Consumer health data privacy policy
This policy covers consumer health data handled through the Zhibiaoben iOS app. It is written for Washington's My Health My Data Act and similar state laws, and it supplements our Privacy policy.
In short: your health data stays on your devices and in your own iCloud. We run no servers and cannot see it. The only time it leaves your control is when you start recognition, which sends images to DeepSeek in mainland China.
Who this applies to
This policy applies to you if you are a consumer in Washington State, or if your consumer health data is collected in Washington State, and to consumers in other US states with similar consumer health data laws. "We" means Deng Chaosheng, the individual developer of Zhibiaoben.
In this policy, "collect" includes data the app stores on your device and in your iCloud on your behalf, even though we cannot access it.
Consumer health data we collect
- Lab results: indicator names, values, units, reference ranges and whether a value is out of range
- Exam reports (CT, MRI, ultrasound and similar): body part, findings and impression text
- Checkup reports and the results, findings and conclusions they contain
- Images and PDF pages of those reports, which may show your name, patient number, facility and dates
- Readings you log yourself (for example blood glucose or uric acid) and when you took them, including photos of device screens used to read them
- Custom indicators you create, and how you match report lines to indicators
- For family members you add: label, relationship, and optionally sex and birth year
- Follow-up reminder dates and the indicators you watch, which can reveal health conditions you are tracking
Where it comes from
- From you: photos, PDFs and files you choose, values you type, and edits you make during review.
- From DeepSeek: the recognized text and values it returns to your phone after reading your images.
We don't obtain consumer health data from data brokers, advertisers or any other source.
Why we collect and use it
Only to provide the features you use:
- Keeping your reports as records and showing trends for each indicator
- Reading report images and device screens (recognition)
- Reminding you of follow-ups and showing watched indicators in widgets
- Syncing your records between your own devices through iCloud
We don't use consumer health data for advertising, profiling, or any purpose you haven't asked for.
Who receives it
- DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.), which processes images for recognition. When you start recognition, your phone sends the images directly to DeepSeek's servers in mainland China. Its own policies say inputs may be used to improve and train its models; we don't control this. See the DeepSeek Privacy Policy.
- Apple (iCloud), which stores your records in your own private iCloud database when iCloud is on. This is your iCloud account, governed by the Apple Privacy Policy.
We share consumer health data with no one else. Sending images to DeepSeek happens only after you give separate consent in the app, before your first recognition.
Selling
We do not sell consumer health data.
Affiliates
We have no affiliates. No affiliate receives your consumer health data.
Your rights
- Access: confirm whether we collect, share or sell your consumer health data, see that data, and get a list of the third parties and affiliates that received it (DeepSeek and Apple, as above) with their contact details.
- Deletion: have your consumer health data deleted, including in our processors' hands where the law requires.
- Withdraw consent: withdraw your consent to our collection and sharing at any time.
- Appeal: appeal if we decline to act on your request.
- No discrimination: we won't treat you differently for exercising these rights.
How to exercise your rights
Because your data is on your devices and in your own iCloud, you can do most of this yourself in the app:
- See your data: open any report in Records. Tap Original to see the image.
- Delete: delete a report or a logged reading on its detail page, or delete a family member with all of their reports. To erase everything, delete the app and delete its data from iCloud storage management in iPhone Settings.
- Withdraw consent to sharing with DeepSeek: stop starting recognition and no more images are sent. To withdraw consent to collection, delete your data as above.
You can also email [email protected] with the subject "Health data request". Because we hold no copy of your data, we will guide you through doing it on your device, and for images already sent to DeepSeek we will pass your deletion request on to DeepSeek.
We will respond within 45 days of receiving your request. If we need more time, we may extend this once by another 45 days and will tell you why. We may ask for information needed to understand your request. Requests are free up to twice in any 12 months.
Appeals
If we decline your request, you can appeal by replying to our decision or emailing [email protected] with the subject "Appeal". We will reply in writing within 45 days, explaining what we did or didn't do and why.
If your appeal is denied, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint.
Contact and effective date
Deng Chaosheng, developer of Zhibiaoben. Email: [email protected].
This policy is effective as of 2026-09-28. When it changes, we update this page and the date above.