TibbSync ("TibbSync", "we", "us") helps people collect their family's lab test reports in one place, discover
nearby labs and their prices, and leave reviews. This policy explains what information we collect through the
TibbSync app and website, why we collect it, who we share it with, and the choices you have.
Information we collect
- Account information: your phone number, full name, and optionally an email address. If you sign in with Google, we receive your name, email, and a Google account identifier from Google instead of a password.
- Password: if you create an account with a password, we store only a salted, hashed version of it — never the password itself.
- Phone verification: when you verify a phone number, we send a one-time code over WhatsApp and record that the number was verified. We do not store the code itself after it expires or is used.
- Family members ("dependents"): names, relationship labels, and optionally a separate phone number for any dependent you add to your account (e.g. a spouse, child, or parent).
- Lab reports: when a lab uploads a report against your phone number, we store the report file(s) (PDFs), test names, prices, and any notes attached to it, and associate it with your account or a dependent's profile once you confirm it's yours.
- Location: if you use the "Find a lab" search, your device's location is sent to us to calculate distances to nearby labs and is stored on your account so the app doesn't need to ask again every time. This is only ever used to power that search feature.
- Reviews: star ratings and written comments you submit about a lab you've received a report from.
- Usage & device data: standard technical information such as IP address and request metadata, used for security purposes like rate-limiting login attempts.
How we use this information
- To verify you're the rightful owner of a phone number before any report or notification is attached to it.
- To deliver lab reports and notifications to you over WhatsApp.
- To let you search for labs near you, compare prices for a specific test, and read/leave reviews.
- To operate account security features such as sign-in, session refresh, and rate-limiting against abuse.
- To let a lab you interact with see the reports it has itself uploaded, and the phone number/patient name needed to route that report correctly.
We do not sell your personal information, and we do not use your lab reports or health-adjacent data for advertising.
Who we share information with
- Labs on the platform: a lab can see the reports it uploads and the phone number/patient name it uploaded them against. Labs cannot see your other reports, dependents, or reviews unless those reports were uploaded by that same lab.
- WhatsApp: we use a WhatsApp Business API gateway to deliver verification codes and report notifications. The phone number and message content (including report PDFs) pass through this channel to reach you.
- Google: if you choose "Continue with Google," Google verifies your identity for us per its own privacy policy; we only receive the profile information described above.
We do not share your data with any other third party for their own marketing purposes.
How long we keep your information
We retain your account, dependents, and reports for as long as your account exists, so your family's report
history stays available to you. You can remove individual reports from within the app. To request deletion
of your entire account and all associated data, email us at
support@faybers.com.
Security
Passwords are hashed, not stored in plain text. Phone numbers are verified before any report can be attached
to them, and no report is considered "yours" until you confirm it in the app. Access to the app and lab
portal is protected by expiring, signed authentication tokens, and login endpoints are rate-limited against
automated guessing.
Your choices
- You can confirm or reject any report a lab uploads against your number before it's added to your history.
- You can add, view, and manage dependents from your profile at any time.
- You can stop using the "Find a lab" search at any time; your stored location is only ever used for that feature.
- You can request a copy or deletion of your data by contacting us at support@faybers.com.
Children's data
TibbSync is intended for use by adults managing their own and their family's lab reports. A dependent's
profile (including a minor's) is managed entirely by the guardian's account; TibbSync does not knowingly
allow a child to create their own independent account.
Changes to this policy
If we make material changes to this policy, we'll update the "Last updated" date above. Continued use of
TibbSync after a change means you accept the updated policy.