QBILABS

Privacy Policy

Last updated: 2026-08-14

1. Data controller

The controller of qbilabs.com (“QbiLabs”) is the QbiLabs service operator. Contact for data protection matters: info@qbilabs.com.

2. Data minimization

We do not ask for or store personal details such as your first name, surname, or national ID number. An email address is all the service needs. If you want more precise analysis, you may optionally provide your birth year and sex — entirely voluntary.

3. What data we process

  • Account data: email address, password (stored only as a cryptographic hash), optionally a display name or nickname of your choosing.
  • Profile data (optional): sex and birth year — used solely to select appropriate reference ranges.
  • Health data (special category): blood test results you enter or upload, draw dates, lab reference ranges.
  • Consent log: when and which consents you granted or withdrew.
  • Technical data: your device’s IP address, the country derived from it, the pages you visit and the time of the visit — in server logs and our internal visit statistics. This data is kept for no longer than 90 days.

4. Purposes and legal bases

  • Providing the service (storing results, trends, analysis) — performance of a contract (GDPR Art. 6(1)(b)); for health data — your explicit consent given at registration (Art. 9(2)(a)). You may withdraw it by deleting your account.
  • Sending news and offers — your consent, indicated at registration and withdrawable at any time in settings or via the link in every email (Art. 6(1)(a)).
  • Security and audience measurement (sessions, abuse prevention, IP address and page-visit statistics) — legitimate interest (Art. 6(1)(f)). You have the right to object (see section 9).

5. AI analysis

Analysis texts may be generated using one of the following AI service providers: Anthropic (Claude), OpenAI (ChatGPT), Google (Gemini), xAI (Grok), or Perplexity. Only de-identified data is sent to the provider: sex, age decade, and test values — never your name or email. We only use providers and API plans whose terms state that submitted data is not used to train their models. Data may be processed in the USA under EU Standard Contractual Clauses or other GDPR Chapter V transfer mechanisms.

6. Who we share data with

  • Our server hosting provider (in the EU) — technical infrastructure.
  • AI service providers — Anthropic PBC, OpenAI, Google, xAI, or Perplexity (USA) — de-identified analysis request data only, as described in section 5.
  • People you choose — only when you yourself grant another QbiLabs user (e.g. your doctor or a family member) access in Settings, by their email. The recipient must accept the invitation; you can change the permission (view or edit) or revoke it at any time.
  • Our payment provider, Stripe Payments Europe, Ltd. (Ireland) — only when you purchase AI analysis generations. You enter card details directly on Stripe’s page; we never receive or store them and only get the payment confirmation, amount and your email.
  • We never sell or transfer your data to any other third party.

7. Cookies

We use strictly necessary cookies only: a login session cookie (“session”) and a language preference cookie (“lang”). We use no tracking, analytics, or advertising cookies, so no cookie consent is required — we simply inform you. Dismissal of the notice is remembered in your browser (localStorage). We measure visits without cookies — by recording the visited page, IP address and country server-side (see section 3).

8. Retention

We keep your data for as long as you have an account. You can delete your account yourself at any time in Settings → “Delete account”. Upon deletion, all your data (reports, results, analyses, consent records) is removed immediately and irreversibly. You may also contact us at info@qbilabs.com. Technical visit data (IP addresses) is deleted automatically after 90 days.

9. Your rights

  • access your data and obtain a copy;
  • rectify inaccurate data (most of it you can edit yourself);
  • erasure (“right to be forgotten”);
  • restrict or object to processing;
  • data portability;
  • withdraw consent at any time (marketing — in settings; health data — by deleting your account);
  • lodge a complaint with your supervisory authority (in Lithuania: vdai.lrv.lt).

10. Important note

QbiLabs is not a medical device and does not provide medical advice. All analysis is informational only; make health decisions together with your doctor.

© 2026 QbiLabs · qbilabs.com