Privacy Policy

This Privacy Policy explains how personal data is processed through the LabIQ Android mobile application, package name com.ivdiq.labiq.

​

LabIQ is a limited-functionality business-to-business application used by authorized customers for laboratory logistics and inventory-related operations.

​

The LabIQ platform and application are owned and operated by:

​

IVDIQ OÜ
Registry code: 16909155
Harju maakond, Tallinn, Kesklinna linnaosa,
Tartu mnt 67/1-13b, 10115 Estonia
Email: support@ivdiq.com

The LabIQ Android application was developed and is published on Google Play by Kekik Teknoloji on behalf of IVDIQ OÜ.

​

In this Privacy Policy, “LabIQ,” “we,” “us,” and “our” refer to IVDIQ OÜ in its capacity as the owner and operator of the LabIQ platform.

LabIQ is not offered to the general public.

​

The application is available only to authorized users of organizations that use the LabIQ B2B platform. Users cannot register or create an account through the mobile application.

User accounts are created and managed by authorized administrators of the relevant customer organization.

Users sign in using their email address and password.

Account information

​

The following information is processed to create and operate a LabIQ account:

• First name;

• Last name;

• Email address;

• User ID;

• Encrypted or cryptographically hashed authentication credentials.

Customer organization administrators may also optionally maintain the following information:

• Telephone number;

• Job title;

• Department;

• Laboratory or workplace;

• User role and permissions;

• Training information;

• Shift information;

• Leave records.

The LabIQ mobile application does not provide profile-editing functionality.

Crash and diagnostic information

​

The application may collect crash logs and technical diagnostic information when an error occurs.

Crash records may be associated with a LabIQ user ID so that technical problems can be investigated and resolved. Crash information is used only for application security, maintenance, troubleshooting, and performance improvement.

Barcode-scanning information

The application requests access to the device camera only when the user uses the barcode-scanning function.

Camera access is used to read barcodes for logistics and inventory-related activities. The application does not use the camera for advertising, user profiling, or unrelated monitoring.

The barcode value may be transmitted to the LabIQ platform to identify or process the relevant inventory or logistics record.

The application does not retain or upload photographs captured by the camera during barcode scanning.

Uploaded documents

Authorized users may select and upload documents related to LabIQ logistics and operational records.

Uploaded documents are stored securely using Amazon Web Services S3 infrastructure in the AWS Ireland region.

The application does not access files that the user has not selected for upload.

The LabIQ mobile application does not process patient information or patient health records.

In particular, the application is not intended to collect:

• Patient names;

• Patient identification numbers;

• Medical diagnoses;

• Test results;

• Clinical records;

• Other patient-identifiable health information.

The application also does not:

• Display third-party advertising;

• Use advertising identifiers;

• Sell personal data;

• Use personal data for behavioural advertising;

• Collect precise or approximate location;

• Access contacts, SMS messages, call logs, or the microphone;

• Send push notifications;

• Use personal data to train artificial-intelligence models.

Information processed through LabIQ is used to:

• Authenticate authorized users;

• Provide access to permitted LabIQ functions;

• Apply user roles and access permissions;

• Support logistics, inventory, and barcode-scanning processes;

• Store documents selected by authorized users;

• Maintain account and system security;

• Investigate crashes and technical errors;

• Provide technical support;

• Prevent unauthorized access and misuse;

• Comply with contractual and legal obligations.

Personal data is not used for advertising or sold to third parties.

The customer organization that creates and manages a user’s LabIQ account normally determines why its personnel information is entered into and used through LabIQ.

The customer organization therefore generally acts as the data controller for information relating to its users and operational records.

IVDIQ OÜ generally processes this information as a data processor or service provider on behalf of the customer organization.

I

VDIQ OÜ may act as an independent data controller for limited purposes such as:

• Platform and account security;

• Technical support communications;

• Application diagnostics;

• Legal and regulatory compliance;

• Protection of IVDIQ OÜ’s contractual rights.

Kekik Teknoloji developed and publishes the Android application on behalf of IVDIQ OÜ. It may provide authorized technical maintenance or development support when required.

