Privacy Policy
How Chirona handles contact details, health records, patient accounts and AI conversations, including your choices and privacy rights.
Who we are and what this policy covers
Chirona operates chironahealth.com, a cancer-treatment information and care-coordination website. In this policy, “we”, “us” and “our” mean Chirona. Our contact location is Xuhui, Shanghai, China; our privacy contact is support@chironahealth.com.
This policy covers information handled through our public website, inquiries, patient accounts, documents, conversations and related communications. We are responsible for the purposes and means of our own handling of this information. Hospitals, doctors and external communication services are responsible for their own activities and notices.
Reading this policy is not consent to every use of your data. A request for a particular service, an inquiry consent and confirmation to share an AI summary each have their own scope. Any additional consent required for sensitive information, disclosure or an international transfer must be obtained separately.
Information we handle
Contact and inquiry information: your name, age, gender or choice not to say, country, email, phone, preferred contact channel, relevant messaging identifier, care interests, preferred city and information you include in your request. We also keep the request identifier and consent version.
Health and care information: diagnosis and treatment details, reports, images and other records you choose to provide, correspondence, case progress, requests, care arrangements and related supporting records. Health information can be sensitive; please send only what is relevant. Do not include passwords, bank-card details or unrelated identity documents.
Account and access information: email, authentication credentials handled by our authentication service, verification status, account and case identifiers, access permissions and security events. Your sign-in password is not available to our care coordinators.
Conversation information: messages you send, generated replies and summaries, improvement feedback, attachments, conversation identifiers, generation status and usage records. See “AI conversations and human review” below for the different access rules.
Technical information: IP address, request time, browser and device information, requested pages, error and security logs, and identifiers needed to prevent abuse or maintain sessions. Our application uses hashed request identifiers for rate limiting. Cookies and browser storage are described separately.
Where information comes from
Most information comes directly from you, your authorised representative or your use of the website. During requested coordination we may also receive relevant information from the hospitals, doctors, interpreters or other providers involved in your case.
If you provide information about someone else, you must have authority to do so and make this policy available to them where appropriate. We may ask for evidence of your authority before disclosing records or acting on a request.
Why we use information
We use contact and inquiry details to respond, understand the support requested, create and manage a case, and communicate next steps. We use relevant health information to organise records, support professional review and coordinate the care arrangements you request.
We use account and security information to verify identity, control access, maintain service continuity, investigate misuse and protect records. Technical and usage information helps us operate the website, diagnose failures, enforce reasonable usage limits and maintain evidence of requests and decisions.
Where data-protection law requires a legal basis, ordinary contact and account information is used to take steps you request before an agreement, carry out agreed services, comply with legal obligations, or pursue legitimate interests in security, service administration and defending legal claims, where those interests are not overridden by your rights. We rely on consent where required, including explicit consent for health information where applicable; an ordinary contractual or legitimate-interest basis alone does not authorise sensitive-data processing.
Providing information is voluntary, but we cannot carry out a request if essential contact, verification or assessment information is missing. We do not sell personal information or share it for cross-context behavioural advertising. A care inquiry is not permission to publish your story or use your medical records in advertising. Public testimonials or identifiable patient stories require a separate authorisation.
AI conversations and human review
When you use an available AI conversation feature, the text you send and the conversation context needed for a reply are processed through DeepSeek’s API. Requests also include an account or guest identifier and instructions needed to generate the response. This is distinct from giving the care team access to your conversation. Avoid including direct identifiers or unnecessary health details in AI messages.
Sent messages, replies, summaries and generation records are stored in the Chirona service database. Guest history can be linked to your verified account when you sign in from the same browser. A first message may pass through temporary browser storage when you open a conversation page; the Cookies Notice explains its lifetime.
Uploaded conversation attachments are stored privately. Their contents are not sent to the AI for analysis. Text you type or paste into a message is processed as message text, even if it came from a medical report.
The staff and administrator interfaces do not provide access to your full AI chat history. Generating a summary or uploading an attachment does not send it to the care team. After signing in, you can review and explicitly confirm the summary, its improvement feedback, listed attachments and account email for submission as a case.
Removing an attachment from a pending sharing list stops that pending association; it does not necessarily erase the stored file or copies already included in a submitted case. Contact us to request deletion. Authorised technical processing and access required for security, support or legal obligations remain subject to this policy.
AI output can be inaccurate. We do not use it alone to make decisions about diagnosis, treatment or trial eligibility that have legal or similarly significant effects. Qualified professionals and the relevant clinical or research team make those decisions.
International handling
Our coordination team works in China. Requests may involve hospitals in the destination you choose and technical providers operating in other countries. Information may therefore be processed outside your country, where privacy laws and government-access rules may differ. The DeepSeek API integration involves processing in China.
An international care request is not a blanket waiver of privacy rights. Transfers requiring a particular legal mechanism, recipient notice, contractual safeguard or separate consent must meet that requirement. Contact us for information about the recipients, locations and safeguards relevant to your request. This policy does not represent that every country has been recognised as providing equivalent protection.
How long information is kept
We keep information for the purpose for which it was collected and any applicable legal retention requirement. The period depends on whether an inquiry is active, whether you maintain an account or need continuing care coordination, the nature of the records, legal record-keeping duties and the need to resolve a dispute or protect the service.
Case closure, signing out, clearing browser data or removing a pending attachment is not a server-side deletion request. Conversation and case records may remain after those actions. You can ask us to close an account or delete information; we assess the request and explain any material legal or operational reason for retaining a limited record.
We review continued retention and delete or de-identify information when it is no longer required. Copies in backups may remain until replaced in the backup cycle and are restricted from routine use. Hospitals and other independent recipients apply their own retention duties; a request to Chirona does not automatically erase their records.
Protecting information
We use role-based access controls, account verification, private file storage and time-limited download authorisations. We limit routine staff access to information needed for the task. No website, communication channel or storage system can be guaranteed completely secure.
Keep your email account and sign-in credentials secure, sign out on shared devices and tell us promptly if you suspect unauthorised access. We may verify identity or temporarily restrict access to protect information. Where legally required, we will notify affected people or authorities of a qualifying data breach.
Your choices and rights
Contact support@chironahealth.com to request access, a copy, correction, deletion, restriction, portability where applicable, or closure of an account. You can withdraw consent for future processing based on that consent. Withdrawal does not invalidate earlier lawful processing, and may mean we cannot continue the affected service.
You may object to processing based on legitimate interests where the law gives you that right. You may object to direct marketing at any time. We do not require you to accept marketing as a condition of making a care inquiry.
Tell us enough to identify the relevant account or case and your request. We may need proportionate identity or authority checks, but do not send identity documents unless requested through an appropriate channel. We respond within the applicable legal time limit and explain any lawful refusal, limitation or extension.
You may complain to the privacy regulator with jurisdiction over your situation, including the authority where you live or work where applicable. You do not have to contact us first to exercise a legal complaint right.
Children and representatives
The website’s accounts and direct requests are intended for adults. A parent, legal guardian or otherwise authorised adult should contact us when assistance is needed for a minor and provide only the information necessary for that inquiry. We may require additional authority and consent checks, including parental or guardian consent where the law requires it.
If you believe a child has submitted information without appropriate authorisation, contact us so we can assess access restrictions and deletion or other protective steps.
Policy updates
The date at the top identifies this policy version. We will publish revisions here and give additional notice when the nature of a material change or applicable law requires it. A policy update does not retrospectively authorise a new use of sensitive information or replace consent where consent is required.
Contact us
For questions about this policy, personal information or use of this website, contact Chirona.
support@chironahealth.com
+86 13482207196
Xuhui, Shanghai, China