Privacy Policy

Last updated 24 October 2026

Bloodline is a personal blood-test tracker built so your health information stays yours. It lives on your device and in your own private iCloud — the people who make Bloodline never receive it and cannot see it.

Information Bloodline handles

Everything in Bloodline is information you put there. On your device, the app stores:

• Blood test results you enter or import
• Your profile — such as name, date of birth, biological sex, and height
• Vitals such as weight, blood pressure, heart rate, and heart-rate variability
• Lab reports you import as PDFs or photos

Where your data lives

Your data is stored locally on your device. If you have iCloud turned on, it also syncs through your own private iCloud account (Apple's iCloud) so it's available across your devices. That uses Apple's infrastructure under your Apple Account — the makers of Bloodline have no access to it. Bloodline has no servers of its own and never uploads your data to us.

If you choose to share results with a coach, the panels you select are copied into an Apple iCloud share that the person you nominate can read. That copy sits in Apple's iCloud, not on any server of ours. See Sharing with a coach below.

Apple Health

With your permission, Bloodline can read certain information from Apple Health — such as date of birth, biological sex, height, weight, heart rate, heart-rate variability, and blood pressure — to prefill your profile and track your vitals. This information is used only inside the app, stays on your device, and is never shared with anyone or used for advertising. You can review or turn off Bloodline's access at any time in the Health app.

Importing lab reports

When you import a PDF or photo of a lab report, Bloodline reads it on your device. Personal identifiers it detects — such as your name, date of birth, and record numbers — are redacted on your device. Imported documents are never sent to us, and the document itself is never sent anywhere.

On iPhones that support it, the redacted text of a report is read by Apple's larger model on Private Cloud Compute, which can read a whole report at once. Your name, date of birth and record numbers have already been removed; the results are included. This is on by default. You can turn it off in Profile ▸ AI ▸ Use Private Cloud, and reports are then read entirely on your device. The text is also sent to your own AI provider if you have connected one and switched on having it read reports; see The AI assistant.

The AI assistant

Bloodline includes an assistant you can ask about your results. It will explain what a marker is and what a result may mean.

It runs on your iPhone, or on Apple's Private Cloud Compute. Most questions are answered by Apple's on-device model, and then nothing leaves the device. On iPhones that support it, a harder question, such as one comparing all your reports, can be answered by Apple's larger model on Private Cloud Compute instead. Your question and the results needed to answer it are then sent to Apple's servers to produce the answer. Apple designed Private Cloud Compute so that this information is used only to answer your request, is not stored, is not used for training, and cannot be seen by Apple. We never receive any of it. An answer that came from Private Cloud Compute is labelled "Private Cloud".

Its answers are generated by a language model. They can be wrong. They are not medical advice, not a diagnosis, and not a substitute for a doctor. See A note on medical use.

Connecting your own AI provider is optional, and changes this. Apple's model declines some health questions. If that happens, you can add your own API key for a third-party provider — Anthropic (Claude), OpenAI (ChatGPT) or Google (Gemini) — and ask them instead. If you do:

• Your question, and the results needed to answer it — values, dates, reference ranges, and your age and sex — are sent to that company, along with your latest vitals (weight, blood pressure, resting heart rate and heart-rate variability) and anything you have recorded as taking. Your name is never sent. Their privacy policy applies to what they do with it, not ours.
• It is off until you turn it on. Storing a key is not enough on its own: sending anything is a separate switch, and it starts off.
• You can also allow that provider to read imported reports, which is a third switch and also starts off. That sends the redacted text of the report — with names, dates of birth and record numbers removed, but with your results intact.
• Your API key is stored in your iPhone's Keychain, on that device only. It never syncs, and it never reaches us.
• You can remove the key, or turn any of it off, at any time in Settings ▸ AI assistant.

