Introduction
Welcome to HepTrend! We understand the sensitivity of health-related information, which is why we have created this Privacy Policy to explain how we collect, use, store, and protect your information.
HepTrend is a lab-report AI parsing and liver health tracking app for people living with chronic hepatitis B. We follow an on-device-first design for business records: confirmed lab reports, trends, medication logs, and reminders are stored on your device by default.
Data Controller and Scope
- Company: Shijing Tongyue Technology Co., Ltd. ("we", "us")
- Contact: support@shijingty.com
- This policy applies to HepTrend mobile apps and related services. If regional requirements (e.g., GDPR/CCPA) apply to you, the corresponding rights and disclosures below also apply.
Key Distinction: On-Device Data vs. Cloud Processing
Please read this carefully:
- On-device business data: Lab reports you confirm and save, metric details, medication plans and check-ins, reminder settings, and local subscription cache are stored in a local database on your device. We do not operate a cloud library of your business reports and do not require account registration. Uninstalling the app or clearing app data usually permanently deletes this local data—please back up anything important yourself.
- Image upload for AI parsing: When you use the camera or photo library for AI lab parsing, the lab-report image is uploaded to our servers and may be processed by third-party vision / large-language-model services. After results return to your device, you decide whether to save them; saved business reports remain on-device. Images may contain names, hospital details, lab values, and other sensitive health information.
- "Report text is never uploaded" messaging: This refers to confirmed structured business reports / full report text not being uploaded as a cloud archive. It does not apply to original images uploaded temporarily to complete AI parsing.
Information Collection
Types of Information We Collect
On-device business data (not uploaded by default)
- Lab reports and metric details (values, units, reference ranges you confirm)
- Medication plans and adherence logs
- Local reminder configurations
- In-app settings (language, preferred home metrics, etc.)
Device and identifier information
- Device model, OS version, app version (may appear in diagnostics or request metadata)
- Device fingerprint: a random anonymous identifier generated on-device for quota control, subscription association, and abuse prevention—not your name, phone number, or email account
AI parsing and dictionary-related data (leaves the device)
- Lab-report images you choose for AI parsing
- Structured recognition results (which may include hospital name, report-date hints, metric names/values, and fields such as a patient name if visible on the image)
- Metadata for unmatched dictionary metrics (e.g., raw metric name, unit, value hints) to improve the metric dictionary—not full report text stored as a business backup
Purchase and subscription data
- Store purchase identifiers and receipts/tokens used for verification
- Subscription status (trial, active, expired, cancelled, etc.)
- Invite-code activation state (if applicable)
- We do not collect full payment card details
Diagnostics and crash data (optional)
- When Firebase Crashlytics or similar crash reporting is enabled, crash logs and device/app configuration may be collected to improve stability
How We Collect Information
- Direct: Photos/images you select, manual entries, and content you confirm to save
- On-device generation: Device fingerprint, local database records, and reminders
- Service processing: AI parse requests, dictionary sync / unmatched feedback, subscription verification
- Third parties: RevenueCat, app stores, and (if enabled) Firebase
Third-party Service Privacy Policies
This app may use the following third-party services. You can review their privacy policies:
- RevenueCat: https://www.revenuecat.com/privacy
- Apple App Store: https://www.apple.com/privacy/
- Google Play Store: https://policies.google.com/privacy
- Firebase (if crash reporting is enabled): https://firebase.google.com/support/privacy
- Cloud OCR / vision LLM processors (e.g., Dify and underlying model providers): process images and related request data as needed to complete recognition, subject to their own policies
Permissions
To provide features, the app may request:
- Camera / photo library: to capture or select lab reports for AI parsing
- Notifications / exact alarms (platform-dependent): for local medication and checkup reminders
- Network access: for AI parsing, dictionary sync, subscription verification, etc.
You can manage permissions in system settings. Denying camera/photos disables AI parsing, but manual entry and other features may still work.
Cookies and Similar Technologies
The HepTrend mobile app does not primarily rely on browser cookies. Our website or related web pages may use cookies or similar technologies to improve experience; you can manage cookie preferences in your browser.
