Privacy Policy – Labtest1

Effective Date: 25th Oct 2024  ·  Last Updated: 28th April 2025

This Privacy Policy outlines how Simino Labtest Private Limited (“Company”, “Labtest1”, “Labtest1.com”, “we”, “us”, or “our”) collects, uses, stores, discloses, and protects your personal information when you use our mobile application, website, and related services (“Platform”).

1. Introduction

Labtest1 is a digital health marketplace that allows users to book diagnostic tests, upload prescriptions, download test results, schedule sample pickups, and access lab reports. Our services are primarily for users in India, although international users may order on behalf of Indian residents.

By accessing or using Labtest1, you acknowledge that you have read and understood this Privacy Policy and agree to the terms stated herein. If you do not agree, please do not use the Platform.

2. Information We Collect

• Personal Information: Full name, contact details (phone/email), gender, date of birth, address, government-issued ID (if applicable), prescriptions, test results, insurance details (if provided).
• Health Information: Medical history, symptoms, doctor’s prescriptions, diagnostic data, and lab report content.
• Device & Usage Data: Device type, IP address, browser, OS, logs, error reports, time zone, session activity.
• Location Data: Fine/coarse GPS data (foreground and background), used for enabling phlebotomist routing, verifying sample pickup locations, and ensuring delivery compliance.
• Media Permissions: Photo uploads (e.g. prescription images) via gallery or camera. Media read/write access for storing test reports securely on your device. MANAGE_EXTERNAL_STORAGE is requested to support upload/download of medical files beyond the app sandbox.
• Cookies & Identifiers: To manage session tracking, usage preferences, and analytics (non-personalized).

3. Purpose of Data Collection

We collect data to:

• Register and authenticate users
• Schedule sample pickups and deliveries
• Match tests with appropriate lab partners
• Deliver and store reports digitally
• Assist phlebotomists in reaching accurate locations
• Improve customer experience and support
• Meet legal and diagnostic compliance obligations

4. Use of Location Data

Background Location Access: Our app collects location data even when not actively used, solely to enable live tracking of field personnel (phlebotomists) during scheduled pickups. This is required for operational transparency, safety, and compliance with diagnostic service SLAs.

• Collected only after user grants permission
• Used internally and not shared with third-party advertisers
• Cleared after delivery completion or session timeout

5.1 Use of Storage & Media Permissions

Labtest1 requires access to your device's storage to enable critical diagnostic features:

• To upload medical prescriptions from your device during test booking
• To download and store diagnostic reports (PDF or images) outside the app sandbox
• To allow you to review and share reports with your healthcare provider, family, or insurer

These features are core to the functioning of the app. We request MANAGE_EXTERNAL_STORAGE permission to ensure seamless access to your device’s files, which enables:

• Cross-platform report access
• Local sharing with other apps or doctors
• Offline review of medical records

We do not scan, collect, or transmit any unrelated media, photos, or documents on your device. All access is limited to files explicitly selected or generated by the user.

5.2 Use of RECEIVE_SMS Permission

Our app uses the RECEIVE_SMS permission only to automatically detect incoming One-Time Password (OTP) SMS messages during the login or signup process. We do not read other SMS.

6. Legal Basis & Consent

• Your informed consent for optional services
• Fulfillment of contract for ordered services
• Compliance with legal/regulatory frameworks
• Legitimate interests like fraud detection, quality control, or health record maintenance

7. Information Sharing

We may share your data with:

• Accredited labs
• Authorized logistics/phlebotomists
• Doctors involved in diagnosis
• Payment gateways
• Government agencies when required by law

We do not sell or rent personal information for commercial gain.

8. Data Retention

Retained as long as necessary for medical, operational, or legal reasons. Users can request deletion subject to legal obligations.

9. Your Rights Under DPDP Act, 2023

• Access, correct, or delete your data
• Withdraw consent
• Nominate another person for rights in case of death or incapacity

10. Data Security Measures

We implement SSL encryption, secure hosting, audit trails, and access controls to protect your data.

11. Children’s Privacy

Labtest1 is intended to be used by adults (aged 18 and above) who may also book diagnostic services for their children or dependents. We do not knowingly allow minors under the age of 18 to independently create accounts or use our services without parental consent.

