Privacy Policy
AViTA Toolbox | AViTA Corporation
Effective Date: 2026-10-28
Last updated: 2026-10-28
Contact: app_rd@avita.com.tw
AViTA Toolbox | AViTA Corporation
Effective Date: 2026-10-28
Last updated: 2026-10-28
Contact: app_rd@avita.com.tw
This Privacy Policy applies to the AViTA Toolbox mobile application and its related services (collectively, the “Application”), provided by AViTA Corporation (“AViTA,” “we,” “us,” or “our”). It explains what information the Application processes, why and how that information is used, which third parties may receive it, how long it may be retained, and the choices and rights available to users.
The Application supports Bluetooth-enabled health measurements, compatible Wi-Fi otoscopes, local photo and video management, optional artificial intelligence (AI) features, and optional visual effects called Cute Mode. Some AI features may only be available to users for whom those features have been enabled. This Policy applies to the Application as a whole, regardless of whether those features are enabled.
Important: Otoscope imagery and health measurement information can be sensitive. Please review the AI-related sections and the separate AI Information & Limitations page before using any optional cloud-based feature.
Depending on the features you use, the Application may process the following categories of information:
Health measurement information. Data received from supported Bluetooth-enabled instruments or displayed in the Application, such as body temperature, blood pressure, heart rate, and blood oxygen saturation (SpO₂). These values are used to display measurements and, if requested, to generate an AI-assisted interpretation.
Bluetooth device and connection information. Device names, service identifiers, connection status, signal conditions, and information necessary to discover and communicate with supported instruments. On certain operating systems, Bluetooth discovery may involve system permission prompts associated with nearby-device or location services. We do not intentionally obtain or track precise GPS location for the Bluetooth measurement features described here.
Wi-Fi otoscope connection information. Network and device details used to discover, connect to, and manage a compatible otoscope, such as local network addresses, connection status, supported device capabilities, and device identifiers provided by the otoscope. Some device information may be recorded locally with captured media as metadata.
Otoscope images and recordings. Live video frames received over the local Wi-Fi connection; photos, videos, and original source images that you choose to capture; and related local metadata. These images may contain sensitive or health-related information, including images of another person.
AI inputs and outputs. When you request an AI feature, the Application may process the currently displayed measurement values, a photo you select, relevant instructions sent with the request, and AI-generated descriptions, image annotations, or other responses. The specific data sent depends on the AI feature, as explained in Section 2.
Cloud AI credentials and preferences. If you use the otoscope Cloud AI feature, the Application stores the Gemini API key you provide in the device’s iOS Keychain. Feature settings, model preferences, feature access settings, and a record of cloud-upload consent may be stored locally using standard application preferences.
Anonymous authentication and security information. Firebase Anonymous Authentication and Firebase App Check may issue identifiers, tokens, or device/app attestation information to protect supported services and limit abuse.
Remote configuration and technical metadata. Firebase Remote Config may provide AI model settings, feature flags, limits, and other operational configuration. The Application and its service providers may process limited technical details, such as app and operating-system versions, model names, approximate request times, request status, error categories, and service usage information. AViTA does not intentionally include raw health measurement values in production diagnostic logs.
When you choose to request an AI interpretation of displayed health measurements, the Application transmits the relevant measurement values and analysis instructions to Google Firebase AI Logic / Gemini services. Depending on the service configuration, requests may include anonymous authentication, App Check, and service metadata needed to process and protect the request.
This feature does not require you to enter your name, telephone number, or email address into the AI prompt. Nevertheless, health measurements can still be sensitive, and technical identifiers may be handled by service providers.
AViTA does not store measurement values submitted for this AI interpretation on its own servers, in Firebase Database, or in Firebase Analytics as part of the described workflow. Google and Firebase may process inputs, responses, and technical data in accordance with their applicable terms and policies.
The otoscope image enhancement feature uses on-device AI models through Apple Core ML to enhance or upscale a selected image. Image enhancement and comparison are performed on the device rather than by uploading the image to a third-party AI server for that function.
The Application may temporarily hold the original image and processed results in device memory or local temporary files to support previews and comparison. User-selected captures and locally saved media remain under the Application’s local media management functions unless you choose to export or share them.
AI-generated image details may differ from the original recording. Image enhancement does not establish that an enhanced feature was present in the original scene.
Otoscope Cloud AI is an optional feature. When you actively select an image for cloud analysis, the Application sends that selected image, associated analysis instructions, and the API authentication information required for the request directly to Google Gemini API over HTTPS. The service may return textual observations and coordinates used by the Application to display visual annotations.
The Application does not automatically upload your entire otoscope library to Gemini simply because you connect an otoscope, browse Files, take photos, or use Local AI.
Before the first Cloud AI image submission, the Application presents a disclosure and asks for your agreement. The Application may remember this choice locally; each later analysis still requires an active user action. If you do not agree, you can continue to use features that do not require Cloud AI.
