Privacy Policy

1. Scope of this Privacy Policy

This Privacy Policy applies to your use of SwiftLabs South Africa, including the mobile app, website pages, support communications, account sign-in, purchase-status checks, subscription management, barcode scanning, specimen lookup, result review, patient-history display, authenticated PDF viewing, and related app workflows.

This Policy should be read together with the SwiftLabs Terms and Conditions. If you do not agree with this Policy, do not use SwiftLabs.

2. Who we are

SwiftLabs South Africa is an independent mobile workflow companion for authorised South African healthcare users who already have legitimate access to relevant lab-result information through their own credentials.

For privacy questions, access requests, correction requests, deletion requests, security concerns, or support matters, contact SwiftLabs at info@synergydesigns.co.za.

3. Privacy roles and responsibilities

SwiftLabs processes different categories of information in different contexts.

Depending on the situation, your practice, employer, hospital, institution, or you personally may remain responsible for determining whether a specimen search, result view, PDF action, or patient-history review is lawful and appropriate.

SwiftLabs does not grant clinical access rights and does not decide which patient or specimen records you are authorised to access.

4. Information we may process

Depending on how you use SwiftLabs, we may process the following categories of information:

5. Clinical data, health information, and special personal information

Lab-result information can include sensitive clinical and health-related information. SwiftLabs is designed to keep this information as local, temporary, and workflow-specific as reasonably possible.

You must only search for, view, store, screenshot, export, discuss, or share clinical data if you are legally and professionally authorised to do so. You remain responsible for verifying patient identity, specimen identity, clinical relevance, patient consent where required, and compliance with your professional and institutional duties.

Do not send patient names, patient identifiers, specimen references, result values, screenshots, PDFs, cookies, tokens, or NHLS passwords to SwiftLabs support unless SwiftLabs specifically requests information through a secure support process and you are permitted to provide it.

6. How information is collected

SwiftLabs may collect or receive information in the following ways:

• directly from you when you create an account, sign in, enter credentials, search, scan, contact support, or manage settings;
• from your authorised NHLS or lab-system session when you initiate a result workflow;
• from your device, app, camera, secure storage, temporary cache, and operating-system permissions;
• from Apple, Google, RevenueCat, Firebase, or similar service providers used for authentication, billing, purchase status, entitlement checks, and app operation;
• from diagnostic tools where enabled, provided that SwiftLabs aims to avoid sensitive clinical content in diagnostics; and
• from website hosting or analytics tools if enabled on SwiftLabs web pages.

7. How we use information

SwiftLabs may use information to:

• create, authenticate, and secure your SwiftLabs account;
• allow supported sign-in methods such as email, Google sign-in, or Apple sign-in where available;
• start your own authorised NHLS session at your direction;
• search specimen references and display matching result workflows;
• scan supported barcodes and assist with specimen lookup;
• load and display result detail, patient history, and authenticated PDF reports where available;
• enforce the Free for Life daily allowance and recognise Pro entitlement status;
• process or verify trial, subscription, restore-purchase, and lifetime purchase status;
• provide customer support and respond to technical issues;
• detect abuse, protect app security, troubleshoot controlled errors, and prevent misuse;
• improve app reliability, parser behaviour, user experience, and compatibility; and
• comply with legal, tax, accounting, store, fraud-prevention, safety, security, and dispute-resolution requirements.

8. Legal basis and lawful processing

Where applicable privacy law requires a lawful basis or condition for processing, SwiftLabs may rely on one or more lawful grounds depending on the context, including:

• your consent or active instruction, such as when you enter credentials, search a specimen, enable Remember Login, scan a barcode, or contact support;
• performance of a contract or requested service, such as providing account access, app functionality, Free for Life access, and Pro entitlement checks;
• compliance with legal, tax, app-store, billing, consumer, accounting, fraud-prevention, or security obligations;
• legitimate operational interests, such as maintaining app security, preventing misuse, debugging, and improving reliability; and
• professional, clinical, institutional, or legal permissions that apply to you, your practice, your employer, or the healthcare setting in which the clinical data is accessed.

