Privacy Policy

• Service provision and personalization
• Research topic exploration and feedback matching
• Cross-lab collaboration and community features
• Service improvement and new feature development
• Important notifications and updates

Research data is securely protected through:

• AES-256 encryption for data storage
• Lab-level access control system
• Only the researcher can delete their own data
• Regular security audits and vulnerability assessments

Information is shared with third parties only in the following cases:

• Cloud server and infrastructure service providers (data hosting)
• Push notification service providers (Firebase Cloud Messaging)
• Compliance with legal requirements

Posts and personal information are never disclosed to external parties or sold without your explicit consent.

Under privacy laws and GDPR, you have the following rights:

• Right of Access: Request to view your personal information
• Right to Correction: Request correction of inaccurate information
• Right to Deletion: Request deletion of personal information
• Right to Portability: Request data transfer to another service
• Right to Restriction: Object to specific processing

• Data is retained while your account is active
• When you delete your account, information that identifies you, such as your email, username, name, nickname, affiliation (university, department, lab), school email verification and profile photo, is destroyed without delay (replaced with anonymous values), and your lab memberships and push notification tokens are deleted
• Some information may be retained longer for legal compliance
• Research posts and comments you wrote before deleting your account remain, with no author shown. To remove them too, delete them yourself first or email support@labmate.cloud. Other information that stays on our servers, such as encrypted field note sync data, note hash receipts and saved labs, is also deleted on request

• LabMate does not knowingly collect personal information from children under 16

• Data may be stored on overseas servers for service provision
• Appropriate safeguards ensure data security