1. Data We Collect

The App collects and processes the following types of data:

• Urine test results: Values captured via camera scanning, photo upload, or manual entry from 24-hour urine analysis lab reports.

• Health insights and recommendations: AI-generated interpretations of your test results, including trend analysis over time.

• User preferences: Display settings, notification preferences, privacy choices, and data retention selections.

• Photos and camera data: Images of lab reports captured or selected for scanning purposes. These images are processed for text extraction and are not stored permanently unless you choose to save them.

2. How We Collect Data

Data is collected through your direct interaction with the App:

• Camera scanning: You can use your device camera to capture images of lab reports for automated data extraction.

• Photo library: You can select existing photos of lab reports from your device photo library.

• Manual entry: You can manually input test result values.

• App settings: Your preferences are saved locally and synced to your account.

3. Third-Party Services

The App uses the following third-party services to provide its functionality:

Google Gemini API (via Vertex AI)

Your test result data (extracted text from lab reports) is sent to the Google Gemini API for AI-powered analysis. This service generates health insights, interpretations, and recommendations based on your lab values. Google's privacy policy governs how they handle data received through their API. No images are sent to this service — only extracted text data. All personal identifying information (PII) is removed on your device before any data is transmitted.

Convex

Convex serves as the App's backend for data storage and synchronization. Your test results, health insights, and user preferences are stored on Convex servers to enable syncing across your devices. Convex's privacy policy governs their data handling practices.

4. Data Storage and Retention

Your data is stored securely on Convex servers and locally on your device. You control how long your data is retained through the Data Retention setting in the App's Privacy settings:

• 6 months: Data older than 6 months is automatically deleted.

• 1 year: Data older than 1 year is automatically deleted.

• 2 years: Data older than 2 years is automatically deleted.

• Indefinite: Data is retained until you manually delete it or delete your account.

You can change your data retention preference at any time in Settings > Privacy > Data Retention.

5. Your Rights

You have the following rights regarding your data:

• Access: You can view all data the App has collected about you within the App.

• Export: You can export your test results and data using the Export Results feature in Settings.

• Deletion: You can delete individual test results or request complete account and data deletion. To delete your account and all associated data, use the in-app account deletion feature or contact us at the email address below.

• Consent withdrawal:You can stop using the App at any time. You can also adjust sharing preferences in Settings > Privacy.

6. Camera and Photo Library Usage

The App requests access to your device camera and photo library solely for the purpose of capturing or selecting images of lab reports for data extraction. These permissions are optional — you can use manual entry instead. Camera and photo access is never used for any other purpose, and images are processed on-device for text extraction before any data is transmitted to third-party services.

7. Analytics and Advertising

The App does not use any analytics SDKs or tracking frameworks. The App does not display advertisements. We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes. Your health data is used exclusively to provide the App's core functionality.

8. Medical and HIPAA Disclaimer

The AI-generated health insights and recommendations provided by the App are for educational and informational purposes only. Always consult a qualified healthcare provider before making any medical decisions based on information from this App.

Do not use this App for emergency medical situations. If you are experiencing a medical emergency, call your local emergency services immediately.

9. Washington My Health My Data Act (MHMDA)

If you are a Washington State resident, the following applies to you under the My Health My Data Act (RCW 19.373):

Health Data We Collect

• Lab test values extracted from scanned urine analysis reports

• AI-generated health insights, risk assessments, and recommendations

• Health-related preferences and settings

Purposes

• Providing AI-powered analysis of your lab test results

• Generating personalized health insights and recommendations

• Tracking trends in your test results over time

Third Parties

• Google Vertex AI: Receives de-identified lab text for analysis

• Convex: Stores encrypted data for cloud sync

• We do not sell your health data to any third party

Your Rights Under MHMDA

• Right to confirm whether we are collecting or sharing your health data

• Right to access your health data

• Right to withdraw consent for collection and sharing

• Right to request deletion of your health data

• Right to be free from discrimination for exercising your rights

To exercise these rights, contact us at privacy@24hurineanalysis.com or use the in-app account deletion feature in Settings.

10. FTC Health Breach Notification

In the event of a breach of unsecured individually identifiable health information, we will notify affected users and the Federal Trade Commission in accordance with the FTC Health Breach Notification Rule (16 CFR Part 318). Notification will be provided without unreasonable delay, and in no case later than 60 calendar days after discovery of the breach.

11. California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act:

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collection, and the third parties with whom we share it.

• Right to Delete: You can request deletion of your personal information. Use the in-app account deletion feature or contact us.

• Right to Correct: You can request correction of inaccurate personal information.

• Right to Opt-Out of Sale: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.

• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

• Right to Limit Use of Sensitive Personal Information:Your health data is used solely to provide the App's analysis features.

To exercise these rights, contact us at privacy@24hurineanalysis.com. You may also designate an authorized agent to make requests on your behalf. We will verify your identity before processing any request.

12. Encrypted Cloud Storage

When you opt in to cloud document storage, scanned lab report images are encrypted on your device before upload:

• Encryption: Documents are encrypted using AES-256-GCM, a military-grade encryption standard, before leaving your device.

• Key Storage:Encryption keys are stored exclusively in your device's Secure Enclave/Keychain and never transmitted to our servers.

• Server Storage: Our servers store only encrypted blobs. We cannot read your documents.

• Deletion: All encrypted documents are permanently deleted when you delete your account. You can also delete individual documents at any time.

• Cross-Device:Document decryption requires access to the originating device's encryption key. Cross-device key sharing is planned for a future release.

13. Children's Privacy

The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us so we can take appropriate action.

14. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected in the App with an updated effective date. Continued use of the App after changes are posted constitutes your acceptance of the revised policy.

Contact Us