Legal
Privacy Policy
Last updated 21 October 2026
In short KinLab keeps your family's lab reports in your private account so you can see how results change over time. We collect only what the app needs, we never sell or share your data for advertising, and you can export or permanently delete it at any time.
1. Who we are
KinLab is a free app operated by Tamojit Ghosh, an individual developer based in India ("we", "us"). We decide how your personal data is used for the purposes in this policy and are responsible for it as the data fiduciary under India's Digital Personal Data Protection Act, 2023. Contact: rhobustdev@gmail.com.
KinLab was previously called HealthPal.
2. Information we collect
Account. Your name, email address and a unique account identifier from Google Sign-In, or your mobile number if you sign in with your phone (Firebase sends the one-time code by SMS and uses reCAPTCHA to block abuse). Firebase Authentication also keeps the profile photo link Google provides; KinLab does not use it.
Profile. Details you enter in your profile: name, age, and optionally gender, height, weight and blood group.
Family profiles. The name and relation (for example "Baba", Father) of each family member whose reports you keep, which reports belong to them, and, if you add them, their year of birth and sex.
Doctor links. When you create a doctor link: which person it is for, when it was created and when it expires, plus the read-only copy described in "Sharing with a doctor" below.
Health reports. Reports you add: report name, date, the patient's name, the lab and referring doctor if you add them, test results (values, units, reference ranges and status), summaries and your private notes. We do not keep the photo or PDF you scan, or the rest of the text printed on it (such as addresses, phone numbers and lab IDs): see "Reading your reports".
Consent record. When and which version of these terms you accepted, and the app version, so we can show that you consented.
Issue reports. If you report an incorrectly read result: the report identifier and name, the issue category, your explanation and the app version.
Feedback. If you send feedback in the app or on our website: your rating, your message, the feedback type, the app version and, only if you give it, an email address for our reply. Feedback is not linked to your account or your reports. Write to us to have it deleted.
Usage statistics (only if you allow them). If you tap “Allow” on our usage-statistics notice, we use Google Analytics to count how KinLab is used: pages visited, the type of device and browser, approximate location (country or city) and actions such as “report scanned” or “share link created”. These events never include your health data, report contents, test names or values, and are not linked to your account. Advertising features and Google signals are switched off. If you tap “No thanks”, or ignore the notice, Google Analytics is never started and nothing is sent to it. You can change your choice any time in the app (Settings) or here: .
What we do not collect. We do not use advertising tools, and we do not collect your location, contacts or device identifiers for advertising. Without your permission, we do not use analytics either.
3. How we use it
To store your reports and show them back to you, build trend charts, back them up to your account and restore them on any device where you sign in.
To read the values from reports you scan or upload (see "Reading your reports" below).
To show a family member's records to someone you choose, only when you create a doctor link.
To respond to your requests and issue reports, keep the service secure, and meet legal obligations.
We use your data only with your consent and only for these purposes. We do not sell it, use it for advertising, or use it to make decisions about you.
4. Reading your reports
When you scan or upload a report, KinLab reads the values on your device. The photo or PDF is not sent to KinLab, Google or any other service to be read.
No report files kept. The file is shown to you only while you check the values. When you finish, KinLab keeps the values you confirm and lets the file go: it is not saved on your device or in the cloud, and neither is the rest of the text printed on it. Keep your paper or PDF report as you normally would.
Reading software. The first time you scan in the web app, your browser downloads open-source reading software (pdf.js and Tesseract) from the public jsDelivr code server, or from KinLab's own website if that server cannot be reached. Either sees only an ordinary download request from your browser. Only the software is downloaded; your report is never sent.
Automatic reading can make mistakes. You review and can correct every value before it is saved.
5. Where your data is stored and who can see it
Your account, profile, family profiles and report results are stored in Google Firebase (Authentication and Cloud Firestore), which processes data for us under Google's data processing terms. If you allow usage statistics, Google Analytics processes them under the same terms. Google's servers may be located outside India.
Report photos and PDFs are never stored, on your device or in our cloud. Only the results you save are kept.
A copy of your results is also kept on your device (in the browser's storage when you use the web app) so the app works quickly.
Data is encrypted in transit and at rest by Google. Security rules allow only your signed-in account to read or change your data through the app. As the operator, we have administrative access to the service, and we access your data only to provide support you ask for, to keep the service secure, or when the law requires it.
We share personal data only with the service providers above, with people you choose through a doctor link, or when required by law or a valid order of an Indian authority.
6. Reports about family members
Many people use KinLab to manage a parent's or relative's reports, each in their own profile. If you add another person's health information, you confirm that you have their permission or are legally authorised to manage it, and that you will remove it if they ask.
7. Sharing with a doctor
You can create a private link to one person's records to send to their doctor or anyone else you choose. Before creating it, you confirm you have that person's permission.
What is shared. The link shows a read-only copy of that person's name, their age and sex if you added them, report names, dates and labs, results, reference ranges and summaries. It does not show your private notes, the doctor's name, your account details or other family members, and there are no report files to show.
Who can see it. Anyone who has the link can open it, without signing in, until it expires (you choose 24 hours, 7 days or 30 days) or you turn it off in Family & sharing. Links use long random codes and cannot be searched or listed, but anyone a link is forwarded to can also open it, so share it only with people you trust.
Updates and removal. While a link is active, its copy is kept up to date with that person's reports. Turning a link off deletes its copy straight away. An expired link stops working immediately and its copy is deleted the next time you open KinLab.
After viewing. KinLab does not record who opens a link. Once someone has viewed or saved information from a link, we cannot control what they do with it.
8. How long we keep data
We keep your data while your account is active. A report you delete is removed from your account and cloud backup straight away.
When you delete your account, we delete your profile, family profiles, reports, files, doctor links, consent record and issue reports. Residual copies in Google's systems are removed on Google's standard deletion schedule.
9. Your rights
Access. Download a copy of your data at any time from Settings → Download my data.
Correction. Edit any report or your profile in the app.
Erasure and withdrawing consent. Delete individual reports, or your whole account from Settings → Delete account. Deleting your account also withdraws your consent.
Nomination. You may nominate a person to exercise these rights for you in case of death or incapacity by writing to us.
Grievances. Write to our Grievance Officer (below). We will respond within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.
10. Age requirement
KinLab is only for people aged 18 or older. We do not knowingly allow children to create accounts. If we learn that a child has created an account, we will delete it.
11. Security incidents
If a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires, with what happened and what you can do.
12. Changes to this policy
If we make a material change, we will tell you in the app and ask you to accept the updated policy before you continue.
13. Grievance Officer and contact
Tamojit Ghosh
Email: rhobustdev@gmail.com