English 简体中文 繁體中文

Update date: December 8th, 2022

Effective date: December 8th, 2022

Privacy Policy Update Notification:

This update mainly includes refining the scenarios in which we collect, use, and disclose your personal information, and clarifying the methods for exercising your personal rights.

Privacy Policy

Privacy Policy on Personal Information Protection

MedSci Healthcare Holdings Ltd. adopts this privacy policy on the use of “MedSci Platform” (including MedSci.cn and its subpages introducing information, MedSci website (www.medsci.cn), MedSci website (medsciediting.com), MedSci Medical App, MedSci Doctor APP, 3D human body model APP, and mini-programs, WeChat official account that partially or fully implement the functions of the above platforms, and information submitted through the “Investor Relations” page). In order to ensure the confidentiality of all information provided by you, MedSci adopts the following policy on information protection:

  1. The scope of information collected by this platform is limited to personal information necessary for MedSci to provide you with services and personal information that you have authorized MedSci to process and agreed to.
  2. MedSci makes every effort to ensure that your personal information records are accurate and timely.
  3. The MedSci platform has a strict security system to prevent unauthorized access to and disclosure of your personal information by anyone, including MedSci staff.
  4. Regardless of whether they have obtained permission from MedSci to obtain your personal information, any third party must strictly comply with confidentiality obligations.

Protecting your privacy is of paramount importance to us. We are committed to maintaining your trust in us, adhering to principles, and fully protecting the security and reliability of your personal information. Therefore, MedSci has developed this privacy policy to explain to you the scope and rules for collecting and using your personal information. Before using the products or services provided by MedSci, please read this privacy policy carefully, especially the bold and underlined parts. You agree that you are over eighteen and will use our products or services only after fully understanding and accepting all the terms and contents of this privacy policy; if you are under eighteen, please stop using our services immediately. Once you start using the products or services provided by MedSci, it means that you have fully understood and agreed to this privacy statement. If you do not agree with the content of this policy, it may result in your inability to use the products or services provided by MedSci normally or to achieve the intended effect of MedSci’s products or services. You should stop using the products or services provided by MedSci immediately.

The following table provides an overview of the personal information and processing activities handled by the MedSci platform for your reference:

Scenario/Business Function Personal Information Category Purpose
Registration Login Mobile phone number, verification code; account, password User registration to create an account and login
Avatar, nickname, personal profile Used to improve online identity
Third-party account login Third-party account openid，nickname, and avatar Used in scenarios where third-party accounts are authorized to log in
Medical industry professional user certification Name, identity, mobile phone number, hospital/school/ unit, department, title, province/city/district, practice qualification certificate/practicing physician certificate/work permit/card/student ID Used to complete professional certification in the medical industry
Publishing content Avatar, nickname, and published content (including text, pictures, videos, etc.) Used to display user comments, live chat, and other content published by users
Earn points User check-in, lottery, and behavior information that generates points Users can exchange goods in the points mall based on the points earned
Order information Contact information, address (shipping address), contact phone number, order transaction information Used for physical product delivery services after placing an order in the points mall.
Search and Browsing User behavior information such as clicks, browsing, following, liking, bookmarking, sharing, searching, etc., generated during the user’s visit and use Used to provide users with product/service information browsing and search services.
Personalized Recommendations User authentication information (including user’s occupation, department), service logs when accessing or using the MedSci platform website or app client. Device-related information used by the user, including device model, operating system version, device settings, MAC address, IMSI, IMEI, BSSID, SSID, IDFA and other device identifiers, device environment, mobile application list, etc. Location-related information of the device. Used to provide personalized content and services to users.
Establishing Service Agreements User’s personal information such as name, contact information, department, job title, etc. Enter into a service contract with the user based on their choice. Provide academic services to the user according to their needs.
Payment Payment information such as payment time, payment amount, payment channel, etc. Helps users complete transactions smoothly.
Providing Academic Services: User’s service requirements and academic information/content submitted by the user.
Obtaining MAC Address MAC address Used to generate a unique identifier for you to ensure the secure operation of the application and service, conduct security risk control, statistics and service push, and to implement functions such as one-click login and case uploading.
Location Function GPS location Used by MedSci to provide auxiliary identity authentication, conference check-in, record and search for crash user information, recommend service or activity information in your area, and assist in collecting shipping addresses for points mall product exchanges.
During Use Device information, log information, network information. Used to ensure user security.
Additional Functions Camera, album, microphone, system notifications l   Camera: Scan code, take photos, shoot videos.

l   Album: Upload photos and videos from the album.

l   Microphone: Shoot video and record audio.

l   System notifications: Proactively push information to users.

l   The above additional functions are only requested and asked for in specific scenarios, and if the user refuses, it will not affect the use of basic functions.

