隐私政策
本译文仅为方便阅读而提供。如与英文版本有任何不一致,以英文版本为准。
本政策说明由 ORIENTPRO 开发的 DICOM Viewer: Raykin(“Raykin”)如何在 iPhone、iPad、Mac 和 Apple Watch 上,以及在适用于手机、平板电脑、Chromebook 和 Wear OS 手表的 Raykin Android 版中处理信息。我们力求简短、平实。
简要说明
- 我们不收集任何信息。Raykin 在 App Store 上的隐私标签显示为“未收集数据”。
- 在任何设备上都没有账户。在 iPhone、iPad、Mac 和 Apple Watch 上,App 中也没有广告、分析、跟踪,也没有第三方 SDK。
- Raykin 没有服务器。你的图像在你自己的设备上打开、处理和存储,我们从不会收到它们。
- 除非你选择分享或发送,否则任何内容都不会离开你的设备。
- 在 Android 上,Raykin 通过显示 Google AdMob 广告实现免费。Google 的广告软件会收集部分设备数据来展示和衡量广告,但绝不会看到你的影像。第 13 节说明了收集哪些数据以及你可以如何选择。
第 1 至 12 节介绍 iPhone、iPad、Mac 和 Apple Watch 上的 Raykin。Raykin Android 版同样把你的影像保存在设备上;在广告、备份和权限等方面有所不同之处,请见第 13 节。
1. 我们收集哪些信息
不收集任何信息。Raykin 不要求你创建账户,也不会收集个人数据、健康数据、使用数据、标识符或诊断数据,或将其发送给我们或任何其他人。它不含广告、分析或跟踪功能,也不含任何第三方软件开发工具包(SDK),我们也没有为它运营任何服务器。我们作为开发者,从不会收到你的影像或你的信息。
由于我们不接收任何内容,我们也就没有任何可出售、共享或用于广告的内容。
2. 你的影像保存在哪里
Raykin 所做的一切,从读取光盘和文件到显示图像、整理成员和就诊、搜索、测量以及生成 3D 视图,都在你的设备上完成。你的影像和备注保存在该设备上 Raykin 的私有存储空间中。
你设备自身的 iCloud 或访达备份会包含这部分存储内容,除非你在 Raykin 的“设置” › “导入与存储”中开启了“不将影像纳入设备备份”。是否开启由你决定。这些备份由你的设备和 Apple 创建,而非由我们创建;iCloud 适用 Apple 的隐私政策。
3. 在你的设备之间移动影像
“近距离传输”通过你的本地网络,在你自己的设备之间直接发送影像。连接采用端到端加密,并通过二维码或 27 位数字代码配对。任何内容都不会经过互联网,也不会到达我们这里。
Raykin 归档是由你创建的备份文件,使用你选择的密码短语进行 AES-256 加密。我们永远看不到该密码短语,也无法恢复它,请妥善保管。
4. 医院二维码和网站链接
当你扫描医院二维码或打开医院网站链接时,Raykin 只会在 App 内打开该医院的网页。你在那里下载的任何内容都会直接存入你的设备,Raykin 不会将任何内容发送到其他地方。医院网站适用该医院自己的隐私政策。
5. 当你分享时
只有在你分享或导出影像时(例如通过隔空投送、电子邮件或 U 盘),影像才会离开你的设备。去向由你决定,从那时起,适用你所使用的 App 或服务的隐私条款。
“隐私清除分享”(Raykin Pro)会生成一份副本,移除姓名、ID、出生日期和医院信息并偏移日期,同时标出印在图像上的文字,方便你遮盖。发送前请检查你要分享的内容。你的原始文件绝不会被更改。
6. 购买
Raykin Pro 通过 Apple 的 App Store 购买。付款由 Apple 处理,我们不会收到任何付款信息。该交易适用 Apple 的隐私政策。
7. 权限
所有权限均为可选。Raykin 只会在你首次使用需要某项权限的功能时请求该权限,你可以随时在设备的“设置”中更改你的选择。
- 相机 — 用于扫描医院二维码、拍摄旧胶片和扫描纸质报告。
- 本地网络 — 用于查找你自己的设备,以进行近距离传输。
- 面容 ID — 用于锁定 App。
- 通知 — 用于复查提醒。
- 日历(仅添加事件) — 用于添加你选择的复查日程。Raykin 无法读取你的日历。
- 照片(仅添加) — 用于在你要求时存储导出的图像。Raykin 无法查看你的照片图库。
8. 小组件、Apple Watch 和聚焦搜索
小组件、锁定屏幕和 Apple Watch 会隐藏姓名和检查名称,除非你在“设置” › “隐私与锁定”中开启“在锁定屏幕、Apple Watch 和小组件上显示详细信息”。专注模式过滤条件也可以隐藏详细信息。只有在你开启相关设置后,影像才会出现在聚焦搜索中。
9. 锁定与屏幕隐私
你可以使用面容 ID 或密码锁定 Raykin,也可以单独锁定个别成员。屏幕正在录制时,Raykin 会显示警告横幅,并可在 App 切换器中隐藏其内容。“给医生看”会让屏幕只显示一次就诊,退出时需要面容 ID 或密码。
10. 删除你的数据
“设置” › “导入与存储”中的“删除全部内容”会从设备上抹掉你的 Raykin 资料库。你导出或分享的文件,以及你创建的 Raykin 归档,都是独立的副本;如不再需要,请自行删除。
11. 你在 GDPR、CCPA 及类似法律下的权利
根据你所在的地区,欧盟和英国《通用数据保护条例》(GDPR)以及《加州消费者隐私法案》(CCPA)等法律赋予你对个人数据的权利,包括访问、更正、删除、获取副本和反对使用这些数据的权利,以及拒绝出售这些数据的权利。
