User Privacy Policy of MediChain International

来源：Medicine发布时间：2026-07-06

User Privacy Policy

Medicine Chain Group (hereinafter referred to as "MediChain Health" or "we") fully understands the importance of personal information to you. We respect and protect the personal information of all users of the MediChain International and will make every effort to ensure that your personal information is secure and reliable. MediChain Health is committed to maintaining your trust in us and adheres to the principles of accountability, clarity of purpose, informed consent, minimum necessity, security, participation by data subjects, openness, and transparency. At the same time, we undertake to adopt corresponding security measures in accordance with mature industry standards to protect your personal information. Before using the MediChain International and related services, please carefully read and fully understand this User Privacy Policy (hereinafter referred to as this "Privacy Policy").

I. Legal Basis for MediChain Health's Processing of Personal Information

When processing your personal information, we comply with applicable laws and regulations, including but not limited to the Cybersecurity Law of the People's Republic of China and the Personal Information Protection Law of the People's Republic of China. We collect, use, store, share, transfer, and disclose your personal information only where permitted by law.

Unless otherwise provided by laws and regulations, we rely on the following legal bases when collecting, using, storing, and transmitting personal information:

1. Processing necessary for entering into or performing a contract with you, for example, to provide services through the MediChain International;

2. Processing based on your express authorization;

3. Processing necessary to comply with legal requirements or for national security, public interests, public health, and similar needs;

4. Processing necessary in accordance with laws, regulations, or requirements of regulatory authorities;

5. Processing necessary to safeguard the lawful rights and interests of MediChain International, such as investigating or resolving disputes and handling complaints;

6. Other processing carried out with your express consent.

II. Scope of Application of This Privacy Policy

This Privacy Policy applies to the services provided through the MediChain International, including but not limited to the collection, use, protection, and disclosure of personal information involved in user registration, login, and use. We may also collect your personal information through other lawful means and will comply with applicable laws and regulations and this Privacy Policy.

When you use the MediChain International, we may collect and use your personal information in various ways. For example, when you register an account, complete questionnaires, receive health assessments, browse pages, or use mobile applications, we may collect your name, gender, date of birth, contact details, medical history, examination reports, pathology data, medication information, and other personal information. We use such information to provide health management and related services, such as health record management, condition assessment, disease management, and health consultation. We also adopt security measures to ensure that your personal information is not disclosed or misused.

III. How MediChain Health Collects and Uses Your Personal Information

(1) Helping You Register and Log In to the MediChain International

When you choose to register and log in to the MediChain International, we need to collect and process your personal information in order to provide functions such as registration, login, and account security protection. Such information includes, but is not limited to, your mobile phone number, email address, and password. We will collect your personal information after providing clear notice and will process and protect it in strict accordance with applicable laws and regulations and this Privacy Policy. We will process your personal information based on your authorization or other circumstances permitted by law, and will share it with third parties only within the necessary scope in order to provide relevant services. If you do not wish to provide the required personal information, you may be unable to complete registration, log in, or normally use the relevant services of the MediChain International.

When you use the MediChain International, we may also collect certain information through automated technical means, such as cookies and web beacons, in order to understand your preferences and behavior, improve system performance, and provide better services. Such information generally does not directly or indirectly identify you and does not constitute personal information.

Unless we obtain your explicit authorization, we will not share your personal information with any third party. If it is necessary to share your personal information with a third party, we will inform you of the purpose of sharing, the content of the shared information, and the identity of the recipient, and obtain your authorization and consent in accordance with law. At the same time, we will require the relevant third parties, by means of confidentiality or data processing agreements, to protect the security of your personal information in accordance with this Privacy Policy and applicable laws and regulations.

If you no longer use the services of MediChain Health, you may apply to cancel your account at any time through the account cancellation function provided in the system. We will promptly delete your personal information or anonymize it in accordance with applicable laws and regulations to ensure the security of your personal information.

(2) Customer Service

When you contact us for customer service support, we may collect your name, contact information, account information, and information related to your questions, inquiries, or suggestions. We use such information to process your requests, resolve issues, and improve service quality. Based on the necessity of handling service requests, we may share necessary information with partners, such as cloud service providers and customer service support providers, in order to provide corresponding services. We will strictly protect your personal information and will not use it for purposes unrelated to customer service.