This policy will help you understand the following:

  1. Scope of application
  2. How we collect and use your personal information
  3. How we share, transfer, and disclose your personal information
  4. Storage of personal information
  5. How we protect your personal information
  6. How we use cookies (web trackers) and similar technologies
  7. Third-party SDK
  8. Protection of minors’ privacy rights
  9. Your personal rights
  10. Privacy policy updates
  11. How to contact us
  1. Scope of application
  • This privacy policy applies to the products and services provided by MedSci Platform to you, as well as MedSci Platform’s products or services that you apply for through third-party network platforms.
  • You may also access the MedSci Platform through links on other websites. We recommend that you review the privacy policy of such websites to understand how they handle your personal information. Such websites are independently responsible for the collection, use, storage, sharing, transfer, and public disclosure of your personal information.
  • This privacy policy does not apply to other third parties that provide non-MedSci products or services to you. If you use such third-party services, their privacy policies apply. This privacy policy does not apply to MedSci’s products or services that have separately set their own privacy policies. Once you start using MedSci Platform’s products or services, it means that you fully understand and agree to this policy.
  1. How we collect and use your personal information
    • Ways in which we collect your personal information:
  • Information provided by you voluntarily: Information that you provide voluntarily on product or service pages, when applying for a product or service, participating in online community discussions, making complaints or inquiries, personal information authorized by you for MedSci to collect, information provided to us when contacting MedSci for our services, and transaction and activity information generated by you during your use of our services.
  • Information collected by us proactively: During your use of the MedSci platform and related services, we collect information sent to us by your computer, mobile phone, and other access devices.
  • Information obtained from other sources: With your consent, we may also obtain your relevant information from MedSci partners and third-party organizations that legally retain your information authorized by you.
    • How we collect and use your personal information:

MedSci only collects and uses your personal information based on the principles of legality, legitimacy, and necessity for the following purposes stated in this privacy policy:

  • To help you become a registered user of the MedSci platform and complete the login process.

To become a registered user of the MedSci platform, you need to provide your mobile phone number for account registration and set an account name and password. You can authorize third parties (including WeChat, QQ, Apple ID) to use the registered account to log in to the MedSci platform, and we will obtain your nickname, avatar, and QQ openid or WeChat openid on that third-party platform according to your authorization, subject to the content authorized by you. We may use the above information you provide to verify your identity by sending SMS verification codes, ensuring that we provide services to you personally. If you only need to use basic services such as browsing and searching, you do not need to become a registered user of MedSci. If you enter our platform through WeChat and log in/register, WeChat will provide us with your WeChat account’s OpenID, which we will bind to your account. The next time you enter our platform through WeChat, we will automatically recognize your identity based on the OpenID provided by WeChat and provide you with automatic login services.

We collect and use your above information to meet the requirements of relevant laws and regulations for real identity authentication. If you do not provide such information, you may not be able to use our services normally.

You can also choose to upload your profile picture and complete your personal information, such as filling in your real name, gender, identity, job title, company, department, city of residence, address, expertise, email, WeChat, QQ, postal code, etc., to complete professional identity authentication and obtain exclusive privileges for certified users. If you do not provide such information, it will not affect your use of the MedSci platform’s services, but you may not be able to use some services provided to certified users.

  • Publish and collect medical research surveys on your behalf.

If you choose to participate in a research project published by the commissioning party through the MedSci website or the MedSci medical mobile application research module, including but not limited to completing research surveys, we will collect research participants’ attitudes, concepts, knowledge, and other personal information regarding medical research and clinical medical services as the commissioned party on behalf of the commissioning party’s research project initiator. The research projects published by the MedSci website’s medical research module will not collect case or patient personal information from you. We promise to promptly deliver the collected research questionnaires to the project commissioning party after the research is completed. In addition to assisting the project commissioning party in collecting research questionnaires for purposes explicitly stated at the beginning of the research questionnaire for participants, including but not limited to medical research/medical teaching/medical and health services/business promotion, we promise not to use the above personal information for any purpose without the consent of the participants.

We may also initiate research projects, but we will not actively collect personal information from research participants. We only perform statistical analysis on the collected research questionnaire data to understand research participants’ attitudes, concepts, and knowledge regarding medical research or clinical medical services. The questionnaire statistics data and analysis results do not contain any personal information.

  • Publish clinical trial information to you and collect your personal information after you apply to participate.

At the request of our partner, we will publish clinical trial projects on the MedSci website cloud platform/clinical research platform-project plaza or the MedSci medical mobile application and collect personal information of the applicant/participant according to the partner’s instructions and requirements to verify if the applicant/participant meets the selection criteria and does not satisfy any exclusion criteria, and to verify the identity information of the applicant/participant. We promise to collect personal information only for the purpose of recruiting patients for clinical medical trials and conducting preliminary eligibility reviews of participants on behalf of our partner. MedSci will not use this information for any other purpose, and will provide the personal information of the applicant/participant along with the preliminary eligibility review results to the research center/clinical trial institution according to the partner’s instructions. After the clinical trial project is completed, we will delete your personal information backup. For doctor users who have completed MedSci physician certification to participate in clinical medical trials and have reserved personal information, we will save your personal information during your use of MedSci products or services and provide identity verification services for you to participate in multiple clinical medical trial projects in the future. You agree that we will provide your identity information to the research center/clinical trial institution according to their instructions and requirements to fulfill project management requirements.

