Privacy Policy

Last updated: 26 October 2026

This page explains what happens to information when you use KDS Lab Desk (free, open-source laboratory reporting software for Windows) or the website santoshray.in. It is written to be read by laboratory owners, not only by lawyers.

In one sentence: the developer, Santosh Ray, does not receive, store or see any laboratory, patient, report or Google account data from KDS Lab Desk. Your data stays on your computer and, if you choose, in your own Google Drive.

1. Who we are

KDS Lab Desk and this website are published by Santosh Ray, India. Contact: rayskumar02@gmail.com.

2. KDS Lab Desk: data on your computer

Patient names, ages, phone numbers, test results, reports, bills and settings are stored in a database on the computer where the program is installed. They are not sent to the developer.
The program works without internet. Nothing leaves the computer unless the laboratory turns on one of the optional features below.
The laboratory is the owner and controller of its patients' data and is responsible for protecting the computer, choosing who can use it, and following the laws that apply to it.

3. Optional: backup to your own Google Drive

If the owner presses Connect Google Drive, the program asks Google for two permissions, and nothing else:

A hidden application folder in your own Google Drive (the "drive.appdata" permission). The program can only see its own backup files there. It cannot see, read, change or delete any other file in your Drive.
Your e-mail address, used only to show "Connected as ..." on your own screen.

Before upload, each backup is locked on your computer with a password that you choose. Google, the developer and anyone else who gets the file cannot read it without that password. The developer does not know the password and cannot recover it. If you lose it, the backups cannot be opened.

The Google sign-in token and the password are stored on your computer only, encrypted by Windows for your user account, in a file separate from the patient database. They are never sent to the developer or to any server of ours.

The program's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Information from Google is used only to provide the backup feature, is not transferred to anyone else, is not used for advertising, and is not read by people.

To stop: press Disconnect in the program (it also revokes the sign-in at Google), or remove the program's access at myaccount.google.com/permissions. Backups already in your Drive stay there until you delete them (open Drive settings, "Manage apps", and delete the app's hidden data).

4. Other optional features

WhatsApp: if the laboratory links WhatsApp, reports are sent through the laboratory's own WhatsApp account. WhatsApp's own terms and privacy policy apply to those messages.
Cloud report links (Supabase): if the laboratory enters its own Supabase project address and key, report copies go to that project, which belongs to the laboratory. The developer has no access to it.
Program updates: the program may check GitHub for a newer version. GitHub sees the usual internet request (IP address, program version) as it does for any download. See GitHub's privacy statement.

The program has no advertising, no analytics and no tracking, and it does not report usage to the developer.

5. This website

santoshray.in does not use cookies, advertising or analytics scripts.
The site is hosted on Google Firebase Hosting, which keeps standard server logs (IP address, time, page requested) for security and operation. Fonts are loaded from Google Fonts, which receives your IP address when the page loads.
If you e-mail us, we use your message and address only to reply to you.

6. Children

The website and program are not directed at children. The program is used by laboratory staff and may hold patient records, including those of children, on the laboratory's own computer, under the laboratory's responsibility.

7. Your rights and requests

Because the developer holds no laboratory or patient data, a request about a patient's record must go to the laboratory that owns it. For anything about this website or this policy, write to rayskumar02@gmail.com.

8. Changes

If this policy changes, the new version will be posted here with a new date. The full source code of KDS Lab Desk is public at github.com/santoshray02/kds-lab-desk, so anyone can check what the program does.