Built for health data, held to a higher bar.
Your scans and test results are health information under Australian law and we treat them that way. This page explains plainly where your data lives, who can see it, how it is protected and what happens when you leave.
Records stored in Sydney
Health records are stored at rest in Sydney. That describes where the database and report files sit. It does not cover every service that touches your data, and the AI section below explains the difference.
Row-level access control
Every record is tied to your account at the database layer, not just in the app. The anonymous role has no access to clinical tables, and administrative functions require authenticated, audited access.
Original reports kept
Every report keeps its source PDF, and each request to open or download it is checked against your account and your consent first. We do not hand out standing file links.
Sharing with clear limits
DEXA PDF share links, where available, expire and stop working if you withdraw consent or remove the report. Old links do not return when you consent again. Downloaded PDFs and screenshots sent separately cannot be recalled.
Verified account closure
Closing your account removes your profile, photos, goals and non-clinical data in a controlled process that checks each step finished rather than trusting a success message. If a step fails, it resumes instead of leaving things half done.
Clinical record retention
Closing your account does not erase restricted clinical archives. Retention depends on applicable obligations, including records relating to minors. Contact us for the retention period that applies to your records.
Two separate consents
Allowing your clinic to share results into MyBodyLab is one choice. Allowing the AI Assistant to process your chats is another. Without sharing consent your health data is not shown. Without AI Assistant consent, your reports still work and chat is off.
Remove a report yourself
Removing a DEXA, VO2 Max or RMR report takes it out of your views, trends, comparisons, goals and future AI Assistant answers, and stops its share links. The restricted clinical record and original are kept privately. There is no self-service undo.
What AI does with your data, and where.
The AI Assistant answers questions about your own published results. DEXA report reading may also use external AI services. Supported VO2 Max and RMR parsing runs on our systems, without sending the PDF or its text to an outside OCR or AI service. These are separate processing paths.
That is a real boundary and we would rather say it plainly than imply otherwise. Our AI provider accounts are held by MyBodyLab, with provider training and data-sharing switches turned off and response storage disabled on the calls we control. That is not the same as zero retention, because providers can keep request logs for abuse monitoring. We do not claim Australian-only processing for AI, and the database region does not tell you where a provider processes a request. The AI Assistant needs its own consent, and you can switch it off at any time and keep your reports. See our privacy policy.
What the AI Assistant will and will not do
- It reads only your own records, and it checks that a conversation belongs to you before reading or saving anything.
- It tells you when a result is old, and treats a single test as a baseline rather than a trend.
- It does not interpret bone mineral content, and it sends unusual or flagged results back to your clinician instead of guessing a cause.
- It does not prescribe calories, supplements or treatment. Measured resting energy is not a daily intake target.
Who can see your data
- You. With an active account and platform consent, you can view available reports and download the originals. Withdrawing platform consent pauses dashboard health-data access.
- People you share with. Anyone you send a downloaded PDF or screenshot to, or an available DEXA PDF link. Copies you send cannot be remotely recalled.
- Your clinic or provider. Only with your consent. The clinic that performed a test holds its own copy under its own obligations, and we do not send your other results back to it.
- Authorised staff. Access is limited by role and purpose, including report filing, support, security and required clinical retention. Withdrawing platform consent blocks ordinary dashboard access; it does not destroy restricted clinical records or a clinic's own copies.
We do not sell health data and we do not share it with advertisers. New product analytics and third-party embeds are switched off inside the health dashboard, and operational monitoring continues.
Reporting a concern
If you believe you have found a security issue, email hello@mybodylab.ai with a description. Do not send patient records or account credentials in the initial message.
Questions about your data?
Contact our team about access, privacy or how your records are handled.