Privacy Policy / 隱私政策
English — 1. Information We Collect
We collect the following categories of data:
Health Data (User-Provided):
- Medical report images (lab results, blood panels, imaging reports, vitals, clinical documents)
- Extracted health metrics (e.g., blood glucose, cholesterol, blood pressure, CBC values)
- Reference ranges and abnormal flags associated with test results
- Health trend data derived from multiple scans over time
- Family member health profiles created by you (name, birth year, gender, health history notes)
- AI chat messages related to your health records
How We Use Your Health Data:
- To extract, organize, and display your health metrics
- To track trends and flag abnormal values over time
- To provide personalized AI health assistant responses
- To generate PDF health summaries for sharing with healthcare providers
Account & Device Data:
- Email address and authentication credentials
- Device model, OS version, and crash logs (for stability)
Usage Data: We record how the app is used — which screens are opened, whether a scan completed or was abandoned, how long a step took, and whether a purchase screen was shown. These events carry your user id, app version, platform and language, and are stored on our own infrastructure. They never contain health values, report contents, or anything you typed. We use them only to find where the app fails people and to measure whether changes help.
Feedback You Send Us: If you use the in-app feedback form, we receive what you write, any screenshot you attach, the contact details you choose to provide, and technical context (app version, build number, OS version, platform, language, the screen you opened it from, and whether you have an active subscription). The app itself passes no health data to that form. Please do not type health values or report contents into feedback yourself — see Section 5 for where this data is stored.
We do NOT intentionally collect irrelevant sensitive personal information.
Medical Disclaimer: MediLens is a personal health record-keeping tool only. It does not provide medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional for any medical concerns.
中文 — 1. 我們收集的資訊
我們收集以下類別的資料：
健康資料（使用者提供）：
- 醫療報告圖片（化驗單、血液檢查、影像報告、生命體徵、臨床檔案）
- 提取的健康指標（如血糖、膽固醇、血壓、血常規數值等）
- 與檢測結果相關的參考範圍及異常標記
- 多次掃描得出的健康趨勢資料
- 您建立的家庭成員健康檔案（姓名、出生年份、性別、健康史備註）
- 與您健康記錄相關的 AI 對話內容
健康資料的使用方式：
- 提取、整理並展示您的健康指標
- 追蹤趨勢並標記異常數值
- 提供個性化 AI 健康助手回覆
- 生成 PDF 健康摘要，供與醫療人員共享
賬戶與裝置資料：
- 電子郵件地址及身份驗證憑據
- 裝置型號、系統版本及崩潰日誌（用於維護穩定性）
使用資料： 我們會記錄 App 的使用情況——開啟了哪些頁面、一次掃描是完成還是中途放棄、某個步驟耗時多久、是否展示過付費頁面。這些事件會攜帶您的使用者 id、App 版本、平臺和語言，儲存在我們自有的基礎設施上。其中絕不包含健康數值、報告內容或您輸入的任何文字。 我們僅用它來發現 App 在哪裡讓使用者受阻，以及衡量改動是否有效。
您提交的反饋： 若您使用 App 內的反饋入口，我們會收到您填寫的內容、您附加的截圖、您選擇留下的聯絡方式，以及技術上下文（App 版本、構建號、系統版本、平臺、語言、從哪個頁面開啟、是否為訂閱使用者）。App 本身不會向該表單傳遞任何健康資料。 也請您不要在反饋中自行填寫健康數值或報告內容——儲存地點見第 5 節。
我們不會主動收集與服務無關的個人敏感資訊。
醫療免責宣告： MediLens 僅為個人健康記錄工具，不提供醫療建議、診斷或治療方案。如有任何健康問題，請諮詢專業醫療人員。
English — 2. Third-Party AI Processing
Transparency on AI: To read and interpret your reports we transmit your data to the following third-party processors:
- Alibaba Cloud DashScope (Qwen-VL models) — reads your report images to extract the data on them
- OpenRouter — reads your report images when the primary provider is unavailable
- OpenAI — generates clinical explanations, powers the AI assistant, distils long-term health facts, and reads report images if all other image providers fail
- DeepSeek and SiliconFlow — generate explanations and assistant replies for Chinese-language users
- Mem0 — stores durable health facts so the assistant remembers your history across conversations
What is actually sent. To read a report we must send the report image itself. That image is transmitted as photographed and may therefore contain your name, patient or ID number, hospital and physician details. We do not remove that information from the image before sending it. Text-based features receive the extracted values and your report history, never your login credentials or payment details.
Your control. Before uploading, the app lets you mask any part of the image you would rather not send. You can also skip scanning altogether and enter values by hand. These providers are bound by data-processing agreements and are prohibited from using your data to train their models.
