Legal

Privacy Policy

Last updated: November 2026

FixFirst is built on a simple principle: your health data belongs to you. We process your blood report to give you specific next steps. We don't keep your report file, and we don't sell your data.

1. What we collect

When you upload a blood report, FixFirst:

Reads the file you upload (PDF or image) to extract lab values
Sends the extracted text to Anthropic's Claude API for analysis
Optionally collects context you provide (age, sex, activity level, diet, supplements, and family history) to personalise your results
If you choose to email yourself your results, collects the email address you provide to send that email

We do not require a name or account to use FixFirst — no login is needed unless you choose to email yourself results, in which case we ask only for the email address to send them to.

🔒 Your report file is deleted as soon as it is analyzed. We do not keep a copy of it. We do keep anonymous usage analytics, which record which markers were flagged and their status (see section 3), and your email address only if you give it.

2. How we use your data

The data you provide is used solely to generate your personalised health priority report within your current session. Specifically:

Your blood report text is sent to Anthropic's API to identify and extract biomarker values
Any context you provide (age, sex, activity level, diet, supplements, and family history) is used locally in your browser to re-rank and personalise results
If you request your results by email, the email address you provide is used to send that email and stored so we can send future results you request and process unsubscribe requests
Your file is not stored on our servers. Your questionnaire answers are not saved to an account or profile; your activity level and supplement choices are recorded as usage analytics (see section 3)

3. Third-party services

Anthropic (Claude API) — FixFirst uses Claude to extract biomarker data from your uploaded report. The text content of your report is transmitted to Anthropic's API for this purpose. Anthropic's use of API data is governed by their Privacy Policy. Anthropic does not use API inputs to train their models by default.

Vercel — FixFirst is hosted on Vercel. Vercel may collect standard server logs (IP addresses, request metadata) as part of hosting. See Vercel's Privacy Policy.

PostHog — FixFirst uses PostHog for product analytics. PostHog records page views and in-app events (e.g. report uploaded, questionnaire completed, which markers were flagged and their status, and the activity level and supplements you selected) to help us understand how the product is used. We may publish aggregate counts from these events (for example, how often a marker was flagged across all reports), never anything that identifies a person or a single report. Visitors are anonymous by default. If you give us your email address anywhere on the site (to receive results, join a waitlist, or get a quiz result), that address is sent to PostHog and your events are linked to it. PostHog's use of data is governed by their Privacy Policy.

Google Analytics 4 — FixFirst uses Google Analytics to measure page views and traffic sources across the site. It sets cookies to tell visits apart and receives page addresses, approximate location, and device details. We do not send it your report, biomarker values, or questionnaire answers. See Google's Privacy Policy.

Your uploaded blood report file is never sent to PostHog or Google Analytics.

Resend — If you choose to email yourself your results, FixFirst uses Resend to send that email and to store the email address you provide so we can send future results you request and process unsubscribe requests. See Resend's Privacy Policy. You can unsubscribe at any time by replying "unsubscribe" to any email we send.

4. Cookies and local storage

FixFirst does not set cookies of its own. The analytics services described above set theirs:

PostHog — a session cookie and local-storage entry that distinguish sessions and attribute events; they are linked to your email address if you give us one
Google Analytics — cookies (names starting _ga) that distinguish visitors and sessions

FixFirst also keeps a few entries in your browser's storage: which version of a page you were shown when we test wording, whether you have seen our support prompt, and a flag used to recover from a stale page load. They hold no name, email address, or health information. You can clear cookies and site storage in your browser settings at any time.

5. Children's privacy

FixFirst is not intended for use by individuals under the age of 18. We do not knowingly collect data from minors.

6. Medical disclaimer

FixFirst is an informational tool only. The analysis it provides does not constitute medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional before making changes to your health regimen based on this output.

7. Your rights

We do not keep your report file, so there is no file to request, correct, or delete. Usage analytics are not tied to your name; if you gave us your email address, your events are linked to it and you can contact us below about them. If you emailed yourself results, you can unsubscribe and have your email address removed at any time by replying "unsubscribe" to that email, or by contacting us below.

If you have questions about how your data was handled, contact us at fixfirstio@gmail.com.

8. Changes to this policy

If we make material changes to this policy, we will update the "last updated" date at the top of this page. We encourage you to review this page periodically.

9. Contact

For privacy questions or concerns: fixfirstio@gmail.com