We highly value the importance of your personal information and strictly comply with all applicable laws and regulations regarding personal information protection in your country/region. We have formulated this Privacy Policy to explain how we collect, use, store, share, and protect your personal information, as well as the rights you enjoy.
Please read this Privacy Policy carefully before using this APP, especially the bolded clauses regarding the processing of sensitive personal information. If you do not agree with any content of this policy, please stop using this APP immediately; by using any service of this APP, you are deemed to have fully understood and agreed to all contents of this policy.
This policy applies to all services of the "MediBuddy - AI" APP, including but not limited to the APP client, related webpages, mini-programs, and derivative services. This policy does not apply to services provided to you by third parties via this APP. Third-party services are subject to their own privacy policies, and we assume no responsibility for the information processing activities of third parties.
We adhere to the principles of legality, legitimacy, necessity, and good faith, collecting only the personal information essential for providing services, without excessive collection. We classify personal information into Necessary Information (information essential for core services, without which the corresponding service cannot be provided) and Optional Information (information for additional services, which you may choose whether to provide; non-provision does not affect core services).
(1) Account Registration and Login
To complete account registration and ensure account security, we will collect:
- Necessary Information: Your email account and email verification code. Used for account registration, login, and identity verification; this is fundamental information for the core services of this APP.
- Optional Information: Your nickname, avatar, gender, and date of birth. Used to improve your personal profile and enhance user experience; you may choose whether to provide this information.
(2) Information Required for Core Services
To provide core services such as medicine cabinet management, medication reminders, and medication record management, we will collect information that you actively fill in or upload, such as: medicine names, dosages, times, cycles, and reminder settings. This is used to provide you with medication reminder and medicine cabinet management services.
(3) Device and Permission-Related Information
To ensure the normal operation of the APP and optimize the service experience, we will request the following device permissions during your use. Information will only be accessed after your authorization:
- Notification Permission: Used to push medication reminders and service notifications to you. You can disable this authorization at any time; disabling it will prevent you from receiving medication reminder pushes.
- Camera / Photo Library Permission: Used for taking photos, uploading medicine images, or scanning barcodes to add medicines, and for image recognition features. You can disable this authorization at any time; disabling it will only prevent the use of related image functions and will not affect core services.
- Storage Permission: Used to ensure the normal operation of the APP and cache necessary data. You can disable this authorization at any time, but doing so may affect the normal use of the APP.
- Calendar Permission: Used to sync medication reminders to your system calendar. You can disable this authorization at any time; disabling it will not affect the in-app reminder function.
We will not forcibly request permissions unrelated to services, and you can adjust authorization status at any time via your device's [Settings - Permission Management].
(4) Other Necessary Information
To ensure APP security and prevent malicious attacks, we collect your device model, OS version, device identifiers, network information, and APP usage logs. Such information is used solely for system security and service optimization and will not be used to identify your personal identity.
If you consult or provide feedback via customer service channels, we will collect your contact information, problem description, and relevant proof materials, solely for addressing your requests and replying to your inquiries.
(5) Rules for Information Usage
We will only use your personal information within the scope and for the purposes stated in this policy and will not use it beyond the agreed scope.
If we need to use your personal information for purposes not specified in this policy, we will inform you in advance and re-obtain your consent.
We will de-identify and anonymize the collected information to perform data analysis, service optimization, and product iteration without leaking your personal identity.
When processing your sensitive personal information, we strictly comply with laws and regulations, obtain your separate consent, and implement stricter protective measures.
Sharing Rules: We promise never to sell or rent your personal information to any third party. We will only share your information with third parties under the following circumstances and will share only the minimum scope necessary to achieve the service:
- Sharing with third parties designated by you after obtaining your explicit separate consent;
- Sharing with our cooperative service providers (e.g., SMS push service providers, cloud storage service providers) to fulfill services. We will sign strict confidentiality agreements with partners, requiring them to strictly protect your information and prohibiting use for purposes other than those agreed upon;
- Providing your information as required by laws and regulations, or in response to legitimate requests from judicial or administrative authorities;
- Sharing within a reasonable and necessary scope to protect the legal rights, property, and personal safety of us, you, or other users.
