Privacy Policy
Pathology Lab (Android app com.indianoccean.pathology) · published by Indian Ocean · Effective 13 October 2026
Pathology Lab helps pathology labs register and manage patients, referral sources and staff. This page explains what data the app handles, where it is stored, and how it can be deleted. Questions: pks050505@gmail.com.
1. Who is responsible for patient data
The lab and its staff decide which patient information to enter into the app. The lab is responsible for having the right to record that information and for any patient consent required by law. Indian Ocean provides the app and processes this data only to run the service for the lab — we do not use patient data for our own purposes.
2. What stays on your phone
Patients, referral sources and app settings are stored in an on-device database (SQLite) so the app works offline and loads instantly. If you never sign in, nothing leaves your device.
3. What goes to the cloud, and when
Only when you sign in with Google. Your lab's records are then sent over HTTPS to our backend and stored in a PostgreSQL database hosted in India (Mumbai) — on Google Cloud Run and Supabase (used as plain Postgres). Each lab's data is isolated: one lab can never read another lab's records.
| Data | Why |
|---|---|
| Google account name, email, user id | Sign-in, and to know which lab is yours |
| Patient records (name, sex, age, phone, address, referred-by) | The core lab register — backup, access on another device, team access |
| Referral sources (names your lab adds) | Your lab's "referred by" list, shown while registering patients |
| Staff role & lab membership | Deciding who may view or change records |
| Audit log: who did what and when, with the lab id and record id — no patient details | Security and accountability for clinical changes |
4. Analytics, crash and advertising
Patient data is never sent to logs, analytics, advertising or crash-reporting tools. Technical error reports (via Sentry) are collected to fix bugs and are configured to exclude patient information. The app shows no advertising and shares no data with advertisers.
5. What we do not do
- We do not sell your data or your patients' data.
- We do not use patient data to train models or for marketing.
- The app currently shows no advertising. If that ever changes, this policy will be updated first.
6. Permissions
- Internet: sign-in, cloud backup and sync.
The app requests only what it needs. If future features need more (for example notifications), this page will be updated first.
7. Deleting data
A patient record can be deleted inside the app; it is then removed from the live list on every signed-in device. A small internal marker that records "this item was deleted" (holding only an id, no patient details) is kept for a limited period so your other devices can sync the deletion.
Your account and your lab's cloud data: email pks050505@gmail.com from your Google account's email, or follow the delete-account page. Data kept only on a phone is removed by uninstalling the app or clearing its storage.
8. Security
All traffic uses HTTPS/TLS. Every request to the backend verifies your Google (Firebase) sign-in token, and your role and lab are checked on the server before any record is read or changed. Only members of your lab can access your lab's data.
9. Children
Pathology Lab is meant for lab owners and staff. It is not directed at children.
10. Changes and contact
We will update this page when the app's data practices change and update the date above. Contact: pks050505@gmail.com.
गोपनीयता नीति (हिन्दी सारांश)
Pathology Lab पैथोलॉजी लैब के मरीज़, रेफरल सोर्स और स्टाफ संभालने का ऐप है। सवाल: pks050505@gmail.com
- ज़िम्मेदारी: मरीज़ की जानकारी लैब दर्ज करती है; उसे रखने और ज़रूरी सहमति लेने की ज़िम्मेदारी लैब की है। Indian Ocean यह डेटा सिर्फ़ ऐप चलाने के लिए संभालता है।
- फोन पर: मरीज़, रेफरल सोर्स और सेटिंग्स आपके फोन में (SQLite) रहते हैं। साइन-इन न करें तो कुछ बाहर नहीं जाता।
- क्लाउड पर: सिर्फ़ Google से साइन-इन करने पर, आपकी लैब का डेटा HTTPS से हमारे सर्वर (भारत — मुंबई, Google Cloud + Supabase Postgres) में रखा जाता है। हर लैब का डेटा अलग रहता है।
- एनालिटिक्स/विज्ञापन: मरीज़ का डेटा कभी भी लॉग, एनालिटिक्स, विज्ञापन या क्रैश-रिपोर्ट में नहीं जाता। ऐप में विज्ञापन नहीं हैं।
- हम डेटा बेचते नहीं और न ही मरीज़ डेटा का कोई और इस्तेमाल करते हैं।
- डिलीट: मरीज़ ऐप में डिलीट कर सकते हैं। पूरा अकाउंट/लैब डेटा हटाने के लिए अपने Google ईमेल से pks050505@gmail.com पर लिखें या डिलीट-अकाउंट पेज देखें।