Privacy

Data-Use Disclosures

Last updated: September 7, 2026

These short notices explain what happens around key LAFIA actions. They supplement the full Privacy Policy and Terms of Service.

When you upload a report

Your uploaded laboratory report may contain sensitive health information and personal identifiers. LAFIA uses the file to extract laboratory values and generate the plain-language interpretation you request. We store the uploaded file, extracted text, report status, and generated report data so you can receive and access the service.

Your report may be processed by LAFIA’s application, hosting, and storage providers and by Anthropic’s AI service. Keep your report link private. Anyone who obtains a valid access link may be able to view the associated report.

How your report is generated

LAFIA sends report-derived content to Anthropic’s automated AI-processing service to extract values, classify results, and create explanations. LAFIA stores the generated interpretation and may create a downloadable PDF.

LAFIA does not promise that an external AI provider will not retain or use submitted content for training or improvement. AI output is educational, may be incomplete or inaccurate, and is not medical advice, diagnosis, or treatment.

Analytics and similar technologies

LAFIA uses Google Analytics 4 and may use PostHog to understand site visits, funnel steps, feature use, and email performance. These tools may receive browser or device information, pages viewed, interaction events, approximate location, and selected funnel or purchase metadata. PostHog may receive identified account or email-engagement data as described in the Privacy Policy.

The reviewed purchase event is limited to an opaque transaction identifier, generic purchase value and currency, and a generic item name. It is not designed to include laboratory values, report text, diagnoses, symptoms, or report content. Default vendor collection, cookies, URLs, autocapture, and regional settings may affect what is collected.

LAFIA also uses browser local storage to continue parts of the upload or signup flow. For privacy questions or requests, contact contact@exonta.io.

Checkout and payment

Stripe processes your payment and billing information. LAFIA receives the information needed to identify checkout, confirm payment, unlock report processing, manage credits or subscriptions, and provide support. LAFIA stores Stripe identifiers and payment status or amount information; full card numbers are processed by Stripe rather than intentionally stored in the LAFIA application database.

If you enter an email address during checkout before paying, LAFIA may save that address with the uploaded report and send automated reminders about the incomplete purchase while the report remains unpaid and eligible.

Report notifications

To deliver your requested result, LAFIA uses Resend to send report-ready messages to the email address you provide. A message may contain a report identifier and report link. A critical-finding alert may contain limited result details needed to notify you and a configured operational recipient. Keep these messages and links private.

Privacy requests

For access, correction, deletion, export, or other privacy requests, contact contact@exonta.io. Do not send passwords, full payment-card details, or report files by ordinary email. The service does not currently promise a self-service deletion or export control or a particular response time. See the Privacy Policy for additional details.

Medical disclaimer: LAFIA output is for educational and informational purposes only and does not constitute medical advice, diagnosis, or treatment. If you may be experiencing an emergency, seek urgent medical care rather than waiting for LAFIA.