This Privacy Policy explains how DocSpace Technologies collects, uses, discloses, and protects information when you use the Labmate mobile application and related services (the "App" or "Service"). It is written to comply with Kenya's Data Protection Act, 2019 and its subsidiary regulations, and to give a fair account of your rights if you access the Service from elsewhere.
DocSpace Technologies is the data controller for personal data processed through the App, and, where we process data on behalf of a healthcare provider or other institution that has its own arrangement with you, we may act as a data processor for that specific data. Our registered contact point for data protection matters is dataprivacy@docspace.co.ke.
| Category | What it includes | Source |
|---|---|---|
| Account data | Name, email address, profile photo, and authentication tokens if you sign in with Google or Apple | You, via Google/Apple sign-in |
| Health data you submit | Photos or files of lab results, imaging summaries, or other diagnostic reports you upload for interpretation | You |
| AI interpretation output | The plain-language summary generated from your submission | Generated by our AI processing pipeline |
| Payment data | Subscription status and transaction identifiers. We do not collect or store your card number; billing is handled by RevenueCat and the Apple App Store / Google Play billing systems | RevenueCat, Apple, Google |
| Device & usage data | App version, device type/OS, crash logs, and general interaction events (e.g., screens viewed, features used) | Automatically, from your device |
| Communications | Messages you send to support, and, if you opt in, your email for our newsletter | You |
Before a report is sent to our AI processing partner, we attempt to automatically redact personally identifying information from it — for example, names, dates of birth, ID numbers, or facility details that may appear on a lab or imaging report. We also give you a manual redaction tool in the App so you can black out or remove any additional identifying detail yourself before submitting.
The goal of both features is that no personally identifying information reaches our AI processing partner. However:
We recommend you review each report before submitting and use the manual redaction tool for any detail you don't want shared, especially information about a third party (such as a family member named on a shared report).
Under the Data Protection Act, 2019, information about your health status is sensitive personal data and requires a heightened lawful basis to process. We process it on the basis of your explicit, informed consent, given when you upload a report and accept this Policy. You may withdraw this consent at any time by deleting your account, though withdrawal does not affect processing already carried out. Where we are not relying on consent (for example, to keep basic security logs), we rely on our legitimate interest in operating a secure, functioning service, or on the necessity of processing to perform our contract with you.
We do not sell or rent your personal data, and we do not share it with third parties for their own marketing purposes. We share limited data with service providers who process it on our behalf, under contractual confidentiality and security obligations, including:
We may also disclose information where required by Kenyan law, court order, or a lawful request from the Office of the Data Protection Commissioner or another competent authority, or to protect the rights, property, or safety of DocSpace, our users, or the public.
Some of our service providers (including OpenAI) process data on servers located outside Kenya. Where we transfer personal data outside Kenya, we do so only where permitted under the Data Protection Act, 2019 and its General Regulations — for example, with your consent, under contractual safeguards with the recipient, or another lawful transfer mechanism recognized by the Act.
We use industry-standard safeguards, including encryption of data in transit (HTTPS/TLS) and on-device encryption of locally stored reports, together with access controls limiting who at DocSpace can view personal data. No system is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Office of the Data Protection Commissioner and affected users without undue delay, in line with our obligations under the Data Protection Act, 2019.
Subject to applicable law, you have the right to:
To exercise these rights, contact us at dataprivacy@docspace.co.ke. We may need to verify your identity before acting on a request.
The interpretations Labmate generates are produced by an automated AI system. This processing does not result in any automated decision producing legal or similarly significant effects on you — it is informational only, and no medical, insurance, or other consequential decision is made by the App itself. See the medical disclaimer in Part 2 for important limitations on how this output should be used.
Labmate is not directed at, and is not intended for use by, children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
If you access Labmate from the European Economic Area, the United Kingdom, the United States, or elsewhere, additional local rights may apply to you (for example, under the GDPR or applicable US state privacy laws). Labmate is not operated by a HIPAA-covered entity, and use of the App does not, by itself, create obligations under HIPAA. We aim to honor equivalent rights of access, correction, deletion, and portability for all users regardless of location, to the extent reasonably practicable.
We may update this Policy from time to time to reflect changes in our practices or the law. We will post the revised Policy in the App with an updated "Last Updated" date, and, for material changes, provide additional notice (such as an in-app notification) before the change takes effect.
Questions or requests regarding this Policy: dataprivacy@docspace.co.ke or hello@docspace.co.ke. Postal address: Safaricom, Mazeras, Voi 80300, Taita–Taveta County, Kenya. Phone: +254 783 361040.
↑ back to top of Privacy Policy
These Terms of Use ("Terms") are a binding agreement between you and DocSpace Technologies governing your use of the Labmate App. By creating an account or using the App, you agree to these Terms. If you do not agree, do not use the App.
By downloading, accessing, or using Labmate, you confirm that you have read, understood, and agree to be bound by these Terms and our Privacy Policy.
You must be at least 18 years old, or the age of legal majority in your jurisdiction, to create an account. If you are using the App on behalf of, or to help interpret results for, a minor or other person in your care, you confirm you are legally authorized to do so and take responsibility for that use.
