Privacy Policy

Last updated: June 24, 2026 · Effective: June 24, 2026

Summary: VitalScan Pro collects only what's necessary to provide the service. We never sell your data. All health data is encrypted with AES-256. You can delete your account and all associated data at any time with one click.

1. Who We Are

VitalScan Pro ("we", "our", "us") is a health technology platform that uses artificial intelligence to help users understand their blood test results. Our service is available at vitalscanpro.com.

Contact: support@vitalscanpro.com

2. What Data We Collect

We collect the following information when you use VitalScan Pro:

Account data: Email address, name (encrypted at rest)
Health data: Blood test files you upload (PDF or images), biomarker values extracted from them, and AI-generated analysis reports
Usage data: Pages visited, features used, timestamps (for service improvement)
Payment data: Processed by Stripe — we never see or store your card number
Device data: Browser type, operating system, IP address (for security and fraud prevention)

3. How We Use Your Data

To provide AI analysis of your blood test reports
To maintain your account and history
To send transactional emails (receipts, account security alerts)
To improve and debug our AI models (only with anonymized, aggregated data)
To comply with legal obligations

We do not use your health data for advertising, sell it to third parties, or share it with insurance companies.

4. How We Protect Your Data

Encryption at rest: All Protected Health Information (PHI) is encrypted using AES-256
Encryption in transit: All data transfers use TLS 1.3
Access controls: Strict user data isolation — only you can access your data
Audit logging: Every access to health data is logged and monitored
Infrastructure: Hosted on Google Cloud Platform with enterprise-grade security

5. Your Rights (GDPR — EU Users)

If you are in the European Union, you have the following rights under the General Data Protection Regulation (GDPR):

Right of access: Request a copy of all data we hold about you
Right to rectification: Correct inaccurate data
Right to erasure: Request deletion of your account and all associated data
Right to portability: Export your data in a machine-readable format
Right to object: Object to certain types of processing
Right to withdraw consent: At any time, without affecting prior processing

To exercise any of these rights, email support@vitalscanpro.com or use the one-click data deletion feature in your account settings.

6. HIPAA (US Users)

VitalScan Pro implements HIPAA-aligned security practices for users in the United States, including:

AES-256 encryption of all Protected Health Information (PHI) at rest
TLS 1.3 encryption of PHI in transit
Audit logging of all PHI access events
Strict access controls and user data isolation
Documented breach notification procedures

7. Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated data — including uploaded blood tests and analysis reports — is permanently deleted within 30 days.

8. Third-Party Services

We use the following third-party services:

Google Cloud Platform / Firebase: Infrastructure and authentication
Stripe: Payment processing (PCI-DSS compliant)
Google Gemini AI: AI analysis of blood test reports
SendGrid: Transactional email delivery

9. Cookies

We use essential cookies for authentication and session management. We use Google Analytics (anonymized) to understand how users interact with our service. We do not use advertising cookies or sell cookie data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice in the app. Continued use of VitalScan Pro after changes constitutes acceptance of the updated policy.

11. Contact

For privacy questions, data requests, or concerns: support@vitalscanpro.com