  • Provide you with security operation support.

To ensure the safe operation of our applications and services, we will collect your device model, device name, unique device identifier, browser type and settings, language settings, operating system and application version, login IP address, network access method, network quality data, mobile network information (including operator name), and product version number in order to identify your local identification code and complete security risk control.

We may use or integrate your user information, transaction information, device information, relevant network logs, and information obtained with your authorization or according to law to comprehensively assess your account security risks, perform identity verification, detect and prevent security incidents, and take necessary records, audits, analysis, and disposal measures in accordance with the law.

  1. To ensure the safe operation of the software and services, we will embed external third-party partner SDKs. These external third-party partners will provide the SDK to collect your device information (including device model, unique device identifier, operating system version, network device hardware, MAC address, and other software and hardware feature information), location information (including IP address, GPS location, and sensor information such as WLAN access points, Bluetooth, and base stations that can provide relevant information), network access method, type, status, network quality data, operation, usage, service logs, and collect your MAC address information in the background/silent state. Please refer to the third-party SDK directory below for specific purposes, methods, and scope.
Third-Party Company Product/ Service Personal Information Scenario Purpose of Use Sharing Method Third-Party Link
China Mobile Internet Co., Ltd. China Mobile & Tencent Cloud One-Click Login Device information (IMSI), device brand, operator information Used every time a user selects one-click login Provide users with one-click login based on user selection SDK local collection Official website link: https://cloud.tencent.com/ Privacy policy link: https://cloud.tencent.com/document/product/1415/65372
China United Network Communications Co., Ltd. China Unicom & Tencent Cloud One-Click Login Device brand, operator information Used every time a user selects one-click login Provide users with one-click login based on user selection SDK local collection Official website link: https://cloud.tencent.com/ Privacy policy link: https://cloud.tencent.com/document/product/1415/65372
China Telecommunications Corporation China Telecom & Tencent Cloud One-Click Login Device information, device brand, operator information, network information, application information (application name, application version number) Used every time a user selects one-click login Provide users with one-click login based on user selection SDK local collection Official website link: https://cloud.tencent.com/ Privacy policy link: https://cloud.tencent.com/document/product/1415/65372
Tencent Computer Systems (Shenzhen) Co., Ltd. WeChat Device information (IMEI, IMSI, MAC address, Android ID), network information, WeChat account information Used every time a user selects third-party account login Provide users with third-party account login based on user selection SDK local collection Official website link: https://open.weixin.qq.com/ Privacy policy link: https://weixin.qq.com/cgi-bin/readtemplate?lang=en&t=weixin_agreement&s=privacy
Tencent Computer Systems (Shenzhen) Co., Ltd. QQ Network information, QQ account information Used every time a user selects third-party account login Provide users with third-party account login based on user selection SDK local collection Official website link: https://connect.qq.com/index.html Privacy policy link: https://docs.qq.com/doc/DQVFLeGd4Ym1oTm5P?pub=1&dver=2.1.27013722
Huawei Technologies Co., Ltd. Huawei Requires permission to view WLAN connections, obtain approximate location, obtain precise location, read external storage, read phone status and identity, write external storage, and retrieve running apps. The personal information collected includes personal commonly used device information (network IP address, MAC address, device model, operating system version), and personal location information. Used every time a notification message is pushed to the user Provide users with “PUSH push” SDK local collection Official website link: https://www.huawei.com/ Privacy policy link: https://www.huawei.com/en/privacy-policy
Xiaomi Corporation Xiaomi Requires permission to read external storage, read phone status and identity, write external storage, and retrieve running apps. The personal information collected includes personal commonly used device information (network IP address, MAC address, device model, operating system version). Used every time a notification message is pushed to the user Provide users with “PUSH push” SDK local collection Official website link: https://dev.mi.com/console/appservice/push.html Privacy policy link: https://dev.mi.com/console/doc/detail?pId=1822
Vivo Mobile Communications Co., Ltd. VIVO requires permissions to read and write to external storage, and to retrieve running applications. The personal information collected includes commonly used device information (network IP address, MAC address, device model, and operating system version) and is used every time a notification message is pushed to the user. The company provides “PUSH push” services to users SDK collection Official website link: https://dev.vivo.com.cn/documentCenter/doc/366#w1-08185430Privacy policy link: https://www.vivo.com.cn/about-vivo/privacy-policy
OPPO Guangdong Mobile Communications Co., Ltd. OPPO requires permissions to read and write to external storage, and to retrieve running applications. The personal information collected includes commonly used device information (network IP address, MAC address, device model, and operating system version) and is used every time a notification message is pushed to the user. The company provides “PUSH push” services to users through native SDK SDK collection Official website link: https://open.oppomobile.com/wiki/doc#id=10704 Privacy policy link: https://www.oppo.com/cn/service/help/640?id=640&name=%E6%9C%8D%E5%8A%A1%E6%94%BF%E7%AD%96&hdscreen=1
Beijing RuiXunLingTong Technology Co., Ltd. UMENG requires permissions to view WLAN connections, obtain approximate and accurate location information, read and write to external storage, read phone status and identity, and retrieve running applications. every time a notification message is pushed to the user. The company provides “PUSH push” services to users through native SDK SDK collection Official website link: https://www.umeng.com/ Privacy policy link: https://www.umeng.com/policy
Zhuhai Meizu Communication Equipment Co., Ltd. Meizu requires permissions to view WLAN connections, obtain approximate and accurate location information, read and write to external storage, read phone status and identity, and retrieve running applications. The personal information collected includes commonly used device information (network IP address, MAC address, device model, and operating system version), and personal location information. every time a notification message is pushed to the user. The company provides “PUSH push” services to users through native SDK SDK collection Official website link: https://open.flyme.cn/open-web/views/push.html Privacy policy link: https://i.flyme.cn/privacy?lang=zh_CN
Beijing Yishu Technology Co., Ltd. GROWINGIO requires permissions to view WLAN connections, read phone status and identity, and retrieve running applications. The personal information collected includes commonly used device information. The company uses this information to better understand personal information collection usage rules and to perform statistical analysis. The company provides “PUSH push” services to users through native SDK SDK collection Official website link: https://www.growingio.com/ Privacy policy link: https://accounts.growingio.com/privacy
Alipay (China) Network Technology Co., Ltd. Alipay Device information (IMEI, IMSI, AndroidID, MAC address, BSSID, hardware serial number, ICCID), location information, network type, device model, device brand, carrier information, sensor list, application information. Used for third-party payments. Provides third-party payment functions to users based on their choices. SDK native collection Official website link: https://open.alipay.com/. Privacy policy link: https://render.alipay.com/p/c/k2cx0tg8.
Tencent Computer Systems (Shenzhen) Co., Ltd. WeChat Device information (IMEI, IMSI, MAC address, AndroidID), network information, WeChat account information. Used for information sharing by users. Provides content sharing to third-party platforms based on users’ choices. SDK native collection. Official website link: https://open.weixin.qq.com/. Privacy policy link: https://weixin.qq.com/cgi-bin/readtemplate?lang=zh_CN&t=weixin_agreement&s=privacy.
Tencent Computer Systems (Shenzhen) Co., Ltd. QQ Network information, QQ account information. Used for sharing content to third-party platforms. Provides content sharing to third-party platforms based on users’ choices. SDK native collection Official website link: https://connect.qq.com/index.html. Privacy policy link: https://docs.qq.com/doc/DQVFLeGd4Ym1oTm5P?pub=1&dver=2.1.27013722.
Tencent Cloud Live Tencent device information, device model, network information. Used when users choose live streaming services. Provides users with the ability to watch live streams and conduct audio and video calls based on their choices SDK native collection. Official website link: https://cloud.tencent.com/document/product/647. Privacy policy link: https://cloud.tencent.com/document/product/454/61839.

