RUBINO PRIVACY POLICY
Version 1.3 · 26 October 2026
1. WHO WE ARE
Rubino is provided by ARBON LLC ("we", "us"). We are responsible for the processing described in this policy.
Contact for privacy requests and support: xwolgamot@gmail.com
This policy covers the Rubino iOS app, its online scan matching and AI services, subscriptions and support.
2. SUMMARY
• You do not need an account. Your profile, original reports and result history are stored only on your device.
• Rubino's server keeps no health data. It processes a request in memory, returns the answer and keeps nothing.
• Online scan matching and AI explanations send selected lab data to Rubino and OpenAI only after you allow it. You can turn this off at any time.
• Your name, email, birth date, original photos and PDFs, lab name, address and order number are never sent to Rubino or OpenAI.
• We do not sell your information, show ads or use your health data for advertising or to train AI models.
3. INFORMATION STORED ON YOUR DEVICE
Depending on what you use, Rubino stores on your device:
• Profile: optional name, sex, birth year, height, weight, and optional pregnancy or menopause context. We ask for a birth year, not a full date of birth.
• Lab visits: test dates, lab and panel names, marker names, values, units and printed reference ranges, custom markers and doctor targets you enter.
• Original photos and PDFs you add, their previews, and links between reports and visits.
• Reminders, drafts, settings, your consent choice and saved AI explanations.
This information is protected by iOS data protection and is excluded from device backups. Rubino does not sync it to any cloud. We cannot see or access it.
4. ONLINE SCAN MATCHING
When you scan or import a report and have allowed online matching and AI, text is first read on your device using Apple's on-device text recognition. Rubino then keeps only lab-table rows: each row is rebuilt as marker name, value, unit and reference range. Report headers and any row that contains an email address, a date or a long number are removed on the device.
The request to Rubino contains these rows, their position on the page, recognition confidence, the app language, your App Store country (to choose number and unit formats) and your consent details. Our server removes any remaining rows that look like personal details. Rows the server cannot read on its own may be sent to OpenAI to structure them; only rows that contain a number are ever sent.
The original photo or PDF is never uploaded. You can always enter results manually instead.
5. AI EXPLANATIONS AND AUTOMATIC SUMMARIES
With your permission and a Rubino Plus subscription, Rubino sends selected result data through our server to OpenAI to write explanations. This includes:
• marker names and codes, values, units, reference ranges and their source, and the calculated status;
• relevant earlier results and other results from the same visit;
• test months (not full dates);
• your sex and adult age group (for example 30–39), not your birth year.
Your pregnancy setting itself is not sent. If you set a pregnancy stage, Rubino uses pregnancy-specific reference ranges for some markers, and when such a range applies to a result, the range is sent with that result. Lab values and ranges can reveal information about your health.
While online matching and AI are on, Rubino Plus also sends each new visit you save for an automatic AI summary. Only finished explanations are saved, on your device.
Our server sends OpenAI only the result data needed for the explanation, without your consent details or any device identifier. We ask OpenAI not to store requests (store = false). Under OpenAI's API terms, API data is not used to train models, and OpenAI may keep request records for up to 30 days to monitor abuse before deleting them, unless the law requires longer.
You can turn online matching and AI off in Profile → Privacy & data. This stops future requests and deletes saved AI explanations from your device. It does not recall requests already sent or cancel your subscription.
6. TECHNICAL INFORMATION AND SUBSCRIPTIONS
Installation identifier. Rubino creates a random identifier for your installation and stores it in the iOS Keychain. It is not linked to your name or Apple Account. We use it to authenticate the app with our server and to check your subscription. It is also given to Apphud as your user ID and to Apple as the purchase account token.
App authenticity. Rubino uses Apple App Attest to confirm that requests come from a genuine copy of the app.
Our server receives with each request: the installation identifier (inside a signed token), app version, platform, App Store country, language and your IP address. Our logs record only technical fields: a random request ID, the endpoint, the result code, timing, app version, App Store country, language, AI model and token counts. They never contain the installation identifier, your IP address or the content of your request. For rate limiting we use a salted hash of the installation identifier; the counters expire within an hour.
Our hosting provider (Vercel) processes IP addresses to deliver and protect the service and keeps its own platform logs for a limited period.
Subscriptions. Purchases are handled by Apple. We use Apphud to show subscription offers, validate and restore purchases and understand subscription performance. Apphud receives the installation identifier, Apple's identifier for vendor (IDFV), product and transaction information, receipts, subscription status and dates, and device details such as model, iOS and app version, language, time zone and country. Apphud starts when the app opens. We never send health data to Apphud. We do not receive your payment card details.
Free allowance. Rubino may use Apple DeviceCheck to record, on Apple's servers, whether this device has used the Free allowance. This is two bits of data with no health information.
Rubino does not use advertising, tracking or analytics SDKs, and does not track you across other companies' apps or websites.
7. WHO RECEIVES INFORMATION
• Vercel (hosting of Rubino's server, United States): processes requests in memory to provide online matching and AI.
• OpenAI (United States): structures table rows and writes explanations from the result data described above.
