Privacy policy
Effective July 29, 2026
The short version. We collect the minimum the app needs to read your labs and check your bottles. The photos and PDFs you send are read, then thrown away — never stored. We keep the extracted results so you can see them again. We sell nothing about you, show no ads, and never use your data to train AI models. Email [email protected] and we delete everything.
Who we are
Decode and decodelabs.app are operated by TrueStandard Labs LLC, a Texas limited liability company ("we", "us"). This policy covers the Decode iOS app and this website.
What we collect
On this website
- Waitlist email. If you join the waitlist, we store the email address you typed, when you submitted it, and which form on the page you used. Nothing else. This site sets no analytics or advertising cookies.
In the app
- An account identifier. The app creates an anonymous per-device identifier. If you sign in with Apple, we also receive the name and email address Apple shares with us.
- Health information you give us. Photos or PDFs of your lab reports, photos of supplement labels, lab results you let us read from Apple Health, your answers to profile questions (such as age and sex — the app uses these to keep its answers safe and relevant), and questions you type.
- What we keep from it. The extracted results — marker names, values, units, dates — plus the verdicts the app produced, the supplements in your stack, and your conversation history.
- What we throw away. The photos and PDFs themselves. They are processed in memory and immediately discarded — never written to disk, never attached to your account, never kept as files.
- Purchase status. Subscriptions are handled by Apple. We see whether your subscription is active — never your card number or billing details.
Apple Health
If you connect Apple Health, Decode reads the lab results your providers filed there. It is read-only: the app never writes anything back to Apple Health. Data read from Apple Health is used only to show you your results and check them against what the experts said. It is never used for advertising, never shared with third parties for marketing, and never sold — as Apple's rules require and as we'd hold ourselves to anyway.
Who touches your data
We run our own servers and use a small number of processors to make the product work:
| Processor | What it does with your data |
|---|---|
| Google (Gemini API) | Reads the photo or PDF you submit to extract the results printed on it, and processes the questions you ask. Google's paid API terms prohibit using this data to train their models. |
| Apple | Sign in with Apple and subscription billing. |
| Resend | Sends the waitlist and invite emails. |
| DigitalOcean | Hosts our servers, in the United States. |
What we never do
- We never sell your data, or share it with anyone for advertising.
- We never use your data to train AI models — ours or anyone else's.
- We never store the photos or PDFs you send.
- We show no ads and run no third-party analytics trackers.
How long we keep things
Your results, stack, and conversations are kept while you use Decode, so the app can show your history and trends. The waitlist email is kept until launch invites are done, then deleted. Delete anything sooner whenever you like — see below.
Deleting your data
You can delete individual scans and results inside the app. To delete your account and everything attached to it, email [email protected] from any address and tell us the email or device you used — we'll remove the results and everything we learned from them. This can't be undone.
Your rights
Depending on where you live (including under the GDPR in Europe and the CCPA in California), you have the right to access the data we hold about you, correct it, delete it, receive a copy of it, and not be discriminated against for exercising any of these rights. Email [email protected] and we will honor these requests regardless of where you live.
Security
Everything moves over encrypted connections (TLS), and access to our servers is limited to the people who run them. No system is perfect; if you find a problem, tell us at [email protected] and we will take it seriously.
Children
Decode is for adults. It is not directed at anyone under 18, and we do not knowingly collect data from anyone under 18.
Changes
If this policy changes, the new version is posted here with a new date at the top. A change that meaningfully affects your health data would be flagged in the app, not slipped into a page you'd never revisit.
Contact
TrueStandard Labs LLC · Texas, USA
[email protected]