Local-first, with optional cloud sync you control.
By default, Oncora stores everything you enter — check-ins, your profile, photos, treatments, labs, and settings — locally on your device, and the app works fully without an account. Some optional features connect to the internet when you choose to use them — an account with cloud sync, the AI companion, and membership purchases — and each is described below.
You can optionally create an account (email & password, Sign in with Apple, or Google) to back up your health log and sync it between your devices. If you do, we collect your email address and the name your sign-in provider shares, solely to operate your account. While cloud sync is active, a copy of your health log — check-ins, treatments, lab results, appointments, side effects, fevers, node measurements, questions, and the clinical part of your profile (name, age, cancer type, treatment status, cycle, care contact) — is stored in our database (Google Firebase), linked to your account, and protected so only your signed-in account can read it. Device settings, your app lock, photos, and values imported from Apple Health are never uploaded. Signing out stops syncing; deleting your account permanently deletes the cloud copy. We never sell your information and never use it for advertising.
Photos you attach stay on your device. They are never uploaded to us and are not included in cloud sync. They are only included in an export file when you explicitly choose the “include photos” option when exporting, and they leave the app only if you share or save that file yourself.
You can record a voice note during an appointment. The recording is saved on your device only — it is never uploaded to us and is never included in cloud sync or export files. Please ask your doctor before recording; in some places recording someone without their permission is against the law. If you tap “Turn into text”, that one recording is sent to our server and relayed to a third-party AI provider (Google Gemini) to be transcribed. Google does not use it to train its models and does not retain it long-term; we do not store the recording on our server. The resulting transcript is text you can read, edit away, or delete, and — unlike the recording — it is included in cloud sync and exports. Nothing is sent unless you tap to transcribe, and you can delete the recording or the transcript at any time.
If you choose to connect Apple Health or Health Connect, Oncora reads the measurements you approve (such as weight and body temperature) to pre-fill your check-ins. Values imported from Apple Health are kept on this device and removed from cloud sync and exported backup files. Health data is never used for advertising or marketing, is never sold, and is never shared with third parties. Oncora never writes data back to Apple Health or Health Connect without your permission.
Oncora includes an optional AI companion. Before it can be used, you are shown a disclosure and must explicitly agree. When you send it a message, that message is sent to our server, which relays it to a third-party AI provider to generate a reply. Messages carry an anonymous device identifier used only for rate-limiting — not your name or account identity. Please avoid including details you would not want processed this way. If you do not use the AI companion, no messages are sent.
Oncora shows no ads. The optional AI companion and cloud sync are funded by Oncora Membership, an auto-renewing subscription sold through the App Store or Google Play. Payments, renewals, and cancellations are handled entirely by the app store — we never see or store your card details. Your membership status is kept on your device. We do not use your health data for advertising, and we do not sell your information. See Apple and Google for how the stores handle payment data.
If you enable reminders (check-ins, appointments, medications, or the cycle nadir alert), the app schedules local notifications on your device. These are generated on-device and are not routed through any server.
When you generate a report, export, or backup file, it is created on your device and only leaves the app if you explicitly choose to share or save it. Once shared, its contents are subject to the privacy of whatever service or person you send it to.
You can remove individual entries within the app at any time, or erase everything on this device from Settings. If you created an account, deleting it in Account settings permanently removes your cloud copy as well. Uninstalling the app permanently removes all locally stored data from your device.
Oncora is not directed at children under 13. If you believe a child has entered personal health information, please remove it within the app or uninstall the app.
If you have questions about this Privacy Policy, contact the Oncora team at wksunshine@gmail.com.