When you submit inquiries, complaints, suggestions, or other service requests while using the MediChain International, we will collect and use the relevant information as necessary to process such requests and may contact you by email, telephone, or other means. During this process, we may record and follow up on the information you provide so that we can better understand your needs and offer you solutions. Except where necessary for handling customer service requests, we will not use such information for any other purpose.

(3) Consultation, Appointment, and Order Functions

When you initiate a consultation with a registered doctor through the MediChain International, seek medical services, participate in clinical trial projects, or receive other medical-related services, we may, based on the necessity of medical diagnosis and service provision, collect your mobile phone number, patient name, gender, identity card number, age, city, medical history, condition, consultation records, other consultation information you provide, your relationship with the patient, device information, browser type, log information, and other data. In order to complete the corresponding service, we may provide the foregoing information to the doctor with whom you have established a service relationship, including but not limited to a doctor connected to you by QR-code binding, consultation purchase, or other means.

When you order specific goods and/or services through the MediChain International, we may collect information such as the recipient's name, delivery address, and recipient's phone number. For certain special categories of goods or services, you may also need to provide additional information necessary for such goods or services. We collect this information to help you complete transactions smoothly and ensure transaction security. To ensure that the goods and/or services you purchase can be delivered or provided smoothly, safely, and accurately, we may share necessary information with goods/service providers and logistics delivery entities. You acknowledge and agree that the relevant goods/service providers and logistics entities may access and use your relevant information to the extent necessary to complete delivery.

(4) Coupons

When you use the coupon function, we need to collect information related to coupons, including the number of coupons, type, validity period, usage status, and linked mobile phone number. The legal basis for collecting such information is that it is necessary for the performance of the service agreement concluded with you, so that you may obtain, query, and use the coupons issued to you. If such information is not collected, we will be unable to provide coupon services, but this will not affect your use of other services.

(5) AI-Based Functions

If you use the artificial intelligence technology services we provide (collectively referred to as “AI”), we may collect the text conversation information you enter during interactions with AI and use such information to generate output for you, thereby providing human-machine interaction services. When you use image input, we may collect the content of your images and provide output based on the text converted from such images. When you use voice input, we may collect your voice content and provide output based on the text generated through speech recognition. When you upload documents, we may collect the uploaded document information and identify the text contained therein in order to understand your needs and provide real-time feedback. While you use AI functions, we may also collect your usage records, including the text conversation information you input and the conversation topics formed on that basis, so that we can provide a continuous, stable, and higher-quality user experience.

(6) Exceptions to Obtaining Authorized Consent

Exceptions to obtaining authorized consent generally include, but are not limited to, the following circumstances:

1. Those directly related to public security, public health, or major public interests;

2. Those directly related to national security or defense security;

3. Those directly related to criminal investigation, prosecution, trial, or execution of judgments;

4. Those necessary to protect the life, property, or other major lawful rights and interests of you or other individuals, where it is difficult to obtain your consent;

5. Personal information that you have voluntarily disclosed to the public;

6. Those necessary for entering into and performing a contract at your request;

7. Those collected from lawfully publicly disclosed information, such as lawful news reports or government disclosure channels;

8. Other circumstances provided by laws and regulations, including those specified under personal information protection laws and regulations.

(7) Collection and Processing by Third-Party SDKs

In order to enable necessary functions such as message push notifications, information sharing on third-party platforms, and location-based services, the MediChain International may embed SDKs or similar applications provided by authorized partners.

For example, the JPush SDK (applicable to Android and iOS systems) may need to read your location information, device information (including unique device identifiers such as IMEI, device model, and operating system version), network status, and information related to currently or recently running applications, for the purpose of delivering push notifications or notification bar messages;

For example, when you use third-party accounts such as WeChat, Apple, or Google to log in to the MediChain International, SDKs such as Share SDK may collect your third-party account, device information (including device model, operating system version, unique device identifier, MAC address, and serial number), IP address, log information, and location-related information;

For example, when you need to share content from the MediChain International to WeChat, the WeChat sharing SDK may collect third-party account information, device information (including device model, operating system version, unique device identifier, MAC address, and serial number), IP address, and log information;

1. SDK Name: JPush SDK

Third-Party Entity: Shenzhen Hexun Huagu Information Technology Co., Ltd.

Purpose of Cooperation: To provide APP users with push notification services

Types and Purposes of Personal Information Processed: Device identifiers (including Android ID, GAID, OAID, UAID, IDFA, AAID, and Boot ID), device hardware information (including device model, screen resolution, hardware manufacturer, product name, and storage space), operating system information (including operating system version, system name, and system language), network information (including network type, carrier information, IP address, DHCP, and Wi-Fi status information), and push information logs are necessary personal information used to generate de-identified unique device identifiers for end users in basic push service scenarios, ensure compatibility across devices, accurately identify devices, and understand push delivery status. Device identifiers (including IMEI, MAC, and IMSI) are optional personal information used as supplementary information for generating unique device identifiers, improving accuracy and thereby improving push precision and reach rate. Network information (including SSID, BSSID, Wi-Fi list information, base station information, and SIM card status) is optional personal information used to determine approximate location information and select nearby push service nodes to improve push reach. Location-related information is necessary personal information for geofencing, user segmentation push, and user insight extension functions, and is used to provide refined offline scenario push and recommend more suitable push content based on location. Software list information (including software lists and software running list information) is necessary personal information for user segmentation, app auto-start, link regulators, and user insight extension functions, helping you understand end-user interests and preferences, provide more appropriate push content, optimize long-connection stability of the SDK, improve push delivery rate and app activity, and reduce power and data consumption by merging links.

Data Processing Method: De-identification, encrypted transmission, and other secure means

JPush Privacy Policy Link: AURORA JPush Privacy Policy

Official Website: https://www.jiguang.cn/

2. SDK Name: Xiaomi Push SDK

Types of Personal Information Involved: Device identifiers (such as Android ID, OAID, and GAID) and device information

Purpose of Use: Push notifications

Use Scenario: Used when pushing messages on Xiaomi mobile devices

Third-Party Entity: Beijing Xiaomi Mobile Software Co., Ltd.

Data Processing Method: De-identification, encrypted transmission, and other secure means

Official Website:

https://dev.mi.com/console/appservice/push.html

https://dev.mi.com/console/doc/detail?pId=1822

3. SDK Name: Huawei HMS SDK

Types of Personal Information Involved: Basic application information, in-app device identifiers, device hardware information, basic system information, and system settings information

Purpose of Use: Push notifications

Use Scenario: Used when pushing messages on Huawei mobile devices

Third-Party Entity: Huawei Software Technologies Co., Ltd.

Data Processing Method: De-identification, encrypted transmission, and other secure means

Official Website:

https://developer.huawei.com/consumer/cn/

https://developer.huawei.com/consumer/cn/doc/development/HMSCore-Guides/sdk-data-security-0000001050042177

4. SDK Name: Honor Push SDK

Types of Personal Information Involved: Anonymous application identifier (AAID) and application token

Purpose of Use: Push notifications

Use Scenario: Used when pushing messages on Honor mobile devices

Third-Party Entity: Honor Device Co., Ltd.

Data Processing Method: De-identification, encrypted transmission, and other secure means

Official Website:

https://developer.hihonor.com/cn/promoteService

https://www.hihonor.com/cn/privacy/privacy-policy/

5. SDK Name: OPPO Push SDK

Types of Personal Information Involved: Device identifiers (such as IMEI, ICCID, IMSI, Android ID, and GAID), application information (such as app package name, version number, and running status), and network information (such as IP or domain connection results and current network type)

Purpose of Use: Push notifications

Use Scenario: Used when pushing messages on OPPO mobile devices

Third-Party Entity: Guangdong HeyTap Technology Co., Ltd.

Data Processing Method: Secure processing by encrypted transmission and other methods

Official Website:

https://open.oppomobile.com/new/introduction?page_name=oppopush

https://open.oppomobile.com/wiki/doc#id=10288

6. SDK Name: vivo Push SDK

Types of Personal Information Involved: Device information

Purpose of Use: Push notifications

Use Scenario: Used when pushing messages on vivo mobile devices

Third-Party Entity: Guangdong Tianchen Network Technology Co., Ltd. and any future company that takes over operation of the vivo open platform

Data Processing Method: De-identification, encrypted transmission, and other secure means

Official Website:

https://dev.vivo.com.cn/promote/pushNews

https://www.vivo.com.cn/about-vivo/privacy-policy

7. SDK Name: Alipay Client SDK

Third-Party Name: Alipay (China) Network Technology Co., Ltd.

