Zhibiaoben

Privacy policy

Effective
2026-09-28
Version
1.2
Controller
Deng Chaosheng

At a glance

Where reports live
On your phone and in your own private iCloud database. Without iCloud, only on this phone.
Can we see them
No. We have no servers and no accounts.
Where images go
For recognition, your phone sends them straight to DeepSeek, which reads them on servers in mainland China. They don't pass through us, and we don't keep them.
Tracking and ads
None. The app has no analytics, ads, or third-party tracking code.

Who we are

The Zhibiaoben iOS app is built and run by Deng Chaosheng, an individual developer, who is the party responsible for your personal data under this policy. Questions go to [email protected].

What the app stores

When you use Zhibiaoben, the app keeps the following. Lab results and exam findings are health data, which is sensitive personal data:

  • Photos of lab reports, and what recognition read from them after your review: indicators, results, reference ranges, facility, date, and the name printed on the report
  • Photos of exam reports (CT, MRI, ultrasound and so on), and the body part, findings and impression text after your review
  • Checkups: the full checkup report you import, and the results, findings and conclusions it is split into after recognition
  • PDF reports you import from Files. The app turns each page into an image on your phone, then stores and recognizes it
  • Readings you log yourself and when you took them, plus any custom indicators you create: name, unit, reference range
  • Which indicator you matched a line on the original report to (your indicator mappings)
  • Family members you add: a label, their relationship to you, and optionally sex and birth year
  • Follow-up reminder dates and the indicators you watch

The app keeps all of this on your own device and in your own iCloud. We can't get to it.

Where your data lives

Your reports, results and member profiles live in only two places: your devices, and a private database in your own iCloud.

With iCloud on, the data is stored through Apple's CloudKit in your Apple Account's private database (container iCloud.com.ldbmcs.zhibiaoben) and syncs between devices signed in to the same Apple Account. Only you can access it. As the developer, we have no servers and cannot read what is in that private database. Apple holds this data under the Apple Privacy Policy.

With iCloud off, the data exists only on this phone.

To erase everything: deleting the app removes the data on your phone. For the copy in iCloud, delete Zhibiaoben's data from iCloud storage management in iPhone Settings, or delete reports and family members one by one in the app first.

Recognition: images go to DeepSeek

Recognition runs on DeepSeek's official open platform API. Images are sent in three cases:

  • When you photograph or pick a lab report or exam report and start recognition: the app sends those images, with a fixed set of instructions, straight to DeepSeek to read the indicators, values or conclusions.
  • When you import a PDF or a checkup: the app first turns pages into images on your phone. For a checkup, it picks out the pages that have results on your phone and sends only those.
  • When you use Log a reading to photograph a device screen (a glucose or uric acid meter, for example): the app sends that photo to DeepSeek to read the number. The photo is discarded once read. It is not saved in the app or in iCloud.

The app does not send the labels, sex or birth years you entered for family members, or your Apple Account. Anything printed on the report itself, such as a name, patient number or hospital, is part of the image and is sent with it.

Wherever you are in the world, these images and recognition requests are processed on servers in mainland China.

The requests don't pass through any server of ours (we have none), and we keep no copy of the images or the results.

DeepSeek is provided by Hangzhou DeepSeek Artificial Intelligence Co., Ltd., with servers in mainland China. How it handles the data it receives is governed by its own policies. Its privacy policy says it uses user inputs to improve and train its models, and its open platform terms do not promise that API inputs are excluded from training. So assume that, by default, what you send may be used to improve or train its models. We don't control this and can't turn it off for you.

Sources: DeepSeek Privacy Policy · DeepSeek Open Platform Terms of Service

If you don't want an image sent, don't start recognition on it.

  • When you take photos, import files or log results in the app, you are actively providing health data to us. Sending images to DeepSeek for recognition is different: we ask for your explicit consent to that before your first recognition.
  • Before your first recognition, the app shows a separate consent screen explaining that images go to DeepSeek on servers in mainland China. Nothing is sent until you tap Agree and recognize.
  • You can use Zhibiaoben without agreeing to recognition: enter results yourself with Log a reading.
  • You can stop using recognition at any time. If you don't start recognition, the app sends no images. We can't recall images already sent to DeepSeek.
  • Before you create records for a family member, get their consent. If you create records for a minor, you should be their parent or legal guardian. This is your responsibility.

