随诊记 隐私政策
随诊记是一款在手机本地整理就诊资料的个人文件工具，用来归档检查单、报告和病历，按时间整理，方便复诊时查阅。这些资料往往包含敏感个人信息，所以我们把应用设计成：资料只保存在你的设备上，我们收不到，也不收集。
一、我们不收集任何个人信息
- 应用不设账号，不需要注册或登录。
- 应用没有服务器，不会把你的病历、照片、识别结果或任何使用数据上传给我们或第三方。
- 应用不接入任何第三方统计、广告、崩溃上报或追踪 SDK，也不做跨应用追踪。
- 全部功能离线可用。文字识别（OCR）使用设备上的模型（PaddleOCR 或系统自带的 Vision 框架），在本机完成。
二、你的资料保存在哪里
- 你导入的报告原件、照片、PDF，以及整理出的指标、用药、时间线等，都只保存在本应用在你设备上的私有存储空间里，其他应用无法读取。
- iCloud 设备备份：默认情况下，iOS 会把应用数据纳入系统的 iCloud 设备备份（由 Apple 加密保管，我们无法访问）。你可以在“我的 → 不随 iCloud 设备备份”中把应用数据排除在外。
- 加密备份：你可以主动导出加密备份文件，并自己选择存放位置。备份使用你设置的密码加密，密码不会被保存；忘记密码将无法恢复备份。
- 导入带密码的 PDF 时，你输入的密码只用于本次解锁，不会被保存。
- 运行日志：应用闪退或卡住时，iOS 会在本机生成技术记录（不含你的病历内容），保存在“我的 → 关于 → 运行日志”中。这些记录不会自动发送，只有你主动点分享时才会离开设备。
三、应用申请的权限
- 相机：用于扫描纸质报告。拍摄的照片只保存在本机。
- 照片：仅在你从相册选择图片时读取所选图片。
- 面容 ID / 触控 ID：用于解锁应用。验证由 iOS 系统完成，应用拿不到你的生物特征信息。
以上权限都可以随时在 iOS“设置”中关闭，关闭后其余功能不受影响。
四、分享与导出
只有当你主动操作时（例如导出复诊摘要、导出备份、通过系统分享面板发送文件），资料才会离开本应用，发送到你选择的应用或位置。这些去向由你决定，并适用对方的隐私政策。
五、删除你的资料
- 你可以在应用内删除单份资料，或在“我的 → 切换或管理档案”中永久删除整个档案及其全部资料。
- 删除本应用会同时删除设备上的全部应用数据。如果你开启了 iCloud 设备备份，旧备份中可能仍含有这些数据，可在 iOS 设置中管理 iCloud 备份。
- 你自己导出的加密备份文件需要你自行删除。
六、未成年人
本应用面向成年人，用于整理本人或家人的就医资料。不满 14 周岁的未成年人请在监护人指导下使用。由于我们不收集任何信息，我们也不会收集未成年人的个人信息。
七、医疗免责
本应用不提供诊断、治疗建议或医学解读。文字识别结果可能有误差，请以原始报告和医生意见为准。
八、政策更新
如果应用今后加入任何需要联网或收集数据的功能，我们会先更新本政策并在应用内提示你。本页面顶部的生效日期会随之更新。
九、联系我们
如有疑问，请联系：yuxuanjia97@gmail.com
CareLine Privacy Policy
CareLine is a personal file organizer for your visit documents. It files lab reports, test results and medical records on your device and arranges them by date for follow-up visits. These documents often contain sensitive personal information, so the app is built so that your data stays on your device. We never receive it and we collect nothing.
1. We collect no personal information
- There are no accounts, and no sign-up or sign-in.
- There is no server. Your records, photos, recognized text and usage data are never uploaded to us or to anyone else.
- The app contains no third-party analytics, advertising, crash-reporting or tracking SDKs, and it does not track you across apps.
- Every feature works offline. Text recognition (OCR) runs on the device using PaddleOCR or Apple's Vision framework.
2. Where your data is stored
- The reports, photos and PDFs you import, and the results, medications and timelines you build from them, are stored only in the app's private storage on your device. Other apps cannot read them.
- iCloud device backup: by default, iOS includes app data in your iCloud device backup. Apple encrypts it and we have no access to it. You can exclude CareLine's data under Me → Exclude from iCloud device backup.
- Encrypted backups: you can export an encrypted backup file and choose where to keep it. It is encrypted with a password you set, which the app does not store. If you forget the password, the backup cannot be restored.
- A password you enter for a protected PDF is used only to unlock that file and is not stored.
- App logs: when the app crashes or freezes, iOS creates a technical record on the device. It contains none of your medical records and is kept under Me → About → App Logs. It is never sent automatically; it leaves the device only if you choose to share it.
3. Permissions
- Camera: to scan paper reports. Photos stay on your device.
- Photos: to read only the images you pick.
- Face ID / Touch ID: to unlock the app. iOS handles the check, and the app never receives your biometric data.
You can turn off any of these permissions in iOS Settings at any time. The rest of the app keeps working.
4. Sharing and export
Data leaves the app only when you choose to export or share it, for example a visit summary, a backup, or a file sent through the iOS share sheet. You choose where it goes, and the receiving app's privacy policy then applies.
5. Deleting your data
- You can delete individual items in the app, or permanently delete a whole profile and everything in it under Me → Switch or manage profiles.
- Deleting the app removes all of its data from the device. Older iCloud device backups may still contain it. You can manage them in iOS Settings.
- You are responsible for deleting encrypted backup files you exported.
6. Children
CareLine is intended for adults managing their own or their family's medical records. Because the app collects no information, it collects none from children.
7. Medical disclaimer
CareLine does not provide diagnosis, treatment advice or medical interpretation. Text recognition can make mistakes. Always rely on the original report and your doctor.
8. Changes
If a future version adds any feature that goes online or collects data, we will update this policy and tell you in the app before it takes effect. The effective date above will change too.
9. Contact
Questions: yuxuanjia97@gmail.com