Averi Privacy Policy

1. Who We Are

Averi is a personal AI assistant application that helps you analyze documents and information you provide (including, where you choose, health-related or medical documents), manage local workflow history, and optionally purchase memberships or AI credit packs through the Apple App Store.

Unless otherwise stated, “we”, “us”, and “our” refer to the individual developer of Averi (Averi 个人开发者), a personal developer based in the People’s Republic of China. “You” means the end user of Averi.

2. Scope

This Privacy Policy explains:

• what information Averi collects and processes;
• how that information is collected;
• all uses of that information;
• with whom it is shared (including third-party AI providers);
• where processing occurs (on-device vs. servers);
• your choices, consent, and rights;
• how to contact us.

This Policy applies to the iOS version of Averi distributed via the Apple App Store. Apple’s own privacy practices are governed by Apple’s Privacy Policy.

3. Information We Process

3.1 Information you provide

• Content you upload or enter: text, photos, camera captures, PDFs/documents, and other materials you submit to run a workflow or AI analysis.
• Health-related content (only if you submit it): medical documents, lab/report images, medication lists, or similar materials. Averi is not a medical device and does not provide diagnosis or treatment. Such content is processed solely to provide the features you request.
• Sign in with Apple (optional): if you choose Sign in with Apple, we receive an Apple user identifier and, when Apple provides them, a name and/or email. This identity is stored locally on your device to keep you signed in. Guest use without Sign in with Apple remains available.
• Feedback: if you email support/feedback (e.g., to Averi@familymedvault.com), we receive the content of your message and any identifiers included by your email provider.

3.2 Information collected automatically on device

• Local app data: workflow history, preferences (e.g., language), AI privacy consent preference, subscription/credit state stored locally, and similar settings needed for the app to function.
• Device permissions you grant: camera, photo library, and document access are used only when you initiate the corresponding action. We do not access these permissions in the background for unrelated purposes.
• Diagnostics (if enabled by the OS / App Store): crash or performance signals may be processed by Apple according to your device settings.

3.3 Purchase information

Memberships and AI credit packs are sold as Apple In-App Purchases. Payment card details are processed by Apple, not by us. We may receive limited commercial records from Apple necessary to unlock features (for example: product identifier, purchase/transaction status, and subscription period). We do not receive your full payment card number.

3.4 Information we do not intentionally collect

• We do not require you to create an Averi account and password to use core local features.
• We do not sell your personal information.
• We do not use your content to build advertising profiles.
• We do not request sensitive government ID numbers as a condition of using Averi.

4. How We Use Information

• to provide, maintain, and improve Averi’s workflows and AI analysis features;
• to transmit the content needed for an AI request to the recipients described in Section 5, after you grant permission;
• to show remaining AI credits / membership status in the app;
• to respond to support and feedback requests;
• to comply with applicable laws, App Store rules, and enforce our EULA;
• to protect the security and integrity of our services and users;
• to establish, exercise, or defend legal claims.

Legal bases (where GDPR/UK GDPR or similar frameworks apply): performance of a contract, legitimate interests (secure and improve the service), consent (including in-app AI data-sharing permission and certain device permissions), and legal obligation.

5. AI Processing and Data Flow (Important)

Averi uses the Averi AI Gateway to run AI-powered workflows. Production builds do not require you to enter your own OpenAI or Gemini API keys in the app for cloud AI to work.

What data may be sent: the content you provide for the specific workflow you run — including text you enter, photos or camera images you attach (or text extracted from them), PDFs and other documents (or extracted text excerpts), and health or medical content when you use health-related workflows. Only what is needed to complete that request is transmitted. Payment card numbers are not sent to the AI gateway or model providers.

Who receives the data:

• Averi AI Gateway (our backend AI gateway / processor), which securely receives the request; and
• depending on the selected model, one of the following third-party AI providers acting as processors: OpenAI and/or Google Gemini (Google).

Permission before sharing: before Averi first shares your content with the Averi AI Gateway and these AI providers for analysis, the app presents a dedicated in-app disclosure screen that lists what data may be sent and who receives it, and asks for your permission (Allow / Don’t Allow). You may review or withdraw AI data sharing later in Settings → AI Privacy → AI Data Sharing. If you do not allow AI data processing, Averi will not send that content to the Averi AI Gateway or to OpenAI / Google Gemini for the request.

• We transmit only what is needed to fulfill your request.
• Submitted content is used to generate the AI response for that request; it is not used for advertising and is not sold.
• We require processors that receive personal data to provide protection that is the same as or equal to the protections described in this Policy, to the extent applicable to their role as processors.
• Model providers may process data in jurisdictions outside your country of residence.
• You should avoid submitting unnecessary highly sensitive identifiers (e.g., full national ID numbers) when possible; redact before upload if appropriate.