Types of Personal Information Collected: Android ID, OAID, SSID, and BSSID; system settings, system properties, device model, device brand, and operating system; IP address, network type, carrier information, Wi-Fi status, Wi-Fi parameters, and Wi-Fi list.

Purpose of Use:

a. To ensure the security and stable operation of user accounts, funds, and payment services.

b. To fulfill legal obligations such as anti-money laundering, anti-terrorist financing, and anti-telecom network fraud.

c. To select and optimize network links in order to improve user experience.

SDK Privacy Statement Link:

https://opendocs.alipay.com/common/02kiq3

8. SDK Name: WeChat SDK

Types of Personal Information Involved: Device information

Purpose of Use: Sharing and login

Collection Method: Automatically collected by calling system-related interfaces

Types of Personal Information Collected: Device identifier information, location information, Wi-Fi address, carrier information, and application list

Institution Entity: Shenzhen Tencent Computer Systems Co., Ltd.

https://support.weixin.qq.com/cgi-bin/mmsupportacctnodeweb-bin/pages/RYiYJkLOrQwu0nb8

9. SDK Name: Umeng Analytics SDK

Purpose of Use: APP operation statistics and analysis

Operator: Umeng Tongxin (Beijing) Technology Co., Ltd.

Types of Personal Information Collected: Device information (IMEI/MAC/Android ID/IDFA/OAID/OpenUDID/GUID/SIM IMSI/ICCID), location information, and network information

https://www.umeng.com/page/policy

10. SDK Name: Alibaba Cloud Number Authentication SDK

Service Type: One-click login and authentication with the current phone number.

Types of Information Collected: Network type and device information (including IP address, device manufacturer, device model, mobile operating system, and SIM card information/SIM State).

https://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud202112211045_86198.html?spm=a2c4g.295966.0.0.3bff2a3cSaYaAv

The Alibaba Cloud Number Authentication SDK integrates the SDKs of the three major telecom operators. For details of how the three operators process users' personal information, please refer to the information below and their privacy policies.

China Mobile Internet Authentication

Operating Entity: China Mobile Internet Co., Ltd.

Function: To quickly identify the user's mobile phone number for login, as well as to conduct query, analysis, and risk control.

Types of Personal Information Collected: Network type, network address, carrier type, local mobile number information, SIM card status, device type, mobile operating system, and hardware manufacturer.

https://wap.cmpassport.com/resources/html/contract.html

China Unicom One-Click Mobile Number Login

Operating Entity: China United Network Communications Group Co., Ltd.

Function: To quickly identify the user's mobile phone number for login and to implement business risk control

Types of Personal Information Collected: Network type, network address, carrier type, local mobile number, device type, mobile operating system, and hardware manufacturer.

https://msv6.wosms.cn/html/oauth/protocol2.html?spm=a1zaa.8161610.0.0.39fdaa04LZwbkW

China Telecom Account Authentication SDK

Operating Entity: Tianyi Digital Life Technology Co., Ltd.

Function: To quickly identify the user's mobile phone number for login and implement business risk control

Types of Personal Information Collected: Registered mobile phone number, local phone number, network connection type, network status information, network address, carrier type, device type, device manufacturer, and mobile operating system type and version.

https://e.189.cn/sdk/agreement/detail.do?appKey=E_189&hidetop=true&returnUrl=

The collection and processing of personal information by the above third-party SDKs are governed by their own privacy policies or related statements and are not subject to this Privacy Policy. To maximize the protection of your information security, we recommend that you review the privacy policy of any third-party SDK service before using it. If you find that any such SDK or similar application involves risks, you are advised to immediately discontinue the relevant operation and contact us in a timely manner.

IV. How MediChain Health Protects Your Personal Information

1. MediChain Health adopts security technologies and procedures to protect your personal information from unauthorized access, use, or disclosure. MediChain Health uses encryption technology to protect your personal information and uses firewalls and other technical means to prevent unauthorized access and attacks.

