1. Private application, public information
The medical application is accessible through a restricted private network and requires application sign-in. Account permissions are checked for member records, files, and exports. The administrator controls family-account membership and provider connections.
This public Cloudflare site serves static policy information only. It has no binding, proxy route, database, upload form, or credential connection to the medical application.
2. Connections and credentials
Authorized access uses HTTPS. Provider connections use supported authorization workflows and explicit patient read permissions. OAuth credentials are encrypted with a separately controlled application key; account passwords are stored as salted hashes. The application uses request-origin and session checks for supported changes.
A missing encryption key prevents credential use. Uncertain or interrupted authorization refreshes require attention rather than an automatic replay. No security control can eliminate all risks of account compromise, operator error, or infrastructure failure.
3. Originals, history, and recovery
Imported source versions and original files are preserved. Personal notes, annotations, and AI reading aids remain separate from clinical originals. Access to exports is member-scoped, and encrypted backups support recovery.
Live medical files and the database are protected by infrastructure and application access controls; this notice does not claim end-to-end encryption or individual encryption of every stored medical file. Recovery and retention are operator-managed.
4. AI is an external processing boundary
Selected excerpts can be forwarded to an external GPT service when the approved reading feature is enabled. Identifier screening, bounded selection, and source comparisons reduce some risks but do not make the content non-sensitive or guarantee an accurate translation. Read the full disclosure before authorization.
5. Reporting a problem
Contact the family administrator through your existing private channel if you suspect unauthorized access, an incorrect member grant, a lost credential, or a source or translation mismatch. Share only the minimum necessary details and do not post medical records, passwords, access tokens, or screenshots with private information on this public site.
The administrator can restrict access, disconnect affected sources, or pause processing while investigating. This is a privately maintained service, not a continuously staffed security or emergency response center.
公开说明页与私人医疗系统分开；本网站没有连接病历数据库或开放医疗登录。私人应用使用成员权限、受限网络、HTTPS、加盐密码散列和应用凭据加密，并保留原件与恢复备份。安全措施不能消除所有风险；发现问题请私下联系家庭管理员，勿公开病历、令牌或含私人资料的截图。