notices. No reminders about your numbers, ever.
- Count how the product is used, without health data
- Screen counts, upload success and failure rates and error counts. Never a test name, never a value, and never sent to a third-party tag.
Grievance officer
Grievance officer, grievance@vitalog.in. First reply within 48 hours.