我们尊重这些权利。由于我们不持有任何关于你的数据,我们这边没有可供访问、更正或删除的内容。你的信息只存在于你的设备上,由你直接掌控:你可以查看、导出(例如导出为 Raykin 归档),或通过“删除全部内容”将其抹掉。我们不会出售或共享个人信息。如有疑问或请求,请写信给我们,我们会回复。
12. 儿童
Raykin 并非面向 13 岁以下的儿童。父母和监护人可以将孩子的影像作为家庭资料库的一部分保存在 Raykin 中。由于 Raykin 不收集任何信息,因此也不会收集儿童的任何信息。
13. Raykin Android 版:广告与 Google 服务
This section covers Raykin for Android (package com.orientpro.dicomviewer, from Google Play) on phones, tablets, foldables, Chromebooks and desktop windows with Android 10 or later, on Wear OS watches, and in its home-screen widgets. It does not apply to Raykin on iPhone, iPad, Mac and Apple Watch, which shows no ads.
Your scans stay on your device
As on Apple devices, there is no account and no server of ours. Medical images (DICOM files, photos of films and scanned reports) and the people, visits, follow-ups, questions, notes and Imaging Notes you enter are stored only in Raykin’s private storage on your device. We never receive, sell or share them.
Backup. Raykin turns Android backup off for its data, so neither Android’s cloud backup to your Google Account nor the device-to-device transfer when you set up a new phone copies your Raykin library. To move it to another device, use Nearby Transfer or a Raykin Archive, described below.
When data leaves your device
Only when you choose to:
- Share, Clean Share and Export: files go to the app or person you pick in the Android share sheet.
- Nearby Transfer: directly between your own Android devices over Bluetooth and Wi-Fi, using Google Nearby Connections. The transfer is end-to-end encrypted with a key derived from the pairing code, and nothing goes through the internet or any server.
- Raykin Archive: an encrypted file protected by your passphrase, saved where you choose.
- Wear OS: a privacy-safe summary (labels, follow-up dates and the key images you reviewed) is sent to your paired watch through Google’s Wearable Data Layer. Names and exam titles are included only if you turn on “Show details on widgets & watch”.
- Hospital links and QR codes: Raykin downloads the file the link points to from the hospital’s server. Other pages open in your browser, and the hospital’s own privacy policy applies to them.
QR codes and text recognition (Google ML Kit)
Scanning QR codes and reading the text of paper reports use Google ML Kit, which runs on your device with models provided by Google Play services. Your images and the text read from them are not sent to Google or to us for this.