Information may be accessible to:

• Authorized administrators and users of the relevant customer organization;

• Authorized IVDIQ OÜ personnel who require access for support, security, or system administration;

• Authorized Kekik Teknoloji personnel where technical development or maintenance support is required;

• Infrastructure providers used to operate and host LabIQ;

• Public authorities where disclosure is legally required.

Amazon Web Services is used to host application infrastructure and uploaded documents.

We do not share personal data with advertisers, data brokers, or unrelated third parties.

The LabIQ Android application does not include third-party advertising, analytics, social-media, or behavioural-tracking SDKs.

Infrastructure services such as Amazon Web Services may process data only as necessary to provide hosting, storage, security, and related technical services.

Uploaded documents are stored using Amazon Web Services S3 in the AWS Ireland region.

Other LabIQ platform data may also be processed through secure infrastructure used to provide the service.

Where data is transferred between countries, appropriate contractual, technical, and organizational safeguards are applied as required by applicable data-protection law.

IVDIQ OÜ uses technical and organizational safeguards designed to protect information processed through LabIQ.

These safeguards include, where applicable:

• Encryption of data during transmission;

• Secure authentication;

• Cryptographic protection of passwords;

• Role-based access controls;

• Customer and tenant access restrictions;

• Restricted administrative access;

• Security logging and monitoring;

• Secure cloud storage;

• Encrypted backups;

• Application maintenance and security updates.

No electronic system can be guaranteed to be completely secure. However, reasonable safeguards are maintained according to the nature of the information and the risks involved.

Personal and operational information is retained only for as long as necessary to:

• Provide the LabIQ service;

• Maintain the customer organization’s account;

• Fulfil contractual requirements;

• Maintain necessary audit and security records;

• Resolve technical or legal disputes;

• Meet legal or regulatory obligations.

The relevant customer organization may determine retention periods for user and operational records stored in its LabIQ environment.

Crash and diagnostic records are retained only for as long as reasonably necessary to investigate technical issues, maintain security, and improve application stability.

Uploaded documents are retained according to the customer organization’s instructions, contractual terms, and applicable retention requirements.

Data may remain temporarily within protected backup systems until the relevant backup-retention period expires.

Users cannot create accounts through the LabIQ mobile application.

Accounts are created, managed, deactivated, and deleted by authorized administrators of the relevant customer organization.

A user who wants their account or personal information corrected, deactivated, or deleted should first contact their organization’s LabIQ administrator.

Users may also submit a request to:

support@ivdiq.com

Requests should include:

• The user’s name;

• The organization associated with the account;

• The email address used for the LabIQ account;

• A description of the requested action.

Where the customer organization acts as the data controller, IVDIQ OÜ may refer the request to that organization for authorization and processing.

Some records may be retained after account deactivation where required for security, audit, contractual, legal, or regulatory purposes.

Depending on applicable data-protection law, users may have the right to request:

• Access to their personal data;

• Correction of inaccurate data;

• Deletion of personal data;

• Restriction of processing;

• Objection to certain processing;

• Data portability;

• Withdrawal of consent where processing is based on consent.

Users should normally submit these requests to the customer organization that provided their LabIQ account.

Users may also contact IVDIQ OÜ at support@ivdiq.com.

LabIQ is a professional B2B application intended for authorized personnel of customer organizations.

It is not designed or directed toward children, and IVDIQ OÜ does not knowingly collect personal data from children through the application.

This Privacy Policy may be updated when the LabIQ application, platform, legal requirements, or data-processing practices change.

The current version will be published on this page with a revised “Last updated” date.

Questions or requests concerning this Privacy Policy or the processing of personal data may be sent to:

IVDIQ OÜ
Registry code: 16909155
Harju maakond, Tallinn, Kesklinna linnaosa
Tartu mnt 67/1-13b
10115 Tallinn
Estonia

Email: support@ivdiq.com
Application: LabIQ
Google Play developer: Kekik Teknoloji
Package name: com.ivdiq.labiq

Effective date: 4 August 2026
Last updated: 4 August 2026