Labmate provides AI-generated, informational summaries of lab and imaging reports. It does not provide medical advice, diagnosis, or treatment, and no doctor-patient relationship is created by your use of the App. AI interpretations may contain errors, omissions, or inaccuracies, and reference ranges or context relevant to your specific health history may not be reflected. Always consult a qualified physician or other licensed healthcare provider before making any medical decision, and do not disregard, delay, or discontinue professional medical advice because of anything generated by Labmate.
If you are experiencing a medical emergency, call your local emergency number or go to the nearest emergency facility immediately. Do not use the App in place of emergency care.
Labmate is an informational tool and is not a registered medical device, and is not evaluated, cleared, or approved by any medicines or medical devices regulator, including the Kenya Pharmacy and Poisons Board or any equivalent authority elsewhere. Labmate does not provide telemedicine, remote consultation, or clinical services regulated by the Kenya Medical Practitioners and Dentists Council or similar bodies, and no DocSpace staff review, verify, or endorse individual AI outputs as clinical advice.
You must sign in using Google or Apple to access the App's features. You are responsible for maintaining the confidentiality of your account credentials and for all activity under your account. Notify us promptly at dataprivacy@docspace.co.ke of any unauthorized use.
You agree not to:
We may suspend or terminate accounts that violate this section.
You retain ownership of the reports, images, and files you upload ("Your Content"). By submitting Your Content, you grant DocSpace a limited, non-exclusive, worldwide license to process it solely to provide the Service to you (including sending it to our AI processing partners as described in the Privacy Policy). You represent that you have the right to upload Your Content and that doing so does not violate any third party's rights.
Interpretations generated by the App are produced by artificial intelligence and are provided "as is," without warranty of accuracy or completeness. You use AI-generated output entirely at your own risk, and are solely responsible for any decision made or action taken in reliance on it. Treat it as a starting point for a conversation with a qualified healthcare provider, not as a final word.
Redaction is a shared, best-effort process. As described in our Privacy Policy, we attempt to automatically redact personally identifying information from your report before it is sent for AI processing, and we provide a manual redaction tool for you to remove any further detail you don't want shared. Neither method is guaranteed to catch everything. You are responsible for reviewing your report and using the manual redaction tool before submitting, particularly if it contains information about anyone other than yourself.
The Labmate App, including its software, design, branding, and content (excluding Your Content), is the exclusive property of DocSpace Technologies and is protected by applicable intellectual property laws. Except for the limited right to use the App as intended, no license or right is granted to you. You may not copy, modify, distribute, sell, or reverse-engineer any part of the App without our prior written consent.
To the fullest extent permitted by law, the App and all output are provided "as is" and "as available," without warranties of any kind, whether express, implied, or statutory, including implied warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy, or reliability. We do not warrant that the App will be uninterrupted, error-free, or secure, or that AI interpretations will be accurate, complete, or suitable for any particular purpose.
To the fullest extent permitted by Kenyan law, DocSpace Technologies, its officers, employees, and agents shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of data, health outcomes, profits, or goodwill, arising out of or relating to your use of the App, even if advised of the possibility of such damages. Our total aggregate liability for any claim arising from these Terms or your use of the App shall not exceed the greater of (a) the amount you paid us in the twelve (12) months preceding the claim, or (b) [e.g., KES 5,000].
Nothing in these Terms excludes or limits liability that cannot lawfully be excluded or limited, including liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, or any other liability that cannot be excluded under the laws of Kenya or the Consumer Protection Act, 2012.
You agree to indemnify and hold harmless DocSpace Technologies from any claims, damages, liabilities, and expenses (including reasonable legal fees) arising from: (a) your violation of these Terms; (b) Your Content; (c) your misuse of the App, including reliance on AI output in place of professional medical advice; or (d) your violation of any third-party right.
You may stop using the App and delete your account at any time. We may suspend or terminate your access to the App, with or without notice, if we reasonably believe you have violated these Terms, engaged in fraudulent or unlawful activity, or if we discontinue the Service. Provisions that by their nature should survive termination (including Sections 8, 10–13, and 15) will survive.
These Terms are governed by the laws of the Republic of Kenya, without regard to conflict-of-law principles. Before initiating any formal dispute, you agree to first contact us at dataprivacy@docspace.co.ke so we can attempt to resolve the matter informally. If unresolved within 30 days, any dispute arising out of or relating to these Terms shall be subject to the exclusive jurisdiction of the courts of Kenya [or: shall be referred to and finally resolved by arbitration in Nairobi under the Nairobi Centre for International Arbitration (NCIA) Rules, in English, by a sole arbitrator]. Nothing here limits your right to lodge a complaint with the Office of the Data Protection Commissioner or another applicable regulator.
DocSpace Technologies
Safaricom, Mazeras, Voi 80300, Taita–Taveta County, Kenya
Email: dataprivacy@docspace.co.ke / hello@docspace.co.ke
Phone: +254 783 361040