The short version
- We collect what you give us: your account details, the profiles you keep for yourself and your family, and the reports and scans you upload.
- We use it to run LotusPond Health for you. We never sell it, and we do not share it for advertising. AI agents see it only if you connect them, and only what you choose.
- We process health data only with your explicit consent, which you give at sign-up.
- Your records are stored in the region that serves your country: India, Europe, the United States or our international region.
- You can export, correct or delete your data in the app at any time.
- One strictly necessary cookie keeps you signed in. There are no tracking cookies.
- LotusPond explains results; it does not diagnose.
1Who we are
LotusPond Health is a product of LotusPond. The company responsible for your data (the controller under the GDPR, and the data fiduciary under India’s Digital Personal Data Protection Act) is [Legal entity name — to be completed by LotusPond], registered at [Registered address — to be completed by LotusPond]. In this policy, “we” and “us” mean that company.
This policy covers the website at health.lotuspond.ai and the LotusPond Health app: your account, profiles, uploads, the body map and the lab finder. Partner labs and the maps apps you open for directions have their own policies.
- EU representative
- [EU representative under Article 27 GDPR, if required — to be completed by LotusPond]
- UK representative
- [UK representative, if required — to be completed by LotusPond]
2Data we collect
Your account
Your name, email address and password. We store the password only as an Argon2id hash, so we cannot read it. We also keep your country of residence, your unit preferences and a record of each consent you give (which text, its version, the time and your country).
Profiles for you and your family
For each person you keep records for: name, relationship to you, date of birth, sex, height, weight, blood type, conditions, medications, allergies and notes. You choose what to fill in.
Health records
Lab results (marker, value, unit, reference range, date and source file), scans with their thumbnails, and the original files you upload, such as PDFs, CSV and JSON exports, DICOM files and images. Files are read in your browser or app, including photos and scanned pages, which are read with text recognition on your device. The values you confirm and the original file are then stored in your account.
Readings from Apple Health or Health Connect
In the iOS and Android apps you can choose to import measurements from Apple Health or Health Connect: blood pressure, blood glucose, resting heart rate, oxygen saturation, respiratory rate, body temperature, weight and body fat. Your phone asks your permission for each type, and you choose the types and the period each time. The app turns the readings into one average per day on your phone, and only the daily values you confirm in the review are stored in your account, marked with where they came from. Individual readings and every other kind of health data stay on your phone. LotusPond never writes to Apple Health or Health Connect. You can delete imported values like any other result, and turning off access in your phone’s settings stops new imports.
Data from Apple Health and Health Connect is used only to show and explain your records, never for advertising, marketing or to build profiles about you, and it is never sold. It is shared only with AI agents you connect and choose to share that profile with (section 5). Our use of information received from Health Connect follows Google Play’s Health Connect policy, including its Limited Use requirements.
Your WhatsApp number, if you link it
The number, the messages you send to LotusPond on WhatsApp and the answers (kept as conversations in your account until you delete them), and photos or PDFs you send, saved to your files. See section 5 for what WhatsApp handles.
Lab finder searches
The area, postcode or location you search with. Our server rounds a location to about 1 km before it looks up public listings, so your exact position is not sent to anyone else. Results for an area may be cached for up to 7 days, with no link to your account.
Security and technical data
A session cookie that keeps you signed in (we store only a hash of it, with your browser’s name and when it was last used), the network address of requests, used to limit repeated sign-in attempts, and a record of security events on your account, such as sign-ins, password changes and consents. Our servers keep short technical logs for security and troubleshooting for [Log retention period — to be completed by LotusPond].
What we do not collect
We do not use advertising identifiers, tracking pixels or third-party analytics, and we do not buy data about you from anyone. Everything we hold comes from you, from your browser when you use LotusPond, or, for facility listings, from OpenStreetMap, which is not data about you.
3How we use it
- To provide LotusPond Health: store your records, show them on the body map, explain them with reference ranges and notes, keep your original files and find labs near you.
- To keep accounts secure: sign-in, limits on repeated attempts, protection against abuse, and a record of security events.
- To talk to you about your account, security, or changes to this policy and the Terms. We do not send marketing messages without your consent.
- To meet legal obligations, such as answering rights requests, keeping consent records and notifying breaches.
We do not sell personal data. We do not use health data for advertising or to build marketing profiles. We do not make decisions about you by automated means that have legal or similarly significant effects.
4Legal bases and consent
| Purpose | EU, EEA and UK (GDPR) | India (DPDP Act) |
|---|---|---|
| Your account and the service | Performance of our contract with you (Article 6(1)(b)) | Your consent (Section 6) |
| Health data in your records and profiles | Your explicit consent (Article 9(2)(a)) | Your consent (Section 6) |
| Security and preventing abuse | Our legitimate interest in keeping accounts safe (Article 6(1)(f)) | Your consent, as part of the service |
| Legal obligations | Legal obligation (Article 6(1)(c)) | Compliance with law (Section 7) |
Explicit consent for health data
At sign-up we ask you to accept the Terms and this policy, and, separately, for your explicit consent to process health data. If your records will be stored outside your country, we also ask you to agree to that and name the region. We record each consent with the version of the text, the time and your country.
