RGPD & Privacy by Design

Privacy & Zero Retention

Your health data belongs solely to you. ScanMyLab is built from the ground up to never store your documents.

Last updated: October 15, 2026

Zero Server Persistence

No health database, no disk storage. Your file is purged immediately once analyzed.

Pure Volatile Memory

Processing runs entirely in temporary RAM, wiped after a few seconds.

Zero AI Model Training

Enterprise API terms contractually guarantee your medical data is never used to train AI models.

No Account & No 3rd-Party Cookies

No sign-up required, no marketing cookies, and no behavioral tracking.

1. Core Philosophy: Zero Retention by Design

Unlike traditional health platforms, ScanMyLab adheres strictly to data minimization (Article 5, EU GDPR).

We never store uploaded medical lab files (PDF, JPG, PNG) on any server disks. Once the results are generated and returned to your browser, all memory buffers holding the file are immediately cleared.

There is no patient database, no persistent cloud storage bucket, and no server-side history.

Verifiable architectural guarantee

Each analysis is a one-way ephemeral stream. Our servers retain zero logs of your biological values or personal identity.

2. How Your Files Are Processed

Encrypted in transit: Your document is uploaded over an end-to-end encrypted connection (TLS 1.3 / HTTPS).

Processing & plain language explanation: Text is extracted and structured by our secure medical AI engine.

Delivery to your client: The explanation is rendered directly in your browser and stored exclusively in your local sessionStorage. Closing your browser tab immediately removes all data from your computer.

3. Artificial Intelligence & Enterprise Terms

ScanMyLab utilizes the Google Gemini API under enterprise API terms.

Under these enterprise provisions, customer inputs are never logged or utilized to train, retrain, or improve Google's underlying machine learning models.

API transactions operate with zero data persistence.

4. Cookies & Trackers

ScanMyLab uses zero advertising cookies, zero commercial targeting beacons, and zero third-party health tracking scripts.

Only strictly essential preferences (such as your chosen display language) are saved locally within your own browser storage.

5. Your Rights Under GDPR

Under the European General Data Protection Regulation (GDPR - Regulation EU 2016/679):

Right to Erasure: Because we delete all uploaded data immediately upon response delivery, your data is already erased by default.

Right of Access: Because no records are stored, we hold no user profiles or identifiable medical records to access or rectify.

For privacy inquiries, contact our data protection representative at: [email protected].