Privacy Policy
Last updated: July 13, 2026
Who we are
Healthfolio (healthfolio.online) is operated by COGNERA LLP, a limited liability partnership registered in England and Wales, company No. OC457887. The data controller for your personal data is COGNERA LLP, registered office: 3rd Floor, Suite 207, Regent Street, London, W1B 3HH, United Kingdom. If anything in this policy is unclear, write to us at support@healthfolio.online.
What we collect
- Laboratory documents you upload: photos or PDF files of lab reports.
- Values you enter manually (for example, individual lab results).
- Your email address, if you choose to save it — used to send you a sign-in link to your card.
- Anonymous usage analytics (which screens are used, without the content of your answers or documents).
Health data
Lab results and related information are health data — a special category of personal data under UK and EU GDPR (Article 9). We process it only with your explicit consent (Article 9(2)(a)), which you give by ticking the consent checkbox before your first upload.
- You can withdraw consent at any time — we then stop processing your health data.
- You can delete your data yourself with the delete button in your card, or by emailing support@healthfolio.online. Deletion removes your documents, extracted values and card facts.
Processors we use
- Vercel — website hosting.
- Supabase — database and file storage (your card, documents and extracted values).
- Resend — transactional email (sign-in links).
- PostHog — anonymous usage analytics (processed in the EU).
- Stripe — payment processing (Stripe receives payment details, not your health data).
- Anthropic — AI processing: used to read the text of documents you upload, to render report and chat text, and to generate general educational explanations of lab markers that fall outside our core set. These AI explanations describe what a marker measures as general information — they are not a diagnosis and are not verified by a doctor; only the marker name and unit are sent, never your specific value.
Advertising conversion measurement
If you arrive from one of our ads and make a purchase, we report that purchase to the advertising platform the ad ran on (Google Ads, Meta) server-to-server, so the platform can measure which ads lead to purchases. This report contains only: the fact of the purchase, the amount paid and its currency, the click identifier the platform attached to its own ad link, and a one-way hash (SHA-256) of your email address used solely to match the purchase to the ad click — it cannot be reversed back into your address. It never contains health data: no documents, no lab values, no answers, and nothing about how you use the service.
International transfers
Some of our processors store or process data outside the United Kingdom. Where that happens, the transfer is protected by safeguards recognised under UK GDPR: the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, or an applicable UK adequacy decision. Copies of the relevant safeguards are available on request at support@healthfolio.online.
Cookies
Our analytics is cookieless: it runs in memory, sets no cookies and stores nothing on your device. The only cookie we set is a functional one that remembers your language choice; it is not used for tracking or advertising and does not require consent.
How long we keep data
Your card and documents are kept for as long as you use the service. If you delete your card or ask us to delete it, the data is removed from our systems; backups expire on a rolling basis.
Your rights
You can request access to your data, a copy of it (export), correction, or deletion at any time — with the in-app controls or by emailing support@healthfolio.online. We answer within 30 days.
Your right to complain
If you are unhappy with how we handle your data, please tell us first at support@healthfolio.online— we will do our best to put it right. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk.