Legal

Privacy Policy

Last updated: February 2026

FixFirst is built on a simple principle: your health data belongs to you. We process your blood report to give you specific next steps — and we don't store, sell, or share it.

1. What we collect

When you upload a blood report, FixFirst:

We do not require a name or account to use FixFirst — no login is needed unless you choose to email yourself results, in which case we ask only for the email address to send them to.

🔒 Your file is never stored. It is read in-memory, processed, and discarded. We do not retain your blood report or the values extracted from it after your session ends.

2. How we use your data

The data you provide is used solely to generate your personalised health priority report within your current session. Specifically:

3. Third-party services

Anthropic (Claude API) — FixFirst uses Claude to extract biomarker data from your uploaded report. The text content of your report is transmitted to Anthropic's API for this purpose. Anthropic's use of API data is governed by their Privacy Policy. Anthropic does not use API inputs to train their models by default.

Vercel — FixFirst is hosted on Vercel. Vercel may collect standard server logs (IP addresses, request metadata) as part of hosting. See Vercel's Privacy Policy.

PostHog — FixFirst uses PostHog for anonymous product analytics. PostHog records page views and in-app events (e.g. report uploaded, questionnaire completed) to help us understand how the product is used. It is configured with person_profiles: 'anonymous' — no personal profile is built, and no name, email, or health data is linked to any event. PostHog's use of data is governed by their Privacy Policy.

Vercel Analytics — In addition to hosting, Vercel provides aggregate, privacy-first traffic analytics (page views and country-level metrics). No personal data or identifiers are collected. See Vercel Analytics Privacy.

Neither PostHog nor Vercel Analytics receives your blood report, biomarker values, or any health data.

Resend — If you choose to email yourself your results, FixFirst uses Resend to send that email and to store the email address you provide so we can send future results you request and process unsubscribe requests. See Resend's Privacy Policy. You can unsubscribe at any time by replying "unsubscribe" to any email we send.

4. Cookies and local storage

PostHog may set a session cookie to distinguish anonymous sessions. This cookie contains no personal information and is used solely for anonymous event attribution. FixFirst does not use cookies or local storage for any other purpose, and no persistent personal identifiers are stored in your browser.

5. Children's privacy

FixFirst is not intended for use by individuals under the age of 18. We do not knowingly collect data from minors.

6. Medical disclaimer

FixFirst is an informational tool only. The analysis it provides does not constitute medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional before making changes to your health regimen based on this output.

7. Your rights

Your report and questionnaire context are never stored after your session ends, so there is no report data to request, correct, or delete. If you emailed yourself results, you can unsubscribe and have your email address removed at any time by replying "unsubscribe" to that email, or by contacting us below.

If you have questions about how your data was handled, contact us at fixfirstio@gmail.com.

8. Changes to this policy

If we make material changes to this policy, we will update the "last updated" date at the top of this page. We encourage you to review this page periodically.

9. Contact

For privacy questions or concerns: fixfirstio@gmail.com