Privacy Policy

Effective date: September 18, 2026

MyLifeGuardian exists to keep your medical life private and in your hands. This policy explains what information we collect, why we collect it, and the choices you have, on this website, in the free lab-report reader, and in the MyLifeGuardian application. The short version: your data is yours, we never sell it or share it for marketing, and you can delete everything at any time.

1. Who we are

MyLifeGuardian is operated by My Life Guardian LLC ("we", "us"). We are the data controller for the information described in this policy. You can reach us about anything privacy-related at support@mylifeguardian.app.

2. What this policy covers

This policy covers three things:

  • This website (mylifeguardian.app), the marketing site where you can read about the product and request early access.
  • The free lab-report reader, the tool at mylifeguardian.app/read-my-lab-report that explains a lab report you upload. You can use it without an account, and it is the only part of MyLifeGuardian that handles health information about people who have not signed up for anything. Section 4 is about it specifically, and it is worth reading before you use it.
  • The MyLifeGuardian app (me.mylifeguardian.app), the product itself, where you keep your health record.

3. Information we collect on this website

Early-access requests

If you request early access, we collect the name, email address and "how you heard about us" answer you provide, together with technical details of the request: your IP address and the approximate location derived from it, your browser and device type, language, time zone, and the page that referred you. We use them only to contact you about early access to MyLifeGuardian and to understand where requests come from, never for unrelated marketing, and we don't add you to any other list.

Spam protection

The early-access form is protected by Cloudflare Turnstile, which verifies that you're a person and not a bot. Turnstile is operated by Cloudflare and may process technical signals from your browser for that purpose.

Analytics, off by default

We use Google Analytics to understand how the site is used, but analytics cookies stay off unless you accept them in the cookie banner. Your choice is stored in your browser and you can change it at any time via "Cookie preferences" in the footer. If you decline (or ignore the banner), no analytics identifiers are stored.

Hosting

The site is served by Cloudflare Pages. Like most hosting providers, Cloudflare processes technical data (such as IP addresses) to deliver the site and protect it from abuse.

4. The free lab-report reader

The reader lets you upload a lab report and get a plain-language explanation of it, with no account and no sign-up. That convenience has a consequence we would rather state than bury: a lab report is health information, which the law treats as a special category needing extra protection, and you are handing it to us before you have any relationship with us. This section says exactly what happens to it.

What we receive

  • The file you upload, and the values read out of it.
  • Anything you tell the questions, every one of which is optional: sex at birth and age, whether you had eaten before the test, conditions you have been diagnosed with, anything you take, pregnancy or breastfeeding, height and weight, smoking and drinking, what runs in your family, and why you had the test. Skipping them gives you a rougher reading; it does not stop the tool working.
  • Your email address, only if you ask for the report by email.
  • Technical data needed to keep the tool available: your IP address, used to limit how many free reports one source can request per day, and Cloudflare Turnstile signals confirming you are a person rather than a script.

A temporary account is created for you

To keep your report separate from everyone else's, the tool creates a temporary account the moment you upload. You are not asked to register and we do not learn your name; the account is an internal reference held in your browser. If you clear your browser storage or switch device, you lose access to that report and we have no way to reconnect you to it.

Your file is deleted once it has been read

The uploaded file is read to extract the values, and is then deleted immediately, along with the record of the upload. What remains for the fifteen days below is the extracted values and the report written from them, not the document itself.

AI processing, and the one thing people do not expect

The reader works by sending your report to an AI model. Two stages, and both involve a third-party AI provider acting on our behalf. We work with a small number of established providers and which one handles a given stage can vary with availability, so we describe them by category rather than by name:

  • Reading the document. The file is sent to a model as-is, so that it can be read the way you see it. A lab report usually has your name, and sometimes your date of birth, printed on it, and the model reading the page sees whatever is printed there. This is the part that differs from the app, where identifying details are masked before anything reaches a model, and we would rather tell you than let you assume otherwise. If that matters to you, cover those lines before uploading, or use the app instead.
  • Writing the report. The extracted values and your answers are sent to a model to produce the explanation you read.

These providers process the data to answer on our behalf, under contract, and your data is not used to train their models.

Email, and two separate choices

If you want the report by email you give us an address and tick a box to say we may send it there. Separately, and entirely optionally, you can tick a second box to let us contact you about MyLifeGuardian. They are deliberately two boxes: the report is sent either way, and declining the second one costs you nothing. You can withdraw the second consent at any time by writing to us, and every marketing email we send carries an unsubscribe link.

Fifteen days, then it is erased

A report is kept for fifteen days so you can come back for it, and then the whole temporary account is erased automatically: the report, the extracted values, and the key its storage was encrypted under. Nothing is retained for analysis, comparison, or model improvement.

Within those fifteen days you can claim the account, which turns it into an ordinary MyLifeGuardian account with your report already in it. From that point the rest of this policy applies to it as it does to any account. If you do nothing, it disappears, which is the default.

What it is not

The reader explains what a value measures and what commonly moves it, and suggests questions worth asking. It does not diagnose, and it is not medical advice. It sees one document and nothing else: no history, no trend, no medications, no context. It says so in the report, and it says so here.

5. Information you keep in the app

The MyLifeGuardian app is a place for your records. Depending on what you choose to add, this can include:

  • Account and profile information, name, date of birth, country, and optional details like your care team, family medical history, and health goals.
  • Health records, timeline events you create or confirm: visits, surgeries, lab results, imaging, medications, conditions, allergies, vaccinations, measurements, and similar.
  • Documents, files you upload (lab reports, scans, visit notes), which are read to extract dates and values. Nothing enters your record from a document without your explicit confirmation.
  • Genetic data, if you choose to upload a raw DNA data file (for example, a 23andMe export). See section 6.
  • Conversations, your chats with your advocate.