The Gemini API key that you provide is stored in iOS Keychain and is sent to Google as part of authenticated API requests. The current Cloud AI request uses the Gemini Interactions API with `store: false`, which requests that Google not retain the interaction as a reusable stored Interactions API object. This does not mean that Google performs no logging, retention, safety review, or other processing under its terms.
Google's handling of submissions differs by service type, project configuration, and applicable terms. In particular, Google's unpaid Gemini API services may use submitted content and generated responses for product improvement and may involve human review. Sensitive, confidential, or personal data should not be submitted to an unpaid service. Paid services have different data-use commitments and may still retain limited information for security, abuse prevention, or legal reasons. An API key supplied by a user does not, by itself, determine that the request is on a paid service.
For more information, see:
Gemini API Additional Terms of Service: https://ai.google.dev/gemini-api/terms
Gemini Interactions API documentation: https://ai.google.dev/gemini-api/docs/interactions-overview
Google Privacy Policy: https://policies.google.com/privacy
AI functions may be available only in certain versions or configurations of the Application. A feature being shown or enabled does not remove applicable privacy, age, geographic, contractual, or medical-use restrictions.
You may decline a cloud analysis request. Within the otoscope Cloud AI settings, you can remove your saved Gemini API key; doing so prevents further requests using that key from this device and resets the Application’s saved Cloud AI upload-consent status. Removing a key or deleting a local image does not automatically erase information already received by Google.
We use information as necessary to:
Discover, connect to, and communicate with supported Bluetooth and Wi-Fi devices.
Display measurement results and live otoscope images.
Capture, store, display, organize, share, export, and delete media at your direction.
Provide on-device image enhancement and visual comparison when you choose those features.
Send selected information for an optional third-party AI analysis when you initiate that feature and applicable consent requirements are satisfied.
Return AI-generated explanations and visual indicators for display in the Application.
Maintain app settings, provide remote configuration, authenticate and secure service requests, monitor operational errors, and prevent abuse.
Comply with legal obligations and protect the security and rights of users, AViTA, and others.
Health measurement values are not used for advertising or cross-context behavioral advertising through the described features.
The Application may use the following providers, depending on the functions enabled:
Google Firebase AI Logic / Gemini. AI interpretation of health measurement values.
Firebase Anonymous Authentication. Anonymous authentication for supported service access and security.
Firebase App Check. App integrity and abuse prevention.
Firebase Remote Config. Remote delivery of feature and service configuration.
Google Gemini API. Optional, user-initiated otoscope image analysis. Selected images and instructions are sent directly to this provider from the Application.
Apple operating-system services. The iOS Photos library, Keychain, networking, and related system capabilities when selected or required for the relevant feature. If you export media to Photos, that copy is subsequently managed by the system Photos library.
AViTA does not intend to use Google Analytics for Firebase or Firebase Crashlytics unless separately integrated and appropriately disclosed. Other services included in the broader Application must also be reflected in this Policy and the applicable App Store privacy disclosures.
Relevant provider information:
Google Privacy Policy: https://policies.google.com/privacy
Firebase Privacy and Security: https://firebase.google.com/support/privacy
Gemini API Additional Terms: https://ai.google.dev/gemini-api/terms
Information may be disclosed:
To service providers used to deliver the feature you selected, including Google Firebase and Gemini, as described above.
To a person or service you choose through an iOS sharing, export, or other user-directed action.
When reasonably necessary to comply with applicable law, legal process, lawful government requests, or to protect users and the security of the Application.
In connection with a legitimate corporate transaction, subject to applicable legal safeguards.
A local otoscope photo is not uploaded to Gemini merely because it is stored in the Application. Your decision to use Cloud AI is separate from the normal local recording and viewing functions.
AViTA does not sell personal information for monetary consideration, and the described features do not share health measurement values for cross-context behavioral advertising.
The Application is a native mobile app and does not use browser cookies for its core functions in the same manner as a website. Firebase and other necessary service technologies may use app identifiers, tokens, attestation data, or comparable mechanisms for service delivery and protection.
The Application does not intentionally deploy advertising-tracking technologies through the features described here unless separately implemented and disclosed. Where applicable law requires consent for non-essential technologies, that consent will be requested.
When you open this Policy in a web browser or Google Sites, the website provider may process technical information according to its own policies.
Local images, videos, and source files. Captured otoscope media and related metadata are generally retained within the Application's local storage until you delete them or remove the Application, subject to device and operating-system behavior. Temporary images and working files may be created for previews or AI comparison and are cleared as part of the relevant workflow, although temporary system storage cannot be guaranteed to disappear immediately in every circumstance.
Photos exported to the system library. Exported copies are stored separately in Apple's Photos library. Deleting the original file from the Application does not automatically remove that exported copy; you must manage it in Photos.