.

  1. In order to prevent malicious programs and ensure secure operation, we will collect information on installed applications or running processes, the overall operation, usage and frequency of application programs, application crashes, overall installation and usage, performance data, and application sources.
  2. We may use your account information, transaction information, device information, service log information, as well as information obtained by our affiliates and partners with your authorization or as permitted by law, to determine account security, perform identity verification, detect and prevent security incidents, and take necessary recording, auditing, analysis, and disposal measures.
  3. About Umeng

SDK name: Umeng+SDK

Service type: sharing

Type of personal information collected: device information (IMEI/Mac/android ID/IDFA/OPENUDID/GUID/SIM card IMSI)

Our product integrates Umeng+SDK, which needs to collect device identifiers (IMEI/Mac/android ID/IDFA/OPENUDID/GUID and SIM card IMSI information) to uniquely identify devices for the purpose of sharing messages to the target device.

Privacy policy link: https://www.umeng.com/page/policy

SDK name: Umeng+SDK

Service type: push notifications

Type of personal information collected: device information (IMEI/Mac/android ID/IDFA/OPENUDID/GUID/SIM card IMSI)

We use merge chain technology for technical push notifications. When multiple APP push chains are active on a device at the same time, we randomly merge them into one chain to save power and traffic for you. Therefore, we need to obtain the application list information. At the same time, we provide intelligent push functions, recommending push content that is more suitable for your needs based on this information, reducing useless push information that may disturb your users.

Privacy policy link: https://www.umeng.com/page/policy

SDK name: Umeng+SDK

Service type: statistics

Type of personal information collected: device information (IMEI/Mac/android ID/IDFA/OPENUDID/GUID/SIM card IMSI)

Our product integrates Umeng+SDK, which needs to collect your device’s Mac address, unique device identifier (IMEI/android ID/IDFA/OPENUDID/GUID and SIM card IMSI information) to provide statistical analysis services.

