Patient App Privacy Policy

Effective date of this version: July 17, 2026

Your trust is very important to us. We fully understand the importance of personal information security, and we will take security protection measures in accordance with applicable laws and regulations to protect the security of your personal information. In view of this, Wuxi Tairex Technology Co., Ltd., the service provider of Tairex AI Hospital (hereinafter referred to as "we" or "us"), has formulated this Privacy Policy (hereinafter referred to as "this Policy") and reminds you that:

This Policy applies to the services or products we provide (collectively, "the Services"). It does not apply to services provided by other companies or individuals (hereinafter referred to as "third parties"). If you use similar third-party services in our App, such use will be governed by the privacy policy of the relevant third-party institution, rather than this Policy, and you should carefully read the content of that policy. We do not participate in, and assume no responsibility for, any disputes between you and third parties arising from personal information protection or other matters.

Before using any services or products we provide, please be sure to carefully read and fully understand this Policy, and begin using the Services only after you have confirmed that you fully understand and agree to it. In any event, your use of the Services will be deemed as your acceptance of all contents of this Policy.

If you have any questions, comments, or suggestions regarding this Policy, you may contact us through "Personal Center - Feedback".

Definitions:

1. Tairex AI Hospital App: the mobile internet hospital service platform developed and operated by us.
2. Service provider of Tairex AI Hospital App: the software technology service provider, Wuxi Tairex Technology Co., Ltd.
3. User: a person who has registered for and logged in to the Tairex AI Hospital App, referred to as "you" or "user" in this Policy.
4. Personal information: all kinds of information recorded electronically or by other means that can identify a specific natural person or reflect the activities of a specific natural person, either independently or in combination with other information.
5. Sensitive personal information: personal information that, once leaked or illegally used, may easily lead to infringement of the dignity of a natural person or harm to personal or property safety, including biometric identification, religious beliefs, specific identity, medical and health information, financial accounts, whereabouts and traces, and the personal information of minors under the age of fourteen.
6. Deletion of personal information: the act of removing personal information from systems involved in daily business functions, so that such information remains in a state in which it cannot be retrieved or accessed.
7. Minor: a person under the age of eighteen.

Table of Contents

1. How We Collect and Use Your Personal Information
2. How We Store Your Personal Information
3. How We Protect Your Personal Information
4. How We Provide Your Personal Information to External Parties
5. Your Rights
6. How We Use Cookies
7. How We Strictly Protect the Personal Information of Minors
8. How This Policy Is Updated
9. How to Contact Us

1. How We Collect and Use Your Personal Information

When you use our products/services, the personal information that we may need to collect and use includes the following two categories:

1. Necessary personal information that you need to authorize us to collect and use in order for us to provide the basic functions of our products/services to you. If you refuse to provide the corresponding information, you will be unable to normally use our products/services.

2. Personal information that you may choose whether to authorize us to collect and use in order for us to provide additional functions of our products/services to you. If you refuse to provide such information, you will be unable to normally use the relevant additional functions or achieve the functional effects we intend to provide.

We will collect and use your personal information to implement the following functions described in this Policy:

(1) Registration and Creating a New Patient

1. To receive the full services of Tairex AI Hospital, you should first register a user account. To complete account creation, users in mainland China are required to provide their own mobile phone number to receive the SMS verification code required for login, while users outside mainland China are required to provide their own email address.
2. When you use "One-Tap Login", after obtaining your consent, we will obtain your complete mobile phone number from the carrier, so that we can provide you with convenient registration and login services. If you do not wish to use the "One-Tap Login" function, you may register or log in through other methods.
3. When you add a new patient, you need to provide the patient's personal information, including name, identity document type, identity document number, gender, date of birth, and location, so that we can establish identity information for that patient, support your subsequent use of health consultation, offline consultation, health records, and other related functions, and provide you with continuous, full-lifecycle health management services. If you do not provide the above information, you may be unable to create information for that patient and unable to normally use health consultation, offline consultation, health records, and other related functions, but this will not affect your use of other functions and services of Tairex AI Hospital.

