Privacy Policy
SLE Handbook · v1.0 · Effective Date: June 26, 2026
SLE Handbook is a personal health record and preparation tool. It is not a medical device. It does not provide diagnosis, disease prediction, medication advice, or treatment recommendations.
1. About Us
SLE Handbook (the "App") is developed and operated by the Craft with love two-person team. The App is designed to help people with systemic lupus erythematosus (SLE) organize laboratory reports, clinic notes, medication records, symptom notes, and long-term lab trends.
This Privacy Policy explains what personal information we collect, why we collect it, how we process it, where it is stored, when it is shared, and how you can exercise your privacy rights.
2. What Data We Collect and Why
2.1 Data You Provide
Lab report photos and clinic note photos
Purpose: To extract lab item names, values, units, reference ranges, hospital names, and visit dates.
Processing: The photo is uploaded to our server and, after your explicit third-party AI processing consent, sent to Volcengine for image recognition. Necessary recognized structured fields may be sent to DeepSeek for metric matching. The result is returned to the App and saved on-device after your confirmation.
Retention: The temporary OCR copy is deleted after local archival. If a Support-plan user enables cloud backup, a separate authenticated backup copy is retained until the backup or account is deleted.
Alternative: You may choose not to upload photos and manually enter lab values instead.
Daily check-ins, symptoms, and medication records
Purpose: To help you keep longitudinal personal health notes.
Processing: These records are stored on-device for display and export. When cloud backup is enabled, a copy is uploaded for new-device recovery. If you choose AI summary and explicitly agree to third-party AI summary processing, selected symptom records, medication records, lab values, and photo-tag text from the chosen time range are sent to DeepSeek to generate the recent-status summary and questions for the doctor. Original photos are not sent.
Retention: Until you delete the records in the App or delete your account.
System permissions and voice input
Camera / photo library: Used only when you choose to take or select lab-report, medical-record, or daily-record images.
Notifications: Used only when you enable follow-up or medication reminders.
Calendar: The current version does not write to the system calendar; follow-up reminders use local notifications only.
Microphone / Speech Recognition: Starts only while you hold to speak and is available only when the device supports on-device speech recognition. The App does not fall back to Apple cloud speech recognition. Voice input turns speech into today's text note. The transcribed text is saved as a daily note and is included in cloud backup when a Support-plan user enables backup. Voice recordings are not saved or uploaded to SLE Handbook servers.
Lab values and observations
Purpose: To show lab trend charts, metric cards, and visit records inside the App.
Processing: After OCR extraction, observations confirmed by you are stored in the on-device database. A versioned copy is uploaded when cloud backup is enabled.
Retention: Until you delete the related report, delete a specific observation, or delete your account.
Medication list
Purpose: To support medication reminders and dosage records.
Processing: Medication records are saved to your account and used for in-app display and export.
Retention: Until you delete them manually or delete your account.
2.2 Account Data
Name and account identifier from Sign in with Apple
Purpose: To create your account, identify your login, and display the name you authorize Apple to provide.
Source: When you first authorize Sign in with Apple, Apple may provide your name and a stable account identifier. Apple normally provides the name only during the first authorization.
Processing: Stored in our server database and linked to your health records for account functionality, security, and account deletion. We do not use this information for advertising or cross-app tracking.
Retention: While your account exists. After account deletion, the raw Apple account identifier and name are deleted. Only an irreversible hash identifier is retained to prevent repeated signup-credit claims.
Email address from Sign in with Apple
Purpose: Account identification and login across devices.
Source: When you authorize Sign in with Apple, Apple provides an email address to us. This may be your real email address or an Apple private relay address.
Processing: Stored only in our server database. We do not share your email address with third parties.
Retention: While your account exists. You may delete your account at any time in "Me - Delete Account".
Quota counts and subscription state
Purpose: To enforce monthly usage limits for free users and subscription entitlements for subscribers.
Storage: Stored only on our server.
Retention: While your account exists. After account deletion, we retain only irreversible hash identifiers and necessary transaction audit records for abuse prevention, subscription restore, refund disputes, and compliance purposes.
Abuse prevention and payment audit identifiers
Purpose: To prevent repeated free-credit claims after account deletion, prevent repeated rebinding of the same Apple subscription to reset usage limits, and handle refund or subscription disputes.
Processing: We do not retain raw Apple user identifiers or raw transaction IDs for these anti-abuse records. The server stores irreversible HMAC-SHA256 hash identifiers.
Retention: These records may be retained after account deletion for the limited purposes described above. They are not used for advertising, profiling, or third-party tracking.
2.3 Automatically Collected Data
The App does not collect the following data:
- Precise location data, GPS data, or IP-based location profiling
- Contacts
- Photo library content other than the photo you choose to upload
- Data for cross-app tracking
- Data for behavioral advertising or user profiling
- Data through third-party advertising SDKs
The App does collect the following minimal technical data:
- IP address: used only for API routing and rate-limiting abuse prevention. It is not long-term associated with your identity.
- Device model and operating system version: used for troubleshooting. These may briefly appear in server logs, which are retained for 7 days.
3. Third-party Services and Data Sharing
We share data with third parties only in the limited situations described below.
Volcengine AI recognition service
Provider: Beijing Volcengine Technology Co., Ltd., a ByteDance affiliate.