This is sensitive information, and the product is built around that fact:

  • One isolated space per person. Your records live in your own private space and are never connected to anyone else's.
  • No selling, no ads. We do not sell your data, share it with data brokers, or use it for advertising. Ever.
  • Audit trail. Access to your data is logged, so there is a record of every read and write.
  • Encryption in transit. All traffic between your browser and our servers uses HTTPS.

6. How AI processing works

MyLifeGuardian uses AI models to read your documents and answer your questions. Answering a question about you means the model reads your record, so we are specific about what that includes and what it never does:

  • When you chat with your advocate, a summary of your record is sent with every question — your age and sex, current medications, conditions, allergies, recent and out-of-range results, vitals, any DNA findings, and your social and environmental history. That is what makes the answer about you rather than about people in general. The advocate can also look up further detail from your record while it answers.
  • Anything you mark private is never sent. Events you tick “Keep this private to me” stay on your own timeline and are excluded from every prompt, summary and export.
  • Identifying details are masked before they reach an AI model: your name and home address are not sent, and your age is used instead of your exact date of birth. The names and roles of the doctors you have saved do go with it, and their contact details when you ask a question about one.
  • AI model providers process this data to generate answers on our behalf; your data is not used to train their models.
  • The free reader works differently, and section 4 explains how: it sends the document itself to a model, so the masking described here does not apply to it.

7. Your genetic data

Uploading DNA data is entirely optional. If you do:

  • Your raw data file is parsed and screened on our servers; the analysis never round-trips through third-party genetics services.
  • Your genetic data is used only to show you results inside your own record, it is never sold, shared, or used for research without your explicit consent.
  • You can delete your DNA data at any time, independently of the rest of your record, and it is removed from your space.

8. When we share information

We share personal data only with service providers who process it on our behalf and under our instructions: hosting, security and cookieless site analytics (Cloudflare), analytics (Google, only with your consent, website only), and AI model providers (as described in sections 4 and 6). We may also disclose information if required by law, or to protect the rights and safety of our users. We never sell personal data, and we do not share it for third-party marketing.

Where the GDPR applies, we rely on: consent (analytics cookies, and your choice to add health and genetic data to the app), contract (providing the service you signed up for, including contacting you about early access), and legitimate interests (keeping the service secure and preventing abuse).

Health and genetic information is a special category of data under Article 9, which may only be processed on a narrower set of grounds. For everything you put in the app, and for everything you upload to the free reader, we rely on your explicit consent (Article 9(2)(a)). In the reader that consent is what you give by uploading a report to a tool whose only purpose is to read it, after being told on the page what will happen to it; it covers producing your report and nothing else. You can withdraw it by asking us to erase the report, or simply by not claiming the account, in which case it is erased anyway. Withdrawing does not affect processing that already happened.

The two email consents in the reader are separate and separately withdrawable: sending you your report, and contacting you about MyLifeGuardian.

10. Retention

Your record exists for as long as you keep your account. Early-access emails are kept until early access ends or you ask us to remove you. When you delete data, a document, your DNA file, or your entire account, it is removed from your space; residual copies in encrypted backups expire on a rolling basis.

The free reader is the exception, and it deletes rather than keeps. The file you upload is deleted as soon as it has been read. The report and the values behind it are erased after fifteen days, automatically and without you having to ask, unless you claim the account first, in which case it becomes an ordinary account and the paragraph above applies to it. If you gave us an email address for the report, that address is erased with the rest of it; if you also agreed to be contacted about MyLifeGuardian, we keep the address for that until you unsubscribe.

11. Your rights and choices

  • Request a copy of your data at any time. There is no self-serve export in the app today, so write to us and we will provide one. While your account is open your records stay readable, so you can also copy out anything you want to keep yourself.
  • Delete individual items, your DNA data, or your entire account, permanently.
  • Access, correct, or object, depending on where you live (GDPR, UK GDPR, CCPA/CPRA, and similar laws), you may have rights to access, rectify, restrict, or object to processing, and to lodge a complaint with your supervisory authority.
  • Withdraw consent at any time, for analytics via "Cookie preferences", for app data by deleting it.

To exercise any of these rights, use the controls in the app or write to support@mylifeguardian.app.

If you used the free reader, the same rights apply, with one practical limit worth knowing in advance: we deliberately do not hold a name for a reader session, so we usually cannot identify which report is yours from your name or email alone. If you want us to act on a specific report, write to us from the address you asked us to send it to, or quote the link we sent you. Where we genuinely cannot identify you we will say so rather than guess, and in any case the report erases itself within fifteen days.

12. Children

MyLifeGuardian is not directed to children and is intended for adults aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

This includes the free reader, which is open to anyone who visits the page and which we therefore cannot age-verify. It is for adults, and it is meant for your own report. Account holders can keep records for a child in their care through family profiles in the app, where the adult is the account holder and stays in control.

13. International transfers

Our service providers may process data in countries other than your own. Where data is transferred out of the EEA or UK, we rely on appropriate safeguards such as standard contractual clauses.

14. A note on health-privacy laws

MyLifeGuardian is a personal record tool that works for you, not a healthcare provider, insurer, or their business associate. It is therefore generally not covered by provider-side regulations such as HIPAA, but we treat your data with the level of care those regimes require, as described above.

15. Changes to this policy

If we change this policy, we will update the effective date above; for material changes affecting app users, we will notify you in the app or by email before they take effect.

16. Contact

Questions, requests, or concerns: support@mylifeguardian.app.