Advertising (Google AdMob)
Raykin for Android is free because it shows ads served by Google AdMob (the Google Mobile Ads SDK): native ads in some lists, full-screen ads at some natural breaks, an ad when you reopen the app, and rewarded ads only when you choose to watch them to unlock a feature. Ads never appear on top of your images, and ads never see your scans or anything you type.
To show, limit, measure and protect these ads, Google’s SDK collects and shares with Google:
- Device identifiers: the Android advertising ID;
- Approximate location, estimated from your IP address (not GPS);
- App interactions, such as ad views and taps;
- Diagnostics: information about how the app and the ads SDK perform.
This data is sent encrypted. Google uses it for advertising, analytics and fraud prevention, as described in How Google uses information from sites or apps that use its services and the Google Privacy Policy. Google’s own disclosure for the SDK: Google Mobile Ads SDK data disclosure.
What Google Play’s Data safety section shows
All of the data below is collected by Google’s Mobile Ads SDK, not by us, and is encrypted in transit:
| Data type | Shared | Purposes |
|---|---|---|
| Approximate location (estimated from the IP address) | Yes | Advertising or marketing; analytics; fraud prevention, security and compliance |
| App interactions (such as ad views and taps) | Yes | Advertising or marketing; analytics; fraud prevention, security and compliance |
| Diagnostics | Yes | Advertising or marketing; analytics; fraud prevention, security and compliance |
| Device or other IDs (advertising ID) | Yes | Advertising or marketing; analytics; fraud prevention, security and compliance |
Not collected: your scans, photos and files, health information, the names and notes you enter, contacts, calendar, precise location, messages and financial information. There is no account to create.
Your ad choices
- Consent (European Economic Area, United Kingdom and Switzerland): before any ad is requested, Raykin shows Google’s consent form (Google User Messaging Platform). You can accept or refuse personalised ads, and change your choice at any time in Settings › Privacy choices. If you refuse, Google may still show non-personalised ads, which use less data.
- Advertising ID: you can reset or delete it in your Android settings (Settings › Privacy › Ads, or Settings › Google › Ads, depending on the device). Once it is deleted, apps receive no advertising ID.
- Ad content is limited to Google’s PG rating.
Rewarded unlocks instead of purchases
The Android app has no in-app purchases. Then & Now, Pro Tools, Clean Share, more family members and Smart Search unlock for 24 hours, one feature at a time, when you choose to watch two short rewarded ads. A Raykin Pro purchase on the App Store does not carry over to Android.
Permissions on Android
Raykin asks for each permission only when you use the feature that needs it, and you can change your answer at any time in Android’s settings.
- Camera: to scan QR codes, photograph films and scan paper reports; asked when you open the scanner.
- Notifications: for follow-up reminders and to show progress.
- Nearby devices, Bluetooth and Wi-Fi: for Nearby Transfer; asked when you start a transfer. On Android 12 and earlier, Android requires the location permission to find nearby devices; Raykin asks for it only when you start a transfer and never reads your location.
- Biometrics: to lock the app or a person with your device’s fingerprint, face or screen lock.
- Internet: for ads and for downloads from hospital links.
Raykin does not ask for your contacts, calendar or photo library. Photos you pick are read only through the Android photo picker, which gives the app just the items you select.
Children
Raykin for Android is intended for adults managing their own and their family’s medical images. It is not directed to children under 13, and we do not knowingly collect personal information from them.
Deleting your data on Android
Settings › Import & Storage › Delete Everything removes all scans and records from the device, and uninstalling Raykin removes them too. There is no account to delete. Data that Google collects for ads is kept and deleted under Google’s policies; to stop personalised ads, use Settings › Privacy choices or delete your advertising ID.
Raykin for Android, like Raykin on Apple devices, is for viewing and organising images only. It is not a medical device and is not intended for diagnosis or treatment.
14. 本政策的变更
如本政策发生变更,我们会在本页面发布新版本,注明新的生效日期,并清楚说明变更内容。
15. 联系我们
对隐私有疑问,或有关于你的数据的请求?请写信至 info@orlproducts.com。我们使用英语或越南语回复。
ORIENTPRO · orlproducts.com