Privacy policy link: https://www.umeng.com/page/policy

SDK name: Sina Weibo SDK

Service type: sharing

Type of personal information collected: device information (IMEI/Mac/android ID/IDFA/OPENUDID/GUID/SIM card IMSI)

Our product integrates Sina Weibo SDK, which needs to collect device identifiers (IMEI/Mac/android ID/IDFA/OPENUDID/GUID and SIM card IMSI information) to uniquely identify devices for the purpose of sharing messages to the target device.

SDK name: Tencent Browser

Service type: sharing Type of personal information collected: device information (IMEI/Mac/android ID/IDFA/OPENUDID/GUID/SIM card IMSI)

Our product integrates Tencent Browser, which needs to collect device identifiers (IMEI/Mac/android ID/IDFA/OPENUDID/GUID and SIM card IMSI information) to uniquely identify devices for the purpose of sharing messages to the target device.

SDK name: iFlytek

Service type: voice input

Type of personal information collected: user’s voice Our product integrates iFlytek, which needs to collect the user’s voice and transcribe it into text for the purpose of facilitating the user to fill in medical records.

SDK name: Bugly

Service type: error information collection

Type of personal information collected: none Our product integrates Bugly, which needs to collect software crash error information

  1. Providing personalized recommendation services

In order to show and recommend medical information, live broadcasts, courses, conferences, events, research projects, and other related products and services that you may need, and to enhance your service experience, we will use automated decision-making technology. In this process, we will use the following information from you: your identity authentication information on the MedSci platform website or app client (including your profession and the department you have chosen), your service logs when accessing or using the MedSci platform website or app client, including browsing records, click-through records, search query records, collections, transactions, after-sales, attention sharing information, and published information, as well as IP address, browser type, telecommunications operator, language used, access date and time. We will also use device-related information, including device model, operating system version, device settings, MAC address, IMSI, IMEI, BSSID, SSID, IDFA and other device identifiers, and device environment.

Based on your personal information, we will extract your user profile and preference characteristics and recommend information such as products or services that you may be interested in, improving your efficiency and experience.

If you are not interested in personalized recommendations of medical information, products, or services, or do not want us to provide personalized recommendation services, you can turn off the personalized recommendation service by clicking the “My-Settings-Personalized Recommendation” button.

  1. Providing information release, communication, and interaction services

When you post comments on articles, clinical guidelines, public courses, boutique courses, journals, medical formulas, knowledge points, and fund comment areas in the MedSci website and MedSci medical app, (if you choose to comment on a corresponding topic, the content of the comment will be synchronized to the MedSci medical app topic plaza) to ensure that the content you post can be displayed normally and to check whether the content complies with national requirements and does not involve illegal information, we will collect the graphics, comments, videos, and audios that you publish for the purpose of realizing the information release function.

To ensure the normal use of functions such as posting comments, copying comments, collecting, following, and liking, we will collect your attention, comments, collections, likes, shares, clipboard information, etc., for the purpose of realizing interactive communication.

  1. Providing academic services for you

When you apply for our academic services through the MedSci platform, we will collect your personal information such as your name, contact information, department, and professional title to enter into a service contract with you.

In order to provide academic services for you, we will collect your service requirements and academic information/content submitted by you, and according to your commission, refine, analyze or provide you with other customized academic services (specifically based on the academic services you actually purchased). At the same time, we may provide the academic information/content you provided to medical experts who cooperate with us or whom we hire to provide you with corresponding services.

Apart from entering into a service contract with you and providing you with the agreed academic services, we will not use the aforementioned information you provide for any other purposes.

  1. Providing payment and withdrawal services for your purchases

You can purchase paid services such as virtual goods, paid courses, or membership services on Mays. During the payment process, we may collect your user ID information, third-party payment account (such as Alipay account, WeChat account), mobile phone number, transaction amount, order time, order number, payment method, and payment status to ensure transaction security and help you complete transactions normally.

  1. Providing you with the function of redeeming goods in the points mall

You can redeem physical goods in the Mays points mall. To help you complete transactions normally, we will collect your personal information, including name, address, and contact phone number, and provide the recipient’s name, shipping address, and contact information you provide to the logistics service provider.

  1. Provide customer service and facilitate your participation in events organized or held by us.

When you contact our customer service, in order to save the problems you have feedbacked and resolve the issues you encountered while using our products, we will keep a record of the problems you have feedbacked, including account information (nickname, QQ number, WeChat ID) and feedback information (images, text). To ensure the security of your account, our customer service will verify your identity using your account information. When you need customer service related to your order information, we will check your order information. You may also provide other information beyond the above information when communicating with our customer service staff, such as when you request us to change your delivery address, contact person or contact phone number.

When you contact us, we may save your communication/call records and feedback information content, as well as the contact information you left, in order to contact you or help you solve problems, and record the processing plan and results of the relevant issues.

In addition, we may also organize some online or offline communication activities. If you wish to participate in such activities, you need to provide us with some personal information, which shall be subject to the personal information required on the activity page at the time. We will use the information you provide for the organization and hosting of the event, contacting you regarding the specific details of the event, and sending you prizes (if any).

