Your privacy & app data

Notice version: 11 October 2026

Biolabs Research uses the information you provide to operate your app account, save your research schedule and support your use of the service. Contact carl@biolabsresearch.co.za for privacy questions, corrections or access requests.

Information stored

Your name, email address, account identifier, password hash, recovery-code hash, privacy acknowledgement and the schedule entries and notes you choose to save. Passwords and recovery codes are not stored in readable form. Email ownership is not verified; app accounts are separate from Shopify accounts. Do not use this app to store medical records or another person’s personal information.

Purpose & access

Your saved profile and schedule are not public. App requests are restricted to the signed-in account. Authorised site administrators and service providers can access server-side records when administering or supporting the service. Account and schedule data are not sent to Shopify by this app. Following shop links takes you to the separately operated store.

Hosting & security

The app uses the Sites hosting service and a Cloudflare D1 database. Connections use HTTPS, passwords use salted hashes, session cookies are secured and login attempts are limited. Cloudflare documents encryption at rest and in transit for D1. This is not end-to-end encryption: the server must read account and schedule data to provide the service. Hosting may involve processing outside South Africa; this notice does not promise South African-only storage.

Retention & your choices

Account records remain while your account is active. You can export your profile and schedule, edit or remove schedule entries, or delete your account in My profile. Deletion removes the account, sessions and schedules from the live app database. Hosting-provider backups or security records may remain under their retention policies. Contact Biolabs if you need to correct your profile details or withdraw your acknowledgement.

Cookies & device storage

An essential sign-in cookie keeps your session for up to seven days. This app does not add advertising trackers. Browser session storage may temporarily hold unsaved changes and notification preferences. Signing out clears this app’s account data on that device. Calendar exports and downloaded recovery codes are files you control and must keep private.

Recovery & account deletion

Save your recovery code when creating an account. Using it changes your password, replaces the code and signs out existing sessions. Email-based password resets are not currently available. Account deletion requires your current password.

Privacy standards

These technical measures support confidentiality and user control; they are not a certification of compliance with POPIA, GDPR, ISO 27001 or a medical-data standard. Biolabs must maintain the applicable organisational responsibilities, provider arrangements and privacy procedures. You may contact South Africa’s Information Regulator about a privacy concern.

Cloudflare D1 security documentation · Sign in · My profile