Labs near me

If you open Labs near me and allow it, Bloodline uses your location while that screen is open to search Apple Maps for pathology collection centres nearby. The location goes to Apple to run the search, under Apple's privacy policy, and nowhere else. Bloodline doesn't store it, keep a history of it, or send it to us. You can type a suburb or postcode instead.

Coach subscriptions

Coaches can subscribe to Coach Pro or Coach Unlimited to track more clients. Subscriptions are sold and billed by Apple through your Apple Account. We never see your payment details; Apple tells the app only whether a subscription is active. You can manage or cancel a subscription at any time in your Apple Account settings. Subscriptions are covered by Apple's standard Terms of Use.

Information we collect

We don't collect personal information. Bloodline has no analytics, no advertising, and no third-party tracking built into it.

Sharing your data

We never sell your data, and we never share it with anyone on your behalf. When you export your results — as a CSV file or a PDF summary, or to share with your doctor — that happens only at your request and goes only where you choose to send it.

Sharing with a coach

Bloodline lets you share results with a coach or anyone else you choose. This is the one situation where your health information leaves your own iCloud, so it is worth being precise about how it works.

Nothing is shared unless you set it up. Sharing is off until you create a share, choose which panels to include, and confirm. There is no "share everything" option and nothing is pre-selected.

What the person you nominate receives:

• The results in the panels you selected — the marker names, values and units, and the reference range your lab reported.
• Your date of birth and biological sex. These are needed to work out which reference range applies to each result; without them every result would show as having no range.
• The name you gave your profile.

What they do not receive:

• The original lab report file. Scanned reports often carry your address, Medicare number and referring doctor, so the document itself is never shared — only the numbers.
• Any panel you did not select.
• Your vitals, protocols and cycles, or your notes — unless you separately switch those on. Each is a separate choice, so sharing your results never shares what you are taking.

How the sharing works. What you selected is placed in an Apple iCloud share. The person you nominate opens a link and can then read that share from their own copy of Bloodline. It is read-only — they cannot change or delete anything of yours. The makers of Bloodline still have no access to any of it.

If your coach adds a protocol for you. A coach can record a protocol or cycle for you — what to take, how much and when. It appears in your app labelled with their name, so you can always see what came from them rather than from you. They cannot alter your results, your existing entries, or anything else in your record: their additions travel in a separate share that they own and you read. You can remove anything they added, and stopping sharing stops it entirely.

Stopping. You can stop sharing at any time from Profile ▸ Sharing. Stopping removes their access to the shared results. Please be aware of the obvious limit: if they have already read, exported or written down something you shared, stopping cannot undo that. Share only with people you trust.

If you are a coach, there is a separate Coach Agreement covering what you agree to do with a client's results.

If you are the coach. Results shared with you are another person's health information. You are responsible for handling it appropriately and for having their agreement to hold it. Bloodline's screens show you whether a result sits inside or outside a published reference range and how it has changed; they do not suggest causes or recommend action. The assistant will discuss what a result may mean, but its answers come from a language model, can be wrong, and are not clinical advice. Nothing in Bloodline is a substitute for a qualified health professional.

Your choices and control

• Edit or delete any result, profile, or file inside the app at any time.
• Turn off iCloud sync to keep your data only on your device.
• Stop sharing with a coach at any time from Profile ▸ Sharing.
• Delete the app and remove its iCloud data to erase everything.

Children

Bloodline isn't directed at children under 16. If you create a profile for a child in your care, you're responsible for the information you choose to enter.

A note on medical use

Bloodline's screens report your results as facts — in range, out of range, or no range available. The assistant goes further and will discuss what a result may mean, but its answers are generated by a language model and can be wrong.

Bloodline is not a medical device. Nothing in it — including anything the assistant says — is a diagnosis or medical advice, and none of it should be used to start, stop or change any treatment. Always discuss your results with a qualified health professional.

Changes to this policy

If we update this policy, we'll post the new version here with an updated date.

Contact

Questions about your privacy? Email us at privacy@bloodlineapp.com.au.