  1. Device Permission Access

To ensure the normal implementation of relevant business functions, we need to call the corresponding necessary permissions based on specific usage scenarios and ask for your permission with a pop-up window before the call. Please refer to the following table for specific permission call instructions for IOS:

[Note: The table for IOS permission list was not provided in the original text]

Device Permissions Purpose of Use Inquiry Ability to Close
IDFA (iOS 14 and above) Used to protect user account, transaction security and receive personalized ads Popup inquiry when the client is opened for the first time System can be turned off
Read phone status and mobile network information Allow apps to obtain local number and phone call status. Mainly used for one-click login SDK to determine operator information User agrees by checking a box during one-click login System can be turned off
Modify or delete content on the storage card Allow apps to modify or delete photos, media content and files on the storage card Inquire before the user uploads content System can be turned off
Read content on the storage card Allow apps to read photos, media content and files on the storage card Inquire before the user uploads content System can be turned off
Record audio Allow apps to record audio Inquire when the user takes a photo, scans a code, or uploads a picture System can be turned off
Camera Allow apps to take photos and videos Inquire when the user takes a photo, scans a code, or uploads a picture System can be turned off
Make phone calls Allow apps to automatically make phone calls Inquire when making a phone call System can be turned off
Access precise location information (using GPS and network for positioning) Allow apps to obtain location information based on GPS, base stations, Wi-Fi, and other network sources. This may increase power consumption. Inquire when using conference sign-in System can be turned off
Access approximate location information (using network for positioning) Allow apps to obtain location information based on base stations, Wi-Fi, and other network sources. Inquire when using conference sign-in System can be turned off
Get additional location information provider commands Allow apps to access additional location provider commands. This permission allows the app to interfere with the operation of GPS or other location sources. Inquire when using conference sign-in System can be turned off

Android Permission List

Device Permissions Purpose Ask for Permission Can be Disabled
Read phone status and identity Allows app to retrieve phone number and call status. Mainly used by one-click login SDK to determine carrier information. User consents during one-click login Can be disabled by system
Modify or delete contents of SD card Allows app to modify or delete photos, media content, and files on SD card. User is prompted before uploading content Can be disabled by system
Read contents of SD card Allows app to read photos, media content, and files on SD card. User is prompted before uploading content Can be disabled by system
Record audio Allows app to record audio. User initiates taking photos, scanning codes, or uploading pictures. Prompt user for permission Can be disabled by system
Camera Allows app to take photos and videos. User initiates taking photos, scanning codes, or uploading pictures. Prompt user for permission Can be disabled by system
Make phone calls Allows app to automatically make phone calls. Prompt user for permission when making calls Can be disabled by system
Access precise location information (using GPS and network for positioning) Allows app to retrieve location information based on GPS, base station, Wi-Fi, and other network sources. This may increase power consumption. Prompt user for permission when using meeting check-in. Can be disabled by system

You can choose to turn off some or all permissions in the device’s settings, which may result in certain business functions not being implemented or not achieving the expected effect.

  1. Fulfill legal obligations in accordance with laws, regulations, and regulatory requirements

As you know, MEDSCI is a legally established medical communication solution internet platform company and needs to comply with internet and medical regulations, such as customer identification and anti-money laundering obligations, real-name system management obligations, etc. These legal obligations require the collection of your personal identity information (if necessary).

You should know that depending on the different services you require and the requirements of regulatory authorities, the type of information we collect is subject to the product or service application page display.

  1. How do we share, transfer, and disclose your personal information?
  • Sharing
  1. Share your personal information with regulatory departments and judicial authorities in accordance with the law.

Sharing under statutory circumstances: MEDSCI may share your personal information with external parties in accordance with legal and regulatory requirements, litigation and dispute resolution needs, or requests made by administrative and judicial authorities in accordance with the law.

  1. Share your personal information with medical experts for scientific research services

MEDSCI’s main station provides a variety of scientific research and writing tools services. In order to provide you with professional scientific research services, after you submit a service request and sign a service agreement with us, we will obtain your consent to provide your reserved personal information such as your name, contact information, department, and title, along with your service requirements, to medical experts to provide you with various scientific research services such as translation and proofreading.

  1. MEDSCI must provide your delivery-related information (including delivery address and mobile phone number) to third-party logistics service providers to fulfill the contract.
  2. You authorize MEDSCI to use the information provided by you to MEDSCI, the information generated from enjoying MEDSCI’s services, and the information collected by MEDSCI in accordance with the provisions of this article, after anonymization, to provide you with services, recommend products, and conduct market research and information data analysis for MEDSCI (here refers to Shanghai MEDSCI Pharmaceutical Technology Co., Ltd.), MEDSCI’s affiliated companies, and partners who are commissioned due to service necessity.

MEDSCI will take measures to require companies, organizations, and individuals who share personal information with MEDSCI to process personal information in accordance with laws and regulations, this privacy policy, and any other relevant confidentiality and security measures.