• Apphud: subscription validation and statistics using technical and purchase data.
• Apple: App Store purchases, App Attest and DeviceCheck.
• Google (Gmail): delivers and stores support emails you choose to send us.
• Anyone you choose: when you export or share your data from the app.
These providers process information on our behalf, under their terms, to provide the service. OpenAI is a third-party AI service. Before the app sends any data to Rubino's server or to OpenAI, it shows which data is sent and to whom, and asks for your permission. We share your data only with providers that provide the same or equal protection of user data as described in this policy, under contracts that limit their use of it to providing the service to us. We may disclose information we hold where required by law or to protect users and the service. We do not sell personal information and do not share it with data brokers or advertisers.
Online processing takes place in the United States. If you live elsewhere, your information is transferred there. Where the law requires it, we rely on appropriate safeguards such as the providers' standard contractual clauses.
Online matching and AI are not available in some countries where our AI provider does not operate. There, scans are read without AI and AI explanations are unavailable.
8. DEVICE PERMISSIONS, EXPORTS AND BACKUP
Camera: used only when you choose to scan. Photos and Files: the system pickers give Rubino only the items you select.
Face ID or passcode: optional app lock. Rubino receives only the result of the check, never your biometric data or passcode.
Notifications: optional retest reminders are scheduled on your device and do not show test names or results.
Rubino does not read from or write to Apple Health.
Backup: your Rubino records are excluded from device backups and iCloud. To keep a copy, use Download all my data. Exports (CSV, JSON, ZIP or PDF) are not password-protected; once you share a copy, we cannot control or delete it.
9. RETENTION AND DELETION
• On your device: kept until you delete it. Deleting a visit does not delete its original report, and deleting a report does not delete results already saved from it.
• Saved AI explanations: kept on your device in a limited cache and deleted when you turn AI off or delete your data.
• Rubino's server: no health data, profile or files are stored. Technical logs without content are kept by the hosting provider for a limited period.
• OpenAI: up to 30 days for abuse monitoring, as described in section 5.
• Apple and Apphud: purchase records are kept as needed to provide, restore and account for your subscription.
• Support emails: kept as long as needed to handle your request and meet legal obligations.
To delete everything Rubino stores on your device, use Profile → Privacy & data → Delete all data. This removes your profile, results, imported reports, drafts, reminders and saved AI explanations. It does not reset your Free allowance, cancel your subscription, or delete purchase records, support emails or copies you shared elsewhere.
To ask about or delete information held by us or our providers, email xwolgamot@gmail.com. Please do not send medical records or payment details.
10. YOUR RIGHTS
Depending on where you live, you can ask to access, correct or delete your information, get a copy, object to or restrict processing, and withdraw consent at any time. Most information is on your device, where you can view, export and delete it yourself. For information held by us or our providers, contact xwolgamot@gmail.com. We respond within the time required by law, and within 45 days for US consumer health data requests. You can also complain to your local data protection authority.
European Economic Area, United Kingdom and Switzerland. ARBON LLC is the controller. We process health data for online matching and AI only with your explicit consent, which you can withdraw in the app at any time. We process technical and purchase information to provide the service you requested (contract) and to keep it secure (legitimate interests). Withdrawing consent does not affect processing done before.
Rubino does not make decisions about you that have legal or similarly significant effects. AI explanations are informational only.
11. CONSUMER HEALTH DATA PRIVACY POLICY (UNITED STATES)
This section applies to residents of Washington, Nevada and other US states with consumer health data laws.
Consumer health data we collect: lab values, units, reference ranges, calculated statuses, test months, sex and adult age group, and AI explanations, when you use online matching or AI. A pregnancy-specific reference range may be sent as described in section 5.
Purpose: to match scanned lab rows and to generate explanations and visit summaries that you request.
Sources: you, through the reports you scan and the results you enter in the app.
Sharing: we disclose consumer health data only to the processors listed in section 7 (Vercel and OpenAI), which process it on our behalf to provide the service. We have no affiliates that receive it. We do not sell consumer health data.
Consent: we collect and share consumer health data only after you allow online matching and AI in the app. You can withdraw consent at any time in Profile → Privacy & data.
Your rights: you can confirm whether we collect your consumer health data, access it and the list of recipients, withdraw consent, and ask us to delete it. Email xwolgamot@gmail.com. We respond within 45 days. If we decline your request, you can appeal by replying to our answer; we decide appeals within 45 days, and you can then contact your state Attorney General.
Our server does not keep consumer health data after answering a request, and we do not attempt to identify the people behind the requests it processes.
12. AGE
Rubino is only for adults aged 18 and above. If you believe someone younger has used Rubino, contact xwolgamot@gmail.com.
13. SECURITY
We use iOS data protection for records on your device, the iOS Keychain for credentials, encrypted HTTPS connections, App Attest and a strict list of request fields. No method is perfectly secure. If a breach affecting your information occurs, we will notify you and the authorities as the law requires.
14. CHANGES AND CONTACT
When we change this policy, we update the version and date. If a change requires new permission, we will ask before starting the new processing.
ARBON LLC · xwolgamot@gmail.com