(2) Intelligent Conversation

When you use functions such as AI doctor recommendations and AI health consultation, you may ask the AI doctor health-related questions through conversation and have the AI doctor recommend a suitable human doctor based on your circumstances. Before an online consultation or offline consultation with a human doctor, you may complete a pre-consultation by conversing with the AI doctor so that the human doctor can better understand your health condition. After an online consultation or consultation with a human doctor ends, AI doctor follow-up may be arranged for you based on your condition. Please understand that:

1. We provide conversation and interaction services to you based on generative artificial intelligence model technology. You acknowledge and agree that: all responses from the AI doctor are automatically generated based on large model technology, are for health consultation reference only, and do not constitute any form of medical diagnosis, treatment plan, or medication advice. If you feel unwell, please be sure to visit a physical medical institution for treatment and do not rely solely on AI consultation results. To provide conversation and interaction services to you, we may collect the following information: information you voluntarily input (including text, voice, images, and files), content instructions, behavioral information when you use the model (including records of your clicks, browsing, and editing operations), and feedback information you provide (including likes, dislikes, and submitted feedback). We will analyze and compute the above information so as to better understand your questions and contextual semantics, and thereby provide you with more relevant information content (including text, audio, or video). When you use the built-in browser plugin of Tairex AI Hospital, in addition to the information collection described above, we may collect your browsing history and your device information to enhance plugin functions and improve user experience. At the same time, to provide you with a better real-time voice conversation and interaction experience, we will collect and analyze your voice input in order to distinguish user speech from ambient sound and achieve voice enhancement effects.

2. To describe your circumstances more comprehensively and accurately to a human doctor or AI doctor, you may voluntarily take photos of or upload relevant materials, including but not limited to your existing outpatient medical records, outpatient prescriptions, discharge records, surgery records, examination and laboratory reports, physical examination reports, and imaging materials. In the above process, we may collect text information you voluntarily input, uploaded images, files, and other medical-related materials, as well as interaction records between you and doctors or the AI doctor. The above information will be used for consultation services, follow-up management, and health analysis, in order to help doctors or the AI doctor understand your health condition and provide corresponding diagnosis, treatment, or health recommendations. Depending on the content you choose, we will request your authorization for camera and photo album permissions respectively. For certain phone models, microphone permission will also be requested at the same time when camera and photo album permissions are requested. Before you use the above functions, we will separately ask for your authorization and consent through pop-ups or other means. Only after you explicitly authorize us will we access your camera, photo album, or microphone. If you refuse authorization, you will be unable to take photos or select images or videos, but this will not affect your use of other functions and services of Tairex AI Hospital.

(3) Online Consultation and Medical Consultation with Human Doctors

1. When you use online consultation or offline consultation services provided by human doctors, according to regulations in mainland China, you must complete real-name authentication before using such services. We will collect your patient name, identity document type, and identity document number for identity authenticity verification, so as to ensure the compliant and orderly provision of diagnosis and treatment appointments and related medical services. If you refuse to provide the relevant real-name information, you will be unable to use health consultation or offline consultation services with human doctors, but this will not affect your normal use of basic platform functions that do not require real-name authentication, such as basic browsing and information viewing.

2. When you use services such as online consultation and offline consultation, a human doctor will communicate with you regarding your circumstances. After the online consultation or offline consultation ends, the human doctor may follow up with you at an appropriate time. To describe your circumstances more comprehensively and accurately to the doctor, you may voluntarily take photos of or upload relevant materials, including but not limited to your existing outpatient medical records, outpatient prescriptions, discharge records, surgery records, examination and laboratory reports, physical examination reports, and imaging materials. In the above process, we may collect text information you voluntarily input, uploaded images, files, and other medical-related materials, as well as interaction records between you and doctors or the AI doctor. The above information will be used to help doctors understand your health condition and provide corresponding diagnosis, treatment, or health recommendations. Depending on the content you choose, we will request your authorization for camera and photo album permissions respectively. For certain phone models, microphone permission will also be requested at the same time when camera and photo album permissions are requested. Before you use the above functions, we will separately ask for your authorization and consent through pop-ups or other means. Only after you explicitly authorize us will we access your camera, photo album, or microphone. If you refuse authorization, you will be unable to take photos or select images or videos, but this will not affect your use of other functions and services of Tairex AI Hospital.