  • Transfer

MEDSCI will not transfer your personal information to any company, organization, or individual, except for the following situations:

  1. Transfer with explicit consent: After obtaining your explicit consent, we will transfer your personal information to other parties.
  2. If we are involved in mergers, divisions, dissolutions, bankruptcy declarations, asset or business transfers, or other reasons that require the transfer of personal information, we will require the new company or organization that holds your personal information to continue to be bound by this privacy policy. Otherwise, we will ask the company or organization to obtain your authorization again.
  • Public Disclosure

Except for displaying the winner’s mobile phone number or account login name in a desensitized manner when announcing the list of winning activities, in principle, MEDSCI will not publicly disclose your personal information.

  • Exceptions to obtaining authorized consent

You fully understand and agree that we may collect, use, share, transfer, and disclose your personal information without your authorized consent in the following situations, and we may not respond to your requests for correction/modification, deletion, cancellation, withdrawal of consent, or information request:

(1) When it is necessary to fulfill our statutory duties or legal obligations;

(2) When it is necessary to protect the life, health, and property safety of natural persons in response to public health emergencies or in emergency situations;

(3) When the personal information collected is voluntarily disclosed to the public by you and is used by us within a reasonable scope;

(4) When personal information is collected from legally publicized information, such as legitimate news reports or government information disclosure, and is used by us within a reasonable scope;

(5) When it is necessary to fulfill the contract signed between you and us;

(6) When your personal information is processed anonymously and used;

(7) Other circumstances stipulated by laws and regulations.

According to the legal provisions, we do not need to notify you separately and obtain your consent again for the sharing, transfer, and public disclosure of anonymized personal information.

  1. Storage of Personal Information

The personal information collected and generated within the territory of the People’s Republic of China will be stored within the territory of the People’s Republic of China (excluding Hong Kong, Macao, and Taiwan). If we need to transfer your personal information overseas, we will comply with legal requirements such as security impact assessment.

We will retain your personal information during your continued use of MedSci platform services, unless legal requirements allow or require us to retain your personal information for a longer period. When you no longer use the MedSci platform services by canceling your account, or your personal information exceeds the legal retention period, we will delete your personal information or anonymize it.

  1. How We Protect Your Personal Information

MedSci attaches great importance to the security of your personal information and will take various reasonable physical, electronic, and management security measures to protect your personal information, and make the best reasonable efforts to prevent your personal information from being leaked, damaged, or lost, including but not limited to access control management, limiting access, encryption processing, signing confidentiality agreements with relevant personnel, monitoring operations, etc.

Please keep your registration account, password, and other identity information safe. If you disclose this information, it may have adverse effects on you, so you can contact MedSci or relevant parties immediately to minimize losses.

  1. How We Use Cookies and Similar Technologies

To provide you with a more convenient access experience, when you visit the MedSci platform, MedSci will collect and store relevant information through various technologies, including using small data files to identify your identity. This is to understand your usage habits, help you save the steps of repeated input of registration information, or help determine the security of your account. These data may be cookies, local storage, or other local storage provided by your browser or associated application (collectively referred to as “Cookies”).

Please understand that some of MedSci services can only be realized by using Cookies. If your browser or browser add-on service allows, you can modify the acceptance level of Cookies or refuse MedSci platform Cookies. However, if you refuse, it may affect your secure access to the products or services provided by MedSci official website and/or MedSci mobile application in some cases.

  1. Third-Party SDKs

To ensure the secure and stable operation of MedSci platform’s related functions, such as login using third-party accounts, payments, message notifications, operational statistics, third-party sharing, live streaming, etc., our products may include software development kits (SDKs) provided by third parties or we may use other third-party products/services to achieve the aforementioned purposes. The data collection and processing by third-party SDKs comply with their own privacy policies, which are not applicable to this Agreement. To ensure the maximum security of your information, we recommend that you review the privacy policy of any third-party SDKs before using any related services. To optimize our services and improve service quality, we will conduct strict inspections on the integrated third-party SDKs and may adjust the third-party SDKs we integrate and update the SDK directory. We will timely inform you of the latest situation of the integrated SDKs. For specific information on the third-party SDKs we currently integrate, please refer to the SDK directory.

  1. Protection of Minors’ Privacy Rights

MedSci attaches great importance to the protection of minors’ information. We do not provide registration and login services or other services that can be completed after logging in to users under 18 years of age. If you are a minor under 18 years of age, please stop registering and logging in.

Generally, without obtaining the consent of the guardian, we will not actively collect or process children’s personal information. However, due to technical limitations, in some scenarios, especially when providing online services, we cannot identify the user’s age. In this case, the user will be considered by us to have the complete and legitimate right to provide their personal information to us according to relevant laws. If we collect personal information of children without the consent of their guardians when unable to identify the user’s age, please notify us in a timely manner. We will delete such information promptly after learning about it. If you have any questions about the personal information of children under your guardianship, please contact us through the contact information described in Article 11 of this policy.

