Privacy Policy
How MOTILITY9 handles local clinical data and the limited anonymous wallet and Google Play purchase data used for Report Credits.
1. About MOTILITY9
MOTILITY9 is a 9-Gaze capture and documentation app developed by WONWINNIE. It helps authorized users capture nine gaze positions, keep examinations with the patient record, add examination notes, review previous examinations, and generate PDF reports.
MOTILITY9 does not provide automated diagnosis, treatment recommendations, or clinical interpretation.
2. Clinical data stored on the device
MOTILITY9 stores the clinical information needed for examinations locally on the device, including:
- Patient information entered by the user, such as a patient ID or code and patient name.
- Examination information, including examiner, refractive correction, prism correction, date, time, and examination status.
- The nine eye-region images retained for the 9-Gaze examination.
- Examination notes and report finalization status.
- Local trial-credit state and other local app state needed to operate the report workflow.
MOTILITY9 does not upload patient records, examination information, examination notes, examination images, or generated PDF reports to the WONWINNIE wallet service.
3. Camera and image handling
MOTILITY9 uses the device camera to capture each gaze position. The full camera frame is temporary and is used only to create the standardized eye-region image for the examination.
After the eye-region image is created successfully, the temporary full-frame image is deleted. The retained image is the reduced eye-region crop used in the result screen and PDF report.
This approach reduces facial exposure, but an eye-region image may still be identifiable and should be handled as patient information.
4. Anonymous Wallet and Report Credits
MOTILITY9 does not require a user account, email address, phone number, or personal login. Paid Report Credits are managed through an anonymous Wallet service.
The Wallet service may collect or process the following limited data:
- A pseudonymous Wallet identifier used to identify the Wallet.
- An app/device credential used to authenticate access to that Wallet.
- Wallet balance and credit-ledger records needed to grant and consume paid Report Credits.
- Report-unlock transaction identifiers used to prevent duplicate credit deductions.
- Network metadata, such as an IP address, when needed for rate limiting, abuse prevention, and service security.
These data are used for app functionality and, where applicable, fraud prevention, security, and transaction integrity. They are not used for advertising or marketing.
5. Google Play purchases
If a user chooses to purchase Report Credits through Google Play, MOTILITY9 receives purchase-related information needed to verify and fulfill the purchase. This may include a Google Play purchase token, product identifier, purchase status, and the resulting Wallet credit transaction.
MOTILITY9 sends the purchase token to the WONWINNIE backend, which uses Google Play services to verify the purchase before paid credits are granted. Purchase claims and credit-ledger records are retained as needed to prevent duplicate grants, replay, and double spending.
Payment card numbers, bank account details, and other payment-instrument credentials are processed by Google Play and are not received or stored by WONWINNIE.
6. Service providers and sharing
WONWINNIE does not sell MOTILITY9 user data and does not provide it to advertising or marketing partners.
Backend Wallet and purchase-verification functions use Google Cloud services, and Google Play is used to process and verify in-app purchases. These providers process data as needed to deliver the relevant infrastructure, billing, security, and verification services.
Clinical examination data stored locally by MOTILITY9 is not automatically sent to these backend services. A PDF or other exported clinical content is shared only when the user chooses a destination outside the app.
7. Security
MOTILITY9 encrypts sensitive database fields and examination image files stored by the app. Network communication with the WONWINNIE backend uses encrypted HTTPS connections, and the Android release configuration disallows cleartext network traffic.
The Wallet system is designed to avoid requiring personal identity information and uses authenticated credentials to protect Wallet access. Security controls also include measures intended to reduce duplicate transactions, replay, and automated abuse.
No device, network, or software system can guarantee absolute security, so users should also protect access to the device and follow their organization's security procedures.
8. Retention and deletion
Clinical examination data remains on the device until it is deleted through available app functions or removed with the app's local data. Cancelling an in-progress examination removes the related session data and image files.
MOTILITY9 does not provide cloud synchronization for patient records, examination images, examination notes, or PDF reports. WONWINNIE cannot restore deleted or lost clinical records from a cloud copy.
Anonymous Wallet, purchase, and credit-ledger records may be retained as needed to maintain the paid-credit balance, preserve transaction integrity, prevent duplicate grants or deductions, and operate and secure the service.
MOTILITY9 does not currently provide an in-app or web-based mechanism for requesting deletion of backend Wallet or purchase records.
9. PDF reports and user-directed sharing
After an examination is finalized, MOTILITY9 can generate a PDF report. If a user saves, prints, or shares that PDF, the selected device, printer, app, or service determines how the exported file is handled after it leaves MOTILITY9.
10. Clinical use and minors
MOTILITY9 is intended for healthcare professionals and other authorized users. Examination records may concern adults or minors.
Users are responsible for obtaining any consent or authorization required for examination imaging, record handling, storage, and sharing under applicable law and their organization's policies.
11. Changes to this policy
This policy may be updated when MOTILITY9 features or data practices change. The current version will be published on the official WONWINNIE website.