HHOYU Privacy Policy
Last updated: 5 October 2026
This policy is issued by Shenzhen Huoyu Network Technology Co.,Ltd. ("we", "us"), and applies to our iOS apps HHOYU Mobile and HHOYU PRO (each, the "App"). The two apps handle data identically; HHOYU PRO additionally includes 3D volume-rendering modes, which are also processed entirely on your device.
Operator: Shenzhen Huoyu Network Technology Co.,Ltd.
Registered address: Room 104, Building A&B, Sida Building, No.2 Yuehai Road, Lixiu Community, Nanshan Subdistrict, Nanshan District, Shenzhen, Guangdong 518000, China
Contact email: developer@hhoyu.cn
1. The developer collects no data from you
Our apps are dental CBCT viewing and measurement tools that work primarily on your own device.
- The DICOM images you import, your measurements, and your dental-arch and cross-section planning data are written only to the App's sandbox on your device. They do not leave your device.
- We (the developer) do not collect, upload or share any personal information, device identifiers, usage data or diagnostic data, and we do not operate any server that receives such data.
- The apps contain no third-party SDKs, no advertising, no analytics, and no user tracking (tracking, in the App Tracking Transparency sense, is "No").
- The apps do not request access to contacts, location, camera, microphone or health data. iOS asks for Local Network permission only when you connect to a PACS server on your organisation's intranet (see section 2).
- The apps go online only when you actively use the optional "fetch" features described in section 2, and only connect to servers that you specify yourself, or to a third-party imaging cloud that you choose to use.
2. The optional "fetch from imaging cloud" features
Besides importing folders / ZIP / RAR files from your device, the apps offer three optional ways to fetch CBCT studies that are already stored on an imaging cloud or a hospital PACS. These features are off by default; the app goes online only when you actively use them via "Import → Fetch from imaging cloud (remote download)".
| Method | Connects to | What is sent |
|---|---|---|
| Open an imaging-cloud URL | Any imaging-cloud URL that you enter in the app | Equivalent to visiting that site in a browser: whatever you type and tap on that page is handled by that site under its own rules. |
| DICOMweb / PACS server | A server address that you configure (for example your hospital's PACS) | The access credentials you set for that server (username/password or access token), and the search keywords you enter (usually a patient name or patient ID). |
| Fussen Ruizhiying (dx.yayi360.com) | Fussen imaging cloud (a third-party service) | The account details you enter on that service's own sign-in page (sign-in happens on their page; the app does not store your username or password — it keeps only that site's session cookie locally, so you do not have to sign in again), and the search keywords you enter (usually a patient name). |
- Images are fetched in, not sent out. These features only download images from the other server to your device. The app never uploads or shares any image, measurement or planning data that you have already imported.
- We never handle this data. None of the servers above are operated by us. We neither receive nor have access to anything exchanged between you and them. The only reference to hhoyu.com inside the app is a privacy-policy link; the app sends no requests to our servers.
- Third-party services have their own rules. Third-party imaging clouds such as Fussen Ruizhiying have their own privacy policies and terms of service; please read and follow them. Because searching and downloading involve patient information, please make sure you have the necessary authorisation.
- Local Network permission. When connecting to a PACS server on your organisation's intranet, iOS asks for Local Network permission. If you decline, that feature is unavailable, but importing, viewing and measuring on your device are unaffected.
- You can clear everything at any time. Saved server addresses and credentials can be edited or deleted on the corresponding screens; you can sign out of an imaging cloud from inside the app.
3. What the apps store on your device
| Data | Where | When | How to delete |
|---|---|---|---|
| Original DICOM images you imported | App sandbox Application Support/<app>/Cases/<case id>/ | When you import a folder, ZIP or RAR archive | Swipe left on the case in the case list and tap "Delete case", or delete the app |
Case index and metadata (case.json) | As above | On import | As above |
| Session data: measurements, dental-arch control points, cross-section positions | As above (inside case.json) | While you work in the app | Swipe left on the case and tap "Clear viewing history" (keeps images), or "Delete case" |
| Last-opened time | As above | When you open a case | Same as "Clear viewing history" |
| DICOMweb / PACS server addresses and credentials | Addresses in local preferences; passwords and tokens only in the system Keychain | When you add a server | Edit or delete them on the corresponding screen |
| Import cache (extracted ZIP / RAR copies) | App sandbox Imports/ | When you import an archive | "Manage → About & Disclaimer → Clear import cache" |
This data is protected by the iOS sandbox; other apps cannot read it.
About patient information: DICOM files normally contain patient names, IDs and examination dates. That information exists only inside the files you import, and the app reads it locally for display. When you use local import and viewing, none of it is transmitted anywhere. Only when you actively use the "fetch" features in section 2 are the search keywords you enter (usually a patient name) sent to the one server you specify. Please make sure you are entitled to handle these images, and comply with the laws and regulations on patient privacy and medical data that apply in your region (for example China's Personal Information Protection Law and the Administrative Measures for Information Security of Medical and Health Institutions).
4. Device backups
If you have enabled iCloud Backup in iOS Settings, data inside the app's sandbox may be encrypted and uploaded to your own iCloud account as part of the system backup. That behaviour is determined by Apple and your system settings; we neither control it nor have access to it. If you do not want it backed up, turn the app off under "Settings → Apple Account → iCloud → Manage Account Storage → Backups".
5. Important medical notice
Our apps are not medical devices and are not intended for clinical diagnosis.
The image reconstructions, measurement values and bone-density readings provided are for research, teaching and demonstration reference only. They do not constitute any diagnosis, treatment advice or basis for clinical decisions. Any clinical decision must be made by qualified professionals on the basis of certified medical equipment and complete clinical information.
6. Children
The apps are intended for professional and teaching settings. They are not directed at children under 13, and we do not knowingly collect information from them.
7. Changes to this policy
Update of 29 September 2026: that version added the "fetch from imaging cloud" features described in section 2. As promised in the previous version of this policy (19 August 2026), we updated this explanation and revised the related in-app text. The change does not upload any existing data unless you actively use the fetch features — the images and measurements you imported earlier still remain on your device only.
If future versions further change how data is handled, we will continue to update this page and notify you prominently inside the apps.
8. Contact us
If you have any questions, comments or complaints about this policy, please contact:
- Operator: Shenzhen Huoyu Network Technology Co.,Ltd.
- Registered address: Room 104, Building A&B, Sida Building, No.2 Yuehai Road, Lixiu Community, Nanshan Subdistrict, Nanshan District, Shenzhen, Guangdong 518000, China
- Email: developer@hhoyu.cn
We will reply as soon as we can.