If a parent or legal guardian books a test for a minor, we may collect necessary health-related information such as the child's name, age, gender, and test history as part of the diagnostic process. This data is used solely for healthcare service fulfillment and report generation.

Parents or legal guardians are responsible for ensuring accurate information is provided and that consent is granted for collecting such data on behalf of the child. We do not market or serve content directly to children.

If you are a parent or guardian and believe that your child’s personal information has been collected without your consent or knowledge, please contact us immediately at support@labtest1.com. We will take appropriate steps to investigate and delete the data if necessary.

12. Health App Declaration

Labtest1 includes features that help users manage and understand their health, including:

• Viewing lab test results and tracking test history
• Monitoring health trends such as BMI and weight
• Uploading and storing prescriptions
• Accessing general health education content and videos

We do not provide medical advice, diagnosis, or treatment. All information within the app is intended for general awareness and educational purposes only. Users must consult a certified healthcare professional for any medical concerns or interpretation of lab reports.

All health data collected is handled in accordance with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (India), and is not shared with third parties for advertising purposes. We ensure data security, transparency, and access controls for all sensitive health-related information.

13. Advertisement

Labtest1 does not use health or location data for personalized ad targeting. Ads shown (if any) are contextual and not behaviorally profiled.

14. Communication Choices

By signing up for Labtest1, you consent to receive essential service-related communications, including booking confirmations, test result notifications, and account updates. You may also receive occasional promotional or wellness content from Labtest1 or its verified partners.

You can manage your communication preferences within your account settings or unsubscribe using the "unsubscribe" link in promotional emails. However, please note that you cannot opt out of receiving non-promotional messages related to service operations, policy updates, or legal obligations.

15. Reviewing, Changing, or Deleting Information

You have the right to review, update, or request deletion of your personal information collected through Labtest1. To make such a request, please contact our support team via the support@labtest1.com email or use the "Contact Us" section in the app or website.

Upon receiving a valid request, we will take appropriate steps to verify your identity and process your request in accordance with applicable data protection laws. Some historical data may remain in backups or logs for audit, legal, or diagnostic purposes.

Please be aware that if you have shared content such as reviews or public contributions (if applicable), copies of this information may remain viewable in cached or archived versions, or may have been stored by other users prior to deletion.

16. Changes to This Policy

We may update this policy periodically to reflect changes in legal requirements, our practices, or service features. The latest version is always available at https://labtest1.com/privacy.

17. Contact Us

18. Response Time

We aim to respond to privacy-related requests within 48 hours of receipt.

19. Compliance Statement for Google Play

Labtest1 collects background location data during active sample pickup workflows. This allows us to verify visit completion and ensure delivery compliance for users and staff. This access is never used for advertising and is requested with user permission only when essential.

20. Permissions Declaration Mapping for Google Play Console

This section outlines the purpose, usage, and required declarations for each sensitive permission requested by the Labtest1 app.

📂 MANAGE_EXTERNAL_STORAGE

• Use Case: Upload prescriptions, download reports
• Core Feature: Yes
• What Happens Without It: Upload/download functionality is disabled

📁 READ/WRITE_EXTERNAL_STORAGE & READ_MEDIA_IMAGES / VIDEO / AUDIO

• Use Case: Upload prescriptions, download reports
• Core Feature: Yes
• What Happens Without It: Upload/download functionality is disabled

📍 ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION, ACCESS_BACKGROUND_LOCATION

• Use Case: Real-time tracking of phlebotomist visits, accurate home sample pickup
• Core Feature: Yes
• What Happens Without It: Route tracking, ETA, and address accuracy are compromised

🌐 INTERNET

• Use Case: API communication for test bookings, result fetch, payments
• Core Feature: Yes
• What Happens Without It: App will not function

📷 CAMERA

• Use Case: Capture prescription images for upload
• Core Feature: Optional (enhanced UX)
• What Happens Without It: User can still choose images manually

21. Grievance Redressal

For any complaints, access requests, or data-related queries, please contact our designated Data Protection Officer (DPO):

We respond to all verified requests within 48 hours.

22. Governing Law

This Privacy Policy is governed by the laws of India. Any disputes arising from this policy will be subject to the exclusive jurisdiction of the courts in Bhubaneswar, Odisha.

23. Acknowledgment

Your continued use of the Labtest1 app or website after any update to this policy constitutes your agreement to the revised terms.