Privacy Policy
Last updated: 26 September 2026 · Governing version: English
1. Who we are
Qicura ("we", "us") operates the website at this domain, a wellness-education service grounded in the classical Chinese medicine canon. We are the controller of the personal data described in this policy.
Contact for all privacy matters: 18685029531h@gmail.com. Postal address: [REGISTERED ADDRESS — to be completed upon incorporation].
2. What this service is, and is not
Qicura provides educational wellness content and AI-assisted pattern exploration based on historical Chinese medicine texts. It does not provide medical diagnosis, treatment, prescription or any regulated health service, and no clinician-patient relationship is created. Because of this, some data you share with us is health-related, and we treat it as sensitive. Section 5 explains exactly where it goes.
3. Data we collect
3.1 Data you give us
- Account: your email address (the only account identifier; we use passwordless email-code sign-in) and, optionally, an invitation code if someone referred you.
- Consultation input: the description of your concern in your own words, your answers to follow-up questions, and — only if you choose to complete the constitution questionnaire — self-assessments such as tongue appearance, menstrual regularity, body odour, age band and allergens. We do not collect photographs of any kind.
- Check-in data: which daily tasks you mark done, short free-text notes (max 200 characters) and your self-rated change at the end of a plan.
- Sharing-wall submissions (only if you submit one): an optional display name (leave blank to post anonymously), your reflection text, and the number of days checked in.
3.2 Data generated automatically
- Country/region: when you submit a sharing-wall card, we derive a two-letter country code from your IP address using an offline database on our own server. The IP address itself is never stored; only the two-letter code is kept.
- Cookies: see the table in section 6.
- Page-visit counts: a self-hosted counter recording only the page path and an anonymous visitor ID. It records no IP address, no user-agent and no form content.
3.3 Data we deliberately do not collect
- Your name, date of birth, postal address or phone number.
- Payment card details — if paid features are enabled, cards are handled entirely by the payment processor; we never see or store card numbers.
- Device fingerprints, browser fingerprints, screen data, or advertising identifiers.
- Your IP address in any stored record.
- Anything from third-party analytics, advertising or social-media trackers. We run none.
4. How we use your data
- To run the consultation you asked for: matching your description against our text corpus and generating direction-level suggestions.
- To keep your history so you can return to previous consultations and check-in plans.
- To operate the consultation ledger (grants, spend, refunds) and, if enabled, memberships.
- To operate the sharing wall: each card is published by the person who submitted it, without pre-review; we may remove a card at that person's request or when it breaches our terms.
- To prevent abuse of free allowances and the referral programme.
- To improve retrieval quality: descriptions our matcher fails to recognise are kept in an internal log in truncated form.
We do not sell personal data, and we do not use it for advertising or profiling beyond the service you requested.
5. AI processing and international transfers — read this section
Your consultation text is sent to a third-party large-language-model provider to generate the response. The provider currently in use is DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.), whose processing infrastructure is located in the People's Republic of China. This may change; any change will be reflected in this policy before it takes effect.
What is sent: your concern description, your answers to follow-up questions, your gender and age band if provided, and relevant passages from our text corpus. What is not sent: your email address, any account identifier, your name, or your country code.
The model produces direction-level wellness suggestions only. No automated decision with legal or similarly significant effect is made about you; nothing is diagnosed.
Legal basis for the transfer (GDPR Art. 49(1)(a)): your explicit consent. Before your first consultation submission we ask you to acknowledge this transfer with a separate, unticked checkbox. You may withdraw consent at any time by simply not using the consultation feature; withdrawal does not affect processing already carried out. If you are in the EU/EEA/UK and do not wish your health text to leave your region, do not use the consultation feature.
6. Cookies
| Name | Purpose | Lifetime |
|---|---|---|
| lb_token | Keeps you signed in | 30 days |
| lb_vid | Anonymous visitor ID for our own page counters | 1 year |
| lb_oauth_state / lb_oauth_invite | Security token for third-party sign-in (only while such sign-in is offered) | 10 minutes |
| lb_admin | Administrator session (staff only) | 8 hours |
We do not use advertising or cross-site tracking cookies. Because our only non-essential cookie is our own first-party counter, we do not show a consent banner; you can delete or block these cookies in your browser at any time, and the site remains usable signed out.
7. Who else receives your data
- The LLM provider described in section 5 (consultation text only).
- Payment processor (Stripe or a merchant-of-record platform) — only if and when paid checkout is enabled, and only for billing data. Not active at the time of writing.