On-device storage helps keep your library and history convenient locally, but AI analysis is not purely on-device when remote AI is used. Statements that refer to “files staying on your device” describe local storage of your library where applicable; they do not mean that no data is ever transmitted during AI analysis.

6. Sharing and Recipients

We may share information only as follows:

• Averi AI Gateway: to route and fulfill AI analysis requests you authorize.
• OpenAI and/or Google Gemini (Google): third-party AI processors that generate model outputs for authorized requests, as described in Section 5.
• Other service providers / processors: hosting, security, and email infrastructure under contractual or equivalent safeguards.
• Apple: for distribution, In-App Purchase, analytics/crash reporting you enable, and App Store compliance.
• Legal / safety: when required by law, court order, or to protect rights, safety, and security.
• Business transfer: in a merger, acquisition, or reorganization, subject to continued protection consistent with this Policy or notice to you.

We do not sell personal information and do not share it for cross-app advertising.

7. Health-Related Content — Extra Caution

• Health-related materials are processed only because you upload/input them.
• If you run an AI workflow on health-related content after granting AI data-sharing permission, that content may be sent to the Averi AI Gateway and then to OpenAI or Google Gemini solely to fulfill your request.
• Averi’s outputs are informational and educational aids only — not clinical advice.
• Always consult qualified clinicians for medical decisions.
• We do not use health-related content for advertising.
• Where applicable laws treat health data as sensitive personal information, we process it only for the purpose you initiate and with your instructions/consent as required.

8. Data Retention

• On-device data: retained until you delete it in-app, uninstall the app, or clear device storage.
• AI privacy consent preference: stored locally on your device until you change it or clear app data.
• Transient AI request data: retained only as long as needed to generate the response, operate/secure the service, debug abuse/fraud, and meet legal obligations; then deleted or anonymized in accordance with our retention practices.
• Support emails: retained as needed to resolve your request and for legitimate business/legal records.
• Purchase records: retained as required for accounting, tax, fraud prevention, and App Store reconciliation.

9. Security

We implement reasonable administrative, technical, and organizational measures (including transport encryption for network requests where used, access controls, and least-privilege practices). No method of transmission or storage is 100% secure. You are responsible for controlling physical access to your device and OS passcode/biometrics.

10. International Transfers

If you use Averi from outside the processing location of our servers or model providers (including OpenAI and Google Gemini), your information may be transferred to and processed in other countries, including jurisdictions that may have different data-protection laws. Where required, we use appropriate safeguards (such as contractual protections) for such transfers.

11. Your Rights and Choices

Depending on your location, you may have rights to:

• access / copy personal information we hold about you;
• correct inaccurate information;
• delete information;
• restrict or object to certain processing;
• withdraw consent (without affecting prior lawful processing);
• lodge a complaint with a supervisory authority.

AI data sharing: you can allow or deny AI data processing in the in-app consent prompt, and later change this in Settings → AI Privacy → AI Data Sharing. Turning AI Data Sharing off withdraws permission for future AI requests until you allow again.

Account deletion: if you signed in with Apple, you can permanently delete your Averi account in the app via Settings → Account → Delete Account. This removes the Sign in with Apple session/profile stored on the device and the AI privacy consent preference. Averi does not maintain a separate cloud user database for this account. Local workflow records and Apple In-App Purchase subscriptions (if any) are separate; subscriptions are managed in iOS Settings → Apple ID → Subscriptions.

You can also clear local history/files via in-app controls (where available) or by uninstalling the app. For other requests, email Averi@familymedvault.com. We may need to verify your request to protect against unauthorized access.

Device permissions: you may revoke camera/photos/files access in iOS Settings. Some features will stop working if permission is denied.

12. Children

Averi is not directed to children under 13 (or under 14 where required by local law, including relevant rules in Mainland China regarding minors). We do not knowingly collect personal information from children below the applicable age. If you believe a child has provided personal information, contact us and we will take reasonable steps to delete it. Guardians in Mainland China should supervise minors’ use of AI and document features.

13. Third-Party Links and Services

Averi may reference third-party services (including Apple, OpenAI, and Google). Their privacy practices are controlled by those parties. Review their policies before use. For AI processing specifically, see Section 5.

14. Changes to This Policy

We may update this Policy to reflect product, legal, or operational changes. The “Last Updated” date will be revised. Material changes will be indicated by updating this page and, where appropriate, in-app notice. Continued use after the effective date constitutes acceptance to the extent permitted by law.

