Privacy Policy
Key commitments
- Measurement video frames are used only to compute physiological metrics in real time, and for no other purpose.
- We do not sell your personal information.
- Face photos and measurement history are stored locally on your client device by default. The web client separates history and photos by account; the Android app uses device-local storage. These can be cleared in Settings.
- Account information is used only to provide login, credits, and order services.
1. Scope
This policy applies to the Ignis Health Monitoring Platform (health.yanshutech.com, including the web app and Android app, the "Service"). Please read and understand this policy before using the Service. The Service is not a medical device; measurements are for wellness reference only. See the Health Disclaimer.
2. What we collect
| Category | Content | Storage location |
|---|---|---|
| Account information | Name, email, password (stored as an argon2 hash), API access key | Our servers |
| Measurement data | Heart rate, HRV, SpO₂, respiratory rate, stress/emotion metric results | Locally on your client device; separated by account on the web, device-local storage in the Android app |
| Video frames | Camera frames captured during measurement | Transmitted over an encrypted connection to the analysis server solely for real-time computation; no other use |
| Face photos | Photos you actively upload for recognition settings | Locally on your client device; not uploaded to servers |
| Orders and credits | Order number, amount, credits, payment status | Our servers |
| Payment information | Payment channel and transaction ID | Processed by payment providers (e.g., WeChat Pay); we do not store your card or payment account details |
| Verification codes | Email codes for registration/password reset | Held briefly in server memory and invalidated after use |
| Access logs | IP address, access time, request records | Our servers (for security and rate limiting) |
3. How we use information
- Compute physiological metrics in real time and display results and historical trends;
- Registration, login, email verification, and password reset;
- Credits, orders, and payment status management;
- API key generation and authentication;
- Security protection (anti-abuse, rate limiting, troubleshooting);
- Customer support when you contact us.
We do not use measurement video frames for advertising, identity recognition, user profiling, or sale to any third party.
4. How information is shared
We do not provide your personal information to third parties except in the following cases:
- Analysis and computation: measurement video frames are transmitted over an encrypted connection to our analysis server solely for real-time metric computation;
- Payment services: order payments are processed by WeChat Pay, subject to its privacy policy;
- Email services: verification codes and notification emails are sent via a third-party email service;
- Legal requirements: where required by laws, regulations, or lawful requests from judicial or administrative authorities.
5. Storage and retention
- Server-side data such as accounts and orders is stored on our servers with encrypted transmission and access controls;
- Measurement history and face photos are stored locally on your client device; the web client separates them by account, while the Android app uses device-local storage. They can be cleared in Settings;
- After you delete your account, we will delete or anonymize account-related information on our servers, unless otherwise required by law;
- Temporary data such as verification codes expires after use.
6. Your rights
- Access and correction: view your account information on the account and settings pages;
- Deletion: clear local measurement history under "Settings → Data management"; the face library can be deleted separately;
- Account deletion: contact us at the email below; we will process your request after verifying your identity;
- Withdraw consent: stop using the Service or contact us to withdraw consent, without affecting prior processing based on consent.
7. Data security
- HTTPS/WSS encryption is used across the Service;
- Passwords are stored as argon2 hashes; we cannot recover your plaintext password;
- APIs are protected by authentication and rate limiting to reduce the risk of unauthorized access.
8. Minors
The Service is primarily intended for adults. If you are under 18, please use the Service with the consent and guidance of a guardian.
9. Policy updates
This policy may be updated as the product or regulations evolve; the date at the top of this page will reflect updates. For material changes, we will provide reasonable notice such as on-site prompts.
10. Contact us
For questions, requests, or complaints about this policy or your data, contact wuac@yanshutech.com. Company: Beijing YanShu Technology Co., Ltd. · ICP filing: 京ICP备16046078.