Shared data: The lab report or clinic note image you upload. We do not add extra personal information to the OCR request.
Purpose: OCR image recognition, converting lab report images into structured text.
Server location: Mainland China.
Retention and protection: We require Volcengine to process the data only to complete this recognition request and for necessary security or compliance purposes, not for advertising, behavioral profiling, or model training. The provider processes or caches data for the necessary period under its service terms, privacy policy, and security requirements, and should provide protection comparable to this policy.
Provider privacy policy: https://www.volcengine.com/docs/82379/1099475
DeepSeek metric matching and AI summary service
Provider: DeepSeek.
Shared data: 1) Necessary test names, results, units, specimen hints, report type, and hospital name used to assist lab metric classification after recognition; 2) after you choose AI summary and agree, selected symptom records, medication records, lab values, and photo-tag text from the chosen time range.
Purpose: Assisting reviewable lab metric classification, or generating the recent-status summary and questions for the doctor.
When used: Lab metric classification uses AI assistance only when needed. AI summary is used only when you choose it and agree.
Retention and protection: We require DeepSeek to process the data only to complete this metric classification or summary request and for necessary security or compliance purposes, not for advertising, behavioral profiling, or model training. The provider processes or caches data for the necessary period under its service terms, privacy policy, and security requirements, and should provide protection comparable to this policy.
Sign in with Apple
Provider: Apple Inc.
Data flow: Apple provides your authorized email address to us. We do not provide health records or lab data to Apple for Sign in with Apple.
Purpose: Account login and identification.
Apple Privacy Policy: https://www.apple.com/legal/privacy/
App Store / Apple StoreKit
Provider: Apple Inc.
Shared data: Subscription receipt and transaction status needed to verify subscription entitlement on our server.
We do not receive: Your card number, payment credentials, or detailed payment information. Payments are processed by Apple.
Apple on-device speech recognition
Provider: Apple Inc.
When used: Only when you hold to speak on the Today tab and the device supports on-device speech recognition. The App does not fall back to Apple cloud speech recognition.
Processing: The words you choose to speak are turned into today's text note on the device. The App does not save voice recordings or upload voice audio to SLE Handbook servers.
Not provided: Lab reports, medical records, symptoms, medications, and other health records are not provided to Apple for voice input.
Alibaba Cloud infrastructure
Provider: Alibaba Cloud Computing Co., Ltd.
Shared data: Our backend server, database, and file storage are hosted in Alibaba Cloud's Beijing region.
Role: Alibaba Cloud provides infrastructure hosting and does not independently read or process your health records for its own purposes.
We do not:
- Sell your health data to any third party
- Use your health data for advertising or behavioral profiling
- Use your health data to train any machine learning model, including our own models
- Share your data with organizations other than the providers listed above unless you explicitly consent or applicable law requires it
4. Storage and Security
4.1 Storage Location
- Account health records: lab values, symptoms, medication records, and observations are stored on-device by default. When cloud backup is enabled, a copy is stored in Alibaba Cloud's Beijing region for account recovery.
- Server data: account information and quota records are stored in a PostgreSQL database hosted in Alibaba Cloud's Beijing region.
- OCR images: temporary OCR copies are deleted after local archival. When cloud backup is enabled, backup copies are stored in Alibaba Cloud's Beijing region until the backup or account is deleted.
4.2 Security Measures
- Account authentication uses JWT and refresh-token rotation.
- Original images are never public. Cloud-backup images can be downloaded only by the authenticated account owner.
- OCR provider calls are made only from our server. OCR API keys are never included in the mobile app.
- Server logs do not record raw lab report contents, patient names, lab values, or other sensitive medical content.
- All current TestFlight and production builds connect to our API through the filed HTTPS domain
api.craftwithlove.cloud.
4.3 Data Breach Notification
If a data security incident may affect your rights or interests, we will notify affected users within 72 hours by in-app notice or email and report to the relevant regulator where required by law.
5. Your Rights
Subject to the Personal Information Protection Law of the People's Republic of China (PIPL) and other applicable laws, you may have the following rights:
- Access and export: App data can be exported through the in-app export feature as a PDF or local JSON file.
- Correction: Data in the App can be edited or re-entered by you.
- Deletion: You can delete individual records in the App. You can delete your server account and server-side records through "Me - Delete Account". Account deletion takes effect immediately and cannot be restored.
- Withdraw Sign in with Apple authorization: You can revoke authorization in iOS Settings under Apple ID - Sign-In & Security - Sign in with Apple.
- Restrict processing: If you do not use OCR uploads, our server will not receive your lab report photos.
- Complaint: If you have concerns about our data processing, you may contact us using the email below. You may also file a complaint with the competent regulator in your jurisdiction.
6. Children and Minors
The App is primarily intended for adult SLE patients. If a minor under 18 uses the App, the minor should do so under the guidance and consent of a parent or legal guardian. We do not intentionally collect data that specifically identifies a user as a minor.
7. Changes to This Privacy Policy
We may update this Privacy Policy when laws, regulations, or product features change. When we update this policy:
- The effective date at the top of this page will be updated.
- Material changes will be shown in the App and may require you to review the updated policy.
If you do not agree to the updated policy, you may stop using the App and delete your account.
8. Contact Us
If you have questions, complaints, or requests regarding this Privacy Policy or your personal information rights, please contact us:
We will respond within 1 business day after receiving your request.