Benevolence Labs ("we," "our," or "us") operates lactcheck.benevolencelabs.com ("LactCheck"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. This policy applies to all users of LactCheck, including free and paid subscribers.
1. Information We Collect
1.1 Account Registration Information
When you create a LactCheck account, we collect:
Email address - Used for authentication and account recovery
Password - Stored securely by our authentication provider (Supabase) using industry-standard hashing
Display name - Optional, used for personalization
1.2 Subscription Information
If you purchase a paid subscription, we collect:
Subscription tier - Free or Pro
Subscription status - Active, inactive, or cancelled
Subscription history - Record of your subscription changes
Payment information is processed by Stripe, our payment processor. We do not store your credit card or payment details on our servers.
1.3 Drug Search Information
When you search for medications on LactCheck:
Search queries - The drug names you search for
Prediction results - The safety data and ML predictions returned to you
These are processed to provide you with the service and may be logged anonymously for service improvement and debugging purposes.
1.4 Automatically Collected Information
When you use LactCheck, we automatically collect:
Usage data - Pages visited, features used, search frequency
Device information - Browser type, operating system (collected anonymously via Vercel analytics)
IP address - Used for rate limiting and security
2. Cookies and Authentication
LactCheck uses cookies for authentication and session management:
Essential cookies - Required for authentication (Supabase Auth). These enable you to log in and maintain your session.
Session duration - Auth sessions last 1 hour by default, with automatic refresh for active users
Cross-subdomain persistence - Session cookies are shared across benevolencelabs.com subdomains for seamless experience
We do not use advertising cookies, tracking cookies, or third-party analytics cookies.
3. How We Use Your Information
We use the information we collect to:
Provide and maintain the LactCheck service
Manage your account and process subscriptions
Return medication safety predictions based on your searches
Notify you about changes to the service
Provide customer support
Detect and prevent fraud or abuse
Improve and optimize the service
4. Information Sent to Third Parties
To provide our service, your information may be sent to:
Supabase - Our authentication and database provider. They store your account information securely.
Stripe - Our payment processor for subscription management.
PubChem API - When generating predictions, molecular structure data may be retrieved.
Our ML API - Drug names may be sent to generate safety predictions.
We do not sell, trade, or otherwise transfer your personal information to third parties for advertising purposes.
5. Data Retention
We retain your information as follows:
Account data - Retained until you delete your account
Subscription records - Retained for a minimum of 5 years as required by financial regulations
Search logs - Anonymized after 90 days
6. Your Rights
You have the right to:
Access - Request a copy of your personal data
Correct - Request correction of inaccurate data
Delete - Request deletion of your account and data
Export - Request export of your data in a portable format
Passwords are hashed using bcrypt/argon2 - we cannot see your actual password
All data transmitted over HTTPS encryption
Access to databases is restricted and monitored
Regular security audits and updates
While we strive to protect your information, no method of transmission over the Internet is 100% secure.
8. Children's Privacy
LactCheck is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
9. International Data Transfers
Your information may be transferred and processed in countries other than your own. When we transfer data internationally, we ensure appropriate safeguards are in place through our service providers' terms and conditions.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice via email or through the service.
Continued use of LactCheck after changes constitutes acceptance of the updated policy.