Withdrawing consent
You can withdraw consent at any time by deleting your account in Account and sign-in, or by contacting us. LotusPond cannot work without processing health data, so withdrawing consent closes the account. Withdrawal does not affect processing that happened before it.
United States
We collect consumer health data only with your opt-in consent. We do not sell it, and we share it only with AI agents you connect yourself, and with Anthropic for a report you choose to read with Claude; each is a separate consent you give at that moment. Section 9 has the details.
Elsewhere
In other countries we rely on your consent and on the bases your local law provides for running a service you asked for.
6Where your data is stored
Your country of residence decides where your records are kept. Each region is a separate database and file store. A small directory, kept apart from records, maps a keyed hash of your email address to your region so that sign-in knows where to look. It does not hold your email in readable form.
| Region | Where records are kept | Whose records |
|---|---|---|
| India | Servers in India | People living in India. |
| Europe | Servers in the European Union | People in the European Union and the European Economic Area, plus Guernsey, Isle of Man, Jersey, Switzerland and the United Kingdom. For Guernsey, Isle of Man, Jersey, Switzerland and the United Kingdom, records are stored outside the country, so sign-up says where and asks for agreement. |
| United States | Servers in the United States | People in the United States and its territories, plus Canada. For Canada, records are stored outside the country, so sign-up says where and asks for agreement. |
| International | Our international servers | People in every other country where LotusPond Health is available: 188 countries and territories, such as Australia, Brazil, Japan, Singapore and South Africa. Records are stored outside the person’s country, so sign-up names the region and asks for agreement. |
Transfers from the United Kingdom and Switzerland to our European region rely on those countries’ recognition of data protection in the EU. For the international region, which is located in [Location of the international region — to be completed by LotusPond], we use [Transfer safeguards, such as standard contractual clauses — to be completed by LotusPond] where your law requires them. The Trust and compliance page lists which countries go where.
7Retention and deletion
- Records: kept for as long as your account exists, and you decide what to keep.
- Deleting: you can delete a file or scan, delete all records of a profile, remove a profile, or delete your whole account. Deletion removes the data from our live systems straight away.
- Backups: deleted data leaves our encrypted backups within [Backup retention period — to be completed by LotusPond].
- Sign-in sessions: a session lasts up to 30 days and is renewed while you use LotusPond. Signing out ends it, and expired sessions are removed.
- Consent and security records: kept for [Retention period for consent and security records — to be completed by LotusPond] after an account is closed, so that we can show we met our legal duties.
8Your rights
Everyone
Wherever you live, you can:
- See and export your data: Profile details, then Export, downloads a profile as JSON.
- Correct it: edit a profile in Profile details, or edit or delete a result.
- Delete it: in Profile details (records or a whole profile) or in Account and sign-in (your account).
- Withdraw consent by deleting your account, and complain to us or to a regulator.
You can also write to us at [Privacy contact email — to be completed by LotusPond]. We may ask you to confirm the request from your account email. We do not charge for requests, and we answer within the time your law sets, for example one month under the GDPR and 45 days under Washington’s My Health My Data Act.
European Union, EEA, United Kingdom and Switzerland
Under the GDPR, the UK GDPR and the Swiss Federal Act on Data Protection you have the rights of access, rectification, erasure, restriction, data portability and objection to processing based on legitimate interests, and the right to withdraw consent. You can complain to the data protection authority where you live or work. Our lead supervisory authority is [Lead supervisory authority — to be completed by LotusPond].
India
Under the Digital Personal Data Protection Act, 2023 and its Rules you have the right to a summary of your personal data and how it is processed, the right to correction, completion, updating and erasure, the right to grievance redressal, and the right to nominate someone to exercise your rights if you die or cannot act. Please contact our Grievance Officer first (section 15). If you are not satisfied with the answer, you can complain to the Data Protection Board of India.
United States
Section 9 sets out your rights under the Washington My Health My Data Act and Nevada law. In California, under the CCPA as amended by the CPRA, you can ask to know, correct and delete your personal information, and to limit the use of sensitive personal information; we use it only to provide the service. We do not sell or share personal information for cross-context behavioural advertising, so there is nothing to opt out of. Other state privacy laws give similar rights, and we treat health data as sensitive data that needs your consent. We will not treat you differently for using your rights. If we decline a request, you can appeal by replying to our decision; if we decline the appeal, you can contact your state attorney general.
Other countries
You have the rights your local law gives you, such as those under Australia’s Privacy Act 1988, Brazil’s LGPD, Singapore’s PDPA or South Africa’s POPIA. Write to us and we will help.