- Font delivery: pages load typefaces from Google Fonts, which means your browser discloses its IP address to Google when a page loads. We are migrating to self-hosted fonts to remove this disclosure; until then, this is the only third party that receives your IP.
- No data brokers, no advertisers, no social networks.
8. Where data is stored and how long we keep it
All records are stored on servers we operate in [HOSTING REGION — to be completed at deployment]. Retention:
- Consultation history and chat transcripts: kept until you ask us to delete them (section 9).
- Consultation ledger: kept as an immutable financial record. Entries reference your email address and cannot be edited after the fact; on account deletion we pseudonymise the ledger rather than rewrite it.
- Unrecognised-description improvement log: kept in truncated form for up to 24 months.
- Sharing-wall cards you asked us to remove: removed from public view immediately and deleted within 30 days.
9. Your rights
Regardless of where you live, you may email us to: access a copy of your data; correct it; delete your account and all consultation, check-in and sharing-wall data; receive your data in a portable format; object to or restrict processing; and withdraw any consent you gave. We respond within 30 days. If you are in the EU/EEA/UK you additionally have the right to lodge a complaint with your supervisory authority; if you are a California resident, the categories we collect and the rights above correspond to those under the CCPA as amended, and we do not sell or share personal data as those terms are defined.
Exercising a right is free. We verify identity by sending a code to the email on the account before acting on deletion or export requests.
10. Children
The service is not directed to anyone under 16. We do not knowingly collect data from children under 16; the constitution questionnaire includes topics appropriate only to adults. If you believe a child under 16 has created an account, email us and we will delete it.
11. Security
We use transport encryption (HTTPS), httpOnly session cookies, rate limiting, and the ability to remove published user content on request. No method of transmission or storage is completely secure; we cannot guarantee absolute security and we do not claim to.
12. Changes to this policy
Material changes (new categories of data, new recipients, new transfer destinations) will be announced on this page with a new "last updated" date at least 14 days before taking effect, and by email to account holders where we hold a working address.
13. Contact
Privacy questions, rights requests and complaints: 18685029531h@gmail.com.
隐私政策