(4) Health Records

1. If you need to manage your health profile, personal health history, or medical record information in health records, we will collect your health materials based on the information you voluntarily provide, including but not limited to outpatient, emergency, and inpatient medical records, laboratory, examination, and physical examination reports, drug prescriptions, medicine boxes, photos of symptoms such as skin conditions, and imaging materials such as CT, MRI, and X-ray images. You need to voluntarily take photos or upload photos or files. We will request access to your camera and photo album permissions, and after obtaining your authorization, we will collect the images and files you take or select for upload, and automatically extract and recognize medical record text. The health materials you upload will be available for you to manage and query in your health records within the Services. If you refuse authorization, you will be unable to use this service, but this will not affect your use of other functions and services of Tairex AI Hospital.

2. Please take appropriate measures to protect your privacy when taking or uploading photos or files. Because the photos or files you take or upload may contain your sensitive personal information, we promise not to use the photos or files you take or upload for purposes other than providing the Services, and we will strictly protect your personal information in accordance with the requirements of relevant laws and regulations.

3. You may create and manage health records for family members (no more than three). You may create health records for your family members by entering their name, gender, date of birth, and relationship. After creating health records for your family members, you may edit and manage such health records by voluntarily entering your family members' physical indicators, health history, and medication information, and by uploading medical materials of your family members such as outpatient medical records, outpatient prescriptions, and examination and laboratory reports. Please ensure that you have obtained lawful authorization from your family members before creating or managing their health records, so as to avoid improper disclosure of others' information.

4. We will conduct health analysis based on the information you store in your health records, generate your health profile, and provide you with personalized services after obtaining your separate authorization and consent. If, when you use other agent services, health record data is needed, after obtaining your separate authorization and consent, we will synchronize your health record information to the agent you specify (including agents developed by us independently, agents jointly developed by us and third parties, and agents independently developed by third parties), so that it can provide you with health analysis and personalized services. You may contact us through the methods set forth in "9. How to Contact Us" to learn about the possible impact of the foregoing data processing activities on your personal rights and interests, and you may refuse such processing. We will promptly stop the relevant data processing activities after you make the relevant request.

(5) Payment

When you use the online consultation function with human doctors, you may need to pay a registration fee. In the process of completing the transaction and payment, we will collect your order number, order amount, and consultation type. The above information is obtained through generation during use and automatic system collection, and is used to ensure normal service operation, complete transaction processing, and maintain system security.

(6) Service Optimization

You acknowledge and agree that, provided that the information has been processed using secure encryption technology, de-identified, and cannot be used to re-identify a specific individual, we may use the information you provide when using Tairex AI Hospital and the corresponding responses generated by the model for model training, and continuously adjust and optimize model performance, so as to provide you with higher-quality services. The above information includes but is not limited to conversation content and medical materials generated during health consultation, online consultation and offline consultation with human doctors, follow-up, and other service scenarios, and may also be used to optimize the service quality of the AI doctor. If you do not want us to use such information for model training and optimization, you may contact us through the contact information disclosed in this Privacy Policy.

(7) Providing Product/Service Information Display Functions

To provide page displays and search results that better meet your needs and to understand product compatibility, we will collect information about the services you use and how you use them, and associate such information. This information includes:

1. Device information: After you agree to the Privacy Policy, and based on the specific permissions you grant during software installation and use, we will receive and record information related to the device you use (including device model, Wi-Fi SSID, operating system version, device settings, Android ID, MAC address, IMEI, IMSI, unique device identifiers and other software and hardware feature information), and information related to the location of the device (including IP address, GPS location, and sensor information such as Wi-Fi access points, Bluetooth, and base stations that can provide relevant information).

2. Log information: When you use the services or products provided by our website or client, we will automatically collect details of your use of our services and store them as relevant web logs, including your search query content, IP address, browser type, telecommunications carrier, language used, access date and time, and records of webpages you visit.

Please note that device information and log information alone cannot identify a specific natural person. If we combine such non-personal information with other information to identify a specific natural person, or use it in combination with personal information, then during the period of such combined use, such non-personal information will be deemed personal information. Unless we obtain your authorization or laws and regulations provide otherwise, we will anonymize and de-identify such personal information.

