Privacy Policy

Last updated: August 1, 2026

Introduction

Reporto ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our medical report analysis service.

Information We Collect

Personal Information

  • Email address and name (when you create an account)
  • Medical reports and lab results you upload
  • Biomarker data extracted from your reports
  • Chat history with our AI assistant

Automatically Collected Information

  • Device information and browser type
  • IP address and location data
  • Usage data and analytics

How We Use Your Information

  • To provide and maintain our service
  • To analyze your medical reports using AI
  • To track your health trends over time
  • To send you notifications about your reports
  • To improve our service and user experience
  • To communicate with you about updates and features

Current Privacy Posture

Reporto is not currently represented as HIPAA compliant or end-to-end encrypted. We use authenticated access controls and service providers to operate the application, but no online service can guarantee absolute security.

Do not use Reporto for urgent medical needs. Review important information against your original report and discuss it with a qualified healthcare professional.

Security Practices

Reporto uses authentication, authorization controls, and infrastructure providers that support encrypted connections and protected storage. We are continuing to improve security controls, auditability, deletion, and export capabilities as described in our product roadmap.

Requests About Your Information

Depending on where you live, you may have rights to request access, correction, or deletion of personal information. When signed in, you can record a deletion request below for manual review. Recording a request does not delete data automatically or confirm that deletion has been completed. Self-service export is not yet available.

Third-Party Services

We use the following third-party services:

  • Supabase (database and authentication)
  • Google Gemini AI (report analysis)
  • Vercel (hosting)
  • Google OAuth (authentication)

Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: harshrj.dev@gmail.com

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.