LabIris Privacy Policy

Last updated: 19 June 2026

This policy explains what information the LabIris app ("LabIris," "the app," "we") collects, how it is used, and the choices you have. We built LabIris to do its job with as little personal data as possible. We do not sell your data, show ads, or use third-party advertising or analytics trackers.

1. Information the app handles

Data	Where it goes	Why
Reagent label photos you capture or select	Sent to OpenAI's API for processing; not stored on our servers after the scan completes	To read the label and extract its text
Extracted label data (reagent name, manufacturer, catalog/lot number, expiry, etc.)	Stored locally on your device	So you can review, edit, search, and export your scans
Anonymous app identifier (a Firebase anonymous sign-in token)	Stored securely on your device; sent to our backend with each free scan	To enforce the daily free-scan limit without an account
Your personal OpenAI API key (only if you choose to add one)	Stored in the iOS Keychain on your device; sent only to OpenAI when you scan	To let you use your own key for unlimited scans

LabIris does not require you to create an account, and we do not collect your name, email address, contacts, location, or device advertising identifiers.

2. How your photos are processed

When you scan a label, the image is transmitted over an encrypted connection for AI-powered text extraction:

Free scans are routed through our secure backend (a Google Firebase Cloud Function), which forwards the image to OpenAI and returns the extracted data. The image is processed to fulfill your request and is not retained by our backend.
If you add your own OpenAI API key, images are sent directly from your device to OpenAI using that key.

Third-party processing. Because scanning relies on OpenAI, your label images are shared with OpenAI, L.L.C. as part of providing the service. OpenAI's handling of API data is governed by its own terms and privacy policy. Please avoid scanning labels that contain personal or confidential information you do not wish to share with a third-party processor. See OpenAI's Privacy Policy.

3. Data stored on your device

Your saved scans live in a local database on your device. Your personal API key and the anonymous sign-in token are kept in the iOS Keychain. This information is not uploaded to us. If you delete the app, the locally stored scans are removed from your device.

4. Our backend (Firebase)

To provide free scans without requiring an account, the app uses Google Firebase for anonymous authentication and to count scans against the daily free limit. The only information associated with your anonymous identifier is a per-day scan count. No personal information is attached to it.

5. Data retention

Label data you save stays on your device until you delete it (or delete the app).
Scan-count records tied to your anonymous identifier are kept only as needed to enforce daily limits.
We do not maintain our own copies of your scanned images after processing.

6. Children's privacy

LabIris is not directed to children under 13, and we do not knowingly collect personal information from children.

7. Your choices

You can delete any saved scan within the app at any time.
You can remove your personal API key in Settings.
You can stop all data processing by not scanning and by deleting the app.

8. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Continued use of the app after changes take effect constitutes acceptance of the updated policy.

9. Contact

If you have questions about this policy or your data, contact us at vuhuy.contact@gmail.com.