Privacy Policy

Version 2026-10-18 · Effective 2026-10-18

This policy explains personal information processing across our website, App, Mini Program and advisor portal. Health, identity-document, financial-account and under-14 children’s information may be sensitive. Please pay particular attention to its purposes, recipients and your rights.

1. Who processes your information

Service provider: 知元医链（北京）医疗科技有限公司 (Alchium Health). Unified social credit / tax identification number: 91110108MAKEW4GP85. Address: Room 1984, north side of Floor 2, Building 4, No. 123 Zhongguancun East Road, Haidian District, Beijing, China. Customer service and privacy contact: info@alchium.com; telephone and WeChat: +86 152 0139 7673. You may also use Contact Support in our services.

2. Accounts and contact

We process the phone number, email or WeChat login identifier you choose, password verification data, account role, language and consent records for registration and login. Website forms collect the contact details, location and enquiry you provide to respond and follow up. Public content may be browsed without submitting medical records.

3. Patient profiles and records

For care coordination we process patient identity and relationship details, age or birth date, sex, condition descriptions, medical and examination records, image files, translations, organized records and messages or attachments submitted to care groups. Necessary identity-document details are processed when identity checking is required. These support profiles, preparation, review, matching and communication. Without necessary records we may be unable to provide that service, but unrelated public browsing remains available.

4. Sensitive information

Health information supports appropriate coordination; identity and payment information supports verification and fulfilment. Exposure could harm privacy or personal or financial interests, so access is limited to authorized personnel with a service need. Where consent is the basis for sensitive processing, separate consent is obtained as required. This policy does not replace specific authorization. Do not submit unrelated sensitive information.

5. Professional and transaction data

Advisor applications use identity, contact, region, organization, resources, referral and review information. Professional identities, institutions, roles and assignments support permissions and coordination. Orders, amounts, currency, payer details, transaction references, receipts, refunds and invoice details support fulfilment and accounting. We do not request bank-card or WeChat payment passwords in our platform.

6. Permissions and local storage

Camera, photo, microphone or file access is requested for actions such as taking photos, choosing records, recording audio or saving files. Recordings are used for speech-to-text, processed as described in Section 7A. Refusal does not prevent unrelated features. Network addresses and request or operation logs support connectivity, security and audit. Login credentials, preferences and unsent forms may be stored locally and removed by logout, cache clearing or uninstalling. Our service does not read contacts or conduct cross-app advertising tracking.

7. Service providers

We use Alibaba Cloud infrastructure and messaging services for service data and necessary recipient and message information. AI features (record organizing, translation, Q&A, speech-to-text) and the third-party AI service and data they involve are described in Section 7A and require your separate consent. Tencent / WeChat supplies Mini Program login and WeChat Pay, handling login identifiers, authorized phone numbers, orders and payment status; disabled payment features do not initiate payments. The App uses DCloud uni-app runtime components for device functions subject to operating-system permissions. Data is transmitted for the features actually used.

7A. AI services and data sharing

Recipient: Alibaba Cloud Model Studio (Bailian), including Qwen text, vision and speech-recognition models, provided by Alibaba Cloud Computing Co., Ltd.; servers in mainland China (Beijing region). The App does not connect to this service directly; our server sends data after you consent. Data: images of medical records, test and imaging reports and the text recognized from them; patient name, age, sex and any ID number appearing in the materials; comprehensive record content; questions you ask the record assistant; voice recordings; care-group messages you choose to translate. Collection: collected when you upload, photograph, record, type or tap "Translate"; sent only after you separately allow "AI service data sharing" in the App, and only when you use the related feature. Purpose: organizing records, generating the comprehensive record, translation, answering your questions about the record, speech-to-text; not used for advertising, profiling or training general-purpose models. Protection: our agreement with the provider requires it to process data only on our instructions, not for any other purpose or model training, and with protection at least equal to this Policy; we oversee its processing and remain responsible for it. Retention and deletion: the provider processes each request in real time and does not retain it beyond what the service requires (per our agreement with the provider); recordings are deleted from our storage right after transcription; AI outputs are stored by us and deleted with the patient profile or account. Consent and withdrawal: AI processing requires your separate consent, which you can withdraw in Me > Privacy & Consents (other roles: Settings > Privacy & Consents); declining does not affect uploading, submission or human review. Withdrawal does not affect processing completed before it. Changes: we will update this section and the AI authorization and ask for your consent again before adding or changing an AI provider or data category. The full terms are in "AI Service Data Sharing Authorization".

8. Recipients and access

Coordinators, participating professionals and necessary operations personnel access information relevant to their roles. Before providing records to an independent medical institution, we identify the recipient, contact details, purpose and scope and obtain required consent. Advisors see referral information and limited progress, not full records or service-group access merely because they referred someone; they may manage records they were authorized to submit. We do not sell personal information or use medical records for public promotion or general-purpose model training.

9. Storage and international processing

Our operational data is primarily processed and stored on servers in mainland China. Sending records from abroad for coordination in China is a cross-border transfer. Overseas access to your records or your voluntary use of channels such as WhatsApp may also involve international processing. Avoid sending records through public or unnecessary channels. Before providing information to another overseas recipient, we explain its identity, location, purpose, data scope and rights contact, and meet applicable notice, consent and other obligations. This policy is not unrestricted transfer authorization.

10. Retention and deletion

Account information is retained until effective closure or the purpose ends. Coordination records are retained only for service, necessary continuity and dispute handling, then deleted or anonymized unless retention is required by law. Transaction and invoice records and security logs follow applicable retention requirements. Deletion requests are handled after identity checks. If legal retention or a technical limitation prevents immediate deletion, processing is restricted to storage and necessary protection and the reason is explained. Backups are overwritten in maintenance cycles; confirmed deletion is reapplied on restoration. Clinical records held independently by institutions remain under their lawful management.

11. Your requests

Available controls let you view or correct account and profile information, adjust notifications, withdraw cross-border authorization, withdraw AI service authorization and request closure. Contact info@alchium.com or our support number for access, copies, corrections, deletion, explanations or transfers where legally available. We verify identity as necessary and respond within 15 working days of a verifiable request, explaining progress for complex matters. Withdrawal does not affect prior lawful processing; it may prevent services requiring that information, but not unrelated functions.

12. Children

A guardian must arrange accounts or patient profiles and services for children under 14, read this policy and separately consent to their information processing. Only necessary information is collected, access is restricted and it is not used for advertising profiles. Guardians may request access, correction or deletion through our contact channels. We verify and delete or protect information submitted without required guardian authorization. Other minors receive guardian assistance where legally required.

13. Security

Authentication, role permissions, transmission protection, sensitive-field safeguards and operational audit reduce unauthorized access. No system is risk-free. We investigate and remediate incidents and notify affected users and authorities as required. Do not disclose verification codes, passwords or private download links.

14. Updates and complaints

The version and effective date appear on this page. Material changes to purposes, data categories, recipients or other matters are notified in advance, with fresh consent where required. You may complain to us or a competent regulator. Independent third-party pages you choose to visit have their own privacy rules; we remain responsible for our own processing obligations.