Exactly what happens to your blood results

Your account: your first name, email address and password (stored scrambled, so even we can’t read it).

Your reports: the PDF, photo or screenshot you upload, and the date and lab.

Your results: each value you confirm, with its unit and the lab’s reference range.

Things you add: timeline notes, weekly check-ins, an injection log if you keep one, retest reminders, and your answer if you tell us whether you’re on prescribed TRT. All of these are optional.

Your consent: when you agreed to us storing your health information, so we can show we asked.

Everything is held on our own private server. Uploaded reports are encrypted before they’re saved and kept in a private folder that has no public web address. They’re only ever sent back to you, after you’ve signed in.

The connection between your device and Apexion One is always encrypted (the padlock in your browser).

You. Your record is only visible when you’re signed in to your account.

A small Apexion team. They can access the system to run it and fix problems. They don’t look at your results unless you ask for help, for example through the Feedback button or our contact form.

No one else, unless the law requires it. We don’t share your results with advertisers, data brokers, employers or insurers.

Only if you choose “Read it for me” when you upload. Your report is then sent to Anthropic, the company behind the Claude AI model, so it can pick out each value, unit and range. It’s used to read your report and nothing else, and under Anthropic’s business terms it isn’t used to train their AI.

If you’d rather not, choose “I’ll check them myself”. No AI is used, and you check each value and type any that were missed.

See and correct it. Everything you’ve confirmed is in your record. If a value is wrong, tell us with the Feedback button and we’ll fix it.

Download it. From your account you can download all your results as a spreadsheet file.

Delete it. From your account you can ask us to delete your reports, results and account. We’ll do it within one month, as UK data protection law requires, and tell you when it’s done. You can also delete a single check-in or timeline note yourself at any time.

Change your mind. You can withdraw your consent to us storing your health information at any time. We’ll then delete it.

If your information were ever exposed, we’d tell you and the Information Commissioner’s Office (the UK’s data regulator) as the law requires, and explain what happened and what we’re doing about it.