Privacy Policy

Labmate ("Labmate," "we," "us," or "our") is a research event scheduler for timepoint-based protocols. This Privacy Policy explains what information we collect, how we use it, and the choices you have. Labmate is operated by an individual developer, Nick Pryde.

By using Labmate, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the service.

Information We Collect

Account information

When you create a Labmate account, we collect your email address and, if you sign in with Google, basic profile information (name, email, profile picture) provided by Google's sign-in service. Authentication is handled by our database provider, Supabase. We do not receive or store your Google password.

Profile information

You may optionally set a display name, a "lab nickname," and an avatar color. This information is visible only to you within the app.

Protocol and schedule data

Labmate stores the content you create in the app — research series, protocols, and timepoints (scheduled events, doses, or measurements) — along with any saved presets or templates. This is the core data needed to provide the service and is stored in our database.

Google Calendar data (optional)

If you choose to connect Google Calendar, Labmate requests permission to manage calendars on your Google account. We use this access only to:

• Create a single, dedicated calendar named "Labmate" in your Google account — we do not read, modify, or delete events in your existing calendars.
• Create, update, and delete events in that dedicated calendar to mirror the timepoints you schedule in Labmate (title, start/end time, color, and a description linking back to Labmate).
• Remove that dedicated calendar if you disconnect Google Calendar and choose to delete it.

Labmate never reads, inspects, or stores the content of any other calendar or event in your Google account. Your Google authorization (refresh token) is encrypted at rest and used solely to perform the actions described above.

Feedback

If you submit feedback through the app, the text you provide (and your email address, if included) is sent to us via our email provider, Resend, so we can respond.

Automatically collected information

We do not use analytics, advertising, or tracking services. Our hosting and infrastructure providers (such as Vercel and Supabase) may automatically log standard technical information (e.g., IP address, timestamps, request logs) for security and reliability purposes.

How We Use Your Information

• To provide, maintain, and operate Labmate's core scheduling features.
• To authenticate you and keep your data synced across devices.
• To sync your timepoints to a dedicated Google Calendar, if you opt in.
• To respond to feedback or support requests you send us.
• To maintain the security and integrity of the service.

We do not sell your personal information, and we do not use your data for advertising.

Google User Data

Labmate's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google account data accessed through Labmate's Google Calendar integration is used only to provide and improve the calendar-sync feature described above. We do not use Google user data for advertising, and we do not allow humans to read this data except as necessary to provide the feature you requested, comply with law, or investigate abuse with your consent.

Data Storage and Security

Your data is stored in a Supabase-hosted PostgreSQL database with row-level security, meaning your data is only accessible to your authenticated account. Google Calendar refresh tokens are encrypted before being stored. We take reasonable technical and organizational measures to protect your information, but no method of transmission or storage is 100% secure.

Data Sharing

We do not sell or rent your personal information. We share data only with the service providers that operate Labmate on our behalf:

• Supabase — database hosting and authentication.
• Google — calendar sync, if you connect it.
• Resend — delivering feedback emails you submit.
• Vercel — application hosting.

We may also disclose information if required by law or to protect the rights, safety, or property of Labmate or others.

Your Choices and Rights

• Disconnect Google Calendar at any time from within the app. You may also revoke Labmate's access directly from your Google Account permissions page.
• Access or delete your data by contacting us at the email below. We will delete your account and associated data upon request, except where retention is required by law.
• Update your profile information at any time from within the app.

Data Retention

We retain your account and protocol data for as long as your account remains active. If you delete your account, we delete your associated data within a reasonable period, except where we are required to retain it for legal or security reasons.

Children's Privacy

Labmate is not directed to children under 13, and we do not knowingly collect information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above. Continued use of Labmate after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or your data, contact us at nicholaspryde@gmail.com.