1. Information the application holds
Depending on your authorization and uploads, the application may hold patient identity and demographic information, clinical records, original reports and attachments, medications, allergies, immunizations, visits, personal notes, source and version history, and reading aids. It also stores account permissions, password hashes, provider authorization credentials, and operational records needed to run the service.
This public website does not provide account sign-in, accept uploads, or access those medical records.
2. Why information is used
Information is used to import and organize authorized records, display source-linked results and originals, search saved documents, support personal entries and summaries, control member access, operate approved reading aids, and maintain security and recovery. Family Health is not operated as an advertising, data-broker, or research service and does not sell medical records.
3. Storage, accounts, and backups
The private application runs on operator-managed infrastructure hosted with Oracle Cloud. Medical records and original files are stored in restricted application storage. Provider credentials and supported AI configuration and task state are encrypted; account passwords are stored as salted hashes. This is not a claim that every live record or original file is individually encrypted or that the system is end-to-end encrypted.
Encrypted recovery backups may be held in separately managed storage, currently Microsoft OneDrive. Backups and historical versions are kept under the operator's recovery-retention policy. Family members can access only the members explicitly granted to their accounts; administrators manage those grants.
4. External AI processing
The current deployment supports bounded Chinese reading assistance for newly added or genuinely changed report conclusions, clinician instructions, and medication directions. Where enabled by the administrator, only selected necessary excerpts are sent through an operator-managed proxy to an external GPT service. The proxy forwards requests; it is not local AI inference.
Local checks attempt to exclude names, birthdays, contact details, identifiers, and ambiguous or unsupported text. This does not establish complete anonymity. Even an excerpt without direct identifiers can reveal sensitive health information. The automatic feature is not intended to upload whole reports or the full patient history.
Prompts, excerpts, and responses are processed under the upstream provider's applicable terms and settings. Family Health does not promise zero upstream retention or that no third party processes health-related text. The application keeps encrypted processing evidence and separate source-bound reading revisions. Automated comparisons do not establish medical accuracy.
Ask the administrator to pause AI processing or discuss its scope before connecting if needed. Pausing stops future eligible submissions; it does not recall requests already sent. The external GPT provider's published privacy information should be reviewed alongside the operator's actual service configuration.
5. Who may process information
Access is limited by application permissions and the operator's administration of the service. Infrastructure and recovery-storage providers may process data as part of providing those services. A connected healthcare provider receives the authorization and API traffic needed for your requested connection. The external AI service may receive the selected excerpts described above.
Records are not made public by this information website. Exports and original-file downloads create copies under the control of the person downloading them. Disclosures may also be necessary where required by applicable law.
6. Your choices and retention
Contact the family administrator to review access, stop scheduled imports, disconnect a source, obtain available exports, ask about AI processing, or request deletion. You can also use the connected provider's available authorization-revocation controls.
Revoking provider access or removing an account grant does not automatically remove existing saved records. Source originals, immutable history, reading revisions, and backups are intentionally retained until an administrator-assisted retention or deletion action is agreed and completed. There is no self-service guarantee of immediate permanent deletion. Ask what remains in backups and when it can expire.
7. This public website
Cloudflare hosts these public information pages and may process routine request data such as IP addresses, request time, browser information, and security signals to deliver and protect them. See Cloudflare's Privacy Policy.
The page code includes no advertising, analytics scripts, third-party fonts, account cookies, local-storage tracking, or forms. Cloudflare's platform-level request processing remains separate from that statement. Do not put medical information or credentials into public page URLs.
8. Questions and changes
Contact the family administrator who invited you through your established private contact channel for privacy questions or requests. This website has no public intake mailbox or form. The published date identifies the current notice; material changes to processing should be explained before a new authorization is sought.
医疗原件和历史资料保存在受限的私人应用中，账号按家庭成员授权。应用凭据及 AI 任务等特定状态加密，恢复备份另行加密；这不表示所有在线医疗文件均逐份加密。已启用的中文阅读辅助会将必要片段经代理发往外部 GPT 服务；尽量排除直接身份信息，但不能承诺绝对匿名或上游零留存。公开网站由 Cloudflare 托管，未加入统计脚本或资料表单。