HomiLabs Medical AppsECG Reader — Privacy Policy
ECG Reader is a decision-support tool for qualified clinicians that reads photographs of printed ECGs. It is designed so that nothing is saved. This policy explains exactly what the app handles and what happens to it.
What the app handles
- The ECG image you choose. On your phone you crop it, and the app resizes it and removes photo metadata (location, device and time). It is then sent over an encrypted connection (HTTPS) to our server.
- Optional clinical details (age, sex, symptoms, blood pressure, heart rate, SpO₂, known conditions), only if you choose to enter them.
- An anonymous, random app identifier. It is created automatically when the app first connects, and is used only to limit the number of readings per day. It is not linked to your name, email address or phone number.
- An app-integrity check (Google Play Integrity / Firebase App Check). It confirms that requests come from the genuine app and contains no personal data.
How it is processed
- Our server runs on Google Firebase (Cloud Functions, region Mumbai). It sends the image to an AI service, Anthropic, which returns a structured description of the ECG. Our server then applies a fixed rule table and sends the result back to your phone.
- Anthropic processes the image as our service provider under its commercial terms. It does not use this data to train its models, and it keeps it only for a limited period for safety and abuse monitoring. See Anthropic's privacy policy.
- If you add clinical details, they are sent with the reading (not the image) to our server, checked against the rule table, and discarded.
What is stored
- Not stored: the image, the reading, the alert result and any clinical details. Our server does not write them to a database, to files or to logs.
- On your phone: the result exists only on the result screen and is discarded when you leave it. The app keeps no history, saves no copy to your gallery and leaves no temporary files. The only setting it remembers is that you accepted the disclaimer.
- Stored briefly: a daily usage counter for the anonymous identifier, which is deleted automatically after two days. Anonymous identifiers themselves are deleted after 30 days.
- Technical logs record only timing and error types, never content.
What we never do
- No accounts and no login.
- No analytics, no advertising and no tracking.
- No sale or sharing of data, except with the processors named above, and only to provide the reading.
Patient information
Do not photograph or upload patient names, ID numbers or other identifying details. The app asks you to crop the printed header away before sending. You are responsible for following your institution's rules on patient data.
Your choices and deletion
Since we keep no data about you or your patients, there is nothing to export or delete. Uninstalling the app removes its anonymous identifier from your phone; the identifier is also deleted from our side automatically. Questions: homilabs.smc@gmail.com.
Children
ECG Reader is a professional tool for clinicians and is not directed at children.
Changes
If this policy changes, we will update this page and the date above. Significant changes will also be shown in the app.