Who we are
Enkel Health, Stockholm, Sweden. We are the controller of your personal data. You can reach us at hello@enkelhealth.com.
What we hold
Your account details and personnummer; the tests you order and their results; and any past blood-test documents you choose to upload, together with the values read from them. From your personnummer we also derive and store your sex and date of birth, so your results can be compared against the correct sex- and age-specific reference ranges.
Lawful basis
For the optional processing of reports you upload, we rely on your consent under GDPR Article 6(1)(a) and your explicit consent under Article 9(2)(a). You can withdraw consent at any time; this does not affect processing that was lawful before you withdrew it. Healthcare and clinical records that must be retained by law are subject to the legal grounds and duties applicable to that care.
Reading documents you upload
Uploading health reports is optional. With your explicit consent, Enkel Health extracts the results and saves both the report and values to your account. The complete file, including personal and health information in it, is sent to Anthropic for automatic extraction. You can use our other services without uploading reports.
Anthropic processes the report outside the EEA. The transfer is covered by EU standard contractual clauses. Under the service's standard terms, reports are not used for model training and inputs and outputs are normally deleted within 30 days. Exceptions can apply for legal requirements or abuse investigations. Deleting a report at Enkel Health does not immediately delete a copy already sent to Anthropic. We record these withdrawals for separate follow-up with the provider.
We save the report and extracted values on our EU servers. Results are labelled self-uploaded and have not been verified by Enkel Health. Check the values against the original before using them.
You can withdraw consent at any time in My profile by choosing to withdraw consent and delete uploaded reports. You can also delete an individual report from its report page or contact hello@enkelhealth.com. Withdrawal stops further extraction and removes the reports and their values from the upload feature. If a file cannot be deleted immediately, deletion is shown as pending and retried. Processing that was lawful before withdrawal is unaffected.
Your account and other services remain available. A report signed off by a doctor or used in a consultation is preserved separately with restricted access to assess applicable clinical-record and retention duties. Clinical records that must be retained by law are not deleted by this control. Future uploads require fresh consent. Giving consent again does not restore deleted reports.
Contact and support
When you contact us, we save your name, email address, message and any order reference in a support ticket. We use these details to handle your question and send replies and acknowledgements. A supplied order reference does not verify your identity or authorize an order change. Ticket personal details and messages are cleared twelve months after resolution or last activity. Please leave personal identity numbers and health information out of the general contact form.
The test finder
The finder on our site points you to the right test based on what you type. To do that, your message and the conversation so far are processed by an automated routing service (Anthropic, United States, under the EU standard contractual clauses). We do not store your messages: we keep only which test or topic the finder pointed to, linked to your account if you are signed in, and that routing record is deleted after 90 days. If you ask for a person, we email ourselves your contact details so we can reply - never the text of your message.
The launch waitlist
If you leave your email address on our pre-launch page, we store the address, your language choice, and the times you signed up and confirmed. We send you one confirmation email when you sign up; only confirmed addresses then receive a single email when Enkel Health opens, and nothing else. The legal basis is your consent. We delete the list after the launch email has been sent, and you can withdraw before then at any time by writing to hello@enkelhealth.com - we then remove your address right away.
Where your data is stored
Your account, results and stored records are held on servers in the European Union (Stockholm). Some processing - payments, email, document reading, finder routing, and parts of our hosting - happens with providers that operate in the United States, under the EU standard contractual clauses. Data is encrypted in transit and at rest, and your personnummer is additionally encrypted with a key held outside the database.
Cookies
We use cookies and browser storage for sign-in, language, the basket and referral codes. Their purposes and retention are described on the cookies page.
Who else is involved
We use service providers to run Enkel Health: Supabase (database and sign-in, EU), Vercel (hosting; some processing in the United States), Stripe (payments), Resend (email, United States), Anthropic (document reading and finder routing, United States), Idura (BankID verification, EU), and a Swedish laboratory partner that analyses samples. They act on our instructions under data-processing agreements; transfers outside the EU rely on the EU standard contractual clauses.
Your rights
You can ask for a copy of your data, correct it, delete it, or withdraw consent. You can also complain to the Swedish authority, IMY (Integritetsskyddsmyndigheten). To exercise any of these, email hello@enkelhealth.com.
How long we keep it
Order records are kept for seven years under Swedish bookkeeping law. Results reviewed by a doctor are kept as a patient record. Uploaded documents and their values stay in the upload feature until you remove them or delete your account. If the information is part of a clinical record, legal retention duties may still apply. Finder routing records are deleted after 90 days. When you delete your account, we remove data that is no longer needed, except for records we must retain by law. This can include identifying details in clinical records. For copies held by the document-processing provider, see the uploaded-documents section above.
Questions about your data? Email hello@enkelhealth.com.