Local settings and credentials. Preferences and consent records are stored in application settings. A Gemini API key is stored in the iOS Keychain and can be removed using the Cloud AI settings. The behavior of Keychain data during device restoration, backup, and app removal depends on iOS security and storage mechanisms.
Firebase and Google records. Authentication identifiers, App Check records, Remote Config data, operational metadata, prompts, images, and generated responses may be processed or retained by their respective providers according to the applicable service and account terms. Setting `store: false` for Gemini Interactions does not prevent all provider-side retention. AViTA cannot delete all provider-controlled records simply by deleting a file from your device.
AViTA-controlled information. AViTA may retain information where required for legal compliance, security, incident response, or dispute resolution. You can contact AViTA to request information or deletion within AViTA's control, subject to applicable law and technical feasibility.
Depending on where a service provider operates, information sent to Firebase or Gemini may be processed outside the country or region in which you reside. Privacy protections may differ between jurisdictions. Where required, AViTA and the relevant service providers will apply appropriate legal transfer safeguards under applicable law.
Please consult the relevant Google documentation for information about Google's data processing and service locations.
Depending on the applicable law, you may have the right to access, correct, delete, restrict, or obtain a copy of certain personal information, object to certain processing, or withdraw consent for processing based on consent.
You may:
Choose not to use optional AI features.
Decline an otoscope Cloud AI image submission.
Remove the Gemini API key in Cloud AI settings to stop further requests through that key and reset the saved upload-consent status.
Delete locally stored otoscope images and recordings through the Application's media features.
Remove separately exported photos or videos from the iOS Photos library.
Manage system permissions in iOS Settings.
Contact AViTA about rights requests concerning information AViTA controls.
Uninstalling the Application may stop future processing on that device but does not automatically delete data already received by third-party services.
For privacy-related questions or requests, contact app_rd@avita.com.tw.
California residents may have rights under applicable California privacy laws, including rights to know, access, delete, and correct personal information; to opt out of qualifying sale or sharing; to limit certain uses of sensitive personal information; and not to be discriminated against for exercising protected rights, subject to statutory exceptions.
AViTA does not sell personal information for money or knowingly share it for cross-context behavioral advertising through the described Application features. To exercise an applicable California privacy right, contact app_rd@avita.com.tw.
he Application is intended to be operated by an adult. Cute Mode is an optional visual and audio experience, featuring playful animations and music, that a parent or caregiver may activate to help keep a child engaged while the adult operates the otoscope. Cute Mode does not provide a child-operated account, an independent child-facing AI interface, or automatic cloud image uploading.
Otoscope images captured while an adult uses the device may nevertheless contain information about a child and should be treated as sensitive. Parents and caregivers should use appropriate judgment and safeguards when recording or sharing images of minors.
Google Gemini API is subject to separate age and acceptable-use restrictions. The otoscope Cloud AI feature is not intended for minors, and users should not submit images or personal information relating to children to that service. Providing Cute Mode does not remove these restrictions.
If a parent or guardian believes that personal information relating to a child has been improperly processed, they may contact app_rd@avita.com.tw.
AViTA uses reasonable technical and organizational measures intended to protect information in the Application. Depending on the feature, these include iOS local app storage, Keychain for the user-provided Gemini API key, encrypted HTTPS communication with cloud services, and Firebase App Check for supported Firebase requests.
The Wi-Fi otoscope's local network transport and its security characteristics depend on the connected device and network configuration; users should avoid connecting through untrusted networks. No electronic system or network transmission can be guaranteed to be completely secure.
If AViTA becomes aware of a personal-data breach affecting information under its control, it will investigate and provide notifications to affected individuals and regulators where required by applicable law.
The Application's measurement displays, otoscope images, AI-enhanced images, and AI-generated descriptions or markers are provided for informational and general observation purposes only. They are not medical diagnoses, medical advice, treatment recommendations, or emergency guidance.
AI enhancement can introduce, remove, or alter visual details. Cloud AI can produce inaccurate observations, omit important findings, or place an annotation in the wrong location. AI results should not be relied upon as evidence of a medical condition or its absence, and must not replace assessment by a qualified healthcare professional.
If you have pain, bleeding, hearing changes, fever, an unusual measurement, or any other health concern, consult an appropriate healthcare professional. For emergencies, contact local emergency services.
The presence of this disclaimer does not authorize uses prohibited by third-party AI terms, including clinical or regulated medical use where such use is restricted.
AViTA may update this Policy to reflect changes to the Application, third-party providers, legal obligations, or data practices. We will update the “Last updated” date when a revision is published and provide additional notice or request renewed consent where required by law.
This version is effective from the publication date shown above and replaces the previous Privacy Policy as of that date.
For questions about this Privacy Policy, personal information, AI data handling, or privacy rights, please contact:
AViTA Corporation
Email: app_rd@avita.com.tw
App: AViTA Toolbox
Privacy Policy: https://sites.google.com/view/avita-toolbox
© 2026 AViTA Corporation. All rights reserved.