  1. Your Personal Rights

You explicitly acknowledge and agree that, subject to statutory requirements, you have the legitimate right to access, correct, delete, and withdraw consent to your personal information. At the same time, exercising the above-mentioned rights must not conflict with the regulatory obligations that MedSci needs to follow, nor exceed the following legal requirements.

During your use of MedSci’s products and services, to enable you to conveniently query, access, delete, correct your personal information, and ensure your right to withdraw consent for the use of personal information and the right to cancel your account, we have provided corresponding operation settings in the product design. You can refer to the following guide for operations. In addition, we have also set up channels for complaints and reports, and your opinions will be handled promptly.

If the following operation settings cannot be realized or do not cover the personal information rights you need to query, copy, delete, correct, withdraw consent, etc., you can also contact us through the contact information provided at the end of this privacy policy. After verifying your identity, we will provide you with related query, copy, delete, correction, withdrawal of consent, and related personal information services, except as otherwise provided by laws and regulations or this policy.

  • Access and Correct Your Personal Information
  1. Access and correct basic personal information After logging in to MedSci’s main website or MedSci Medical APP, you can click “Me”-“Complete Information” to view your reserved personal information and correct it, including but not limited to avatar, nickname, name, identity, job title, unit, department, expertise, and other information.
  2. Accessing and correcting real-name authentication information You can access and correct your personal real-name information by logging in to the MedSci main website or MedSci Medical App, and clicking “Me”-“Authentication”.
  • Withdrawal of consent

You can change the scope of your consent or withdraw your authorization. Please understand that once you request to withdraw your consent or change the scope of your authorization, we will not be able to continue providing the services corresponding to the withdrawal or authorization, but this will not affect the processing of personal information that has already been carried out based on your authorization.

  • Obtaining a copy of personal information

You can contact customer service to obtain a copy of your personal information. After verifying your identity, we will provide you with a copy of your personal information (including basic information and identity information) stored in our service, except as otherwise provided by law or specified in this policy.

  • Account cancellation and personal information deletion

You can log in to the MedSci main website or MedSci Medical App, click “Me”-“Settings”-“Account and Binding”-“Account Cancellation” to complete your account cancellation.

In the following circumstances, you can request to delete your personal information by emailing editing@medsci.cn:

  • if our processing of personal information violates laws and regulations;
  • if we collect or use your personal information without your consent;
  • if our processing of personal information violates our agreement with you;
  • if you no longer use our products or services or you cancel your account;
  • if we terminate our services and operations.

If we decide to respond to your deletion request, we will also notify the entities that obtained your personal information from us to delete it in a timely manner, unless otherwise provided by laws and regulations, or these entities have obtained your independent authorization.

In addition, for information that cannot be directly deleted or corrected on the platform, please contact us through the contact information listed at the end of this policy. After verifying your identity, we will provide you with deletion services. Please be aware that we may not be able to immediately and completely delete the corresponding information from the system due to legal and technical requirements for different types of information, and we will store and take necessary security measures to protect the corresponding information according to legal regulations before deletion.

  • Response to your requests

We generally do not charge fees for your reasonable requests as described above. If you are unable to exercise your personal information-related rights through the above paths due to platform settings, you can also contact us through the contact information listed at the end of this policy.

However, in the following circumstances, Mays will not be able to respond to your request as required by laws and regulations:

  1. Relating to national security and defense;
  2. Relating to public security, public health, and major public interests;
  3. Relating to criminal investigation, prosecution, trial, and execution of judgments;
  4. There is sufficient evidence to indicate that the subject of personal information has subjective malice or abuses their rights;
  5. Responding to your request would cause serious harm to your or other individuals’ or organizations’ legitimate rights and interests;
  6. Involving commercial secrets.
  1. Update of the Privacy Policy

Mays may revise this Privacy Policy in a timely manner. Once the content of this Privacy Policy changes, Mays will publish the latest Privacy Policy, notify you in a pop-up window in a prominent position, and explain the effective date to you. Please read the revised Privacy Policy carefully and consider whether to agree to the updated Privacy Policy. If you continue to use the products or services provided by Mays after the Privacy Policy is revised, this means that you have fully read, understood, and are willing to be bound by the revised Privacy Policy.

  1. How to Contact Us

We have designated a special person in charge of personal information protection. If you have any questions, opinions, or suggestions about this Privacy Policy, please contact the person in charge of personal information protection designated by us through the following methods:

Email: editor@medsci.cn

Telephone: 021-54481353

Address: 18th floor, Building 34, Caohexin Road 518, Xinqiao Town, Songjiang District, Shanghai

In general, we will reply within [7] working days.

If you are not satisfied with our reply, especially if you believe that our personal information processing behavior has harmed your legitimate rights and interests, you can also complain or report to regulatory authorities such as the Cyberspace Administration, Telecommunications Administration, Public Security, and Industry and Commerce, or file a lawsuit with the people’s court having jurisdiction over the defendant’s domicile.

Updated on: March 30, 2023 Effective Date: December 8, 2022