What stays on your phone

  • Follow-up reminders and recognition notifications: local notifications on your phone. No server is involved.
  • Log a reading: values you type stay in the app and are stored on your devices and in iCloud like any report. They are not sent to anyone.
  • Checkup page picking and duplicate checks: picking the pages with results, and telling whether an image was already imported, both happen on your phone.
  • Widgets: read only a summary the app keeps on this phone (latest results of watched indicators, the next follow-up) and never go online. Values and follow-up items are marked as private, so iOS hides them while your iPhone is locked.

Permissions

  • Camera: to photograph lab and exam reports, or a device screen.
  • Notifications: to remind you of follow-ups and tell you when recognition finishes.

Picking images uses the system photo picker, and importing PDFs uses the system file picker. Neither needs extra permission, and the app gets only the items you choose.

You can turn these permissions off at any time in iPhone Settings. The related features stop working when you do.

Subscriptions and payment

Apple handles payment through the App Store. The app only asks Apple whether your subscription is active and never sees your payment details. In App Store Connect we see only anonymous transaction records that don't identify you.

What we don't do

  • No account sign-up
  • No analytics, advertising or third-party tracking SDKs, and no tracking across apps
  • We don't sell your data, and apart from DeepSeek for recognition and Apple iCloud for storage, as described here, we don't share it with anyone
  • No crash collection of our own. Only if you choose to share with app developers in iPhone Settings > Privacy & Security > Analytics & Improvements does Apple pass us crash reports that don't identify you

Family members and children

You can keep reports for family members, including children. When you do, make sure you are the child's parent or legal guardian, or that the family member has agreed.

Zhibiaoben is not meant to be used on their own by children under 13. Where local law sets a higher age, that age applies. A parent or guardian creates and manages a child's records.

Your rights

Your data is on your own devices and in your own iCloud, so you can exercise most rights directly in the app:

  • Access: every report can be viewed in the app. Tap Original to see the photo.
  • Correction: recognized values and exam text can be edited on the review screen, and are saved to Records only after you confirm. If you spot a mistake later, tap the item on the report to change the result, unit or reference range. The original image stays as it was.
  • Deletion: on a report you can delete that report or a single logged reading. The images and all results are removed from this phone and your iCloud together, and can't be restored. Deleting a family member deletes all of their reports too.
  • Withdrawing consent: in the app, go to Settings › Privacy › Recognition consent and tap Withdraw. After that the app sends no more images and asks for your consent again before the next recognition. Recognitions that started before you withdrew finish as usual, and reports already saved to Records aren't affected. To withdraw consent to processing your health data, delete your data in the app (see Where your data lives).
  • Export: the app does not have an export feature yet. If you need a copy of your data, email us and we'll explain how to get it out of the current version.

We hold none of your data, so we can't look it up or delete it for you. For help, a complaint, or if you're unhappy with our reply, write to [email protected]. You can also complain to the data protection authority where you live.

Users in different countries and regions

We process your health data, and send images to mainland China for recognition, on the basis of your explicit consent. Where the privacy law of your country or region gives you more rights, we follow it. Examples include Hong Kong's Personal Data (Privacy) Ordinance, Taiwan's Personal Data Protection Act, the Personal Data Protection Acts of Singapore and Malaysia, Australia's Privacy Act 1988, New Zealand's Privacy Act 2020, Canada's PIPEDA, and mainland China's Personal Information Protection Law.

United States

If you live in the United States, some state laws, including Washington's My Health My Data Act, give you specific rights over consumer health data. Our Consumer Health Data Privacy Policy explains what we collect, why, who receives it, and how to exercise those rights. It is part of this policy.

Changes and contact

When this policy changes, we update this page and the effective date above. For significant changes, we also say so in the app's release notes. If we switch recognition provider, the app asks for your consent again before the next recognition.

Contact: [email protected]. This policy is effective as of 2026-09-28.