Privacy Notice

Version 0.5, 6 November 2026

What changed: we added Forgot password (reset codes by email). Details are under Changes.

Lexiome helps you keep your family's health records in one place. This notice says what we do with them. Plain words. Questions: hello@lexiome.ai. We are a filing clerk, not a doctor. We organise records. We do not give medical advice.

Who we are

Noor Uddin Qureshi, trading as Lexiome, Pakistan. We decide how your data is used (the "controller").

We are a small team and have not yet appointed a UK/EU representative. We will before accepting real health data from UK/EU residents.

What we collect

• Your name and email.
• What you add: documents, photos, medicines, conditions, allergies, and details about family members. This is health information.
• If you choose Google sign-in: your Google account ID and your Google-verified email.
• Password-reset records: a scrambled (hashed) version of your reset code and when it was made. If someone types an email into the reset form, we keep a scrambled version of that email for up to 30 days to limit how many emails we send, even if no account exists.
• Basic use data: sign-in times and your actions on your records, so you can see who looked at a record.
• If you share a record, who you shared it with.

Only add details about another person if you are allowed to (see our Terms).

Why we use it

Only to run your vault: sign you in, store and organise your records, read your documents, show them to people you choose. We do not sell your data. We do not use it for advertising. We do not use it to train AI models.

Who handles it for us

• Fly.io: hosting and storage. United States.
• Google Vertex AI: reads photos and documents you upload to find medicines and dates. Google Cloud. Google may process the photo in any of its regions, not only the United States. We send photos to Google (Vertex AI) to read them. Google's terms say it does not use this data to train its models. Google may keep inputs for a limited time (up to about 24 hours) for technical and safety checks.
• Google (sign-in): identity only. If you choose to sign in with Google, it confirms who you are. It is separate from Vertex AI and never sees your records or photos.
• Resend: sends the emails we send you: sign-in codes, password-reset codes, and a notice when your password changes. Servers in Japan. These emails hold a code or a short notice, not your records.

Each one gets only what it needs and works under a contract with us. Nobody else sees your records unless you share them. We delete the photo after you confirm it, or within about an hour.

Signing in with Google (optional)

Google sign-in is only a way to sign in. It is separate from photo reading (Google Vertex AI). You can use your email and a code instead.

• What Google learns: that you signed in to Lexiome, and when. Google never sees your records or photos.
• What we receive: your Google account ID and your Google-verified email. We ask Google only for the scopes openid, email and profile. Google may also send your name and profile photo with the reply. We do not keep them.
• What we store: your Google ID and your verified email. No password for a Google-only account, no photo, no Google name and no Google tokens.
• How we use it: only to sign you in and to contact you about your account. No ads. We do not sell it or share it.
• Delete: when we delete your account, your Google ID and email go with it.
• If you already have an account with the same email, we do not join them by ourselves. You sign in first, then link Google in Settings.

Google handles your Google account under Google's Privacy Policy. To remove Lexiome's access, go to Google Account > Security > Third-party access.

Lexiome's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Where your data is

Stored in the United States. Sign-in codes pass through Japan. Photos you upload may be read by Google outside the United States. Our team is in Pakistan and may access data from there to run and support the service. If you live in the UK or EU, your data is moved outside your country. We use contracts approved for this: EU Standard Contractual Clauses and the UK addendum / UK IDTA, or the provider's approved transfer terms, plus Japan's adequacy status where it applies. Ask us for a copy of the safeguards.

Our legal basis (UK and EU)

This beta is for made-up data only. We do not ask for or process real health data. Real health data will need a separate explicit consent before we accept it. Your name, email and sign-in data are used to run your contract with us. For someone else's records you add: you must have their agreement, or the legal right to act for them.

How long we keep it

Until you delete it. Deleted data leaves live systems straight away. Backups clear within about 5 days. Reset codes and the scrambled email records are removed from live systems after 30 days, or when you delete your account. We keep a minimal proof that you agreed (date, version) for as long as the law requires, in case of a dispute.

When you tap Remove on a medicine, we hide it from your list but keep it for 30 days so you can undo. After 30 days we delete it for good. The same goes for old versions of a medicine you have edited. Your data export includes removed items during those 30 days. To delete something sooner, email hello@lexiome.ai.

Your choices and rights

• Ask to see, correct, or export your records.
• Ask us to delete your account.
• Take back your permission.
• UK/EU: also restrict or object to use of your data, and ask us to move it to another service.

You can take back your permission or ask us to delete your account at any time. Email hello@lexiome.ai and we will do it within 30 days. We may need to check it is you. If you are in the UK or EU you may complain to your regulator: UK: Information Commissioner's Office (ico.org.uk). EU: the authority in your country. You can also go to court. We would like the chance to fix it first.

Sharing

You decide who sees a record. You can stop sharing any time.

Children

Lexiome is for adults (18+). A parent or legal guardian may add a child's records inside their own account.

Security

Encrypted storage and sign-in codes. No online service is risk-free. If someone who should not see your data gets access to it, we will tell you without undue delay. We will also tell the authorities when the law requires.

Early access

Lexiome is new and still being tested. It may change or stop. We will give you notice to export your data.

Changes

If we change this, we will tell you in the app before it applies. If it needs new consent, we will ask again.

v0.5 (6 November 2026): we added Forgot password. The Resend entry now lists reset codes and a password-changed notice, "What we collect" lists the reset records, and "How long we keep it" gives their 30-day limit. Same purpose, same company; you do not need to agree again.

v0.6 (9 November 2026): we added Remove and Edit for medicines. "How long we keep it" now says removed items, and old versions of an edited medicine, are kept 30 days so you can undo, then deleted for good. Same purpose, same company; you do not need to agree again.