Life gets busy — give yourself one good therapeutic meal and one small wellness insight.

About PANguin

PANguin.app is operated by PANguin Limited. In 2024, PANguin Limited graduated from the Ideation Programme of the Hong Kong Science and Technology Parks Corporation (香港科技園公司). The one-year programme helps early-stage, technology-focused entrepreneurs in Hong Kong turn an innovative idea into a viable business. It provides seed funding, mentorship, training and co-working space, and supports members applying to the HKSTP Incubation Programme.

Reference sources

Public sites PANguin uses for educational content, the constitution test, and weather or solar-term features. Links open in a new tab.

Privacy and how your data is used

• • Sign-in uses your Google, Facebook or Apple account through Firebase Authentication.
• • Your constitution, dietary preferences, AI reports (including any photos you add), saved recipes and journal are stored in your own area of the Firebase database. Access rules limit reading to you and authorised PANguin administrators, and nothing is made public.
• • When you run an AI analysis or create a recipe, the relevant text is processed by DeepSeek and Google Gemini. Tongue photos are read by Google Gemini (if Gemini can't read one at the time, DeepSeek reads it instead); a face photo goes to DeepSeek with the rest of your consultation; recipe photos are made by Google Gemini. DeepSeek's servers are in mainland China. Pregnancy and medication details in a consultation are used for that request only and are not saved.
• • The tongue outline is worked out on your device only. It checks that a tongue photo shows a tongue, marks the tongue zones on your report and crops the photo to the tongue before the AI analysis. Google Gemini gets both the original photo and the enlarged tongue crop: it checks that the content is suitable, then reads the tongue. The outline is saved with the report.
• • Recipe Studio health needs, medication, kitchen and serving settings are never saved to your account. While you are signed in they are remembered on this device for next time, shown only to the same account, and cleared when you sign out.
• • While you are signed out, nothing is saved for you. Only your language choice and the result of a constitution test taken while signed out are kept in this browser, and the result moves to your account when you sign in.
• • Help improve tongue detection (optional): when you take a tongue photo you can tick to share it. Shared photos are stored separately under your account and used only to improve tongue detection — training and testing PANguin’s own tongue detection model. They are not used for anything else, made public or sold; deleted on request. You can delete shared photos or withdraw consent on Me at any time (withdrawing deletes them all), and deleting your account deletes them too; deleted photos are removed from our training data before the next training run. Everything works the same if you do not share.
• • Weather data comes from Hong Kong Observatory open data.
• • In production we may use Google Analytics to collect anonymised usage (for example which pages are viewed) so we can improve the product; it is not used to identify you.
• • You can delete any AI report from its page at any time. To remove your whole account and all Firebase data, see Delete your data.

Sharing your report

• • Sharing is your choice. Only you can see your reports. Nothing in a report leaves your account unless you tap Share on it and make a card or a link.
• • Cards show only your TCM pattern, how many recipes and acupoints you got, the PANguin logo and web address: no symptoms, age or photos. Our server draws the card when you ask and keeps nothing.
• • Links: when you make a link, we store a separate copy of just what you ticked. Anyone with the link can see that copy without signing in, and can pass it on. The link id is 22 random characters that can’t be searched for or listed, and shared pages ask search engines not to index them.
• • What a link includes: the TCM pattern and “when to see a doctor” always; recipes, acupoints and day-to-day advice unless you untick them. Your main concern, symptoms, the summary, age, sex, constitution and tongue photo are left out unless you tick them. A tongue photo is shared only cropped to the tongue outline, with no lips, teeth or face; face photos are never shared. Pregnancy and medication details are never saved, so they can’t be shared either.
• • Your name: by default they see only “A friend invited you”. Your name appears only if you tick Show my first name, and only the name you type.
• • Expiry and deletion: a link stops working after 7, 30 or 90 days (30 by default). After that nobody can open it, and the copy is deleted automatically soon after. You can delete a link at any time on Me › Shared links, and it stops working straight away. Deleting a report also deletes the links made from it, and deleting your account deletes all your links and shared recipes.
• • PDFs: when you tap Download PDF, our server reads that report once with your sign-in, turns it into an A4 PDF and sends it straight back. Neither the report nor the PDF is kept on the server. Like a printout, the PDF has the full report, including symptoms and any tongue or face photo, and its footer shows the report number and a QR code with your invite code. Once you send a PDF to someone they can pass it on, and we can’t recall it.
• • Link previews: when a link is pasted into WhatsApp or a similar app, that app fetches the pattern and the number of recipes and acupoints from us to show a preview image.
• • Emergencies: if a report mentions symptoms that may need urgent care, it can’t be shared as a card or link, so the advice to get help can’t get lost. You can still download a PDF or print it for a doctor.
• • Copies others keep: deleting a link can’t recall screenshots or cards someone has already saved. Please think before you share.
• • Invite codes: links you share carry a 12-character invite code. It comes from a one-way hash of your account id, so you have just one and it can’t be turned back into your id. If a friend opens PANguin from your link and signs up within 30 days, we record that you invited them. On Me › Invite friends you see how many friends joined, not who they are; they see only “A friend invited you” unless you choose to show your name on Me. There are no rewards for now. Deleting your account deletes your invite code and invite records.
• • Constitution match: a match link carries only your constitution name (for example “Qi Deficiency”), never your answers or scores.

Delete your data