Privacy policy
Effective 24 October 2026
Tildeon helps you read, understand and track your laboratory results. Your results are health information, and we treat them that way. This policy explains what we collect, why, who helps us process it, and how you can see or delete it. Questions: privacy@tildeon.com.
The short version
- We use your information only to run Tildeon for you.
- We never sell your information and never use it for advertising.
- Your health data is encrypted on your phone, in transit and on our servers.
- Original report files are deleted automatically 30 days after upload.
- You can delete your account and all your data from the app at any time.
What we collect
| Information | Examples | Why |
|---|---|---|
| Account | Email address, and a password that is handled by our sign-in provider (we never see it) | To create your account and sign you in |
| Profile | Name, sex, date of birth, height, weight, waist, activity level, units, health conditions you choose to add, why and how often you test | Healthy ranges and suggestions depend on age, sex and health conditions |
| Lab reports and results | Photos, PDFs and emails you add; the test names, values, units, dates and lab names read from them | To show, explain and compare your results |
| Testing plan | Tests you plan, dates, preparation steps | Reminders and your plan |
| Questions you ask | Questions typed into Ask | To answer them. Your conversation is kept on your phone, not on our servers. |
| Forwarded emails | Emails you forward to your private Tildeon address | To import attached reports. The email itself is deleted once handled, and at most within one day. |
| Technical data | Error logs, app version, device type | To keep the service secure and working |
We do not collect your location, contacts, or advertising identifiers. We do not use third-party advertising or tracking tools.
How AI is used
To read reports and answer questions, Tildeon sends the report image or text, or your question together with the relevant results, to Anthropic's Claude models through Anthropic's commercial API. Under Anthropic's commercial terms, this data is not used to train their models, and Anthropic deletes API inputs and outputs within 30 days except where needed to enforce its usage policy or meet legal obligations. Separately, to look up US reference ranges for a new kind of test, we send only the test's name and unit (never your values or identity) to search U.S. government health websites.
AI can make mistakes. You check every value before it is saved, and explanations are general information, not medical advice.
Who processes your data for us
| Provider | What they do | Where |
|---|---|---|
| Amazon Web Services | Hosting, database, file storage, sign-in, email receiving | United States |
| Anthropic | AI that reads reports and answers questions | United States |
These providers act on our instructions and may not use your data for their own purposes. We may disclose information if required by law, to protect someone's safety, or as part of a merger or sale of Tildeon, in which case this policy would continue to apply to your data. We will never sell your data.
How we protect it
- On your phone, saved results are encrypted with a key kept in the phone's secure Keychain or Keystore. You can add a Face ID and passcode lock.
- All connections use HTTPS. On our servers, the database and files are encrypted with keys managed in AWS Key Management Service.
- Access to production systems is limited to the people who run Tildeon.
How long we keep it
- Original report files: deleted automatically 30 days after upload.
- Results, profile and plan: until you delete them or your account.
- Error logs: up to one year.
- Backups: removed in the normal backup cycle, within 35 days of deletion.
Your choices and rights
- See and export your results in the app, as a summary you can share or save.
- Correct values, profile details and plans in the app.
- Delete single reports, or your whole account in Account → Delete my account and data.
- Withdraw consent to processing of your health data at any time by deleting your account.
Depending on where you live (for example Washington, Nevada, California, other US states, or the EU and UK), you may have additional rights, such as to receive a copy of your data, to know which third parties received it, or to appeal a decision about your request. Email privacy@tildeon.com; we answer within 30 days and will not treat you differently for using these rights.
We collect and share consumer health data only with your consent and only to provide the service you asked for. If a breach of your health information ever occurred, we would notify you and the authorities as the law requires.
Children
Tildeon is for adults 18 and over. We do not knowingly collect information from children.
Changes
If we change this policy in a way that matters, we will tell you in the app before the change takes effect.