Consumer Health Data Privacy Policy (United States)
Effective date: October 1, 2026
This policy supplements the Privacy Policy and applies to residents of the states of Washington, Nevada, and Connecticut, as well as to any consumer health data collected in those states. The regulated entity is Viktar Muronchyk (Мурончик Виктор Олегович), an individual, developer of the App, vul. Karla Marksa 29, OPS-25 (Post Office No. 25), 230025 Hrodna, Republic of Belarus (in Russian: 230025, Республика Беларусь, г. Гродно, ул. Карла Маркса, 29, ОПС-25), support@lably-app.com.
1. What consumer health data we collect
Almost all of your health data is stored only on your device, and we do not receive it (see Section 2.1 of the main Privacy Policy). Through our server and our processor, we process only:
| Category | What exactly | When |
|---|---|---|
| Images of medical documents | Pages of a lab report or other medical document on which you have blacked out your personal details; the document type you selected | Only when you start recognition yourself |
| Information about your use of a health app | Device ID, number of recognitions per day, plan | For the trial, the subscription, and the limit |
| Document type information in usage statistics | Document type (“lab report,” “referral,” etc.) together with the Firebase installation ID | When you work with documents, if statistics are on; you can turn them off at any time in “Profile → Settings → Usage statistics” (Section 2.4 of the Privacy Policy) |
We do not collect precise location, biometric data, or information about reproductive or sexual health (other than what may appear in a document you yourself sent for recognition), and we do not draw inferences about your health.
2. Sources of the data
Only you: you choose and send the document yourself. We do not buy data or obtain it from third parties.
3. Purposes
- To recognize the document you sent and return the result to your device.
- To provide the trial, the subscription, and the daily limit.
- To understand which features are used and to fix errors (the document type only, without its contents).
We do not use this data for advertising and do not sell it.
4. Consent
- Collection. Before each document is sent for recognition, you see what will be sent and confirm sending it. Without this, the document does not leave your device.
- Sharing. We do not share consumer health data with third parties, other than our processors, which act under a contract and only on our instructions. If this ever changes, we will ask for your separate consent before sharing.
- Sale. We do not sell consumer health data and will not do so without a valid authorization signed by you in the form required by law.
5. Who receives the data
| Recipient | Data category | Role |
|---|---|---|
| OpenAI OpCo, LLC | Document images (Section 1) | Processor — text recognition |
| Cloudflare, Inc. | Document images in transit; usage information | Processor — hosting |
| Google LLC (Firebase Analytics) | Document type, installation ID | Processor — statistics |
We have no affiliates that receive this data.
6. Your rights
You have the right to:
- confirm whether we collect your consumer health data, access it, and obtain a list of all third parties and processors with which it has been shared (with their contact details);
- delete it — we will delete it on our side and notify our processors; you delete the data on your device yourself with the “Delete all data” button (Profile → Settings → Data);
- withdraw your consent — simply stop sending documents for recognition and turn off statistics;
- not be discriminated against for exercising these rights.
How: email support@lably-app.com with the subject line “Consumer Health Data Request” and include the device ID from the “Data” screen. We will respond within 45 days (in practice, within 10 business days); this period may be extended by another 45 days where necessary, and we will let you know if it is.
Appeals: if we deny your request, reply to our email with the word “Appeal” within a reasonable period of time. We will respond within 45 days, explain our decision and, if the denial stands, tell you how to file a complaint with your state Attorney General (Washington, Nevada, Connecticut).
7. Geofencing
We do not determine your location and do not use geofences around health care facilities.
8. Changes
We will notify you in the App of material changes before they take effect.