中文 — 2. 第三方 AI 處理
AI 透明度宣告： 為了讀取和解讀您的報告，我們會將您的資料傳輸給以下第三方處理方：
- 阿里雲 DashScope（通義千問 VL 模型）— 讀取您的報告圖片以提取其中的資料
- OpenRouter — 在主要服務不可用時讀取您的報告圖片
- OpenAI — 生成臨床解讀、驅動 AI 助手、提煉長期健康事實；當其他影象服務全部失敗時也會讀取報告圖片
- DeepSeek 與 SiliconFlow — 為中文使用者生成解讀與助手回覆
- Mem0 — 儲存長期健康事實，使助手能跨會話記住您的病史
實際傳輸的內容。 為了讀取報告，我們必須傳送報告圖片本身。該圖片按拍攝原樣傳輸，因此可能包含您的姓名、就診號或身份證號、醫院及醫生資訊。我們不會在傳送前從圖片中移除這些資訊。 基於文字的功能接收的是提取出的數值和您的報告歷史，絕不包含登入憑據或支付資訊。
您的控制權。 上傳前，App 允許您遮蓋圖片中任何不想傳送的部分；您也可以完全不使用掃描，改為手動錄入數值。這些處理方受資料處理協議約束，被禁止將您的資料用於訓練其模型。
English — 3. Data Storage & Security
Data is stored on servers meeting industry security standards (e.g., SSL/TLS encryption). While we implement reasonable safeguards, absolute security cannot be guaranteed.
中文 — 3. 資料儲存與安全
資料儲存在符合行業安全標準（如 SSL/TLS 加密）的伺服器中。雖然我們採取了合理的保護措施，但無法保證絕對安全。
English — 4. Data Sharing
We do NOT sell or rent your personal health data to advertisers. Data is shared only when required by law, explicitly authorized by you, or necessary for essential infrastructure (e.g., cloud hosting).
Beyond the AI processors listed in Section 2, we rely on: Supabase (database, file storage and authentication), Sentry (crash diagnostics), RevenueCat (subscription status on iOS and Android), a third-party feedback service (feedback content and screenshots), and, for users in mainland China, Alipay and WeChat Pay (payment processing). Signing in with Google or Apple shares only the identifier needed to authenticate you.
中文 — 4. 資料共享
我們不會向廣告商出售或出租您的個人健康資料。僅在法律要求、獲得您明確授權或核心基礎設施（如雲託管）需要時，才可能共享資料。
除第 2 節列出的 AI 處理方外，我們還使用：Supabase（資料庫、檔案儲存與身份認證）、Sentry（崩潰診斷）、RevenueCat（iOS 與安卓的訂閱狀態）、第三方反饋服務（反饋正文與截圖），以及面向中國大陸使用者的支付寶與微信支付（支付處理）。使用 Google 或 Apple 登入時，僅共享認證所需的識別符號。
English — 5. International Data Transfers
Your data may be processed on servers located outside your country of residence. We rely on standard contractual clauses to ensure the security of cross-border data transfers.
Where feedback is stored. The in-app feedback form is operated for us by a third-party service whose servers are located in Shanghai, China. If you send feedback from outside mainland China, its contents — including any screenshot — are transferred there. This is why the form asks you not to include health values or report contents. If you would rather your message were not stored in China, email us at support@medilens.app instead.
中文 — 5. 國際資料傳輸
您的資料可能會在您居住國以外的伺服器上進行處理。我們依據標準合同條款來保障跨境資料傳輸的安全性。
反饋資料的儲存地點。 App 內的反饋入口由第三方服務代為運營，其伺服器位於中國上海。若您從中國大陸以外提交反饋，反饋內容（含截圖）會傳輸至該地。這也是提交頁提示您不要填寫健康數值或報告內容的原因。如果您不希望自己的留言儲存在中國境內，請改為傳送郵件至 support@medilens.app。
English — 6. Your Rights & Account Deletion
You have the right to access, correct, or delete your data.
Account Deletion: You can request the permanent deletion of your account and all associated cloud data directly via the "Delete Account" feature in the App settings. This action is irreversible.
中文 — 6. 使用者權利與登出
您有權訪問、更正或刪除您的資料。
賬戶登出： 您可以直接透過應用設定中的“刪除賬戶”功能，請求永久刪除您的賬戶及所有相關的雲端資料。此操作不可逆。
English — 7. Children’s Privacy
The App is not intended for children under the minimum legal age (e.g., 13 in the US, 16 in the EU). Any such data will be removed immediately upon discovery.
中文 — 7. 兒童隱私
本應用不面向未達到法定最低年齡（如美國為 13 歲，歐盟為 16 歲）的兒童。一旦發現此類資料，我們將立即予以刪除。
English — 8. Updates
This Policy may be updated periodically. Material changes will be notified via the App.
Contact: feedback@medilens.app
中文 — 8. 政策更新
本政策可能不定期更新。重大變更將透過應用內通知。
聯絡方式： feedback@medilens.app