Privacy Policy

This Privacy Policy explains how Enaro (“we”, “us”) collects, uses, stores, and protects information when you use our platform. Enaro is currently in early access; this policy will be expanded as the product and its data-handling practices mature — see the placeholders below.

Information we collect

• Account information: your email address and authentication credentials.
• Health information: the lab reports you upload, and the biomarker values, dates, and reference ranges extracted from them.
• Usage information: basic application activity needed to operate the service (e.g. sign-in events, error logs).

How we use your information

• To provide the core service — organising, normalising, and displaying your lab results over time.
• To send you service notifications (e.g. when a report finishes processing) and, where relevant, transactional emails.
• To maintain the security and integrity of the platform.

We do not sell your personal health information to third parties.

How your data is protected

Data is encrypted in transit and at rest. Access to your data is isolated per account using database-level row-level security, so your records are not visible to other users. See our Security page for more detail on our technical safeguards.

Third-party processors

Enaro uses third-party infrastructure and AI providers to operate the service — including cloud hosting, database, optical character recognition, and AI-assisted extraction providers — solely to process your lab reports on our behalf. [PLACEHOLDER — requires legal review] A complete, current sub-processor list and the data protection terms governing each will be published here before general availability.

Your rights and choices

You can export your data or delete your account at any time from Settings. Depending on your jurisdiction, you may have additional rights over your personal data — see Data & Privacy for how we approach the Philippines Data Privacy Act, India's Digital Personal Data Protection Act, and GDPR principles.

Data retention

When you delete your account, your data is soft-deleted and retained for 30 days before permanent deletion, to allow recovery from accidental deletion.

Contact

Questions about this policy can be sent to hello@enaro.care.

[PLACEHOLDER — requires legal review] This policy has not yet been reviewed by legal counsel and does not constitute a claim of compliance with any specific data protection law.