Privacy notice
This notice explains how uploaded health information, account data, reports, and limited service telemetry are processed.
Last updated: 13 August 2026
Who is responsible
ExplainMyTest service operator is the service operator and data controller. Contact: support@explainmytest.com. Postal address: Postal address to be published before production launch.
Data we process
We process the files and information you choose to submit, which may include laboratory results, symptoms, medicines, images, and other health data. If you create an account, we also process your email address, a password hash, report and payment status, and essential security and performance events. We do not sell health data or use it for advertising profiles.
Why and on what basis
We use ordinary personal data to provide the service you request and use health or other special-category data only after your explicit consent. The purposes are document reading, translation, educational explanation, report delivery, safety, fraud prevention, and service operation. You can withdraw consent for future processing, but withdrawal does not make earlier lawful processing unlawful.
Raw uploads are temporary
Raw PDFs, images, and temporary rendered pages are used only for the requested processing and are deleted automatically when that processing request finishes, including after an error. Processing is normally limited to four minutes. We do not use raw uploads to train our own models. Before production, each enabled provider account and contract must be configured to prohibit general model training with submitted health data.
Reports and retention
The structured findings and generated report are separate from the raw upload. Guest reports are scheduled for automatic deletion after 7 days so the preview can be reopened. Reports attached to an account or payment are scheduled for deletion after 30 days. Account, transaction, security, or legal records may be retained longer where necessary for the account, a dispute, fraud prevention, tax, or another legal obligation. You may request earlier deletion.
Third-party AI processors
To produce and improve the requested result, relevant document content may be sent to configured AI and infrastructure processors, which may include OpenAI services (including GPT or Codex), Google services (including Gemini), or comparable providers. Only providers covered by appropriate contractual, privacy, and security safeguards should be enabled. Provider processing may occur in another country. We do not authorize providers to use submitted health data for advertising or general model training.
Your choices and rights
Depending on your location, you may request access, correction, deletion, restriction, portability, or object to processing, and may complain to your data-protection authority. Contact support@explainmytest.com. Do not upload another person's data unless you are legally authorized to do so. Users must be 18 or act through an authorized guardian.
Security and changes
We use reasonable technical and organizational safeguards, but no online service can promise absolute security. We will update the date and this notice when processing practices materially change.