1. Google warns that "the password you just used was found in a data breach."
Answer: That is probably OK. Your data is securely stored on your personal device — someone will need to have access to both your device and your passcode to unlock your data. The breach warning refers to the passcode being reused elsewhere; it does not mean healthBot or your health records were exposed.
2. What is the difference between the free and Pro versions?
Answer: healthBot comes in two editions built from the same engine:
- Free — a limited, purely static version that runs entirely in your browser: no infrastructure, no account, no server round-trips. AI is bring-your-own-key (OpenAI-compatible providers and Gemini).
- Pro — the full version: everything in Free plus broader AI options (incl. web-search grounding), end-to-end encrypted session sharing, automatic PRS (polygenic risk) scoring with an ancestry picker, wearable sync (Open Wearables), the plugin platform, and deeper health-data integration.
Pro access is gate-based today (the owner grants access through the beta tester gate — no card required while testing). In Settings you'll find Upgrade to Pro (Stripe Checkout — card details never touch healthBot) and Manage subscription. Your health data always stays on your device either way.
3. Can I also import records of my loved one to my phone?
Answer: It depends on your version.
- Free: Each person's data stays on one device and one browser. You can use different browsers (or devices) for you and your loved one, but not the same browser on the same device for two people's data.
- Pro: Yes. Pro supports multiple members in a single browser, so you can import and manage your loved one's records on the same device, each in its own secure vault.
4. What devices do you support?
Answer: Any PC or mobile device with a web browser.
5. How is my data protected? What happens if I forget my passcode?
Answer: Your health data never leaves your device. healthBot stores everything locally, and (with at-rest encryption on, the default) your database and sensitive settings are encrypted with AES-256-GCM, using a key derived from your passcode (PBKDF2, 100,000+ iterations). The passcode itself is never stored and never sent to any server.
The consequence is intentional: there is no password reset and no recovery. If you forget your passcode, nobody — not us, not anyone — can decrypt your data. The only option is to erase all data and start fresh (unlock screen → Forgot your passcode? → type ERASE).
Prevention beats recovery: enable Backup & Restore in Settings to export an encrypted backup file, and keep your passcode in a password manager.
6. Can I open healthBot in two tabs at once?
Answer: You can open it, but only one tab at a time is the active "writer." The second tab shows an "Already open in another tab" screen and is read-only. Close one tab to continue. For two viewers at once, use two different browsers or devices.
7. My session expired — will I lose my data if I sign in again?
Answer: No. Sessions expire after about a week for security; when yours does, you'll simply see the access gate again. Just re-enter your email and access code and you'll pick up exactly where you left off. Your health data lives entirely on your own device, so signing in again changes nothing and loses nothing.
8. Does the AI keep a diary of my health automatically?
Answer: Yes. While the AI's intelligence features are still being built out, automatic recording is already one of the things it does best. Everything you share in your chats — your numbers, symptoms, notes, anything — is captured into a growing personal health diary. The more you talk with the AI, the fuller and more useful that diary becomes. Like all your healthBot data, it stays in your encrypted vault on your device.
1. 问：Google 提示“您刚使用的密码已在数据泄露中被发现”。
答： 这通常没有问题。您的数据安全地存储在您的个人设备上 —— 别人需要同时拿到您的设备和您的密码才能解锁数据。这个泄露警告指的是您的密码在别处被重复使用，并不意味着 healthBot 或您的健康记录被泄露。
2. 问：免费版和 Pro 版有什么区别？
答： healthBot 免费版和 Pro 版基于同一个引擎：
- 免费版 —— 精简、完全静态的版本，完全运行在您的浏览器中：没有基础设施、没有账户、没有任何服务器往返。AI 需要自带密钥（支持 OpenAI 兼容服务商和 Gemini）。
- Pro 版 —— 完整版本：包含免费版的一切功能，外加更丰富的 AI 选项（含联网搜索）、端到端加密的会话分享、基因数据上传后自动计算多基因风险评分（PRS，含祖源选择器）、可穿戴设备同步（Open Wearables）、插件平台，以及更深度的健康数据整合。
Pro 目前通过门禁授予（测试期间免信用卡，由所有者通过测试者门禁发放权限）。在设置中可以找到 升级到 Pro（Stripe 结账页面 —— 卡号信息不经过 healthBot）和 管理订阅。无论哪种版本，您的健康数据始终只保存在您的设备上。
3. 问：我能不能把家人的记录也导入到我的手机里？
答： 取决于您的版本。
- 免费版： 每个人的数据只保存在一台设备和同一浏览器上。您可以为亲人和自己使用不同的浏览器（或设备），但不能在同一设备的同一浏览器中管理两人的数据。
- 专业版： 可以。专业版支持在同一浏览器中管理多个成员，因此您可以在同一设备上导入并管理亲人的记录，各自拥有独立的安全保险库。
4. 问：支持什么设备？
答： 任何装有浏览器的 PC 或移动设备。
5. 问：我的数据是如何保护的？如果忘记密码怎么办？
答： 您的健康数据从不离开您的设备。healthBot 将所有数据保存在本地，并且（默认开启静态加密时）您的数据库和敏感设置使用 AES-256-GCM 加密，密钥由您的密码通过 PBKDF2（100,000+ 次迭代）派生。密码本身从不存储，也从不发送到任何服务器。
这有一个刻意的后果：没有密码重置，也没有找回功能。如果您忘记密码，任何人都无法解密您的数据 —— 包括我们也一样。唯一的选择是清除所有数据并重新开始（在解锁页面点击“忘记密码？”，输入 ERASE 确认）。
预防胜于补救： 在设置中开启备份与恢复，导出加密的备份文件，并把您的密码保存在密码管理器中。
6. 问：我可以同时在两个标签页中打开 healthBot 吗？
答： 可以打开，但同一时间只有一个标签页是“写入方”。第二个打开的标签页会显示“已在另一个标签页中打开”的界面，并处于只读状态。关闭其中一个标签页即可继续。如果确实需要同时两个窗口查看，请使用两个不同的浏览器或设备。
7. 问：我的会话过期了 —— 重新登录会丢失数据吗？
答： 不会。出于安全考虑，会话约一周后过期；过期后您只会再次看到访问门禁页面。只需重新输入您的邮箱和访问码，就能从上次离开的地方继续。您的健康数据完全保存在您自己的设备上，重新登录不会改变、也不会丢失任何内容。
8. 问：AI 会自动为我的健康写日记吗？
答： 会的。在 AI 的智能功能仍在不断完善的同时，自动记录已经是它最擅长的能力之一。您在聊天中提到的所有内容 —— 各项指标、症状、笔记等 —— 都会被记录到一本不断增长的个人健康日记中。您与 AI 交流得越多，这本日记就越完整、越有用。和您所有的 healthBot 数据一样，它保存在您设备上的加密保险库中。