Privacy policy

Life:)on med.lab app · version of 2026.11.02

This is a translation. If it differs from the Ukrainian version, the Ukrainian version applies.

In short. Your lab results, measurements, studies and documents are stored only on your phone, in an encrypted database. We do not receive them, cannot see them and cannot restore them. Premium is bought through Google Play or the App Store; we do not receive your medical data when you buy it.

1. Who is responsible for the data

ФОП Маліборський Віталій Михайлович (“we”), email support@life-on.com.ua.

2. The app

Your profile, lab results, measurements, studies, documents and calendar are stored on the device in a database encrypted with a key kept in the phone’s secure storage. They are not sent to any server.
PDFs and photos of lab reports are recognised on the phone. Text in photos is recognised by the Google ML Kit and Tesseract libraries without sending the images anywhere; ML Kit usage statistics are turned off in the app.
Images from a clinic disc or archive (DICOM, ZIP) are converted to pictures on the phone. Only the date, type of study, its description, body part and view are read from the files — the patient’s name, date of birth and other patient details are not read and are not sent anywhere.
The app uses the internet only for online recognition of a lab report and for translating a study conclusion (see below) — when you start them yourself.
The app has no ads, analytics or trackers.
You create backups yourself: the file is encrypted with your password, and you decide where to keep it.
Calendar reminders are scheduled on the phone by the system notification service.
Treatment courses and expenses: amounts, descriptions, receipt photos and PDFs are stored only on the phone in the encrypted database (and in a backup, if you make one). We do not receive them.
Receipt scanner: on Android — the Google Play services document scanner (ML Kit), on iPhone — Apple's system scanner. The image is processed on the phone and is not sent anywhere; on first use Google Play services may download the scanner module.
Home screen widget (Android and iPhone): for it the app stores a short snapshot on the phone — the time of upcoming doses and calendar entries for 3 days. By default without medicine or entry names (names only if you turn them on in settings). The widget is shown without a PIN, so this snapshot is not part of the encrypted database (on iPhone it is kept in a folder shared by the app and its widget on the phone); it is never sent anywhere and is cleared if you delete all data.
“Share markers”: the PDF or text is created on the phone and sent only where you choose in the system “Share” menu.

Health Connect (Android). If you turn on “Devices and Health Connect” (Premium), the app, with your permission, reads the following from Health Connect on your phone: blood pressure, heart rate (including resting heart rate), body weight, height, blood glucose, oxygen saturation and body temperature. This data is used only to display it in your personal measurement archive, charts and the reports you create and send yourself. It is stored only on your phone in the encrypted database, is not passed to us or to third parties, and is not used for advertising, profiling or training models; the app does not write anything to Health Connect. Use of information received from Health Connect complies with the Health Connect Permissions policy, including the Limited Use requirements. You can withdraw the permission at any time in the Health Connect settings; imported measurements can be deleted in the app.

Apple Health (iPhone). If you turn on “Devices and Apple Health” (Premium), the app, with your permission, reads the same data from Apple Health (HealthKit) on your iPhone: blood pressure, heart rate (including resting heart rate), body weight, height, blood glucose, oxygen saturation and body temperature. It is used only to display it in your personal measurement archive, charts and the reports you create and send yourself; it is stored only on your phone in the encrypted database (and in a backup, if you make one), is not passed to us or to third parties, is not stored in iCloud, and is not used for advertising, marketing, profiling or training models; the app does not write anything to Apple Health. You can change access at any time in the Health app (Profile → Apps → Life:)on med.lab); imported measurements can be deleted in the app.

Online recognition of a lab report (your choice). If you tap “Recognise more accurately (online)”, the app first shows you the image that will be sent, and you can paint over your name, date of birth and other personal details on it. After you confirm, this one image (without metadata) is sent over a secure connection to our server app.life-on.com.ua, and from there to the Claude model of Anthropic PBC (USA) for text recognition. What comes back is a table of results or the text of a study conclusion, which you check before it is saved on the phone. Our server stores neither the image nor the result: only technical details (size, duration, status, number of tokens) are logged. To limit the number of recognitions, the app sends a random installation identifier that is not linked to you or your data; the server also sees the IP address of the connection. Anthropic deletes API inputs and outputs within 30 days (longer only where required by law or to investigate violations of its usage policies) and, under its commercial terms, does not use them to train models. The legal basis is your explicit consent, which you give each time you tap “Send”. The app works fully without online recognition.

Translating a study conclusion (your choice). If you tap “Translate” on a study card and confirm, the app sends over a secure connection to our server app.life-on.com.ua only the text of the conclusion from that card — without the study title, doctor, facility, date, files or your profile — and from there it is received by the Claude model of Anthropic PBC (USA) for translation into the app language. The translation is stored on the phone next to the original and marked as machine translation; the original is not changed. Our server stores neither the text nor the translation: only technical details (number of characters, duration, status, number of tokens) are logged. Limits, the random installation identifier, the IP address, retention at Anthropic and the legal basis (your explicit consent each time) are the same as for online recognition. If the conclusion contains a name or other personal details, remove them on the card before translating.

3. Buying Premium

Premium is bought in the app through Google Play on Android or the App Store on iPhone (a monthly or yearly subscription or a one-time “lifetime” purchase). Payment is processed by Google under the Google Privacy Policy and Google Play rules, or by Apple under the Apple Privacy Policy and App Store rules; we do not receive your card details. In Google Play Console and App Store Connect we can see only purchase details (product, date, country, status, and in Google Play the order number) needed for accounting and support — not your lab results, profile or documents.

The app checks what has been bought through the Google Play or App Store service on the phone.

4. Retention

Medical data — on your phone until you delete it (Settings → “Reset all data”, or uninstalling the app).
Google Play and App Store purchase details are kept by Google and Apple under their rules.
Online recognition and translation: our server does not store images, texts or results; request counters (installation identifier, IP address) are kept only in memory until the end of the day; Anthropic — up to 30 days, as described above.
If you write to our support, the correspondence is kept for as long as needed to reply, but no longer than 3 years.

5. Who we share data with

Google and Apple — only for payment through Google Play or the App Store (handled by Google and Apple themselves);
Anthropic PBC (USA) — only the lab report image or conclusion text you sent for online recognition or translation, as a processor for text recognition and translation;
Hetzner Online GmbH (Germany) — hosting of our server, through which online recognition and translation pass;
public authorities — only where required by law.

We do not sell data or share it for advertising.

6. Your rights

Under the Law of Ukraine “On Personal Data Protection” and, for EU residents, the EU General Data Protection Regulation (GDPR), you can find out what data of yours we process, correct or delete it, restrict or object to processing, receive it in a machine-readable format, and complain to the Ukrainian Parliament Commissioner for Human Rights or to the supervisory authority in your country. Write to support@life-on.com.ua.

Medical data in the app is deleted in the app itself: Settings → “Reset all data”, or uninstalling the app.

7. Changes

We publish each new version at this address with its date.