1. What Stays on Your iPhone

This information is kept on your iPhone and is not sent to us:

• Report photos and PDFs. The app reads them on your iPhone with Apple's built-in text recognition (Vision) and PDFKit. They are never uploaded
• Your saved results: the values you confirmed, their units, the test date and the lab. They are encrypted with AES-GCM using a key held in your iPhone's Keychain that can only be used on this device. They are not synced to iCloud. If your iPhone is backed up, the backup can contain the encrypted results, but they cannot be read without the key, which never leaves this iPhone
• Family profiles, if you create them: the name, relationship and any notes you enter. They are protected by iOS data protection and excluded from iCloud and computer backups
• Sex for targets, if you set it. It is sent only as part of an explanation request (see Section 2)
• Reminders. Collection and next-test reminders are local notifications scheduled on your iPhone. The app does not use push notifications
• Your location, if you allow it, for Find a Lab Near You. It is used on your iPhone to search Apple Maps and is not sent to us
• Visit summaries. The PDF is made on your iPhone. It goes only where you send it from the share sheet

2. What Leaves Your iPhone

Written explanation

When you are signed in and save a report, the app asks for a plain-language explanation of it. It sends only:

• Which value each number is (for example, “urine citrate”)
• The number and its unit
• Sex for targets, only if you set it
• For your earlier saved tests, the same values and how many months before this test they were taken

It does not send your name, date of birth, test dates, lab name, report text or images. Both the app and our server accept only these fields and drop anything else. The request carries your sign-in session so our server can check it and count it toward your usage limit (Section 3); the values themselves are never saved to your account.

Suggest Matches

If the app cannot match a row on your report to a known value and you tap Suggest Matches, it sends the text labels of those rows (for example, “Citrate, 24 hr”). Labels that look like personal information are removed first.

Second reading (you choose each time)

If the app can read only a few values from a report, it can offer to send the report's text for a second reading. This happens only if you agree for that scan. Names and other identifiers are removed on your iPhone before sending, and our server removes any it finds again. No image is sent.

Who processes these requests

Requests go over an encrypted connection to our server, hosted by Convex, which sends them to OpenRouter. OpenRouter routes them to an AI model provider, currently Anthropic. Every request requires a provider that keeps no copy of the data (zero data retention) and does not collect it or train on it; if none is available, the request fails. Explanations are for education and are not medical advice.

3. What We Store

We store nothing about you unless you sign in with Apple, which is optional. If you do, our server stores:

Account

• The account identifier Apple gives us for this app
• Your email address. If you use Apple's “Hide My Email”, this is the private relay address Apple gives us
• Sign-in session tokens, which expire after 30 days
• A count of report credits you have and have used, and the date of your last analysis
• When the account was created and last updated

We do not store your name, even if Apple offers it.

Purchases

• The App Store transaction Apple signs for your purchase, which the app sends to our server so we can check it is genuine. From it we keep the product, its status, when it expires and Apple's original transaction identifier. Apple's App Store server notifications keep these up to date when a subscription renews, lapses or is refunded
• We never receive your card or payment details

Usage limits

• A count of your explanation requests per hour and per day, linked to your account, so we can apply fair-use limits. It does not include what you sent

What we don't store

• Your report, its images or its text
• Your values, results or explanations
• Your location
• Device identifiers, advertising identifiers or push notification tokens

4. How We Use Information

• To read your report and show where each value stands (on your iPhone)
• To write plain-language explanations you ask for
• To confirm purchases and unlock what you paid for
• To keep you signed in and apply fair-use limits
• To answer you when you contact us

We never use health information for advertising or marketing, and we do not use it to train AI models.

5. Information Sharing

Service providers

• Convex: hosts our server and the account information in Section 3
• OpenRouter and Anthropic: process the requests in Section 2 under zero data retention. See OpenRouter's Privacy Policy
• Apple: Sign in with Apple, App Store purchases, Apple Maps for Find a Lab Near You, and on-device text recognition

Other disclosures

• When required by law or valid legal process
• If Big Freight Life LLC is involved in a merger or sale, under the same protections as this policy

6. Data Security

• On your iPhone: saved results are encrypted with AES-GCM, and the key is kept in the Keychain, usable only on this device while it is unlocked
• In transit: everything the app sends uses TLS
• On our server: requests are tied to your signed-in session and act only on your own account, and AI provider keys are held only on the server
• Sharing a summary: the temporary PDF file is protected by iOS and deleted after you share it

7. Data Retention and Deletion

• On your iPhone: results stay until you delete them in Settings > Privacy & Data > Delete All Results, or delete the app
• Account information is kept while your account exists. Delete it any time in Settings > Privacy & Data > Delete Account. This removes your account, sessions, purchase records and usage counts from our server immediately. You can choose to keep or delete the results on your iPhone. Copies in our host's backups expire on their own schedule
• Requests in Section 2 are not kept after the response is returned
• Deleting your account does not cancel an App Store subscription. Cancel it in iPhone Settings > [Your Name] > Subscriptions

8. Cookies & Tracking

• The app uses no cookies
• No advertising identifier (IDFA) and no App Tracking Transparency requests
• No third-party analytics, advertising or crash-reporting code in the app
• No cross-app or cross-site tracking
• If you choose to share analytics with app developers in iOS Settings, Apple may give us anonymous crash reports. That choice is yours and is made in iOS, not in the app

9. Health Information and HIPAA

24-Hour Urine Analysis is a consumer education app. Big Freight Life LLC is not a healthcare provider, health plan or clearinghouse, and does not act for one, so HIPAA does not apply to the app. We protect your information as this policy describes: your report stays on your iPhone, what is sent is limited to numbers and de-identified text, and nothing about your report is stored off your iPhone. Personal health information is never stored in iCloud.

10. Children’s Privacy

• The app is not directed at children. You must be at least 13 to use it, and users aged 13 to 17 need a parent or guardian's consent
• The app does not ask for your age or date of birth
• We do not knowingly collect personal information from children under 13
• A parent or guardian may keep a family profile for a child. That profile and its results stay on the parent's iPhone and are not sent to us
• If we learn that an account belongs to a child under 13, we delete it. Parents can contact us to ask

11. Where We Operate

• The app is offered only in the United States and Canada
• Big Freight Life LLC is based in the United States
• Our service providers, including the AI model provider, may process requests in the United States or other countries. If you are in Canada, information you send may be processed outside Canada and may be accessible to authorities there under local law

12. California Privacy Rights (CCPA/CPRA)

Your rights

• Know and access the personal information we hold about you
• Delete it, which you can also do yourself in the app
• Correct inaccurate information
• Opt out of sale or sharing. We do neither
• Limit use of sensitive information. We use it only to provide the app
• Non-discrimination for using these rights

Categories we collect (signed-in users only)

• Identifiers: Apple account identifier and email address
• Commercial information: purchase and subscription status
• Sensitive personal information: the lab values sent for an explanation, processed and not kept

13. Canadian Privacy Rights

If you are in Canada, you may ask to see the personal information we hold about you, ask us to correct it, and withdraw consent. To withdraw consent for explanations, sign out or delete your account; the app keeps working on your iPhone. You may also complain to the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner.

14. Your Data Rights

• Access and portability: ask us for a copy of your account information. Share your results from the visit summary
• Correction: edit values in the app, or ask us to correct account information
• Deletion: delete results and your account in the app, or ask us

Email privacy@bfl.design. We respond within 30 days, or 45 days where California law allows.

15. Changes to This Policy

If we change what the app sends or stores, we will update this policy and its date before the change takes effect.

Contact Us