Security & compliance
Family health data is sensitive personal information. We implement compliance requirements as product capabilities rather than as patches applied after launch — this page fully explains how we process and protect family health data, and how you can exercise your rights.
Summary in one sentence
JiaBenAnKang treats "minimum necessity, explicit purpose, user control" as its principles for processing personal information. Through field-level encrypted storage, data integrity signatures, ownership and permission checks, an audit trail for key operations and portable data export, it builds compliance requirements into Family Health Handbook as product capabilities, and discloses its filing information in accordance with the law.
1. The full data-processing lifecycle
| Stage | What we do | Supporting capability |
|---|---|---|
| Collection | We collect only the information necessary to provide the service; health records are entered proactively by users or on their behalf with authorization | Consent records, per-family authorization |
| Storage | Sensitive fields are stored encrypted; in principle data is stored within the People's Republic of China | Field-level encryption, domestic storage |
| Use | Used for record display, reminders and alerts, trend analysis and AI comprehension; no use unrelated to the service | Purpose limitation, minimum necessity |
| Sharing | Shared only within the family's authorized scope; personal information is not sold; service providers process data under a signed data-processing agreement | Five-level role permissions, authorization-scope checks |
| Export and deletion | Full JSON export supported (CSV / PDF report export is a paid-plan entitlement); records can be deleted and accounts closed, with deletion or anonymization in accordance with the law after the cooling-off period | Data portability, account deletion |
For a more detailed list of information types and scenarios, see the Privacy policy.
2. Technical security measures
Field-level encrypted storage
Sensitive fields such as medical visits, medication and vital signs are encrypted individually before they are stored, so plaintext health data is never directly exposed at the storage layer.
Data integrity signatures
Key records carry an HMAC-SHA256 integrity signature, which can verify whether a record has been tampered with and keep the health archive authentic and traceable.
Ownership and permission checks
Every data operation is validated against record ownership, and out-of-scope requests have no effect; the permission boundary between the family administrator and the platform administrator is clearly separated.
An audit trail for operations
Key operations and feature usage leave a trace, which can be used to review security incidents and provide evidence for compliance.
Account security protection
Password strength policies, login protection and abnormal-login detection work together to reduce the risk of data leaks caused by account theft.
Domestic storage
In principle, personal information is stored within the People's Republic of China. If cross-border transfer is required, we will fulfill the corresponding obligations in accordance with the law and obtain separate consent.
3. Permission model and minimum necessity
What a user can see in Family Health Handbook is decided by the role the family administrator has configured; the product does not "open everything by default":
| Role | Data permissions |
|---|---|
| Administrator (family owner account) | Full permissions; manages members and authorization settings |
| Caregiver (family member / nanny) | Read and write health data within the authorized scope |
| Observer (adult children living elsewhere) | Read-only viewing; cannot modify records |
| Care recipient · Self-sufficient older adult | Records their own data |
| Care recipient · Infant / older adult with limited capacity | Records are entered by the caregiver |
- Data flows within the family according to role and authorization scope, and data is isolated between families;
- Platform-side operations staff do not take part in the day-to-day viewing of family health data; they access only the information necessary for operations and compliance scenarios, in line with the principle of minimum necessity;
- No entry point to another family's profile is shown on the page, preventing overreach caused by mistaken operations.
4. The compliance boundaries of AI
AI is a means for Family Health Handbook to lower the barrier to recording, not a basis for medical judgment. We therefore set three boundaries:
- Capability boundary: AI only performs health information comprehension and lifestyle suggestions; it does not provide medical diagnosis, treatment advice or prescription services;
- Presentation boundary: All AI-generated content carries an explicit disclaimer, and users can submit feedback on AI output;
- Cost and availability boundary: AI capabilities have a monthly quota by plan, and a unified gateway with quota gating, rate limiting and a fallback chain prevents abnormal calls from affecting service availability.
5. Health information and promotional boundaries
- Family Health Handbook is a tool for recording and reminding on family health data and is not a medical device; it is not used for disease diagnosis, treatment or monitoring;
- Alerts and reminders are triggered by rules set by the user and by data that has already been entered, and may be delayed or may not fire at all because of missing data, incomplete entry or network conditions; they cannot replace professional medical monitoring;
- Health-related content on this site does not constitute medical advice, and no efficacy claims are made;
- In an emergency, call 120 immediately or go to the nearest medical institution.
6. Your rights and how to exercise them
| Right | How to exercise it | Response time |
|---|---|---|
| Access and copy | View in "My data" inside the product, with full JSON export supported; CSV / PDF report export is a paid-plan entitlement | Immediate / available on export |
| Rectify and supplement | Edit directly in the record or profile | Immediate |
| Delete | A single record is deleted immediately; deleting a care-recipient profile enters a 30-day cooling-off period during which it can be restored | Immediate / after cooling-off period |
| Withdraw consent | Withdraw authorization in privacy settings (without affecting processing carried out before withdrawal) | Immediate |
| Close account | Submit a closure request; it can be restored during the cooling-off period and is deleted or anonymized in accordance with the law once the period ends | As explained inside the product |
| Inquiries and complaints | Email the personal information protection officer | Answered within 15 working days |
Email of the personal information protection officer: wanxinspace@163.com (as published on the Contact us page).
7. Regulatory basis
We process personal information in accordance with the Personal Information Protection Law of the People's Republic of China, the Data Security Law of the People's Republic of China, the Cybersecurity Law of the People's Republic of China and their supporting standards, and we have prepared a Personal Information Protection Impact Assessment (PIA) document for the family health scenario, used for internal assessment and regulatory communication.
For cybersecurity graded protection, we advance our security posture in line with the relevant national requirements and do not publicly claim any grading conclusion that has not been assessed. If institutional clients need the relevant materials, they can discuss the specific scope through Contact us.
8. Filing and entity information
This site discloses its entity information, ICP filing number and public security filing number in accordance with the law, and provides official verification channels from the Ministry of Industry and Information Technology and the Ministry of Public Security. See Filing information for details.
Need materials you can hand to compliance or legal?
Institutional clients can request a data-processing description, a permission-model description and a security capability checklist, and we will provide the corresponding materials according to your compliance requirements.