Terms of Use

These Terms of Use govern your access to and use of the LumkoMDX website (lumkomdx.com), our developer portal, sample demo environments, and any other property that links to these Terms. They form a binding agreement between you and LumkoMDX (Pty) Ltd.

If you use the LumkoMDX platform under a separate written agreement with us (a Master Services Agreement, Data Processing Agreement, or Business Associate Agreement), that agreement governs the platform itself. These Terms cover the surrounding properties. Where the two conflict on a topic the platform agreement addresses, that agreement wins.

Some parts of the site — the developer portal, demo environments, saved content — require an account. When you create one:

• Use a real work email, your real name, and an organisation you actually work for.
• You're responsible for keeping your credentials safe. Don't share them.
• Tell us promptly at security@lumkomdx.com if you suspect your account has been compromised.
• You're responsible for everything that happens under your account, except where you've notified us of a compromise and we've had reasonable time to respond.

We can suspend or terminate an account that's used to violate these Terms or applicable law. Where possible, we will give notice first and a chance to fix the issue.

You may use this site to learn about LumkoMDX, evaluate the platform, build against our APIs, attend a demo, and communicate with us. The developer portal grants a limited, non-exclusive, non-transferable, revocable licence to access our documentation, sandbox endpoints, and SDKs for the purpose of integration and evaluation.

You will not, and will not let anyone else:

• Use the site or APIs in violation of any law or third-party right.
• Reverse-engineer, decompile, or copy any part of the platform that isn't published as open source under its own licence.
• Try to access systems or accounts that aren't yours, or to bypass the platform's authentication, authorisation, or rate-limit controls.
• Send real patient data into sandbox or demo environments. Sandboxes use synthetic data only — uploading real PHI/PII is a contractual breach and a security incident, and we will treat it that way.
• Use the site to deliver malware, run benchmarks intended for public release, or scrape it for AI training data.

The site, documentation, design, brand marks, and the LumkoMDX platform are owned by LumkoMDX or our licensors and are protected by South African and international copyright, trademark, patent, and trade-secret law. Nothing in these Terms grants you ownership of any of it.

The SDKs and code samples we publish in the developer portal are released under the licence stated in their respective repositories (typically Apache 2.0 or MIT). You can use those under their stated terms, even outside these Terms.

Anything you submit to us — feedback, suggestions, bug reports — we may use to improve the platform without obligation to you. We will not, however, publicly attribute commercial input to you without your consent.

Demo and sandbox environments use synthetic data sets that resemble real clinical records. They exist to let you see the platform behave as it would in production, without anyone's real records ever being involved.

What you may do

Run queries, build cohorts, exercise the audit log, and test integrations to your heart's content.

What you may not do

Upload real patient data. Generate adversarial workloads beyond normal evaluation. Connect a sandbox to production data flows of any kind.

Sandbox lifetime

Sandboxes are reset on a published schedule. Saved work is exported on request before reset; we don't guarantee preservation across resets.

The site links to third-party sites — partner pages, regulator websites, open-source repositories — for your convenience. Those sites operate under their own terms and privacy policies. We don't endorse them and we're not responsible for their content. The developer portal may rely on third-party services (e.g. payment, identity); your use of those services is also governed by their terms in addition to ours.

We try to keep the site and developer portal up, but they are provided on an "as available" basis. Planned maintenance is announced in advance on the developer portal status page. Unplanned outages are posted as soon as we know about them.

We may add, change, or remove features at any time. Material changes to the developer portal — anything that would break a working integration — are announced with at least 90 days' notice on our published changelog, and we maintain compatibility layers where reasonable.

The site and developer tools are provided on an "as is" and "as available" basis. We make no warranties — express or implied — about merchantability, fitness for a particular purpose, non-infringement, or that the site will be uninterrupted, error-free, or secure beyond the security controls described in our Security overview.

Documentation, sample code, and any clinical or operational examples are illustrative. They do not constitute clinical advice and must not be used as substitutes for the judgement of a qualified clinician or compliance officer.

To the maximum extent permitted by law, LumkoMDX is not liable for indirect, incidental, special, consequential, exemplary, or punitive damages arising out of or related to your use of the site, the developer portal, or sandbox environments — including loss of data, loss of revenue, or loss of goodwill — even if we've been advised of the possibility.

Our aggregate liability under these Terms is limited to the greater of (a) the fees paid to us for services in the 12 months before the claim, or (b) ZAR 50,000. Nothing in these Terms limits liability that cannot be limited by law — fraud, gross negligence, wilful misconduct, or death and personal injury caused by negligence.

You agree to indemnify and hold LumkoMDX harmless from any claim, loss, or expense (including reasonable legal fees) arising from your violation of these Terms, your misuse of the site, or your infringement of any third-party right. We will give you reasonable notice of any claim, let you handle the defence (with our cooperation), and not settle anything without your consent that creates an obligation on you.

You can stop using the site at any time. We can terminate or suspend your account or these Terms if you materially breach them and don't fix the breach within 30 days of written notice. Sections that by their nature survive termination (intellectual property, disclaimer, limitation of liability, governing law) survive.

These Terms are governed by the laws of the Republic of South Africa, without regard to its conflict-of-laws rules. The courts of Johannesburg have exclusive jurisdiction over any dispute arising under these Terms, except that either party may seek injunctive relief in any court with appropriate jurisdiction.

If you're in the EEA or UK, you keep your statutory consumer rights — these Terms do not override them.

Questions, formal notices, and disputes go to legal@lumkomdx.com or to our registered office in Johannesburg. Security issues should be reported to security@lumkomdx.com using the protocol on the Security page.