Transfer Rules: If a merger, division, acquisition, asset transfer, or similar event occurs, requiring the transfer of your personal information, we will inform you in advance of the recipient's name and contact details, requiring the recipient to continue fulfilling the obligations stipulated in this policy; otherwise, we will re-obtain your consent.
Public Disclosure Rules: We will not publicly disclose your personal information unless required by laws and regulations or with your explicit separate consent.
Storage Location: Your personal information is stored within the territory of your country/region, and we will not transmit your personal information overseas. If cross-border transmission is necessary, we will strictly comply with laws and regulations, inform you of the relevant details in advance, obtain your separate consent, and complete relevant compliance procedures.
Storage Period: We store your personal information only for the duration necessary to provide services to you, adhering to the principle of minimum necessity. After you deregister your account, we will delete or anonymize your personal information as required by laws and regulations; information that laws and regulations mandate be retained will only be kept for retention purposes and not used for other uses.
Security Protection Measures: We adopt industry-standard encryption technology, access control, security audits, and other technical measures to protect your personal information from leakage, tampering, or loss. We have established a comprehensive information security management system, assigned dedicated personnel for information security protection, and conduct strict permission management and confidentiality training for relevant staff.
Security Incident Handling: In the event of a security incident involving personal information leakage or loss, we will immediately activate an emergency plan, take remedial measures, notify you as required by laws and regulations, and report to relevant regulatory authorities.
You enjoy the following rights regarding your personal information, and we will provide convenient channels for you to exercise these rights without setting unreasonable obstacles:
- Right to Know and Right to Access: You have the right to access all your personal information, such as account details and medication records, via [Me - Profile Center].
- Right to Rectification and Completion: If you find that your personal information is incorrect or incomplete, you have the right to correct or supplement it within the APP at any time.
- Right to Erasure: Under the following circumstances, you have the right to request that we delete your personal information:
1. Our processing of information violates laws, regulations, or this agreement;
2. You withdraw consent and no longer use our services;
3. You deregister your account;
4. We cease to provide relevant services to you.
Upon receiving your deletion request, we will verify and process it within a reasonable period, unless otherwise provided by laws and regulations.
- Right to Withdraw Consent: You have the right to withdraw your consent to this Privacy Policy at any time, including authorization for device permissions and the processing of sensitive personal information. You can disable permissions via your device system settings or withdraw all consent by deregistering your account. After withdrawing consent, we will cease processing the corresponding personal information, but this will not affect processing activities conducted based on your consent prior to withdrawal.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal information.
- Right to Data Portability: You have the right to receive a structured, commonly used, and machine-readable copy of your personal information and have the right to transmit this data to another controller.
- Right to Object: You have the right to object to our processing of personal information based on legitimate interests.
- Right to Deregistration: You have the right to deregister your account at any time. The path is [Me - Settings - Account Security - Deregister Account]. After deregistration, we will stop providing services to you and delete your personal information as required by laws and regulations.
We attach great importance to the protection of minors' personal information. If you are a minor, you must use this APP under the knowledge, consent, and accompaniment of a guardian, who shall bear corresponding guardianship responsibilities.
We do not actively collect personal information from minors. If we inadvertently collect a minor's personal information without guardian consent, the guardian may contact us, and we will delete the relevant information immediately.
If a minor uses this APP, their medication behavior must be guided by a guardian or professional medical personnel. We assume no responsibility for any self-medication by minors.
This APP and related web services may use Cookies and similar tracking technologies to optimize your user experience. We strictly distinguish between necessary technologies (essential for basic service operation) and non-necessary technologies (used for analysis and optimization). For non-necessary tracking technologies, we will only enable them after obtaining your explicit consent, and you can manage or disable related features at any time via your device or browser settings.
We have the right to update this Privacy Policy according to changes in laws, regulations, and business development needs. The updated policy will be announced via APP notices or pop-ups, effective 7 days after publication.
For significant changes to this policy (including the purpose, method, and scope of information collection, sharing rules, your rights, and security protection measures), we will inform you in a more prominent manner and re-obtain your consent.
You can view the latest version of this policy at any time via [Me - About Us - Privacy Policy].