(8) Providing Feedback Services to You

When you provide feedback to us, we may retain your communication/call records and content, or the contact information you leave, so that we can contact you or help you resolve the issue, or record the handling plan and results for the relevant issue. For the reasonable need to provide services and improve service quality, we may also use other information about you, including relevant information you provide when submitting feedback.

(9) Providing Security Protection for You

To improve the security of your use of our services, protect the personal and property safety of you, other users, or the public from harm, better prevent security risks such as phishing websites, fraud, network vulnerabilities, computer viruses, cyberattacks, and network intrusions, and more accurately identify violations of laws and regulations or our relevant agreement rules, we may use or integrate your account information, device information (including device model, Wi-Fi SSID, operating system version, device settings, Android ID, MAC address, IMEI, IMSI, unique device identifiers, installed application list, recently running applications, and other software and hardware feature information), information related to the location of the device (including IP address, GPS location, and sensor information such as Wi-Fi access points, Bluetooth, and base stations that can provide relevant information), log information, and information shared with us after obtaining your authorization or in accordance with law, in order to comprehensively determine your identity verification status, detect and prevent security incidents, and take necessary recording, auditing, analysis, and handling measures in accordance with law.

(10) Others

1. If the information you provide contains personal information of other users, before providing such personal information to us, you must ensure that you have obtained lawful authorization. If such information involves personal information of minors, you must obtain the consent of the corresponding minor's guardian before publishing it. In the foregoing circumstances, the guardian has the right to contact us through the channels specified in this Policy and request correction or deletion of content involving the minor's personal information.
2. If we use information for other purposes not specified in this Policy, or use information collected for a specific purpose for other purposes, we will obtain your consent in advance.
3. Exceptions to obtaining authorization and consent. According to relevant laws and regulations, we do not need to obtain your authorization and consent to collect your personal information in the following circumstances:
   1. Where it is necessary for the conclusion or performance of a contract to which you are a party.
   2. Where it is necessary for the performance of statutory duties or statutory obligations.
   3. Where it is necessary to respond to public health emergencies, or to protect the life, health, and property safety of natural persons in emergency circumstances.
   4. Where personal information is processed within a reasonable scope for news reporting, public opinion supervision, or other activities carried out in the public interest.
   5. Where your personal information that you have disclosed yourself, or other personal information that has been lawfully disclosed, is processed within a reasonable scope in accordance with the Personal Information Protection Law.
   6. Other circumstances prescribed by laws and administrative regulations.
4. Please be aware that, under applicable law, if we process personal information by taking technical measures and other necessary measures so that the data recipient cannot re-identify a specific individual and the data cannot be restored, or if we conduct anonymized research, statistical analysis, and forecasting on collected information for improving our content and layout, providing product or service support for business decisions, and improving our products and services (including using anonymous data for machine learning or model algorithm training), then the use of such processed data does not require separate notice to you or your consent.

2. How We Store Your Personal Information

(1) Storage Location

We will strictly restrict the transfer of your personal information worldwide. Personal information collected and generated during our operations in mainland China will be stored on secure and trusted servers within mainland China, except in the following circumstances:

1. Where laws and regulations have explicit provisions.
2. Where your explicit authorization is obtained.
3. Where you engage in voluntary acts such as overseas internet electronic services or goods transactions through the internet.

For the above circumstances, we will ensure that your personal information is adequately protected in accordance with this Policy. If cross-border transmission or storage is required in the future, we will notify you in advance and obtain your consent in accordance with the requirements of applicable laws and regulations.

(2) Storage Period

We retain your personal information only for the period necessary to achieve the purposes described in this Policy. During the term of the contractual relationship (customer relationship) between you and us, and for the statutory period after the contractual relationship expires, we will process and store your data. After the storage period expires, we will promptly delete or anonymize it.

(3) Special Note on Data After Account Cancellation

After you cancel your account, we will, in accordance with the requirements of laws and regulations, promptly delete your registration information (such as mobile phone number, name, and identity card number) or irreversibly anonymize it. You acknowledge and agree that, in order to continuously improve the accuracy and safety of medical large models, after you cancel your account, we will strictly de-identify or anonymize question-and-answer records and desensitized medical record text generated during your use of our services, and may include them in our medical artificial intelligence training dataset for continuous model training and optimization.

