Privacy Policy

Extracted biomarkers, reports, medications, diagnoses, your timeline, and the original files you upload are all stored in your browser's local database (IndexedDB). None of it is automatically synced to us.

The consequence is real: clearing browser data, uninstalling the app, or moving to a new device loses those records. Use "export an encrypted backup" to keep your own copy.

A PDF or photo you upload is transmitted to our server for that one reading. It is processed in memory and never written to our disk or object storage, then discarded.

To read it, the file is sent to Google (Gemini) for extraction. On that path the file is not de-identified — if your name or patient number is printed on the report, Google sees it.

Only once you create an account:

• Account details: email, name, username, password hash, optional phone, Google account identifier
• From the sign-up form: age, region, and chronic condition — that last one is health information and it is stored in our database. It is optional and may be left blank.
• Cloud backup, if you enable it: an end-to-end encrypted blob. The key is derived from a backup password you choose. We cannot read it and cannot recover it.
• Any feedback you submit, with the contact detail you chose to include.

We record anonymous product events (for example "a report was uploaded") with a random visitor ID, device type, and a country/region code resolved at Vercel's edge.

We do not store IP addresses. An IP is used transiently for rate limiting and is never written to our database.

Before any health interpretation is generated, the data is de-identified: only age, sex, height, weight and biomarker values are kept, with names, emails, phone numbers, national ID numbers and addresses stripped. The de-identified payload goes to Google or Anthropic models.

This differs from section 2 — reading the original document is not de-identified.

• Google (Gemini) — reading reports and health interpretation
• Anthropic — health interpretation
• Resend — sending sign-in codes by email
• Supabase / Render / Vercel — database and hosting
• US National Library of Medicine — medical terminology lookups (no personal data sent)

You can access, export or delete your data at any time. Records on your device are yours to delete directly. For account data on our servers, email decipherkul@gmail.com to request an export or deletion.

If you are in the EU or UK (GDPR), or in China (PIPL), you have the local rights of access, rectification, erasure, restriction and portability.

Account data is kept while the account exists and deleted with it. Uploaded files are not retained at all (section 2). Anonymous product events are kept for analysis and contain nothing that identifies you.

Aviora is not intended for people under 16. If you keep records on behalf of a minor, the account should be yours.

Privacy questions: decipherkul@gmail.com.