Privacy & Data Security

Effective July 5, 2026

LexiTar is a free, public health literacy utility operated by the Tiny Tars Foundation, a registered 501(c)(3) tax-exempt charitable organization (EIN: 39-2278196) ("we," "us," or "the Foundation"). Because LexiTar helps you organize sensitive health information, protecting that information is central to our mission. This policy explains what we collect, how we use and safeguard it, what we will never do with it, and the choices and rights you have. It applies to this website and to the LexiTar dashboard.

The commitments we will not break

We do not sell, rent, trade, or otherwise monetize your personal or health information — ever, to anyone. We do not share your health data with advertisers, pharmaceutical companies, insurers, employers, or data brokers. We do not use your health information to build advertising profiles or to serve you personalized medical remarketing, and we run no commercial advertising on our platform. These are permanent commitments, not settings you must find and switch off.

Information we collect

Health information you choose to enter. When you use the dashboard, you may add laboratory results, biomarker values, and context such as age and sex so the tool can translate and organize them for you. You decide what to enter; you are never required to provide any particular data point.

Waitlist and contact details. If you ask to join our early-access waitlist, we collect the email address you provide and, optionally, your name, solely so we can invite you to create an account and communicate with you about that access.

Limited technical data. Like nearly all websites, our hosting provider records standard request information (such as IP address, browser type, and timestamps) for security, abuse prevention, and reliability. We use aggregate, privacy-respecting analytics to understand overall traffic patterns — for example, how many people visited a page — never to identify you individually or to track you for advertising.

How your health data is protected

LexiTar is built so that your dashboard is encrypted and readable only inside your own browser, using a key that you control. The copies stored on our infrastructure remain encrypted at rest; we do not hold plain-text access to your health records, and they are never decrypted for advertising or profiling. Even so, no method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. Please keep your access key private — if you lose it, we cannot recover the encrypted contents on your behalf.

How we use information

We use the health information you enter only to provide the service to you: translating terminology, calculating and displaying reference ranges, visualizing trends, and generating summaries you can share with your own physician. We use waitlist details only to contact you about access. We use technical and aggregate analytics data only to keep the service secure, working, and improving. We do not use any of this information for advertising.

Cookies and tracking

We use only the cookies and local storage necessary to operate the site and, where enabled, privacy-respecting aggregate analytics. We do not use advertising or cross-site tracking cookies, and we do not participate in medical or health-based ad remarketing. Where your browser sends a "Do Not Track" or global privacy signal, we honor it for optional analytics.

When we disclose information

We share information only in narrow, non-commercial circumstances: with infrastructure providers (such as our cloud host) strictly to operate the service and bound to protect your data; when you explicitly direct us to (for instance, by exporting a summary to share with your physician); or where we are legally required to comply with a valid legal process. We will never disclose your data to a third party for that party's own marketing.

Data retention

We keep your dashboard data only for as long as your account is active or as needed to provide the service. We keep waitlist details until we have invited you and reasonably concluded our onboarding, or until you ask us to remove them. When information is no longer needed, we delete it or retain it only in encrypted form we cannot read.

Your rights and choices

You may ask us to confirm what personal information we hold about you, to correct it, or to delete it, including your waitlist details or your account. You may also decline to provide any data or stop using the service at any time. We do not discriminate against you for exercising these rights. To make a request, contact us through our contact page.

Children's privacy

LexiTar is intended for adults managing their own health information. It is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, please contact us and we will delete it.

Not a HIPAA covered entity

The Foundation is not your healthcare provider, health plan, or a HIPAA "covered entity," and using LexiTar does not create a provider–patient relationship. LexiTar is an educational tool to support your own advocacy, not a source of medical advice. See our Terms of Service for the full medical disclaimer.

Changes to this policy

If we make a material change to this policy, we will update the effective date above and, where appropriate, provide a more prominent notice. Your continued use of LexiTar after an update means you accept the revised policy.

Contact us

Questions or requests about your privacy? Reach the Tiny Tars Foundation through our contact page and we will respond as promptly as we reasonably can.