9Consumer Health Data Privacy Policy
This section is our Consumer Health Data Privacy Policy under the Washington My Health My Data Act (RCW 19.373), Nevada Senate Bill 370 (2023) and similar state laws. It applies to consumer health data about people in those states.
Consumer health data we collect
Health conditions, medications, allergies and notes you add to a profile; body measurements such as height, weight and blood type; vital signs such as blood pressure, heart rate, oxygen saturation and glucose readings, typed in or imported from your phone; lab results and reference ranges; scans, images and the original medical files you upload; and lab finder searches, which could show that you are looking for health services.
Why we collect it
Only to provide the features you ask for: storing, showing and explaining your records, and finding labs near you.
Where it comes from
From you, including measurements you choose to import from Apple Health or Health Connect on your phone. Data about a family member comes from you as the person who keeps their profile.
Consumer health data we share, and with whom
We share consumer health data only with the AI agents you connect (section 5), and only the profiles and permissions you choose for each one; the agent’s provider is the third party. When you choose to read a report with Claude, that file goes to Anthropic, and when you use the LotusPond assistant, the parts of your records it needs for each answer go to Anthropic. If you link WhatsApp, your messages and the answers pass through WhatsApp (Meta). We do not share it with affiliates, including LotusPond’s other products. The service providers that host our storage process it for us under contract and may not use it for anything else. We do not sell consumer health data; selling it would need your signed authorisation, and we do not ask for one.
Consent
We collect consumer health data only after your opt-in consent at sign-up. We would ask for separate consent before sharing it for any purpose other than providing the service. We do not set up geofences around health facilities.
Your rights
- Confirm whether we collect or share your consumer health data, and see it.
- Get a list of every third party and affiliate we have shared it with, with their contact details. That list is the agents shown in Account, Connected agents, and in Recent activity.
- Withdraw consent, and have your data deleted, including from our service providers’ systems.
- Appeal if we decline a request.
How to use them
Use the controls in Profile details and Account and sign-in, or write to [Privacy contact email — to be completed by LotusPond]. We answer within 45 days. If we need longer, we will tell you why, and we may extend once by up to 45 more days. To appeal, reply to our decision within [Appeal window — to be completed by LotusPond]; we will answer the appeal in writing. If we decline it, you can contact the Washington State Attorney General or the Nevada Attorney General.
10Children and family profiles
- LotusPond accounts are for adults aged 18 or over.
- Children’s records are kept as family profiles added by a parent or guardian, who gives consent on the child’s behalf and manages the records.
- When you add an adult family member, you confirm that they have agreed to you keeping their records.
- We do not track children, monitor their behaviour, or show them advertising.
- If we learn that someone under 18 has opened an account, we will close it and delete its data. Contact us if you think this has happened.
11Security
- Passwords are hashed with Argon2id. Sign-in sessions use random 256-bit tokens, and we store only their SHA-256 hash.
- The session cookie is HttpOnly, sent over HTTPS only, and limited to our own site (SameSite=Lax).
- Every request for a profile’s data is checked against the account that is signed in.
- Changes must come from our own pages; requests from other sites are refused.
- Repeated sign-in attempts are limited by address and by email.
- Our pages use a strict Content Security Policy. Uploaded files are served so that a browser cannot run them as part of our site.
- Traffic is encrypted with HTTPS, and records and files are kept on encrypted storage in each region.
No system is perfectly secure. To report a security issue, write to [Security contact email — to be completed by LotusPond].
12Breach notification
If a breach affects your personal data, we will tell you what happened, what it means for you, what we are doing about it and what you can do. Specifically:
- EU, EEA and UK: we notify the supervisory authority within 72 hours of becoming aware of a breach, and tell you without undue delay when it is likely to put your rights at high risk.
- India: we inform you and the Data Protection Board of India without delay, and send the Board a detailed report within 72 hours.
- United States: we notify affected people without unreasonable delay and within 60 calendar days of discovery, and notify the Federal Trade Commission as its Health Breach Notification Rule requires, along with any state authority that state law names.
- Elsewhere: we follow your local law, and we tell you directly in any case.
14Changes to this policy
We will post changes on this page with a new date. If a change is material, we will tell you in the app or by email before it takes effect, and ask for your consent again where the law requires it.
15Contact
- Privacy questions and requests
- [Privacy contact email — to be completed by LotusPond]
- Data Protection Officer
- [Data Protection Officer name and email — to be completed by LotusPond]
- Grievance Officer (India)
- [Grievance Officer name, email and address in India — to be completed by LotusPond]. We answer grievances within the time the DPDP Rules set.
- Support
- [Support email — to be completed by LotusPond]
- Postal address
- [Registered address — to be completed by LotusPond]
You can also complain to a regulator: your local data protection authority in the EU or EEA, the Information Commissioner’s Office in the UK, the Federal Data Protection and Information Commissioner in Switzerland, the Data Protection Board of India, or your state attorney general in the United States.