最近更新：2026 年 9 月 26 日 · 正式版本为英文版，本中文版仅供对照
1. 我们是谁
Qicura（下称「我们」）运营本网站，提供以中医经典为基础的养生教育服务。我们是本政策所述个人数据的控制者。
隐私事务联系邮箱：18685029531h@gmail.com。邮寄地址：[注册地址——公司注册完成后补填]。
2. 本服务是什么、不是什么
Qicura 提供养生教育内容，以及基于中医古籍的 AI 辅助证型探索。我们不提供医疗诊断、治疗、处方或任何受监管的医疗服务，也不建立医患关系。正因如此，你分享的部分信息属于健康相关信息，我们按敏感数据对待。第 5 条说明它具体去了哪里。
3. 我们收集的数据
3.1 你主动提供的
- 账户：邮箱地址（唯一账户标识；采用邮箱验证码登录，无密码），以及可选的邀请码。
- 问诊输入：你用自己的话描述的不适、追问的回答；若你选择完成体质测评，还包括舌象自评、月经规律、体味、年龄段、过敏原等自评项。我们不收集任何照片。
- 打卡数据：你勾选完成的每日任务、短笔记（不超过 200 字）、计划结束时的自评变化。
- 分享墙提交（仅当你主动提交）：可选昵称（留空即匿名发布）、你的反思文字、打卡天数。
3.2 自动产生的
- 国家/地区：提交分享墙卡片时，我们用服务器本地的离线库把 IP 解析为两位国家码。IP 本身不落库，只存两位码。
- Cookie：见第 6 条表格。
- 页面访问计数：自建计数器，只记页面路径与匿名访客 ID，不记 IP、不记浏览器特征、不记表单内容。
3.3 我们明确不收集的
- 姓名、出生日期、住址、电话。
- 支付卡号——若启用付费功能，卡片信息完全由支付处理商处理，我们看不到也不存。
- 设备指纹、浏览器指纹、屏幕信息、广告标识符。
- 任何落库记录中的 IP 地址。
- 任何第三方统计、广告或社交追踪器的数据。我们一个都没接。
4. 我们如何使用你的数据
- 运行你发起的问诊：把描述与语料匹配，生成方向级建议。
- 保存历史，让你能回看既往问诊与打卡计划。
- 运行问诊次数账本（发放、消耗、退款），以及启用后的订阅。
- 运营分享墙：内容由本人提交后直接发布、不预先审核；我们可因本人要求或违反条款而下架某张卡片。
- 防止免费额度与邀请奖励被滥用。
- 改进检索：匹配失败的主诉以截断形式存入内部日志。
我们不出售个人数据，不将其用于广告，也不做你所请求服务之外的画像。
5. AI 处理与跨境传输——请务必阅读
你的问诊文本会被发送给第三方大模型服务商以生成回复。当前使用的服务商为 DeepSeek（杭州深度求索人工智能有限公司），其处理设施位于中华人民共和国境内。服务商可能变更；任何变更将在生效前更新本政策。
发送的内容：你的主诉描述、追问回答、你提供的性别与年龄段、语料中的相关段落。不发送：邮箱、任何账户标识、姓名、国家码。
模型只产出方向级养生建议。不对你做出具有法律效力或类似重大影响的自动化决定；不做任何诊断。
跨境传输的法律基础（GDPR 第 49(1)(a) 条）：你的明确同意。首次提交问诊前，我们会以一个默认未勾选的独立复选框请你确认该传输。你可随时通过使用之外撤回同意；撤回不影响此前已完成的处理。若你身处欧盟/欧洲经济区/英国且不希望健康文本离开你所在区域，请不要使用问诊功能。
6. Cookie
| 名称 | 用途 | 有效期 |
|---|---|---|
| lb_token | 保持登录状态 | 30 天 |
| lb_vid | 自建页面计数器的匿名访客 ID | 1 年 |
| lb_oauth_state / lb_oauth_invite | 第三方登录的安全令牌（仅在提供该登录时） | 10 分钟 |
| lb_admin | 管理员会话（仅内部人员） | 8 小时 |
我们不使用广告或跨站追踪 Cookie。唯一的非必需 Cookie 是我们自建的第一方计数器，因此不设同意横幅；你可随时在浏览器中删除或屏蔽这些 Cookie，未登录状态网站仍可用。
7. 还有谁会收到你的数据
- 第 5 条所述的大模型服务商（仅问诊文本）。
- 支付处理商（Stripe 或 merchant-of-record 平台）——仅在启用付费结账后，且仅限账单数据。撰写本政策时尚未启用。
- 字体加载：页面从 Google Fonts 加载字体，即页面加载时你的浏览器会向 Google 披露 IP。我们正在迁移为自托管字体以消除该披露；在此之前，这是唯一收到你 IP 的第三方。
- 没有数据经纪商、没有广告商、没有社交网络。
8. 数据存在哪、保留多久
所有记录存储于我们自运营的服务器，位于[托管区域——部署时补填]。保留期限：
- 问诊历史与聊天记录：保留至你要求删除（第 9 条）。
- 问诊次数账本：作为不可变财务记录保留。流水关联你的邮箱且事后不可改写；删号时我们对账本做假名化处理而非改写。
- 未识别主诉改进日志：截断形式保留不超过 24 个月。
- 你要求下架的分享墙卡片：立即从公开视图移除，30 天内删除。
9. 你的权利
无论你身在何处，均可发邮件要求：查阅你的数据副本；更正；删除账户及全部问诊、打卡、分享墙数据；以可携带格式获取数据；反对或限制处理；撤回已给出的同意。我们在 30 天内响应。若你身处欧盟/欧洲经济区/英国，你还有权向监管机构投诉；若你是加州居民，上述类别与权利对应 CCPA（含修正案）项下的权利，我们不出售、不按其定义「共享」个人数据。
行使权利免费。在执行删除或导出前，我们会向账户邮箱发送验证码以核实身份。
10. 未成年人
本服务不面向 16 岁以下人群。我们不明知地收集 16 岁以下儿童的数据；体质测评包含仅适合成年人的题目。若你发现 16 岁以下儿童注册了账户，请发邮件，我们会删除。
11. 安全
我们使用传输加密（HTTPS）、httpOnly 会话 Cookie、速率限制，以及用户内容公开前的人工审核。任何传输或存储方式都不绝对安全，我们不承诺绝对安全。
12. 政策变更
实质性变更（新增数据类别、新增接收方、新增传输目的地）将在本页以新的「最近更新」日期公告，并至少提前 14 天生效；对留有有效邮箱的账户持有人另行邮件通知。
13. 联系方式
隐私问题、权利请求与投诉：18685029531h@gmail.com。