Information Usage
Purposes
Core features
- Provide AI lab parsing, metric normalization, and trend views
- Provide medication logging and local reminders
- Verify subscriptions and Pro entitlements (e.g., AI parsing access)
- Sync a read-only metric dictionary and improve unmatched metric coverage
Improvement and security
- Fix crashes and technical issues; improve reliability
- Abuse prevention, quotas, and security controls
- Product improvement on a de-identified or aggregated basis where appropriate
Support and compliance
- Respond to inquiries and feedback
- Comply with applicable laws and protect legitimate interests
Legal Basis for Processing
- Contract performance: providing and maintaining HepTrend (including AI parsing and subscription verification)
- Legitimate interests: security, fraud prevention, performance, and service improvement (in a privacy-preserving manner)
- Consent: where required by law for camera/photos, notifications, optional diagnostics, etc.
- Special-category / health-related data: processed only as necessary to provide features you request and as permitted under applicable law
Information Sharing
We Do Not Sell Your Personal Information
We do not sell your personal information, nor do we “share” it for cross-context behavioral advertising (as those terms are defined under applicable law).
Limited Sharing Circumstances
We share information with third parties only when necessary:
Service providers
- Cloud OCR / vision processors (lab images for AI parsing)
- RevenueCat (subscription management)
- Apple / Google (app store and billing)
- Firebase (if crash reporting is enabled)
Legal requirements
- As required by law or competent authorities
- To protect our legitimate interests and prevent fraud or security threats
Business transfers
- In a merger, acquisition, or asset sale, information may be transferred subject to this policy or equivalent protections
Data Security and Storage
Security Measures
- Network traffic uses HTTPS / TLS where applicable
- Access controls and least-privilege principles on our services
- Business records remain on-device by default; we do not operate a user-facing cloud report archive
No system is perfectly secure. Protect your device unlock methods and avoid sharing lab images in untrusted environments.
Retention
- On-device business data: under your control; typically deleted when you uninstall or clear app data
- Images and temporary job data during AI parsing: retained only as needed to complete recognition and troubleshooting; we aim not to keep full business reports as long-term cloud archives
- Subscription and device-quota records: retained as needed to provide the service, prevent abuse, and meet legal requirements
- Crash logs (if enabled): typically up to 12 months
Health Information Disclaimer
HepTrend is a health and fitness tool, not a medical device. It does not diagnose or treat disease and does not replace licensed clinicians or accredited laboratories. In-app explanations and trends are for personal organization only; follow your clinician’s advice and official reports.
Your Rights
You may have different privacy rights depending on your region. We honor and respond to requests in accordance with applicable law.
GDPR (EEA/UK/Similar Jurisdictions)
- Access, rectification, erasure, restriction, portability, objection to legitimate-interest processing, and withdrawal of consent where applicable
CCPA/CPRA (California)
- Right to know, delete, and correct; we do not sell or share personal information for cross-context behavioral advertising; we do not use sensitive personal information in ways that require a “limit use” right
How to Exercise Your Rights
Because the app has no account system, local data is primarily deleted by uninstalling the app or clearing app data. For server-side identifiable records or third-party processing requests, email support@shijingty.com. We may need to verify your request and identity where feasible before acting.
Children's Privacy
HepTrend is not intended for children under 13 (or the minimum age required by law in your region; in the EEA, this may be up to 16). We do not knowingly collect personal information from children below the applicable age threshold. If we discover such collection, we will delete it promptly.
International Data Transfers
To provide AI parsing, subscription verification, and related services, your information (especially parse images and related metadata) may be transferred to and processed in countries other than your own. Where required, we rely on appropriate safeguards to protect personal information during cross-border transfers.
Privacy Policy Updates
We may update this Privacy Policy from time to time. Significant changes will be communicated via in-app notice, our website, or other reasonable means. Continued use of the service after an update indicates acceptance of the revised policy, except where law requires otherwise.
Contact Us
If you have questions or privacy-rights requests, please contact:
- Email: support@shijingty.com
- Company: Shijing Tongyue Technology Co., Ltd.
- Address: China
We will respond within 30 days of receipt.
This Privacy Policy was last updated on July 24, 2026