Your health record is yours. Here's how we look after it.
Hemabook exists to bring your medical records into one place — so the way we handle that data has to earn your trust. This page explains, in plain language, what we collect, how your reports are read, how sharing works, and the control you keep at every step.
Last updated: 10 July 2026
Please note: this policy is a clear-language summary of how Hemabook is designed to work. It is not legal advice, and depending on where you live, additional rights and protections may apply to your health data. Have questions about your specific situation? Reach us at privacy@hemabook.com.
01What we collect
We only collect what's needed to build and run your health record:
- Account details — your name, email, and login credentials. Facilities and labs also register a handle and contact details.
- The documents you add — lab reports, scans, prescriptions, discharge summaries, clinical notes, and any other medical files you upload or photograph, plus anything a lab or clinic sends into your record with your consent.
- The health data we extract — the structured results read from those documents: test names, values, units, reference ranges, dates, treatments, and the facility or clinician they came from.
- People in your care — profiles you create for family members or dependants whose records you manage.
- Standard server logs — our web server records the usual request data (page requested, referring page, browser type, IP address) so we can keep the service running and secure. We run no analytics or advertising scripts, and we do not build profiles from these logs.
02How AI reads your reports
When you add a document, Hemabook uses automated processing — including AI models — to read it, extract the findings, normalise units, and file each result into your record. This is core to how the product works.
- Documents are processed to build your own record — not to train advertising profiles or third-party models on your identifiable data.
- Extraction is automated and can contain errors. Your original document is always kept alongside the extracted data so every result can be traced back and verified.
- You can turn a document into a record, review what was read, and correct or delete it.
Hemabook helps you organise medical records. It is not a medical device and does not provide medical advice, diagnosis, or treatment.
03Consent-based sharing
Nothing in your record is shared unless you choose to share it. Sharing is always explicit and always reversible.
- You decide who sees what. When you invite someone — a family member, a doctor, a caregiver — you choose whether they can only view a record or also manage it, and for which person.
- Labs and clinics send in, they don't reach in. A facility can deliver a report into your record, but registering with them doesn't give them the run of your history.
- You can only share what you manage, and you can change or withdraw any grant at any time from the sharing controls.
04How your data is stored and protected
Your documents and extracted data are stored on private, access-controlled storage. Access is gated per record — being in a shared account does not mean everyone sees everything. Sensitive actions can be protected with a PIN, and access to records is logged.
No system is perfectly secure, but we design access so that only you and the people you've explicitly granted access can reach your records.
05Your rights & control
- Access — your full record is always visible to you inside the app.
- Correction — you can edit or fix any extracted result.
- Deletion — you can delete a document, a person you manage (along with their full record), or your account. Deleting a member removes their record from Hemabook.
- Withdraw sharing — any access you've granted can be changed or revoked at any time.
To exercise any of these rights or request a copy of your data, contact privacy@hemabook.com.
06Cookies & tracking
Hemabook's marketing site uses no tracking cookies, no advertising pixels, and no third-party analytics — nothing on this site reports your visit to anyone else, which is why you won't see a cookie-consent banner here. The app itself uses only the cookies strictly needed to keep you signed in.
07Children & dependants
Hemabook lets you manage records for family members and dependants, including children, as profiles under your own account. If you create and manage a profile for someone else, you're responsible for having the right to hold and share their health information.
08Changes to this policy
We may update this policy as Hemabook evolves. When we make material changes, we'll update the date at the top of this page and, where appropriate, let you know in the app.
09Contact us
Questions about your privacy, your data, or this policy? Email privacy@hemabook.com and we'll help.