Privacy Policy

1. Information Collected by the Company

Information You Provide to the Company

When you create an account, use the Services, or contact the Company, you may provide certain information. This information includes your name, email address, telephone number, date of birth, payment information, cancer category, and cancer stage. The Company collects and processes this information to create and manage your account, verify your identity, process transactions, and provide comprehensive customer service. You may correct and adjust the above information at any time according to actual circumstances through product operation instructions.

Information Generated When You Use the Services

When you use Cora, the Company automatically collects, processes, and utilizes information including the medical documents you upload, health records, conversation content with the AI assistant, and content you post within the social features. This information is used to provide core service functions, such as text recognition, health data analysis, AI-assisted responses, and social interactions. The Company also collects your device information, usage logs, and preference settings to improve service quality and provide a personalized experience.

Purpose of Information Use

The Company uses the collected information to operate, provide, improve, and personalize the Services. Specifically, the Company uses this information for the following purposes: providing AI-assisted analysis and health management functions; maintaining and improving service performance and security; processing your subscription and payment matters; sending service-related notices and update information you have agreed to receive; responding to your inquiries and providing customer support; conducting research to develop new features; and complying with legal obligations or responding to lawful governmental requests.

Information Sharing Restrictions

The Company will not sell your personal information to third parties. Except as described in this Policy, the Company will only share your information in the following circumstances: with your consent; when necessary to share with service providers (such as cloud storage services or payment processors) to provide the services you requested; pursuant to legal requirements or in response to lawful legal processes; or to protect the rights, property, or safety of the Company, its users, or the public. The Company requires all third-party service providers receiving your information to comply with strict confidentiality obligations and to use the information solely for the necessary purposes of providing the services.

2. Device Permissions and Specific Data Usage

To provide complete App features, Cora may request access to specific permissions on your device. The Company accesses the following functions only with your consent and strictly for the stated purposes:

Camera

Purpose Description: Cora requires access to your camera so you can directly capture medical-related documents for digital management.

When you receive a blood test report, you can use the camera to photograph the report. The system will automatically recognize values in the report (such as blood glucose 120 mg/dL, total cholesterol 180 mg/dL, white blood cell count, etc.) and add these data to your health tracking records.

Photograph prescriptions to record medication information, allowing the system to recognize drug names, dosages, and instructions.

Photograph X-rays or other imaging inspection reports (such as ultrasound, CT, or MRI reports) to build a complete medical file.

Photograph physician diagnosis certificates for health record management and insurance applications.

Captured images are processed using AI Optical Character Recognition (OCR) technology to extract medical data for health management use. All images are securely stored in your personal account, and the Company will not activate the camera or access your photos without your permission.

Photo Library

Purpose Description: Used to allow you to upload medical report images or files stored on your device for data analysis and archiving. You can choose to select previously captured or stored medical documents from your photo library for batch uploading and management.

Microphone

Purpose Description: Used to provide voice input functions, allowing you to record health conditions or ask questions to the AI assistant through dictation. For example, you can input via voice "Today's blood pressure is 130/85" or ask "What is my blood glucose trend?", and the system will convert speech into text for processing. The Company will not activate the microphone without your permission.

3. Advertising Identifiers and Third-Party Tracking Statement

The Company highly values your privacy and hereby declares:

No Ad Tracking

This App does not collect your data for third-party targeted advertising, nor does it sell your personal data to data brokers. The Company will not combine your usage data in Cora with data from applications or websites of other companies for targeted advertising or ad measurement purposes.

Third-Party Analytics

The Company may use de-identified data for internal analytics (such as Crashlytics or Google Analytics) to improve App stability and performance, but these data will not be linked to your identity nor used for cross-app tracking. These analytical tools are used solely to understand overall application usage patterns and help the Company discover and fix technical issues.

4. Data Processing for Social Interaction Features

Cora includes social interaction features. This section explains how the Company processes your personal data within these social features. For social usage guidelines and content moderation policies, please refer to the Company's Terms of Service.

Social Interaction Data Collection

When you use social features, the Company collects the following data:

Published Content: Text, images, and other content you post will be stored for other users to view.

Interaction Records: Your interactions, such as comments and likes, will be recorded to display interaction statuses.

User Preferences: Information such as topics you follow and users you watch will be used to personalize your feed content.

Reporting and Blocking Data Processing

When you use the "Report" or "Block" functions, the Company processes the following data:

Reporting Data: When you report inappropriate content, the system records the reporting time, report type, and the reported content or user ID. These data are used solely for content moderation, handling violations, and improving social safety mechanisms. Your reporting identity will be kept confidential and will not be disclosed to the reported party.

Block List: When you block other users, the system stores a block list in your account to ensure that the content of blocked users does not appear in your feed. Additionally, the system records block events to help identify potential problematic accounts.

Data Retention and Usage Restrictions

The processing of social interaction-related data follows these principles:

Content you post will be removed upon your active deletion or account termination.

Reporting and blocking records will be retained until the relevant review process is completed or as required by law.

These data are used exclusively to maintain social safety, improve service quality, and comply with legal obligations, and will not be used for commercial marketing or third-party sharing.

The Company adopts appropriate technical measures to protect the security and confidentiality of these data.

5. Data Retention, Deletion, and Disclosure

Data Retention

Your personal data will be retained until you request to cease use or delete your account.

Account and Data Deletion

You have the right to request the deletion of your account and personal data at any time. You can submit a deletion request through the "Contact Us" page within the App, or email the Company at service@oncogenai.com. Once confirmed, the Company will clear or anonymize your relevant data within a reasonable time (typically within 30 days), unless otherwise required by law to be retained.

Data Disclosure

Unless with your consent, for the purpose of providing services you requested, or pursuant to legal requirements or government orders, the Company will not disclose your personal data to third parties.

6. Information Security

The Company adopts industry-standard technologies and measures to protect your personal data and traffic information against unauthorized access, leakage, or tampering. These measures include:

Using encryption technology (SSL/TLS) to protect data transmission.

Conducting regular security testing and vulnerability scans.

Restricting employee access to personal data.

Implementing strict data access logging and monitoring.

Your account password is confidential; please keep it safe and secure. If you discover any abnormal activity on your account, please contact the Company immediately.

7. Amendments to the Privacy Policy

The Company reserves the right to modify this Privacy Policy at any time. Revised terms will be announced on this website or within the App and will take effect from the date of announcement. In the event of material changes, the Company will notify you via email or through the application. We recommend that you check regularly to stay informed of the latest updates.

8. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise your personal data rights (access, correction, deletion, restriction of collection, processing, or utilization), you can contact the Company through the "Contact Us" page within the App, or by emailing service@oncogenai.com.

The Company will respond as quickly as possible upon receiving your request, typically processing it within 7 working days.