Who we are and the scope of this policy
LabX is an Iraqi platform that connects patients with medical laboratories: laboratory search, test catalogs, and laboratory bookings. This policy applies to the LabX mobile app and its public support pages.
Data we collect
- Account and contact data: full name, email, an optional phone number, governorate, physical address, and an optional public profile photo.
- Optional precise location: used only while the app is open to show nearby laboratories and to let laboratories pin their location for directions.
- Booking data: the laboratory, the test, the requested date and time, and the status history of each laboratory booking.
- Identifiers: the account user ID and the device notification token used to deliver booking notifications.
- Laboratory results (health data): when a laboratory sends you the result of a test you booked, the images or PDF file it uploads and the note it writes are stored so the app can show them to you. Only you and that laboratory can open them.
LabX does not collect card or bank details, does not include a third-party advertising SDK, and does not sell your personal data. A laboratory result sent to you through the app is stored only temporarily and is deleted automatically after seven days, as described below.
How we use data
- Creating and securing your account, and showing laboratories only the details needed to handle your booking.
- Managing laboratory bookings and notifying you about their status.
- Sorting laboratories by distance when you choose to share your location.
- Protecting the platform from abuse and fraud.
We never use health data for advertising and never track you across apps or websites.
Service providers and storage
- Google Firebase: authentication, database, App Check, and notifications.
- Cloudflare: trusted gateways for public-media operations and notification delivery, and encrypted temporary storage (Cloudflare R2) for laboratory result files during the seven days they exist.
- Cloudinary: hosting public profile and laboratory images only.
- Laboratories see only the information needed for a booking you made with them.
Sponsored placements
Laboratories may pay for a sponsored placement or an internal promotion inside LabX. These are always labelled as sponsored or as an advertisement, are activated only by the platform administration, and never represent a medical recommendation.
Retention and deletion
- You can permanently delete your account in-app: Account, then Delete account, or request deletion online on the account deletion page.
- Deletion removes the authentication account, profile, public profile image, device notification tokens, favorites, and notification history.
- Laboratory results are deleted after seven days. Seven days after a laboratory sends a result, its files and its written note are deleted automatically from our services, together. You are warned three times before that happens — in the notification, on the booking card, and on the result screen itself — so you can save your own copy to your device. Deletion is automatic and applies whether or not you opened the result.
- A finished booking record (completed, cancelled or declined) is deleted about one month after it finishes. Live bookings are never deleted automatically.
- Booking records may be retained beyond that only where applicable law requires it, with access restricted to authorized parties.
Security and choices
Data is encrypted in transit over HTTPS and stored with trusted providers. Location and notifications are optional OS permissions. You can deny them and continue using the core service.
Contact
For any privacy question or request: neoflames00@gmail.com