Last updated: July 2026
本機優先，雲端同步由您自行選擇。
預設情況下，Oncora 將您輸入的所有內容——記錄、個人資料、照片、治療、檢驗及設定——儲存在您的裝置本地，無需帳號即可完整使用本應用程式。部分選用功能會在您選擇使用時連上網路——帳號與雲端同步、AI 夥伴，以及會員購買——各項功能說明如下。
您可以選擇建立帳號（電子郵件與密碼、透過 Apple 登入或 Google 登入），以備份您的健康紀錄並在多部裝置間同步。若您建立帳號，我們會收集您的電子郵件地址及登入服務商提供的姓名，僅用於營運您的帳號。雲端同步啟用期間，您健康紀錄的副本——記錄、治療、檢驗結果、約診、副作用、發燒、淋巴結測量、問題清單，以及個人資料中的臨床部分（姓名、年齡、癌症類型、治療狀態、週期、照護聯絡人）——會儲存在我們的資料庫（Google Firebase）中，與您的帳號連結，且僅有您登入的帳號能讀取。裝置設定、應用程式鎖定、照片，以及從 Apple 健康匯入的數值絕不會上傳。登出即停止同步；刪除帳號會永久刪除雲端副本。我們絕不出售您的資訊，也絕不將其用於廣告。
您附加的照片僅保存在您的裝置上，絕不會上傳給我們，也不包含在雲端同步中。只有當您在匯出時明確選擇「包含照片」選項，照片才會納入匯出檔案，且只有在您自行分享或儲存該檔案時才會離開應用程式。
您可以在門診時錄製語音記錄。錄音僅儲存在您的裝置上——不會上傳給我們，也不會納入雲端同步或匯出檔案。錄音前請先徵得醫師同意；在部分地區，未經對方許可錄音是違法的。若您點選「轉成文字」，該段錄音會傳送到我們的伺服器，再轉送給第三方 AI 服務商（Google Gemini）進行轉換。Google 不會將其用於訓練模型，也不會長期保留；我們的伺服器同樣不會儲存錄音。產生的逐字稿是您可以閱讀、刪除的文字內容，且與錄音不同，逐字稿會納入雲端同步與匯出。除非您點選轉換，否則不會傳送任何內容，您也可以隨時刪除錄音或逐字稿。
若您選擇連接 Apple 健康或 Health Connect，Oncora 會讀取您核准的測量值（例如體重與體溫）以預先填入您的記錄。從 Apple 健康匯入的數值會保留在此裝置上，並會從雲端同步與匯出備份檔案中移除。健康資料絕不會用於廣告或行銷、絕不出售，也絕不與第三方分享。未經您的許可，Oncora 絕不會將資料寫回 Apple 健康或 Health Connect。
Oncora 提供選用的 AI 夥伴。在使用前，會先向您顯示說明，且您必須明確同意。當您傳送訊息時，該訊息會傳送至我們的伺服器，再轉送給第三方 AI 服務商以生成回覆。訊息僅附帶用於流量限制的匿名裝置識別碼——不含您的姓名或帳號身分。請避免輸入您不希望以此方式處理的內容。若您不使用 AI 夥伴，則不會傳送任何訊息。
Oncora 不顯示任何廣告。選用的 AI 夥伴與雲端同步由 Oncora 會員資格支應，這是一項透過 App Store 或 Google Play 銷售的自動續訂訂閱。付款、續訂與取消皆完全由應用程式商店處理——我們絕不會看到或儲存您的付款卡資訊。您的會員狀態保存在您的裝置上。我們不會將您的健康資料用於廣告，也不會出售您的資訊。商店如何處理付款資料，請參閱 Apple 與 Google 的隱私權政策。
若您啟用提醒（記錄、約診、用藥或週期低點提醒），應用程式會在您的裝置上排程本地通知。這些通知由裝置本身產生，不會經過任何伺服器。
當您生成報告、匯出或備份檔案時，檔案在您的裝置上建立，只有在您明確選擇分享或儲存時才會離開應用程式。分享後，其內容受您傳送對象或服務的隱私政策約束。
您可以隨時在應用程式中移除個別資料，或從設定中清除此裝置上的所有資料。若您建立了帳號，在帳號設定中刪除帳號也會永久移除您的雲端副本。解除安裝應用程式將永久移除裝置上所有本地儲存的資料。
Oncora 並非針對 13 歲以下兒童設計。若您認為有兒童輸入了個人健康資訊，請於應用程式內移除，或解除安裝應用程式。
若您對本隱私政策有疑問，請聯絡 Oncora 團隊：wksunshine@gmail.com。
最後更新：2026 年 7 月