Personal Data Protection Policy

I. General Rules

Application—The term "Application" in this Policy refers to Yiroute, the iOS mobile application. All Users should carefully read this Policy before using the Application.

User Information—means all information relating to the User, including Personal Information as defined below.

Personal Information—means information recorded electronically or otherwise that can individually or in combination with other information identify the User's identity, including but not limited to: account credentials, email address, display name or username, profile information (such as date of birth if provided), content that the User submits through the Application (such as posts, reviews, or comments, including doctor or hospital names mentioned therein), saved hospitals or preferences, and usage data generated when using the Application.

Modification—We have the right to modify this Policy and will notify the User through an announcement published on the Application. By continuing to use the Application after such modification, you are deemed to have read, consented to, and accepted the updated Policy.

II. Personal Data Protection Provisions

Protection In Accordance With the Law—We attach great importance to the protection of the User's Personal Information and will protect it in accordance with relevant laws of the People's Republic of China (PRC) and the provisions of this Policy.

User's Control Over Personal Information—The User may view and, where supported, modify certain Personal Information at any time by logging into his or her account on the Application. For requests to correct or delete Personal Information, the User may contact us through the contact means published on the Application.

Refusal to Provide User Information—If the User refuses to provide some or all of the information required when using the Application, the User may not be able to complete registration, save preferences, submit posts or reviews, or use certain features of the Application.

Information Use and Storage Period—Unless the User deletes data, cancels the account, or withdraws consent through the Application or by contacting us, we may continue to use and store User Information for the duration of the User's use of the Application and as necessary thereafter in accordance with applicable law. We will securely store User Information in accordance with relevant laws and regulations.

Information Storage Area—Personal Information of the User is stored on servers located in the People's Republic of China. If it is necessary to transfer or process such information abroad for business needs, we will obtain the User's prior consent and proceed strictly in accordance with the law.

Information Collection Principles—The Application will collect and use the User's Personal Information only for the purposes set out in this Policy and in accordance with the principles of lawfulness, legitimacy, and necessity.

Information Collection Purposes—The Personal Information collected by the Application will be used to:

• Verify user identity and manage the User's account;
• Provide the User with hospital and ranking information, saved preferences, and user-generated content (e.g. posts, reviews) services;
• Continuously improve the Application's services, functions, and User experience;
• Respond to the User's inquiries or complaints;
• Send information about our services or events (where the User has agreed);
• Analyze and improve our services and evaluate internal risks (e.g. identity verification and security).

Information Collection Methods—The Application will collect User Information through registration, voluntary provision by the User, or other lawful means.

Information Collection Scope—The information collected by the Application may include: email address, username or display name, optional profile information (e.g. date of birth), content submitted by the User (e.g. posts, reviews, and any names or descriptions the User includes), saved hospitals or preferences, and technical or usage data necessary to operate and improve the Application.

Use of User Information—The User authorizes us to use, record, and store Personal Information for the purpose of providing the User with hospital information, rankings, and related content and community services in accordance with this Policy.

Protection Measures—The Application will fulfill its cybersecurity protection obligations in accordance with applicable PRC laws and regulations to prevent interference, destruction, or unauthorized access, and to prevent the disclosure, theft, or alteration of the User's Personal Information.

Security Incident—In the event of a security incident involving the User's Personal Information, we will investigate and evaluate the incident in accordance with applicable laws and regulations and will promptly inform the User of the situation, its possible impact, the measures we have taken or will take, and any recommendations for the User. Notification may be made by in-app message, email, or announcement on the Application.

User Responsibility—The User shall, when using the Application, disclose Personal Information at his or her own discretion and with caution, and shall be solely responsible for any disclosure, property damage, or other harm caused by his or her improper or indiscreet behavior.

Permissible Disclosure of Information—We may disclose User Information under any of the following circumstances:

• The disclosure is made in accordance with this Policy;
• We have obtained the User's prior express authorization;
• The information is already publicly available;
• The disclosure is required by law or at the request of competent authorities;
• The disclosure is necessary to safeguard national or public security, public health, or other major public interests, or to carry out criminal investigations, prosecutions, trials, or enforcement of court judgments;
• In an emergency or other special circumstances, to protect the life, property, or other major legitimate rights and interests of the User or others when timely consent cannot be obtained;
• We may disclose, transfer, or share User Information where the User is not identifiable after processing;
• Other circumstances not prohibited by law and deemed appropriate.

III. Protection of Children's Personal Data

Users should read the "Application Children's Personal Data Protection Policy" (if published). Without the consent of the guardian of a minor under the age of 14 ("Child" or "Children"), Users shall not upload or provide Children's Personal Information through the Application. If a User, as the guardian of a Child, provides information of the Child through the Application, it shall be deemed that the User has agreed to our collection and use of such information in accordance with the Children's Personal Data Protection Policy and this Policy.

IV. Complaints and Reports

If the User becomes aware of any cybersecurity issue relating to the Application, or has any questions about this Personal Data Protection Policy, the User may contact us through the contact means (e.g. email or in-app contact) published on the Application.

For the purpose of ensuring service quality, investigating relevant facts, and facilitating dispute resolution, we may record communications with the User and retain and review such records as permitted by law.

V. Miscellaneous

This Policy should be read together with the User Agreement. Unless otherwise provided herein, terms used in this Policy have the same meaning as in the User Agreement. For matters not covered herein (including but not limited to applicable law and dispute resolution), the relevant provisions of the User Agreement shall apply.

Notes:

• The User hereby expressly authorizes us to read, collect, store, and use User Information to provide services to the User and to continuously improve the User experience in accordance with this Personal Data Protection Policy.
• The User reserves the right to contact us at any time to cancel or modify the foregoing authorization; we will adjust or cease the relevant processing in accordance with such cancellation or modification.
• The User may agree to receive information (including notifications, recommendations, or promotions) from us or the Application by email, in-app message, or other lawful means. The User may unsubscribe through the contact or preference means published on the Application.