Policy updated: October 14, 2026. English translation: October 29, 2026.
KneeDaily is an academic reading tool for knee and sports medicine professionals, supporting literature study, academic exchange and personal reading management. It does not provide clinical diagnosis, treatment decisions or emergency services.
1. Information we collect
- Registration: username, password (stored only as a one-way hash), display name, hospital or institution, and an optional phone number.
- Contact and support: contact details you choose to provide with feedback or password-recovery requests, such as email, phone number or WeChat details.
- Member access: your sign-in status determines access to member content. A registered account is required; there are no in-app purchases, subscriptions or paid features.
- Article-library state: signed-in users' favorites, read-later selections, read status, important flags, preset tags and their update times sync to the server for use across devices.
- Device information: an APNs device token for push notifications. Feedback may include your device model, operating-system version and app version for troubleshooting.
- Account security: registration, sign-in and push-device registration requests record the IP address, approximate region inferred from that address, User-Agent, device type and app version for security, unusual-login investigation and administration. KneeDaily does not request location permission, read GPS data or use this information for advertising tracking.
- Interactions: historical comments, comments that older clients may still submit, and feedback and contact details you submit. Comments record an IP address for content safety and abuse investigation. Current app versions have no public comment entry point; older versions may still display or submit comments.
- Searches and server logs: PubMed search terms are sent to the server as request parameters and may appear in restricted access logs until those logs rotate. Server and gateway logs may also record IP addresses, User-Agent, request time, response status and device metadata for security, abuse prevention and troubleshooting, not advertising tracking or user profiling.
- Traffic and load statistics: access time, IP address and estimated region, page or API path, response status, duration and transferred bytes help identify unusual traffic and overload. These statistics exclude query parameters, passwords, sign-in credentials, cookies and request bodies. IP regions are estimated using a local server database; visitor IP addresses are not sent to a third party for this purpose, and GPS is not used.
2. How we use information
Registration information supports authentication and member access. Article-library state preserves your reading choices across devices. Device tokens are used only for academic-content notifications. Account and device records support security, administration and troubleshooting. Historical comments, feedback, searches and security logs support compatibility with existing features, customer support, abuse prevention, troubleshooting and security audits. Aggregate interactions, such as article reading counts, may inform content presentation and operational analysis. They are not used for advertising or tracking across apps.
3. Local files and books
Imported PDF, EPUB and TXT files, bookshelf reading positions, private notes, highlights and excerpts are stored on your device and currently do not sync through a KneeDaily account. Copies are provided to another app or location only when you choose to export or share an original file, annotated copy, notes or bookshelf backup.
Signed-in article-library favorites, read-later selections, read status, important flags, preset tags and update times still sync to the server. This does not include imported book files or private note text. KneeDaily does not distribute copyrighted full-text PDFs. Import only files you own or have permission to use.
4. Storage and security
Server data is stored on controlled servers. Passwords use a PBKDF2 one-way hash, and client-server communication uses HTTPS. We do not sell personal information or use it for advertising tracking. Structured account-security and client-event logs are currently retained for 190 days. Application-container access logs rotate by size, with a maximum of three files of 10 MB each; older logs are removed during rotation.
Traffic and load statistics are available only to authorized administrators. Detailed traffic records and gateway access logs are retained for no more than seven days and are also subject to storage limits. De-identified daily aggregates are retained for no more than 90 days.
5. Third-party services and public sources
- Literature metadata comes mainly from public databases such as PubMed/NCBI and Crossref, and publishers' public pages.
- Push notifications use Apple Push Notification service (APNs).
- Personal accounts, private notes and locally imported files are not used to write articles.
6. Sign-out and permanent account deletion
Sign-out: signing out removes the current device's sign-in state. It does not delete your server account, locally saved favorites, notes or imported files. Whole-book offline downloads that require sign-in are cleared when you sign out or change accounts. Temporary chapter caches are isolated by sign-in session and have a size limit.
Permanent deletion: in the current iOS app, open Me → Profile Menu → Account & Sign In → Delete Account Permanently. Some older versions use an entry in About. Once deletion is confirmed, the server account and associated reading state, push devices, comments, client events, feedback and contact details are permanently deleted. Local data is handled according to the choices on the deletion screen. Account-security and network logs retained for minimum security purposes have available account links removed and are kept for the periods above.
Backup protection: deletion records are checked when restoring server backups so that deleted accounts do not reappear. These records contain no sign-in credentials and are used only for restoration safeguards and evidence of deletion.
7. Contact
Contact kimbio@sina.com with questions. Updated versions of this policy will appear on this page.