Our Commitment to Privacy
OmniBioFex.Cloud is built with strict data minimization principles. Because the platform is not clinical-grade and is intended only for educational and research use, we designed our infrastructure to keep uploaded medical data private and controlled by you.
1. How We Handle Uploaded Images
We designed OmniBioFex to minimize data retention. Here is exactly what happens when you upload a scan.
UPLOADS ARE STORED IN YOUR PRIVATE FOLDER
When you run a report, the image you attach is uploaded to a private Cloud Storage folder scoped to your account. Only you can read it via the authenticated app.
FAILED ANALYSES ARE CLEANED UP
If the inference step fails, the uploaded image is deleted immediately and any wallet charge is refunded automatically.
DELETION ON REQUEST
You may request deletion of your account and all stored history at any time by emailing privacy@omnibiofex.cloud. Requests are completed within 30 days.
NO TRAINING
We never use your uploaded content to train, fine-tune, or otherwise improve any model.
2. Information We Collect
We collect the minimum amount of information required to operate the service.
AUTHENTICATION DATA
Google OAuth provides your email address to create your account ID. We do not store passwords or phone numbers.
PATIENT METADATA
When you generate a report, you may optionally provide a patient name, age, and sex. Stored alongside your report in your private history.
REPORT OUTPUT
The structured clinical report is stored in Firestore to populate your historical dashboard.
CHAT HISTORY
Follow-up chat messages, model replies, and citation metadata are stored under your account so you can resume any session.
3. Third-Party Infrastructure
OmniBioFex is built on established cloud infrastructure. Each provider is governed by its own privacy policy.
| Provider | Purpose | Data Retained |
|---|---|---|
| Groq | OmniBioFex 1.0 47B inference | See Groq's inference privacy policy at groq.com/privacy (no images retained for training) |
| Google Firebase | Authentication & Firestore | Email, patient metadata, report text |
| Razorpay | Payment Processing | Billing details (no medical data) |
| Resend | Transactional email | Email address only |
4. Cookies & Analytics
SESSION COOKIES
Required to keep you logged in after Google OAuth. Strictly necessary.
NO TRACKING PIXELS
We do not use advertising pixels, cross-site tracking cookies, or third-party analytics.
AGGREGATE METRICS ONLY
Any analytics we collect are aggregate, anonymized, and used solely to monitor uptime and error rates.
MEDICAL PRIVACY MODE
A client-side toggle. When enabled, chat previews are redacted in your sidebar and the terminal signs you out after 15 minutes of inactivity. No server-side tracking.
5. Your Rights
ACCESS
Request a copy of the account data we hold for you.
DELETION
Request full deletion of your account, uploaded images, and stored report history. Completes within 30 days.
CORRECTION
Request correction of inaccurate account information.
6. Data Security
TRANSPORT ENCRYPTION
All traffic between your browser, our servers, Groq, and Google Cloud is encrypted in transit using TLS 1.2 or higher.
ACCESS CONTROL
Production credentials and Firebase access rules are restricted to a minimal set of authorized engineers under the VantyrixTek organization.
7. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced on the main page and reflected in the "Last updated" date above.
CONTACT & GOVERNANCE
- Privacy inquiries: privacy@omnibiofex.cloud
- Governed by the same terms as the OmniBioFex Terms of Service
- Model: omnibiofex/1.0-47b served via Groq
- Platform operator: VantyrixTek