Privacy Policy

1. What this policy covers

This policy covers Indilum ("we", "us"), a web application that helps families organize children's health records. It explains what personal and health-related information we collect, how we use it, who we share it with, and the controls you have.

Indilum is currently a beta product. By using Indilum you accept the terms of this policy and our Terms of Service.

2. Information we collect

Account data: your name, email address, hashed password, family name, role (parent, caregiver, admin), and (optionally) an avatar.

Child profile data: full name, date of birth, biological sex, diagnoses, and notes that you enter.

Uploaded documents: lab PDFs and images you upload, plus metadata you attach (test label, test date, lab name, category).

Extracted health data: structured values derived from your documents (metric name, value, unit, reference range, confidence score) and any corrections you make.

Journal and supplements: any notes, observations, and supplement entries you create.

Sharing data: the doctor name, email, specialty, and scope of any share links you create; access logs of who viewed what and when.

Technical data: IP address, browser user-agent, timestamps of requests, and error diagnostics. We do not use fingerprinting, cross-site tracking, or advertising cookies.

3. How we use it

• To operate Indilum — storing and displaying your records to you and the family members you invite.
• To extract structured data from documents you upload (OCR + LLM extraction).
• To send you transactional email: sign-up verification, invitations you initiate, and security notices.
• To keep the service secure — detecting abuse, investigating incidents, and fixing bugs.
• To comply with our legal obligations.

We do not sell your data. We do not use your health data to train AI models. We do not show you advertising.

4. Subprocessors we share with

We use the following service providers ("subprocessors"). Each one receives only the minimum data needed to do its job.

• Cloud hosting provider — runs our servers and managed database.
• Cloudflare R2 — stores uploaded PDFs and images.
• Google Cloud Vision — optical character recognition on uploaded documents.
• Anthropic — converting OCR text into structured metrics. Requests are not used for model training.
• Resend — transactional email delivery. We do not include health data in emails.
• Sentry — error monitoring. PII and health values are scrubbed before events leave our servers.

We will update this list before adding new subprocessors that handle personal data.

5. People you share with

When you create a doctor share link, the doctor you send it to can view the child's records in the scope you selected until you revoke the link or the link expires. Every access by a doctor is logged. You can revoke any share link at any time.

6. Retention

• Uploaded files (PDFs, images): deleted from object storage 30 days after successful extraction unless you mark them to keep. The extracted metrics persist.
• Account data: kept until you delete your account.
• Audit logs: 1 year.
• Encrypted backups: 30 days.
• Account deletion: cascades within 7 days.

7. Your rights

Regardless of where you live, you can:

• Access and export all your data as a ZIP file.
• Correct any information you've entered.
• Delete your account and all family data.
• Object to a specific processing activity by contacting us.

If you're in the EU/UK, you also have rights under GDPR/UK-GDPR including the right to lodge a complaint with your local data protection authority. If you're in California, you have rights under the CCPA/CPRA. If you're in Washington state, the My Health My Data Act applies. Reach us at privacy@indilum.health for any rights request.

8. Security

See our Security page for detail on what we encrypt, who has access, and what we don't do yet.

9. Children's privacy

Indilum stores health records about children, entered by their parents or caregivers. The people who hold accounts must be 18 or older. We do not knowingly allow minors to hold accounts. If you believe a minor has created an account, contact us and we'll remove it.