Yaoli privacy policy
KamiPan Studio ("we") builds and runs Yaoli. This policy explains what information we handle, why, and what control you have over it. Yaoli does not require an account.
1. What we handle
1.1 The records you enter
Drug names, licence numbers, expiry dates, notes and any category or owner labels you add yourself. These records are stored locally on your device; we do not upload or back them up to a server. If you have iCloud device backup switched on, they travel with that backup under Apple's terms.
1.2 Images taken during a scan
When you choose to scan, the picture of the packaging is sent over an encrypted connection to our recognition service, which asks an AI model to read the drug name, licence number and expiry date and returns the result for the app to fill in.
This only ever happens because you started it: if you don't scan, no image leaves your device. Recognition requests are not tied to your name, an account or any contact details.
1.3 Purchases
In-app purchases such as scan credit packs are handled entirely by Apple's App Store. We only receive the transaction validation result Apple returns; we never see your payment method, card number or Apple Account password.
2. What we don't collect
- No sign-up, and no name, phone number, email address or identity document.
- No access to contacts, messages, call history, location or health data.
- No third-party ad SDKs, no cross-app ad tracking, no IDFA request.
- We do not sell, rent or trade your data with anyone for marketing.
3. Device permissions
- Camera — used only while the scanning screen is open, to read the packaging. Never in the background.
- Notifications — used for expiry reminders and the daily push. You can turn them off any time under iOS Settings › Notifications; the rest of the app carries on working.
Declining either permission won't stop you using the app; it only switches off the matching feature. Without camera access, for instance, you can still add medicines by hand.
4. Storage and retention
- Medicine records — kept on your device. Deleting an entry in the app removes it from the device; deleting Yaoli removes all local records and we cannot recover them for you.
- Scan images — used only to complete that one recognition. They are not linked to your identity, and are not used for training or shared with anyone.
- Purchase receipts — we keep the anonymous transaction validation record Apple returns, so your credits survive a new phone or a reinstall.
If you would like us to delete anything held on our servers that relates to you, email us and we will handle it within 30 days.
5. Third parties
Yaoli relies on two kinds of outside service: Apple (App Store, in-app purchases, system notifications) and the AI model provider that powers scan recognition. Beyond the image content needed to complete a scan, we pass them nothing about you. There is no ad network and no behavioural analytics SDK in the app.
6. Your choices
- Skip scanning and enter everything by hand — then no data leaves the device at all.
- Revoke camera or notification access at any time in system settings.
- Delete a single record in the app, or delete the app to clear everything.
- Email us to ask what we hold, correct it, or have it deleted.
7. Children
Yaoli is intended for adults and for households managing medication; its App Store age rating is 13+. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.
8. Changes and contact
When this policy changes we update the "last updated" date at the top of this page, and for significant changes we also tell you inside the app. Continuing to use Yaoli means you accept the updated policy.
For any privacy question, access request or deletion request, write to panbofeng@hotmail.com. We usually reply within two working days.