TL;DR: We do not ask for your personal information (real name, ID, address, etc.). Your health records are encrypted and stored on your own device — the only copy; we never upload any health data to any cloud server. A valid email address is required for login and account recovery.
1. Data We Handle
What we handle:
- Account information: email address, username, password hash — used for sign-in. A valid email address is required for sign-in and account recovery.
- Health records: follow-up records, test results, nodule data and other information you voluntarily enter. These are stored in encrypted local storage on your device (the only copy) and are never uploaded to any cloud server.
- Subscription and activation records: transfer reference, activation/refund dates and amounts — used to match payments to your account and to meet statutory record-keeping duties.
What we do NOT handle:
- Legal name, national ID number, or home address (unless you voluntarily enter them in your health records)
- Device information: we do not collect device model, OS version, or other device identifiers
- Precise location data
- Contacts, photo gallery, SMS, or other sensitive device data
- Complete payment information (such as full card numbers; transfers are handled by the payment channel you use, and we never see your full payment credentials)
2. How We Use Your Data
- Account information is used for authentication and account management.
- Health data is processed on your device only, for local health logging and follow-up management; we do not upload, receive, or store your health records.
- Subscription and activation records are used for subscription management and reconciliation.
- Aggregated usage data may be used for product optimization and analytics; aggregated figures do not identify any individual.
3. Data Storage & Security
- Health records: stored in encrypted local storage on your device (the only copy) and never uploaded to any cloud server.
- Account data: email address, username and password hash stored on our cloud service, with hashed passwords.
- Transmission: all network communication uses TLS/SSL encryption.
- Local encryption: sensitive data is encrypted at rest on your device. If your device cannot provide local encryption, we do not write your health records to local storage at all and we tell you — we never store them in plain text.
- AI PoC Hub (LIVE2LIFE-BOX_PoC): all patient health data is stored locally on the Point-of-Care edge device; core recording and viewing work without internet access.
Retention
- Account information: kept while the account exists; deleted or anonymised within 30 days after account closure.
- Health records on your device: under your control — removed when you delete them or uninstall the app; we hold no copy.
- Consent and withdrawal records (with policy version and time): kept while the account exists and deleted with account closure.
- Transaction and activation records (transfer reference, activation/refund dates, amounts): kept for at least 3 years from completion (applicable e-commerce record-keeping requirements).
- Website enquiries and registration details: deleted after 12 months for users who never created an account.
- Security and access logs: retained by our cloud hosting provider under its own retention policy, for security auditing.
Your personal information processor is LIVE2LIFE.LTD (contact details in Section 12).
4. Device Permissions
This app may request the following device permissions:
- Storage: to save health reports and AI-assisted summary to your device.
- Notifications: to send CT follow-up reminders and doctor messages (optional; not enabled in the current version).
- Bluetooth: to connect wearable devices for health data sync (with your additional consent; not enabled in the current version).
You may revoke any permission at any time in your device system settings. Core health record functionality is not affected by disabling permissions.
5. Third-Party Services
We may engage third-party service providers to assist in delivering parts of this software, including but not limited to account and subscription handling, infrastructure hosting, and security auditing. These providers process data only to the extent necessary and are bound by confidentiality obligations.
We require all third-party service providers to comply with applicable data protection laws and to implement reasonable security measures to protect your information.
Cookies and analytics: our website uses the access logs and aggregate analytics provided by our cloud provider to understand how the site is used and to improve it; these tools collect technical, aggregate information (such as pages visited, the approximate region derived from your IP address, device and browser type). You can limit this collection through your browser's tracking-protection or "Do Not Track" settings, or by blocking third-party scripts; core site functionality is not affected. The mobile app does not use these tools.
Subscription payments: we currently accept payment for paid subscriptions by manual transfer (WeChat Pay / Alipay) in the China region. In that case we receive only the information needed to match your payment to your account — such as a transfer reference and the email address you provide — and we do not collect, store, or process your full payment credentials (such as complete card numbers). If we introduce a designated third-party payment provider, that provider will handle payment and related billing information on its own systems, its privacy policy will govern that processing, and we will update this section before such processing begins.
6. Data Sharing
- We do NOT sell, rent, or share your personal health data with third parties.
- Your health data is shared ONLY with the doctor(s) you explicitly connect to via binding code (Pro). Free-version data stays on your device and is never shared.
- Aggregated, de-identified data may be used for product improvement and research.
7. Your Rights
Under applicable data protection laws (including China's Personal Information Protection Law and the GDPR), you have the following rights:
- Right to know: what data we collect and how it is used.
- Right to access: request a copy of your personal data.
- Right to rectify: correct inaccurate personal information.
- Right to delete (right to be forgotten): request deletion of your account and associated data. You can contact us (see Contact section) to request deletion, including any cloud backup data. Deletion is irreversible.
- Right to data portability: receive your data in a structured, commonly used format.
- Right to withdraw consent: withdraw your consent to data processing at any time without affecting the lawfulness of processing carried out before withdrawal. For health data you can withdraw in the app under Settings → Privacy & Authorisation → Withdraw health data consent; we will then stop processing your health data, while records already stored on your device remain there (under your control — delete or uninstall). Withdrawal of the consent required to provide the Service itself is handled by contacting us.
- Right to complain: lodge a complaint with a data protection supervisory authority.
To exercise these rights, contact us via the email below. We will respond within 30 days.
Separate consent for health data. Health data is sensitive personal information. We ask for your separate consent (ticked separately from accepting the Terms) on first launch or at registration, and you may withdraw it at any time in the app. Declining it does not prevent you from using the record-keeping and follow-up features.
8. Medical Disclaimer
LIVE2LIFE-Health_WK and related products and services provide AI-assisted insights for informational purposes only. It does not constitute medical diagnosis, treatment advice, or replace professional clinical judgment. Always consult your physician for any health-related decisions.
9. Children's Privacy
This software is not intended for users under 18 years of age. If we inadvertently collect personal information from a minor, we will delete it immediately.
10. Changes to This Policy
We may update this privacy policy from time to time. Material changes will be reflected on this page and may also be communicated through the contact information you provided during registration.
If a change affects the purposes or methods of processing, or the types of personal information we process, we will ask for your consent again — and, where the information is sensitive personal information (such as health data), your separate consent — before the change applies to you.
11. Applicable Law
This privacy policy is formulated in compliance with the Personal Information Protection Law (PIPL) of the People's Republic of China and relevant regulations, with reference to the data processing principles of the General Data Protection Regulation (GDPR) and the health data protection principles of the Health Insurance Portability and Accountability Act (HIPAA).
12. Contact
Service provider: LIVE2LIFE.LTD
If you have any questions, concerns, or requests regarding this privacy policy (including access, correction, deletion, or withdrawal of consent), please contact us:
Email: