Privacy Policy / Política de privacidade (LGPD)

Last updated: April 1, 2026. This policy explains how Labywallet collects, uses, stores, shares, and protects personal data and sensitive health data when you use our services.

1. Controller and contact

Labywallet is operated by Inova Rise Ltda (CNPJ 62.673.122/0001-04). For privacy requests, data subject rights, or security incidents, contact: security@inovarise.com.

2. Scope

This policy applies to our website, web application, and mobile app integrations that access the Labywallet platform.

3. Data we collect

  • Account data: name, email, authentication identifiers, and profile details.
  • Health-related content: exam files, extracted values, notes, and timelines.
  • Technical data: IP, device/browser information, logs, and app diagnostics.
  • Usage data: interactions with features, pages, and aggregate analytics.
  • Cookie/local storage data for session, preferences, and security controls.
  • Support chat: messages and limited technical data processed when you contact us via the live chat widget.

4. Purpose and legal basis

  • Provide account access and core features of the platform.
  • Store, display, and organize exam documents and related records.
  • Generate insights and summaries from uploaded content.
  • Improve reliability, security, and quality of our services.
  • Comply with legal obligations and respond to lawful requests.

Under LGPD, processing may rely on consent and other legal bases permitted by law, including contract performance and legitimate interests where appropriate.

5. Sensitive health data

We process sensitive health data only to the extent necessary to provide requested user-facing functionality. We do not sell health data. Automated processing support is informational and does not replace medical advice or diagnosis.

6. Sharing and disclosure

We may share limited data with service providers that help operate the platform (hosting, storage, security, authentication, analytics, and support), under contractual safeguards. We may also disclose data:

  • When required by law, court order, or competent authority.
  • To protect rights, safety, and integrity of users and our systems.
  • During corporate transactions, with appropriate confidentiality controls.

We do not sell Google user data or health data to third parties.

7. Support chat (third-party provider)

When you open our live support chat on the website or web view, we use tawk.to (tawk.to / tawk.to Limited) to deliver messaging, operator tools, and related security features. tawk.to processes data as a service provider under our instructions, not for its own marketing on our behalf.

Typical categories may include: messages you send in the chat; technical identifiers (such as device or browser information); IP-derived data where applicable; timestamps; and limited session or usage data needed to operate the widget. Do not share passwords, full medical records, or other health data in the chat unless you choose to and accept the risk—prefer a generic question and your account email if we need to locate your account.

Legal bases may include contract performance (responding to your support request) and legitimate interests in operating a reliable help channel. Processing may occur outside Brazil; see Section 13 (International transfers) for our approach.

8. Cookies, tracking, and ads

We use cookies and similar technologies for essential operation, security, preferences, authentication, and aggregate analytics. The support chat widget may use cookies or similar storage to remember sessions and preferences, consistent with tawk.to’s configuration. If enabled, advertising technologies (such as Google AdSense) are loaded according to your consent choices and applicable law.

9. Data retention and deletion

We retain personal data only for the period necessary to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account and associated data, subject to legal retention requirements.

10. Security measures

We adopt technical and organizational measures designed to protect confidentiality, integrity, and availability of data, including access controls, secure transport, monitoring, and incident response procedures.

11. Your rights (LGPD)

Subject to applicable law, you may request access, correction, portability, deletion, anonymization, and information about sharing and processing of your personal data, and may revoke consent where consent is the legal basis.

To exercise your rights, contact security@inovarise.com.

12. Children and minors

If you upload third-party data (including data of minors), you are responsible for having proper legal authorization. We may request additional validation when necessary.

13. International transfers

Some providers may process data outside Brazil. In such cases, we apply safeguards required by applicable data protection laws.

14. Policy updates

We may update this policy to reflect legal, technical, or product changes. Material updates will be published on this page with a revised date.

15. Portuguese summary (LGPD)

Esta política descreve como o Labywallet coleta, usa, armazena, compartilha e protege dados pessoais e dados sensíveis de saúde (base legal, finalidades, retenção, direitos do titular e contato em security@inovarise.com). O chat de suporte é operado por um fornecedor (tawk.to), que pode processar o conteúdo da conversa e dados técnicos necessários ao atendimento; evite enviar senhas ou informações clínicas desnecessárias pelo chat. Atualizações relevantes serão publicadas nesta página com nova data.

Full policy pages