Privacy Policy

1. Information We Collect

We collect the following types of information:

• Health Information: lab reports and related health data you upload.
• Personal Information: name, age, and health concerns you provide.
• Account Information: email address and profile data.
• Usage Data: how you interact with the service.

2. How We Use Your Information

• Provide AI-powered lab analysis and educational insights.
• Operate, maintain, and improve service quality.
• Communicate with you about your analysis and account.
• Ensure service security and prevent fraud.

3. Data Protection

We implement security measures to protect your health information:

• Encrypted in transit via TLS and at rest by Supabase; access-controlled via row-level security so your data is isolated to your account.
• Private file storage with short-lived signed URLs — uploaded lab files are never publicly accessible.
• Regular security review and monitoring.

TruCore Labs is a wellness and educational service, not a regulated medical-records system, and does not operate under any healthcare Business Associate Agreement. Please do not rely on it as a substitute for a clinical record system.

4. Sub-Processors

We rely on the following third-party processors to operate the service. Each receives only the data necessary for its function:

• Anthropic — AI analysis of your uploaded lab reports.
• Supabase — database, file storage, and authentication.
• Stripe — subscription payments and billing.
• Resend — transactional email.
• Vercel — application hosting and delivery.
• GoHighLevel — customer relationship management for bookings and lead capture.

5. Data Sharing

We do NOT sell your personal health information. We share it only:

• With the sub-processors listed above, to operate the service.
• When required by law or legal process.
• To protect our rights or prevent harm.
• With your explicit consent.

6. Your Rights

You have the right to:

• Access your personal data.
• Correct inaccurate information.
• Delete your account and data.
• Export your data.
• Opt out of non-essential communications.

7. Data Retention

We retain your health data for as long as your account is active or as needed to provide the service. You may request deletion of your data at any time, subject to legal requirements.

8. Cookies and Tracking

We use essential cookies to provide the service and may use analytics cookies to understand usage patterns. You can control cookie preferences through your browser settings.

9. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us at privacy@trucorelabs.com.