last updated: December 28, 2025
data we collect
- email address and profile (via Apple Sign-In)
- blood test PDFs you upload
- biomarker values extracted from your tests
- basic usage data (pages visited, actions taken)
how we use your data
- parse PDFs to extract biomarker values using AI (Claude by Anthropic)
- display your results and track trends over time
where data is stored
bloodwork uses Cloudflare infrastructure. database hosted on PlanetScale PostgreSQL in EU (Dublin). PDFs stored in Cloudflare R2 (EU). all data encrypted at rest and in transit.
third parties
- Anthropic (Claude AI) - processes your PDFs to extract biomarkers. data is not stored by Anthropic.
- PlanetScale - database hosting in EU.
- Cloudflare - infrastructure, R2 storage, Workers.
- Apple - authentication via Sign in with Apple.
data retention
- account data - kept until you delete your account
- blood test results - kept until you delete them or your account
- PDF files - kept for 1 year after processing, then deleted
your rights (GDPR)
- access - export all your data from settings
- deletion - delete your account and all data from settings
- portability - export data as JSON/CSV
- correction - edit your profile in settings
data deletion
you can delete your account from settings. all your data (results, PDFs) will be permanently removed within 30 days. contact hi@bloodwork.md for help.
security
we use encryption at rest and in transit. access to your data is restricted to authenticated users. we log access for security and compliance.
report security vulnerabilities to hi@bloodwork.md. we will disclose any breaches that occur.
changes
we may update this policy. major changes will be announced via email.
contact
questions about privacy: hi@bloodwork.md.
operated by: System Operator LLC, Delaware, USA.