15. Governing Language

This English version and the Chinese version are provided for convenience. For App Store users worldwide, the English text may be used for interpretation when versions differ, except where mandatory local law (including Mainland China) requires otherwise for local consumers.

16. Contact / Data Protection Requests

Email: Averi@familymedvault.com
Subject line suggestion: “Averi Privacy Request”
Operator: Averi 个人开发者 / Individual developer of Averi
Region: People’s Republic of China

Averi 隐私政策（中文）

欢迎使用 Averi。本政策说明我们如何处理与 Averi（iOS，Bundle ID： com.jchen.Averi）相关的信息。 运营者为 Averi 个人开发者。 联系邮箱：Averi@familymedvault.com。

一、我们是谁

Averi 是一款个人 AI 助手应用，可在您主动提供内容的情况下，协助分析文档与信息 （含您自愿上传的健康/医疗相关材料），管理本地工作流记录，并可通过 Apple App Store 购买会员或 AI 额度包。Averi 不是医疗器械，不提供诊断或治疗建议。 本应用由中国境内的个人开发者开发与运营。

二、我们处理哪些信息

1. 您主动提供的信息

• 文本、照片、相机拍摄内容、PDF/文档等，用于启动工作流或 AI 分析；
• 您自愿提交的健康/医疗相关材料（仅因您上传/输入而处理）；
• 可选的「通过 Apple 登录」：若您选择该方式，我们会收到 Apple 用户标识，以及 Apple 在授权时提供的姓名和/或邮箱。该身份信息保存在本机，用于保持登录状态。您仍可选择游客模式、不使用 Apple 登录。
• 您通过邮件发送的反馈/支持内容。

2. 设备本地自动产生的信息

• 本地历史、语言偏好、AI 隐私授权偏好、订阅/额度状态等应用运行所需数据；
• 仅在您触发功能时，经系统授权使用的相机、相册、文件访问权限；
• 您在系统/App Store 设置中允许的崩溃或性能诊断（由 Apple 按其规则处理）。

3. 购买信息

会员与额度通过 Apple 应用内购买结算。支付卡信息由 Apple 处理，我们不会获得完整银行卡号。 我们可能从 Apple 获得开通功能所需的有限交易信息（如产品标识、交易状态、订阅周期等）。

4. 我们不会故意收集的内容

• 不强制注册 Averi 账号密码即可使用主要本地功能；
• 不出售个人信息；
• 不将您的内容用于广告画像；
• 不将提供身份证号等作为使用条件。

三、我们如何使用信息

• 提供、维护与改进 Averi 功能与 AI 分析；
• 在您授权后，将完成本次 AI 请求所需的内容传输至本政策第四节所述接收方；
• 展示会员/AI 额度状态；
• 回应支持与反馈；
• 遵守法律法规与 App Store 规则，履行 EULA；
• 保障安全、防控滥用，并依法维护合法权益。

四、AI 处理与数据传输（重要）

Averi 使用 Averi AI Gateway（Averi AI 网关）运行 AI 工作流。 正式版不要求您在 App 内自行填写 OpenAI 或 Gemini API 密钥才能使用云端 AI。

会发送哪些数据：您为当前工作流提供的内容，包括您输入的文本、附带的照片或相机拍摄内容（或其提取的文字）、上传的 PDF 及其他文档（或其提取的文字摘要），以及您在健康相关工作流中选择分析的健康或医疗内容等；且仅限于完成本次请求所必需的内容。支付卡号不会发送给 AI 网关或模型服务商。

数据发送给谁：

• Averi AI Gateway（我们的后端 AI 网关 / 受托处理者），安全接收请求；以及
• 根据所选模型，由以下第三方 AI 服务商作为受托处理者进行处理： OpenAI 和/或 Google Gemini（Google）。

发送前征得同意：在 Averi 首次将您的内容发送至 Averi AI Gateway 及上述 AI 服务商进行分析前， 应用内会展示专用披露页面（列明可能发送的数据类型与接收方），并请求您的许可（允许 / 不允许）。您可稍后在 设置 → AI 隐私 → AI 数据共享中查看或撤回授权。 若您不允许 AI 数据处理，Averi 不会为该次请求向 Averi AI Gateway、OpenAI 或 Google Gemini 发送相关内容。

• 我们仅传输完成请求所需的数据；
• 提交内容仅用于生成本次 AI 结果，不用于广告，也不会出售；
• 我们要求接收个人信息的受托方提供不低于本政策所述水平的保护（就其作为处理者的职责范围而言）；
• 模型服务可能在境外处理数据；
• 请尽量避免上传非必要的高度敏感身份信息，必要时请先脱敏。

