VitaKeeper APP Privacy Policy

📊I. Methods and Scope of Information Collection

• 1.1 Health Data Collection: When you use VitaKeeper APP to record health information such as blood pressure, blood sugar, blood lipids, and BMI, we will collect relevant data for health analysis, trend reminders, and report generation. You can view, modify, or delete your health data in the APP at any time.
• 1.2 Basic Device Information: To provide more stable and personalized services, we may collect device hardware information (such as device model, operating system version, device serial number, etc.) and network information (such as IP address and network type) after you agree to the privacy policy for statistics, security risk control, and service experience optimization.
• 1.3 Third-party Service Usage: Some functions may rely on third-party services to implement. These services will only run after users agree to the privacy policy. Specifically include:
  • Umeng Statistics Service: Used for APP usage statistics and performance optimization. The service may collect device information (such as device model, operating system version, network type, and IP address) but will not collect your health data.
  • Umeng Push Service: Used to send you health reminders and important notifications, using APNs / push token device identifiers.
  • Alibaba Cloud ACCS message channel (package com.taobao.accs, embedded inside the Umeng Push SDK above): maintains the persistent push connection so health reminders arrive on time. To evaluate connectivity and select an access point it reads network state (connection status, network type such as Wi-Fi / cellular, roaming flag) and the IP address. It does not collect your health data.
  • Google Mobile Services (GMS, provided by Google) (as above, enabled only in the iOS and Google Play builds): provides the runtime foundation for Firebase Cloud Messaging and Google AdMob. It reads installed-application information (only querying the version of the Google Play Store component com.android.vending to determine service availability) and device identifiers. It is started only after you agree to this privacy policy.
  • MSA SDK (package com.bun.miitmdid, mainland China distribution channels only): required by the advertising SDK to obtain the anonymous device identifiers OAID / VAID / AAID in place of immutable hardware identifiers such as IMEI, for ad attribution and anti-fraud. You can reset this identifier in your system settings.
  • On-device text recognition (Google ML Kit Text Recognition): Used to read values from health-device screens and lab reports. Recognition runs entirely on your device; photos are never uploaded to any server or shared with any third party.
  • Firebase (provided by Google) (enabled only in the iOS and Google Play builds; not enabled in the Huawei, Honor, Xiaomi, OPPO, vivo, Tencent MyApp and other mainland-China Android channel builds): Includes Firebase Cloud Messaging (push notifications) and Firebase Remote Config (remote configuration). May collect device identifiers, IP address, and app installation information. This service is operated outside mainland China; see "1.5 Cross-border transfer of personal information".
  • Google AdMob Advertising SDK: Displays ads on the splash screen for free users. AdMob may collect advertising identifiers (IDFA / IDFV), IP address, device information, and ad interaction data. Premium subscribers will not see ads.
  • In-App Purchase (Apple StoreKit / Google Play Billing): Used to process subscriptions and payments. Transactions are managed directly by Apple or Google; we only receive your subscription status and expiration date and do not access your payment credentials.
• 1.4 User Feedback and Complaints: You can submit feedback or complaints through the "Problem Feedback" function in the "My" page of the APP. When involving personal information or health data, we will strictly handle it according to the privacy policy.
• 1.5 Cross-border transfer of personal information
  • Scope: cross-border transfer occurs only in the iOS and Google Play builds. The Huawei, Honor, Xiaomi, OPPO, vivo, Tencent MyApp, 360, Baidu and Wandoujia mainland-China Android channel builds do not enable Google services and transfer no personal information outside mainland China.
  • Overseas recipient: Google LLC (incorporated in California, USA).
  • Contact: https://support.google.com/policies; privacy policy https://policies.google.com/privacy
  • Purpose: delivering push notifications (Firebase Cloud Messaging), retrieving remote configuration such as version updates (Firebase Remote Config), and serving and reconciling ads (Google AdMob, free users only).
  • Means: received and processed by Google on its servers outside mainland China.
  • Categories: device identifiers, IP address, app installation information, advertising identifiers (IDFA / IDFV). Your health data, member profiles and phone number are not included.
  • Your rights: you may withdraw from the above transfer by turning off notification permission in system settings, subscribing to Premium (no ads shown), or uninstalling the app; you may also email 1558406139@qq.com to ask us to stop.

🔐II. Information Usage Purposes

• Provide health data recording, analysis, and trend reminder services.
• Optimize product functions and user experience.
• Send important health reminders and notifications.
• Conduct product usage statistics to help improve service quality.
• Handle user feedback and technical support requests.
• PDF Health Reports: You may generate PDF files of your health records locally on your device and share them yourself via the system share sheet (e.g., email or messaging apps). Files are generated locally only; the app never uploads them to any server.

🛡️III. Information Protection Measures

• We use industry-standard encryption to secure data at rest and in transit.
• Enforce least-privilege access; only authorized personnel may access necessary data.
• Conduct regular security audits and vulnerability assessments; promptly remediate issues.
• Implement monitoring, backup and recovery procedures to reduce incident impact.
• We do not sell, share, or disclose your health data to unrelated third parties unless required by law or to protect user safety.
• Security Notice: While we take reasonable technical and organizational measures, absolute security cannot be guaranteed. To the extent permitted by law, the Company is not liable for data loss, disclosure, or damage due to force majeure, third-party causes, or user actions.