3. How We Protect Your Personal Information

1. We have adopted industry-standard, reasonable, and feasible security protection measures to protect the security of the personal information you provide and prevent unauthorized access to, public disclosure, use, modification, damage, or loss of personal information. To safeguard your information security, we are committed to using various security technologies and supporting management systems to minimize the risks of leakage, destruction, misuse, unauthorized access, unauthorized disclosure, and alteration of your information. For example: encrypted transmission through secure socket layer software (SSL), encrypted storage of information, and strict restrictions on access to data centers. When transmitting and storing sensitive personal information (including personal biometric information), we will adopt security measures such as encryption, permission control, de-identification, and anonymization. We will conduct comprehensive statistics, analysis, and processing of your information through desensitization, de-identification, anonymization, and other means, so as to provide you with more accurate, personalized, smooth, and convenient services, or to help evaluate, improve, or design products, services, and operational activities. Our important information systems have passed and been filed for information security classified protection evaluation (Level 3), and evaluations are conducted annually.
2. We have established dedicated management systems, processes, and organizations to ensure information security. For example, we strictly limit personnel who have access to information, require such personnel to comply with confidentiality obligations, and review their compliance.
3. After you terminate use of the Services, we will stop collecting and using your information, unless otherwise provided by laws, regulations, or regulatory authorities. If we cease operations, we will promptly stop collecting your personal information, notify you of the cessation of operations by individual delivery or public announcement, and delete or anonymize the personal information we hold about you.
4. We will take reasonable and feasible measures to try to avoid collecting irrelevant personal information.
5. The internet is not an absolutely secure environment, and we strongly recommend that you do not use communication methods not recommended by us to send personal information. Please note that information you voluntarily share or even publicly share when using our services may involve your or others' personal information, or even sensitive personal information.
6. We will do our best to ensure the security of any information you authorize us to process. If our physical, technical, or management safeguards are compromised, resulting in unauthorized access to, public disclosure, tampering, or destruction of information, and causing damage to your lawful rights and interests, we will bear corresponding legal liability. If you need to inquire about or complain about personal information security matters, you may contact us through Personal Center - Feedback or other methods listed in this Policy. We will respond to your questions within 15 working days.
7. In the unfortunate event of a personal information security incident, we will inform you in accordance with the requirements of laws and regulations of: the basic circumstances and possible impact of the security incident, the measures we have taken or will take, recommendations for you to independently prevent and reduce risks, remedial measures for you, and other relevant matters. We will inform you of the incident by email, letter, phone call, push notification, or other means. Where it is difficult to inform personal information subjects individually, we will publish an announcement in a reasonable and effective manner. At the same time, we will report the handling of personal information security incidents in accordance with the requirements of regulatory authorities.

4. How We Provide Your Personal Information to External Parties

(1) Entrusted Processing

Some functions of the platform are provided by external suppliers. For such external suppliers entrusted by us to process personal information, we will sign strict confidentiality agreements with them, requiring them to process personal information in accordance with our requirements, this Policy, and any other relevant confidentiality and security measures.

For example, when you use functions such as intelligent conversation, consultation with human doctors, and health records, in accordance with relevant regulations in mainland China, to fulfill content security management requirements, we may entrust third-party content moderation service providers to review the conversation content you send, images you upload, and other content.

(2) Sharing

We will not share your personal information with any other company, organization, or individual, except in the following circumstances:

1. Sharing with explicit consent: After obtaining your explicit consent, we will share your personal information with other parties.
2. Sharing under statutory circumstances: We may share your personal information externally in accordance with laws and regulations, or mandatory requirements of competent government authorities.
3. Sharing in medical service scenarios: As a medical service platform, in order to provide you with consultation, follow-up, registration, and related medical services, we may share your personal information (such as your name, contact information, medical record materials, and other necessary information) with the hospital you choose for treatment or the medical institution to which the doctor you choose belongs. In other words, after you choose the hospital or the medical institution to which the doctor belongs, sharing your personal information collected by us with that institution is necessary for your required consultation management and high-quality diagnosis and treatment services. At the same time, we will also require medical institutions to process your personal information in accordance with relevant laws and regulations and the requirements of this Privacy Policy.
4. Sharing in real-name authentication scenarios: When you use services such as online health consultation with human doctors and offline consultation, according to regulations in mainland China, you must complete real-name authentication before using such services. We will connect to third-party real-name authentication service providers and transmit necessary personal information to such service providers through system interfaces, so as to implement real-name authentication functions such as verifying the authenticity of the patient's identity and comparing the consistency of name and identity document number information.
5. Sharing in payment scenarios: When you use the online consultation function of the Services and make payment, we will connect to third-party payment service providers and transmit necessary personal information to such service providers through system interfaces, so as to implement payment processing, transaction confirmation, and other functions.

For specific information about sharing personal information, you may click "Third-Party Information Sharing List" to view it.

Use of SDKs: To ensure stable operation and functional implementation of our client, and to enable you to enjoy and use more services and functions (such as the real-name authentication, payment, and notification push functions mentioned above), our application may embed SDKs or other similar applications of authorized partners. You may click "Third-Party Information Sharing List" to view details of the SDKs we access. We will conduct strict security testing of application programming interfaces (APIs) and software development kits (SDKs) through which authorized partners obtain relevant information, and agree on strict data protection measures with authorized partners, so that they process personal information in accordance with this Policy and any other relevant confidentiality and security measures.

(3) Transfer

We will not transfer your personal information to any company, organization, or individual, except in the following circumstances:

1. Transfer with explicit consent: After obtaining your explicit consent, we will transfer your personal information to other parties.
2. In the event of merger, acquisition, bankruptcy liquidation, or other situations involving merger, acquisition, or bankruptcy liquidation, if personal information transfer is involved, we will require the new company or organization holding your personal information to continue to be bound by this Policy. Otherwise, we will require that company or organization to seek your authorization and consent again.

(4) Public Disclosure

We will publicly disclose your personal information only in the following circumstances:

1. With your explicit consent.
2. If we determine that you have violated laws and regulations or seriously violated our relevant agreement rules, or to protect the personal and property safety of us and the public from harm, we may disclose personal information about you in accordance with laws and regulations or our relevant agreement rules, and after obtaining your consent, including relevant violations and measures we have taken against you. For example, if you seriously violate the user agreement by hoarding appointment slots or making false appointments, we may publicly disclose or share with partners your identity information, contact information, and penalty status.

(5) Exceptions to Obtaining Prior Authorization and Consent When Sharing, Transferring, or Publicly Disclosing Personal Information

1. In the following circumstances, sharing, transferring, or publicly disclosing your personal information does not require your prior authorization and consent:
   1. Where it is necessary for the conclusion or performance of a contract to which you are a party.
   2. Where it is necessary for the performance of statutory duties or statutory obligations.
   3. Where it is necessary to respond to public health emergencies, or to protect the life, health, and property safety of natural persons in emergency circumstances.
   4. Where personal information is processed within a reasonable scope for news reporting, public opinion supervision, or other activities carried out in the public interest.
   5. Where your personal information that you have disclosed yourself, or other personal information that has been lawfully disclosed, is processed within a reasonable scope in accordance with the Personal Information Protection Law.
   6. Other circumstances prescribed by laws and administrative regulations.
2. According to law, sharing or transferring personal information that has been anonymized, while ensuring that the data recipient cannot restore and re-identify the personal information subject, does not constitute external sharing, transfer, or public disclosure of personal information. Storage and processing of such data will not require separate notice to you or your consent.