SwiftLabs does not replace your responsibility to ensure that your access to clinical data is lawful, authorised, necessary, proportionate, and professionally appropriate.

9. NHLS credentials and Remember Login

Your NHLS credentials remain separate from your SwiftLabs account. They are used only to start your own authorised NHLS workflow at your direction.

SwiftLabs is designed not to send NHLS usernames or passwords to Firebase, RevenueCat, Apple, Google, or any custom billing backend. If Remember Login is enabled, NHLS credentials are intended to be stored only on your device using secure storage.

You should not enable Remember Login on a shared, insecure, rooted, jailbroken, compromised, or unmanaged device. You should log out and clear remembered credentials if your device is lost, repaired, sold, shared, transferred, or no longer under your control.

10. Camera permission and barcode scanning

SwiftLabs may request camera permission so you can scan supported specimen or script barcodes.

Camera frames are used for live barcode detection and are not intentionally stored by SwiftLabs. Detected barcode values are used to populate or search the specimen reference workflow and should not be logged. If multiple barcodes are detected, SwiftLabs may show a selector with barcode type and a masked or truncated preview.

You can deny or revoke camera permission through your device settings. If camera permission is denied, barcode scanning will not work, but manual specimen entry may still be available.

11. Authenticated PDF reports and temporary files

SwiftLabs may open PDF reports only where the authorised lab workflow returns a valid PDF response or discoverable PDF link for the current result.

PDF files may be temporarily stored in app cache or temporary storage so they can be displayed inside SwiftLabs. Temporary PDF files should be cleared on NHLS logout, SwiftLabs sign-out, and session expiry where technically possible.

You are responsible for any screenshots, downloads, shares, exports, backups, cloud sync, print actions, or device-level copies created outside the intended SwiftLabs workflow.

12. Sharing and service providers

SwiftLabs does not sell personal information and does not use clinical result data for third-party advertising. SwiftLabs may use selected service providers to operate the app and related services.

Service providers may process information under their own terms and privacy policies where they provide services directly to you, such as app-store billing or account-level payment handling.

13. International transfers and storage locations

Some service providers used by SwiftLabs, including app stores, authentication providers, entitlement providers, support tools, hosting providers, and diagnostic services, may process or store information outside South Africa.

Where applicable, SwiftLabs aims to use reputable providers and reasonable safeguards for cross-border processing. However, store platforms and third-party providers may determine their own processing locations, retention periods, and legal safeguards under their own terms and privacy policies.

14. Advertising, SwiftScripts companion link, and marketing

SwiftLabs does not sell clinical data and does not use lab-result data, patient information, specimen references, PDF reports, or NHLS credentials for third-party advertising.

SwiftLabs may display a limited SwiftScripts companion-app link or banner. SwiftScripts is presented as a related doctor workflow companion, not as a third-party advertising network.

If SwiftLabs sends service emails or product updates, you may be able to opt out of non-essential marketing messages. Transactional, security, account, billing, or support messages may still be sent where necessary.

15. Retention

Retention depends on the type of information and where it is stored:

• NHLS credentials: retained on-device only if Remember Login is enabled, until you disable it, log out, clear app data, uninstall the app, or the app clears credentials during logout/sign-out/session changes.
• Free allowance data: may be stored locally or in app-related state to manage daily usage limits by signed-in account and local date.
• PDF cache: temporarily retained in app cache or temporary storage to display the report, and intended to be cleared on logout, sign-out, or session expiry where technically possible.
• Account and subscription data: retained while your account is active and for as long as needed for access, support, billing, tax, fraud-prevention, store compliance, legal, and dispute-resolution purposes.
• Support communications: retained for as long as reasonably needed to respond, keep support records, investigate issues, and protect SwiftLabs or users.
• Website and technical logs: retained for operational, security, analytics, troubleshooting, and abuse-prevention purposes according to hosting or tool settings.

Apple, Google, RevenueCat, Firebase, NHLS, TrakCare, your employer, your practice, and other third parties may retain information under their own policies and legal obligations.

