Legal

Privacy Policy

Last updated: February 2026

FixFirst is built on a simple principle: your health data belongs to you. We process your blood report to give you actionable insights — and we don't store, sell, or share it.

1. What we collect

When you upload a blood report, FixFirst:

Reads the file you upload (PDF or image) to extract lab values
Sends the extracted text to Anthropic's Claude API for analysis
Optionally collects context you provide (age, sex, lifestyle, medications) to personalise your results

We do not collect your name, email address, or any account information. No login is required to use FixFirst.

🔒 Your file is never stored. It is read in-memory, processed, and discarded. We do not retain your blood report or the values extracted from it after your session ends.

2. How we use your data

The data you provide is used solely to generate your personalised health priority report within your current session. Specifically:

Your blood report text is sent to Anthropic's API to identify and extract biomarker values
Any context you provide (age, sex, lifestyle, health conditions) is used locally in your browser to re-rank and personalise results
Neither your file nor your context is stored on our servers

3. Third-party services

Anthropic (Claude API) — FixFirst uses Claude to extract biomarker data from your uploaded report. The text content of your report is transmitted to Anthropic's API for this purpose. Anthropic's use of API data is governed by their Privacy Policy. Anthropic does not use API inputs to train their models by default.

Vercel — FixFirst is hosted on Vercel. Vercel may collect standard server logs (IP addresses, request metadata) as part of hosting. See Vercel's Privacy Policy.

PostHog — FixFirst uses PostHog for anonymous product analytics. PostHog records page views and in-app events (e.g. report uploaded, questionnaire completed) to help us understand how the product is used. It is configured with person_profiles: 'anonymous' — no personal profile is built, and no name, email, or health data is linked to any event. PostHog's use of data is governed by their Privacy Policy.

Vercel Analytics — In addition to hosting, Vercel provides aggregate, privacy-first traffic analytics (page views and country-level metrics). No personal data or identifiers are collected. See Vercel Analytics Privacy.

Neither PostHog nor Vercel Analytics receives your blood report, biomarker values, or any health data.

4. Cookies and local storage

PostHog may set a session cookie to distinguish anonymous sessions. This cookie contains no personal information and is used solely for anonymous event attribution. FixFirst does not use cookies or local storage for any other purpose, and no persistent personal identifiers are stored in your browser.

5. Children's privacy

FixFirst is not intended for use by individuals under the age of 18. We do not knowingly collect data from minors.

6. Medical disclaimer

FixFirst is an informational tool only. The analysis it provides does not constitute medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional before making changes to your health regimen based on this output.

7. Your rights

Because we do not store any personal data after your session ends, there is no data to request, correct, or delete. Your report and results exist only in your browser during your active session.

If you have questions about how your data was handled, contact us at fixfirstio@gmail.com.

8. Changes to this policy

If we make material changes to this policy, we will update the "last updated" date at the top of this page. We encourage you to review this page periodically.

9. Contact

For privacy questions or concerns: fixfirstio@gmail.com