⚖️IV. Your Rights and How to Exercise Them

Every right below has a matching entry point inside the app. Exercising them is free, requires no contact with support, and requires no ID documents, selfies holding ID, or other extra material.

• 4.1 Access and correction
  • Health data: tap any blood pressure, blood glucose, blood lipid or BMI record on the home screen or in a record list to view and edit it.
  • Member profile (name, gender, date of birth, avatar): "Profile → Member Management → tap the member".
  • Copy of your data: "Profile → Other → Export Data" exports all of your health data as JSON or CSV.
• 4.2 Deletion
  • A single record: open the record and tap "Delete" in the top-right corner. Takes effect immediately.
  • A member and all their records: "Profile → Member Management → Delete Member". Takes effect immediately.
  • Everything on the device: uninstalling the app deletes all health data stored on it. Because nothing is uploaded to our servers, we hold no copy afterwards.
  • Feedback and images: "Profile → Other → Feedback → My Feedback".
  • If any of these entry points does not work for you, email 1558406139@qq.com and we will verify and complete the deletion within 15 working days.
• 4.3 About accounts
  • This app has no account system. There is no sign-up, we do not collect a phone number and we send no SMS codes, so there is nothing to "close".
  • Premium is held by your App Store / Google Play account and is unrelated to us. View, cancel or refund a subscription in that store's subscription settings.
  • To erase everything, simply uninstall the app — your health data lives only on your device and we keep no copy on any server.
• 4.4 Withdrawing consent
  • Withdraw consent to this policy as a whole: uninstalling the app constitutes withdrawal; or email 1558406139@qq.com to declare withdrawal and we will stop the corresponding processing within 15 working days.
  • Camera permission: system Settings → Apps → VitaKeeper → Permissions → Camera → off. You can still enter data manually.
  • Notification permission: system Settings → Apps → VitaKeeper → Notifications → off, or turn reminders off under "Profile → Health Reminders".
  • Ad personalisation: Premium subscribers see no ads at all; you can also reset or disable your advertising identifier in system Settings → Privacy → Ads.
  • Withdrawal does not affect the lawfulness of processing carried out on the basis of your consent before it was withdrawn. Withdrawing a specific permission may disable the related feature but never affects the app's core on-device health-record function.
• 4.5 Response times: correction and deletion requests you can perform in the app take effect immediately. For requests requiring manual handling (including deletion, withdrawal of consent and data-copy requests submitted by email), we undertake to complete verification, action and reply within 15 working days of receipt.
• 4.6 Complaints: if you believe our handling of your personal information has harmed your rights, submit a complaint via "Profile → Other → Feedback" or email 1558406139@qq.com; we will reply within 15 working days. If our reply does not satisfy you, you may complain to the competent regulator or bring proceedings before a court of competent jurisdiction.
• 4.7 Minors: we maintain dedicated processing rules for children under 14 — see the Minors' Personal Information Protection Rules: https://hs-qingzhi.github.io/support/vitakeeper_minor_privacy_en.html (also reachable at "Profile → Other → Minors' Privacy Policy").

🔄V. Policy Updates

• We may modify this privacy policy based on laws and regulations and product updates, and announce the updated version in the APP. We will use reasonable efforts to notify, but individual consent is not required.
• Continued use of the APP indicates your agreement to the updated privacy policy.

🧩VI. Third-party Services Statement

• Some features rely on third-party services (e.g., statistics, push notifications, OCR). Data processing by such services is subject to their own privacy policies; disputes arising therefrom are the responsibility of the third party.
• To the extent permitted by law, the Company does not warrant the availability, accuracy, or compliance of third-party services, nor bear joint liability.
• OCR/recognition features may be inaccurate or delayed and are for reference only. Manual confirmation is recommended.

🗄️VII. Data Retention and Backup

• We retain personal information for the shortest period necessary to fulfill the purposes, after which it will be deleted or anonymized unless otherwise required by law.
• Users are advised to perform regular backups. To the extent permitted by law, the Company is not liable for data loss due to lack of backup or device issues.

💬VIII. Information Processing for the Feedback Feature

When you use the in-app Feedback feature, we collect and process the following information solely to receive and handle your feedback, communicate with you, and improve our products:

• 8.1 Information you provide: feedback content, images, and contact information (optional). Contact information is stored encrypted.
• 8.2 Information attached automatically to help diagnose issues: app version, OS version, device model, language, membership status, and current page, along with an anonymous device identifier (which does not contain your real identity such as name or phone number); your access IP is also recorded at submission solely for abuse prevention and security, and is not retained long-term.
• 8.3 Storage and third parties: data is stored on Alibaba Cloud (mainland China, Beijing). Images are uploaded to Alibaba Cloud Object Storage (OSS) and machine-moderated by the Alibaba Cloud DashScope vision model to block non-compliant content; this image moderation is an entrusted-processing arrangement with Alibaba Cloud.
• 8.4 Retention: images are deleted automatically after 12 months by default; text feedback is retained for 12 months after the ticket is resolved, then cleared automatically.
• 8.5 Your rights: you can delete all of your feedback (including images) in the My Feedback list; records are removed immediately upon request and images are cleared thereafter.
• 8.6 Non-public: this channel is a private support ticket between you and the developer; its content is never shown publicly to other users.