AI 分析并不等于“全程仅在设备本地推理”。 应用内关于“文件保存在设备”的说明，指您的资料库/历史可本地保存； 不能理解为 AI 分析过程中绝不会发生网络传输。

五、共享与受托方

• Averi AI Gateway：用于路由并完成您已授权的 AI 分析请求；
• OpenAI 和/或 Google Gemini（Google）：作为第三方 AI 处理者为已授权请求生成结果（详见第四节）；
• 为提供服务所必需的其他托管、安全与邮件等受托方；
• Apple（分发、内购、您授权的诊断等）；
• 法律要求或为保护用户与公众安全所必需的披露；
• 并购重组等情形下的有限转移（仍将要求保护水平不降低或依法告知）。

我们不出售个人信息，也不将信息用于跨应用广告共享。

六、健康相关内容

• 仅因您主动上传/输入而处理；
• 若您在授予 AI 数据共享许可后，对健康相关内容运行 AI 工作流，该内容可能被发送至 Averi AI Gateway，再由 OpenAI 或 Google Gemini 处理，且仅用于完成本次请求；
• 输出仅供信息参考，不构成诊疗意见；
• 医疗决策请咨询专业医务人员；
• 不将健康相关内容用于广告；
• 依据适用法律将其作为敏感个人信息时，仅在您发起的目的范围内处理，并依法取得同意/单独同意（如适用）。

七、保存期限

• 本地数据：直至您在应用内删除、卸载应用或清理设备存储；
• AI 隐私授权偏好：保存在本机，直至您修改或清除应用数据；
• AI 请求数据：以实现响应、保障安全、排查滥用及履行法定义务所需为限，之后删除或匿名化；
• 支持邮件与交易记录：按处理事项、会计税务与争议解决需要保存。

八、安全措施

我们采取合理的管理与技术措施（含传输加密、访问控制、最小必要原则等）。 但任何系统都无法保证绝对安全。请妥善保管设备锁屏与系统权限。

九、跨境提供

若服务器或模型服务（含 OpenAI、Google Gemini）位于境外，您的信息可能被跨境传输与处理。 我们将在适用法律要求下采取合同条款等必要措施，并依法履行告知、评估或标准合同等义务（如适用）。

十、您的权利（含《个人信息保护法》）

在适用法律下，您可能享有查阅、复制、更正、删除、撤回同意、限制或拒绝特定处理、投诉等权利。

AI 数据共享：您可在应用内授权弹窗中选择允许或不允许，也可稍后在 设置 → AI 隐私 → AI 数据共享中修改。 关闭 AI 数据共享即撤回对后续 AI 请求的许可，直至您再次允许。

账户删除：若您已通过 Apple 登录，可在应用内 设置 → 账户 → 删除账户永久删除 Averi 账户。 这将清除本机保存的 Apple 登录会话/资料，以及 AI 隐私授权偏好。 Averi 不为此账户维护单独的云端用户数据库。本地工作流记录与 Apple 应用内购买订阅相互独立； 若有订阅，请在 iOS「设置 → Apple ID → 订阅」中另行管理。

您也可通过应用内清除本地数据或卸载应用管理本地数据；其他请求请发邮件至 Averi@familymedvault.com。 为防止盗用，我们可能要求验证请求人身份。您也可以在 iOS「设置」中关闭相机/相册/文件权限。

十一、未成年人

Averi 不面向未满 13 周岁（或当地法律要求的更高年龄，中国境内相关场景下请关注不满十四周岁等规则）的儿童。 我们不会故意收集其个人信息。如发现，请联系我们以便及时删除。 监护人应指导未成年人谨慎使用 AI 与文档功能，避免上传过度敏感信息。

十二、政策更新

我们可能因产品、法律或运营需要更新本政策，并更新「最后更新」日期。 重大变更将通过本页面展示，并在适当情形下于应用内提示。 在法律允许范围内，更新后继续使用即视为知悉相关变更。

十三、适用与解释

本中文与英文版本一并提供以便阅读。涉及中国境内消费者依法享有的强制性权益， 以中华人民共和国法律法规的强制性规定为准；其他情形下英文版本可用于帮助统一理解。 本政策为信息披露与合规说明，不构成对第三方（含 Apple、OpenAI、Google）行为的担保。

十四、联系我们

邮箱：Averi@familymedvault.com
邮件主题建议：Averi 隐私请求
运营者：Averi 个人开发者 / Individual developer of Averi
所在地：中华人民共和国