Privacy policy

Version: v1.0 · Effective date: 20 October 2026

JiaBenAnKang is a brand operated by Guangzhou Wanxin Space Information Technology Co., Ltd. (referred to below as "we"). We understand that family health data is sensitive personal information, and always treat "minimum necessity, explicit purpose, user control" as our basic principles for processing personal information. This policy applies to the official JiaBenAnKang website (wanxin.space) and all of its products (including the Family Health Handbook WeChat Mini Program, H5 and the operations console). The Simplified Chinese version of this policy prevails. The English and Traditional Chinese versions are translations; if there is any inconsistency, the Simplified Chinese version prevails.

1. What information we collect

Category	Details	Collection scenario
Account information	Mobile number, login credentials, nickname, avatar	Registration, login, account security verification
Family member information	Member nickname, relationship to the profile, role permissions	Creating a family, adding members, inviting family
Health record information	Records of food, drink, excretion, sleep, medical visits, medication, vital signs, menstrual cycles and so on	Entered proactively by the user or on their behalf by family with authorization
AI interaction information	Question text, uploaded images, voice input and AI replies	Using the AI health assistant, photo recognition or voice recording
Device and log information	Device model, operating system, network type, access time, operation logs	Ensuring service availability and account security
Payment and order information	Subscription plan, order status, payment result notifications	Ordering, renewal, after-sales service

Sensitive personal information: the health records, medication and menstrual-cycle records above, and images or voice uploaded during AI interactions, may constitute sensitive personal information. We process them only for specific purposes, to the extent strictly necessary, and with your separate consent, unless laws or administrative regulations provide that consent is not required.

We do not collect information unrelated to the service, and we do not read your contacts, text messages or photo library (images are obtained only for photo recognition, after you actively authorize it, and only for the images you select).

2. How we use information

Our legal bases for processing personal information include: performing the contract between you and us, obtaining your consent, performing statutory obligations, responding to public-health emergencies or urgent situations, and other circumstances permitted by laws and administrative regulations. Where separate consent is required by law, we will obtain it separately.

• Provide and maintain core features: recording, display, reminders, alerts, weekly reports and trend analysis;
• Provide intelligent capabilities: generate health summaries, analyses and suggestions based on your input, with AI-generated content and a disclaimer clearly marked;
• Family collaboration: share health data within the scope confirmed by the relevant family member, with permissions configured by the family administrator;
• Service assurance: security protection, troubleshooting, anti-fraud and quota management;
• Compliance obligations: meet audit and regulatory cooperation requirements under laws and regulations;
• Marketing communications: if we send marketing messages by SMS, WeChat service notification or similar channels, we will obtain your consent separately and provide an easy opt-out.

We do not use your health data for advertising profiles or model training. If we later use relevant data to improve models, we will inform you separately and obtain your separate consent.

3. How we share information

We do not sell your personal information, and we do not share health data for targeted advertising. We share it only in the following necessary cases:

1. Within the family: health data is shared only within the scope confirmed by the relevant family member. When an adult member joins a family, they must confirm the sharing scope themselves; a family administrator may not access, enter on behalf of, or disclose another adult member's health data without authorization. For persons without full civil capacity or with limited civil capacity, their guardian gives consent and manages the data in accordance with the law.
2. Service providers: WeChat Open Platform and WeChat Pay (login, payment, subscription messages), Alibaba Cloud (cloud storage and computing), SMS and notification, AI inference / OCR / speech recognition, customer service and ticketing, and logging and security service providers. These providers process data only on our instructions and under a signed data-processing agreement. If a provider acts as an independent personal information processor, we will inform you separately and obtain your separate consent.
3. Legal circumstances: where required by laws and regulations, or by judicial or administrative authorities through legal procedures;
4. Your authorization: other circumstances where we have obtained your explicit consent.

Institutional clients: where an institutional client processes data of its employees or service recipients in its own name, the institution is the personal information processor and we act only as its entrusted processor, following its instructions and the data-processing agreement between the parties. Except where otherwise required by law or with your separate consent, we will not provide your sensitive personal information to third parties.

4. Your rights

• Access and copy: view and export personal data in "My data". Basic access, copying and full JSON export are free of charge; CSV / PDF report export is a paid-plan entitlement and does not affect your statutory right to access and copy your personal information.
• Rectify and supplement: edit inaccurate information directly in records and profiles;
• Delete: delete records or apply to close your account. After receiving your request, we will delete or anonymize the relevant data within 15 working days, and backup data will be deleted or anonymized within 30 days;
• Withdraw consent: withdraw authorization in privacy settings. Withdrawal does not affect processing already carried out before it; after withdrawal we will stop the relevant processing, but related features may no longer be available;
• Close account: account closure is supported, with a 15-day cooling-off period. After the cooling-off period ends, account data will be deleted or anonymized within 15 working days, and backup data within 30 days;
• Rights of close relatives: where a natural person dies, their close relatives may, for their own lawful and legitimate interests, exercise the rights to access, copy, rectify and delete the deceased's personal information in accordance with the law, unless the deceased arranged otherwise during their lifetime;
• Complaints and inquiries: contact us through the details at the end of this policy; we will reply within 15 working days. You may also complain to the Cyberspace Administration, market regulation authorities or other regulators.

5. Information security

We take technical and managerial measures to protect data security, including but not limited to: transmission encryption, encrypted storage of sensitive fields, minimized access permissions, data integrity signatures, operation audit trails and account login protection (password policies and abnormal-login prevention). If a personal information security incident occurs, we will notify you promptly in accordance with the law and report it to the supervisory authorities.

6. Information storage and retention

• Storage location: our primary storage and processing activities take place within the People's Republic of China. If a specific service genuinely requires providing personal information overseas, we will complete the statutory procedures — such as a security assessment, standard contract or certification — and obtain your separate consent. Before those procedures are completed, we will not transfer your personal information overseas.
• Retention periods:
  • Account information: for the life of the account; after closure, deleted or anonymized within the periods stated in Section 4;
  • Health records: for the life of the account; after you delete a record or close your account, deleted or anonymized within the periods stated in Section 4;
  • Order and payment information: at least 3 years from completion of the transaction, unless otherwise required by law;
  • Network logs: at least 6 months;
  • AI interaction content: retained with the corresponding health record; deleted within 15 working days after deletion, with security audit logs retained for 6 months.

7. Protection of minors

Our services are primarily intended for adults. Minors under 18 should use the service with guardian consent; the personal information of minors under 14 is sensitive personal information and must be registered, managed and consented to by a guardian. Records relating to infants are created and managed by their guardian, who may access, rectify and delete them in accordance with the law. We do not carry out personalized recommendations or advertising based on minors' information.

8. Policy updates

When this policy is updated, we will publish the new version on this page and mark its effective date. For material changes involving processing purposes, information types or sharing recipients, we will obtain your consent again, for example through an in-product pop-up; where separate consent is required by law, we will obtain it again.

9. Contact us

• Operating entity: Guangzhou Wanxin Space Information Technology Co., Ltd.
• Email of the personal information protection officer: wanxinspace@163.com
• Support hotline: 19924285845
• Registered address: Room 105-256, Building 3, No. 230, Shinan Highway (Huangge Section), Huangge Town, Nansha District, Guangzhou 511455, China

---

Related pages: Website filing · Terms of service · Contact us