5. Your Rights

You may access and manage your personal information in the following ways:

(1) Accessing Your Personal Information

1. You have the right to access your personal information, except as otherwise provided by laws and regulations. You may access your personal information by yourself in the following ways:
2. Account information: You may log in to your account and view it in "Personal Center" - "Account".
3. Patient management: You may log in to your account and add, modify, and unbind contacts in "Personal Center" - "Patient Management".
4. Registration records: You may log in to your account and view registration history records through "My Orders" on the homepage.
5. Medical record records: You may log in to your account and view medical record records generated through online health consultation and offline consultation with human doctors in the Services through "My Consultations" on the homepage.
6. Follow-up records: You may log in to your account and view follow-up records through "My Consultations" on the homepage.
7. If you are unable to access such personal information through the above paths, you may submit the issue you encounter through feedback at any time. We will respond to your feedback promptly.
8. For other personal information generated during your use of our services or products, as long as we do not need to make excessive efforts, we will provide it to you in accordance with the relevant arrangements in "Responding to Your Above Requests" in this section.

(2) Correcting Your Personal Information

When you discover that personal information about you processed by us is incorrect, you have the right to request that we make corrections. You may submit a correction request through the methods listed in "Accessing Your Personal Information" in this section.

(3) Transferring Your Personal Information

When you request that personal information be transferred to a designated personal information processor, provided that the conditions prescribed by the national cyberspace administration are met, we will provide you with a transfer channel. You may contact us through the contact information listed in this Policy.

(4) Cancelling Your Personal Information

If you need to cancel your account, you may do so in Personal Center - Settings - Account Cancellation. Account cancellation is an irreversible operation. After cancelling your account, you will no longer enjoy any outstanding medical services in the Tairex AI Hospital App. We will no longer retain your account information. Please back up all information related to this account by yourself and confirm that all medical services related to the account have been properly handled. After you successfully cancel your account, we will delete your personal information or anonymize it in accordance with the requirements of laws and regulations.

(5) Deleting Your Personal Information

1. In the following circumstances, you may request that we delete personal information:
2. If our processing of personal information violates laws and regulations.
3. If we collect or use your personal information without obtaining your explicit consent.
4. If our processing of personal information seriously violates our agreement with you.
5. If you no longer use our products or services.
6. If we permanently no longer provide products or services to you.
7. If we decide to respond to your deletion request, we will also, to the extent possible, notify the entities that obtained your personal information from us and require them to delete it promptly, unless laws and regulations provide otherwise or those entities have obtained your independent authorization.
8. After you delete information from our services or we assist you in deleting relevant information, we may not immediately delete the corresponding information from backup systems, but will delete such information when backups are updated.

(6) Changing the Scope of Your Authorization and Consent

You may change the scope within which you authorize us to continue collecting personal information, or withdraw your authorization, by deleting information, disabling device functions, or other means. Please understand that each business function requires certain basic personal information to be completed (see "How We Collect and Use Your Information" in this Privacy Policy). After you withdraw consent, we will no longer process the corresponding personal information. However, your decision to withdraw consent will not affect personal information processing previously conducted based on your authorization.

(7) Restricting Automated Decision-Making by Information Systems

In certain internet electronic services or products, we may make decisions solely based on non-manual automated decision-making mechanisms, including information systems and algorithms. If such decisions significantly affect your lawful rights and interests, you have the right to request an explanation from us. If you wish to exercise your right to refuse automated decision-making, or have other related questions about automated decision-making, you may also submit a request or inquiry to us. Specifically, you may contact us through "Personal Center" - "User Feedback and Reporting" or other methods listed in this Policy.

(8) Protection of the Personal Information of Deceased Persons

If a user unfortunately passes away, their close relatives may, for their own lawful and legitimate interests, contact us through the contact information disclosed in this Privacy Policy to exercise rights such as access, copying, correction, and deletion with respect to the deceased person's relevant personal information, unless the deceased person made other arrangements before death.

(9) Responding to Your Above Requests

1. If you need to revoke authorization information, or cancel or delete personal account information, you may cancel your account by yourself in Personal Center settings. If you are unable to manage your personal information through the above methods, or if you need to inquire about the personal information or types of personal information obtained about you, their sources, the purposes for which they are used, and the identities or types of third parties that obtained the above personal information, or if you have other requests regarding personal information rights, you may contact us through "Personal Center - Feedback" or other methods listed in this Policy. To protect your information security, we may require you to provide a written request or otherwise prove your identity. After verification, we will process your request.
2. In principle, we do not charge fees for your reasonable requests. However, for requests that are repeated multiple times or exceed reasonable limits, we will charge certain cost-based fees as appropriate. For requests that are groundlessly repeated, require excessive technical means (for example, requiring development of a new system or fundamental changes to current practices), pose risks to the lawful rights and interests of others, or are highly impractical, we may refuse them.
3. In the following circumstances, in accordance with the requirements of laws and regulations, we will be unable to respond to your request:
4. Where it is related to the personal information controller's performance of obligations prescribed by laws and regulations.
5. Where it is directly related to national security or national defense security.
6. Where it is directly related to public security, public health, or major public interests.
7. Where it is directly related to criminal investigation, prosecution, trial, or enforcement of judgments.
8. Where there is sufficient evidence indicating that you have subjective malice or are abusing rights.
9. Where it is for the purpose of protecting major lawful rights and interests such as the life and property of you or other individuals, and it is difficult to obtain the individual's consent.
10. Where responding to your request would result in serious damage to the lawful rights and interests of you or other individuals or organizations.
11. Where trade secrets are involved.

6. How We Use Cookies

1. To ensure our normal operation, we will store small data files called Cookies on your computer or mobile device. Cookies usually contain identifiers, site names, and certain numbers and characters. With the help of Cookies, we can remember your choices and provide corresponding services.
2. You may manage or delete Cookies according to your preferences. For details, please see AboutCookies.org. You may clear all Cookies stored on your computer, and most web browsers have a function to block Cookies. However, if you do so, you will need to change user settings each time you visit our platform. To learn more about how to change browser settings, please visit the relevant settings page of the browser you use.

7. How We Strictly Protect the Personal Information of Minors

1. We attach particular importance to protecting the personal information of minors. If you are a minor under the age of 14, before using the Services, please be sure to read this Privacy Policy under the supervision of your guardian, and ensure that you have obtained your guardian's explicit consent before using the Services and providing your personal information to the Services.
2. For personal information of minors collected through use of the Services with guardian consent, the Services will use, share, transfer, or disclose such information only where permitted by laws and regulations, where the guardian has given explicit consent, or where necessary to protect minors.
3. If your guardian does not agree to your use of the Services or your provision of personal information to the Services in accordance with this Privacy Policy, please immediately stop using the Services and notify us promptly.
4. If you have any questions about a minor under your guardianship using the Services or providing user information to the Services, please contact us promptly.

8. Policy Updates

1. Our Privacy Policy may change. We reserve the right to update or modify this Policy from time to time.

Without your explicit consent, we will not reduce the rights you are entitled to under this Policy. We will publish any changes to this Policy on this page.

We will archive previous versions of this Policy for your reference.

1. When any of the following material changes occur, we will update this Policy in due course:
   1. Material changes occur in our service model, such as the purposes of processing personal information, the types of personal information processed, or the ways in which personal information is used.
   2. Material changes occur in our ownership structure, organizational structure, or other aspects, such as changes in ownership caused by business adjustment, bankruptcy, mergers and acquisitions, etc.
   3. The main recipients of personal information sharing, transfer, or public disclosure change.
   4. Your rights regarding personal information processing and the ways in which you exercise them change materially.
   5. The responsible department, contact information, or complaint channels for personal information security change.
   6. The personal information security impact assessment report indicates that there is a high risk.
2. If this Policy is updated, we will notify you by App push notification, pop-up prompt, email/text message, or announcement on our official website. The updated content will take effect on the date specified in the foregoing notice. To ensure that you can receive notifications in a timely manner, we recommend that you promptly notify us when your contact information is updated. If you disagree with the updated content, you have the right to stop using the relevant services. If you continue to use the relevant services after the updated Policy takes effect, it means that you have fully read, understood, and accepted the updated Policy, and are willing to be bound by the updated Policy.
3. You may view this Policy in the App through the following path: Personal Center -> About Us -> Privacy Policy.

9. How to Contact Us

We have established a dedicated personal information protection team and designated a personal information protection officer. If you have any questions, complaints, or suggestions regarding this Privacy Policy or matters related to personal information protection, you may contact us through the following method: tairex@tairex.cn. We will review the issues involved as soon as possible and respond within fifteen days after receiving your comments or requests.