Privacy Policy

Effective 14 July 2026 · Last updated 1 August 2026

1. Who we are

LabKeep (“the app”, “we”, “us”) is developed by LabKeep. If you have any questions about this policy or your privacy, contact us at hello@labkeep.app.

2. Our core privacy principle: local-first

LabKeep is built to keep your health data on your device. Specifically:

• No account, no login, no sign-up. You can use the entire app without ever creating an account or giving us any identifying information.
• Your health data never touches a server. LabKeep does not send your health data to us or to any third-party server. The app functions fully on your device. The only things the app ever asks the internet are described in section 6: a version-support check that carries no personal data, and Google Play purchases when you choose to subscribe.
• No analytics, no advertising, no tracking. We do not embed advertising SDKs, analytics/telemetry SDKs, or third-party trackers that report your activity.

3. What information the app handles (and where it stays)

You may enter or import the following into LabKeep. All of it is stored locally on your device (in the app’s private on-device database and file storage) and is not sent to us:

• Lab/blood-test results and the reports you scan or upload (PDFs or photos).
• Blood-pressure and blood-glucose readings.
• Medications, supplements, and dose logs.
• Journal entries (symptoms, lifestyle, notes).
• Your Health Card details (e.g. name, date of birth, blood type, allergies, conditions, emergency contact) — whatever you choose to enter.
• App preferences (units, language, reminders).

Because there is no account, this information is tied to your device, not to an identity we hold.

4. On-device processing (scanning your reports)

When you scan or upload a lab report, LabKeep reads the values on your device:

• On iOS, text recognition uses Apple’s on-device Vision framework, which processes the image locally.
• On Android, text recognition uses Google’s ML Kit on-device text recognition, which processes the image locally and does not upload it.
• PDFs with a text layer are parsed locally in the app.

Your images and their contents are not sent to us or to any cloud OCR service.

5. What we collect: nothing

We do not collect, store, or receive any personal or health data. We have no database of users and no way to identify you.

6. Permissions the app uses, and why

• Camera / Photos — to scan a report with the camera or pick an existing image/PDF. Images are read on your device and are not uploaded.
• Notifications — to remind you about medication doses and lab re-checks, generated on your device.
• Alarms for reminders — so a dose reminder can wake the phone even when it is idle. On recent Android versions LabKeep uses inexact, battery-friendly alarms: Android may batch them, so a reminder can arrive a few minutes late during deep sleep. Used solely for medication/health reminders.
• Biometrics / device credential — only if you turn on the optional App Lock, to unlock the app with your fingerprint, face, or device PIN. Handled by the operating system, not by us.
• Internet access — LabKeep does not use the network to send your health data. The app works offline; internet access is used for exactly two things: (1) an occasional check with our server asking whether this app version is still supported, so very old versions can be pointed to an update — the request contains only the app’s version number, never an account, a device identifier, or any of your data, and the server stores and logs nothing about these requests; and (2) subscription purchases and their verification when you choose to subscribe: the purchase itself runs through Google Play, and at the moment of purchase the app also makes one round-trip to our server carrying a Google Play Integrity attestation(a Google-signed statement that the app is a genuine Play install — it identifies the app installation’s integrity, not you). Our server forwards it to Google for verification and discards it; nothing is stored or logged. Your health information is never uploaded, to us or to anyone.

7. Exports, backups, and sharing (only when you choose)

You are always in control of your data:

• Backups (.lkbk files) and exports (PDF / CSV) are created at your request and saved or shared to the destination youchoose through your phone’s share sheet (e.g. your files, email, or another app). Optional passphrase encryption is available for backups.
• Once you share or export a file, what happens to it is governed by wherever you send it (for example, the email provider or storage app you chose), not by LabKeep. Please handle your health exports carefully.
• The Doctor’s Visit pack and other PDFs are generated on your device.

Moving to a new phone

LabKeep opts out of Android’s cloud backup on every Android version, so your health data is notcopied to Google Drive or any other backup account. That is the rule we never bend, and it is why the transfer story depends on how old your phone’s Android is:

• Android 12 and newer.Android’s setup wizard can copy LabKeep’s data to your new phone. LabKeep allows this device-to-device transfer so your health history survives a new phone: the data travels directly between two devices you own (by cable or a direct wireless link), it is not uploaded anywhere, and we never see it.
• Android 8 to 11. These versions use an older Android backup format that cannot tell the two destinations apart— anything it would hand to a phone-to-phone transfer, it would also be allowed to upload to your Google account. We are not willing to take that risk with health data, so on these versions LabKeep is excluded from Android’s transfer as well. Your data will not move automatically to a new phone.Use the app’s own .lkbk backup instead (Settings → Back up & restore): export it on the old phone, restore it on the new one. It is a file you hold, and you can protect it with a passphrase.

Some phone makers ship their own transfer tools that do not use Android’s backup system at all. Whether those move LabKeep’s data is up to that tool, not to us — if you are switching phones and it matters, make a .lkbk backup first.

Whatever your Android version, the app’s own encrypted .lkbk backup is always available and always under your control.

8. Optional error reports (you decide, each time)

If the app hits an unexpected error, it keeps a small technical error log on your device. This log is scrubbed — it contains technical details only (such as which screen you were on, as a generic route name, and the error message) and is designed to exclude your health data. Nothing is sent automatically. An error report is only shared if youtap “Send” and choose where to send it through your phone’s share sheet. You can decline, and no report leaves your device.

9. Health Connect & Apple Health

A future version of LabKeep may let you optionally sync activity data (such as steps, sleep, and weight) from Health Connect (Android) or Apple Health (iOS). This feature is not active in this version, which does not request or read any such data. If it is enabled later, it will be opt-in, that data will stay on your device, and this policy will be updated.

10. Data retention and deletion

• You can delete individual records, profiles, or all your data from within the app.
• Uninstalling LabKeep removes the app’s on-device data from your device.
• We hold no copy of your data, so there is nothing for you to request from us.

11. Security

Your data is stored in the app’s private on-device storage, protected by your device’s own security model. You can additionally enable App Lock (biometric or device PIN) and encrypt backups with a passphrase. No security measure is perfect; keeping your device secure (screen lock, OS updates) is an important part of protecting your health data.

12. Children

LabKeep is not directed to children and does not knowingly collect information from children. Because we do not collect any data at all, we do not hold information about any user, including children.

13. Not medical advice

LabKeep is an informational tool for organizing and tracking your own health data. It does not provide medical advice, diagnosis, or treatment, and its scores, ranges, and insights are informational estimates only. Always consult a qualified healthcare professional about your results and health decisions.

14. Changes to this policy

If we change how the app handles data, we will update this policy and revise the “Last updated” date. Material changes will be reflected here before the corresponding app version is released.

15. Governing law

This policy is governed by the laws of Lebanon, without regard to its conflict-of-laws rules.

16. Contact

Questions about your privacy or this policy? Email hello@labkeep.app.