16. Security measures

SwiftLabs uses reasonable technical and organisational safeguards appropriate to the nature of the app. These may include:

• HTTPS for network communications where supported by the relevant system;
• secure on-device storage for remembered NHLS credentials where enabled;
• separation of SwiftLabs account sign-in from NHLS credentials;
• temporary cache use for PDF viewing rather than long-term intentional PDF storage;
• controlled error messages designed to avoid exposing PHI, credentials, cookies, tokens, raw HTML, or request bodies;
• avoidance of intentional logging of patient identifiers, specimen references, raw result values, comments, PDF URLs, and PDF bytes;
• restore-purchase and entitlement checks through app-store and entitlement-provider systems; and
• support guidance asking users not to send sensitive clinical data through ordinary email.

No app, device, storage system, network, or third-party service can be guaranteed to be completely secure. You must keep your own device, accounts, passwords, and professional access secure.

17. Your privacy choices and rights

Depending on the laws that apply, you may have rights to request access to, correction of, deletion of, objection to, restriction of, or information about certain personal information processed by SwiftLabs.

You can also:

• choose not to enable Remember Login;
• disable Remember Login and clear saved credentials;
• deny or revoke camera permission;
• use manual specimen entry instead of barcode scanning where available;
• sign out of SwiftLabs;
• cancel subscriptions through Google Play or Apple App Store where applicable;
• restore purchases in the app where available;
• request correction or deletion of SwiftLabs account data held by SwiftLabs; and
• avoid sending sensitive clinical data in support messages.

To exercise privacy rights relating to SwiftLabs account or support data, email info@synergydesigns.co.za. For app-store purchase records, Firebase account records, RevenueCat entitlement records, NHLS records, employer records, or clinical records held by another party, you may need to contact that party directly.

If you believe your personal information has been processed unlawfully, you may have the right to lodge a complaint with the Information Regulator of South Africa or another competent authority.

18. Account deletion and local data deletion

You may request deletion of SwiftLabs account data held by SwiftLabs by emailing info@synergydesigns.co.za. We may need to verify your identity before actioning the request.

Deleting SwiftLabs account data does not necessarily delete:

• app-store purchase records held by Google or Apple;
• RevenueCat or entitlement-provider records required for purchase restoration, billing, fraud-prevention, or compliance;
• NHLS, TrakCare, hospital, practice, employer, or laboratory records;
• records we must retain for legal, security, tax, accounting, dispute-resolution, or fraud-prevention purposes; or
• data stored locally on your device unless you log out, clear app data, delete temporary files, or uninstall the app.

For immediate local cleanup, use app logout/sign-out features where available, disable Remember Login, clear the app cache/data through your device settings, and uninstall the app if necessary.

19. Children

SwiftLabs is intended for authorised adult healthcare professionals and authorised healthcare users. It is not directed to children or patients seeking their own results.

Clinical data about children may appear only if an authorised healthcare workflow returns paediatric laboratory information that you are permitted to access. You must handle such information according to applicable child-health, privacy, consent, professional, and institutional obligations.

20. Security incidents and suspected compromise

If you believe your SwiftLabs account, NHLS credentials, device, patient data, PDF report, or clinical workflow information has been compromised, contact SwiftLabs promptly at info@synergydesigns.co.za and also follow your employer, practice, hospital, NHLS, and professional reporting procedures where applicable.

Where required by applicable law, SwiftLabs may investigate, take containment steps, notify affected users, contact service providers, preserve evidence, and report a security compromise to the relevant authority.

If your NHLS credentials may have been exposed, you should change your password where possible and contact the relevant NHLS or institutional support channel immediately.

21. Changes to this Privacy Policy

SwiftLabs may update this Privacy Policy when the app changes, service providers change, store requirements change, legal requirements change, or privacy/security practices change.

The updated version will show a new effective date. Continued use of SwiftLabs after the updated Policy takes effect means you acknowledge the updated Policy.

22. Contact

For privacy questions, access requests, correction requests, deletion requests, support matters, or security concerns, contact:

Email: info@synergydesigns.co.za

Please do not include patient names, patient identifiers, specimen references, screenshots, PDF reports, NHLS passwords, cookies, tokens, or other sensitive clinical information in ordinary email unless specifically requested through a secure support process.