2. MediChain Health has established data security management systems and processes. For personnel handling personal information, MediChain Health conducts strict confidentiality training and requires them to comply with confidentiality obligations and maintain strict control over the confidentiality of personal information.

3. MediChain Health regularly conducts security risk assessments and vulnerability scanning and promptly remedies vulnerabilities identified, to ensure that your personal information receives the most effective protection.

4. In the event of a personal information security incident, MediChain Health will immediately activate an emergency response plan, take necessary remedial measures, and inform you, as required by law, of the incident, its possible impact, and the remedial measures that MediChain International has taken or will take, so as to address the security incident in a timely and effective manner and minimize your losses to the greatest extent possible.

5. MediChain Health retains your personal information only for the period necessary for the relevant purpose. After that period has expired, MediChain Health will take measures to delete or anonymize your personal information in order to protect your privacy rights and interests.

V. How MediChain Health Processes the Personal Information of Minors

MediChain Health places great importance on the protection of minors' personal information. If you are a user under 18 years of age, you should obtain the prior consent of your guardian before using the MediChain International. Once your guardian agrees to your use of the MediChain International, MediChain Health will deem that it has obtained the guardian's authorization and will process your personal information in accordance with this Privacy Policy.

For minor users whose guardians' authorization has been obtained, MediChain Health will protect their personal information and collect only the necessary personal information. The personal information of minor users will be used only for the normal operation of and service provision through the MediChain International and will not be used for any other purpose. Where necessary, MediChain Health will adopt appropriate security measures to protect minors' personal information and ensure that it is not disclosed, tampered with, or lost.

If your guardian discovers that you have used the MediChain International without authorization, or that your personal information has been leaked or has encountered other security issues, please contact MediChain Health immediately, and MediChain Health will actively take measures to resolve the problem.

In handling minors' personal information, MediChain Health complies with relevant laws, regulations, and standards, particularly those concerning the protection of children's personal information. Minors should use MediChain Health's services under the guidance of their parents or other guardians. Without the consent of parents or other guardians, MediChain Health will not intentionally collect minors' personal information or disclose such information to any third party, unless otherwise required by relevant laws and regulations or with the guardian's explicit consent. MediChain Health encourages parents or guardians to supervise minors' online behavior and to help MediChain Health protect minors' privacy. If MediChain Health inadvertently collects minors' personal information, it will delete the relevant information as soon as possible.

VI. Updates and Notices of This Privacy Policy

This Privacy Policy may be updated from time to time. If there is any material change to this Privacy Policy, we will notify you by publishing an updated version within the MediChain International, through pop-up notifications, or by other appropriate means. We recommend that you review this Privacy Policy regularly to understand how we handle and protect your personal information.

If you have any questions or concerns about this Privacy Policy, please contact us using the following information:

Email: yangshuai@yljt.cn

Mailing Address: Room 2204, Qujiang International Financial Center, No. 15 Huixin Road, Qujiang New District, Xi'an, Shaanxi Province

If you wish to access, correct, update, delete, restrict the processing of, withdraw consent for, or request a copy of your personal information, you may submit your request through the following contact details:

Email: yangshuai@yljt.cn

Mailing Address: Room 2204, Qujiang International Financial Center, No. 15 Huixin Road, Qujiang New District, Xi'an, Shaanxi Province

We will endeavor to process your request within a reasonable time and respond within the scope required by law. In some cases, we may need to verify your identity in order to protect your privacy and security. If we cannot verify your identity, we may be unable to respond to your request.

VII. Account Cancellation

You may cancel your account information through the following path:

Go to the homepage - tap "My" - tap "Cancel Account"

After you cancel your account, we will stop providing you with related products and/or services and will delete your personal information in accordance with applicable laws and regulations or anonymize it so that it remains unsearchable and inaccessible within this APP.

VIII. Other Terms

Except as provided in this Privacy Policy, we will not use your personal information for purposes other than those stated herein. If we need to use your personal information for other purposes, we will notify you in advance and obtain your consent.

The foregoing constitutes the User Privacy Policy. Please read it carefully and confirm that you have fully understood and agreed to all of its contents.