一、适用范围
本规则适用于知芽成长在宝宝资料、成长记录、相册、健康档案、AI 问答、智能儿保、疫苗提醒、家庭协作和分享等功能中处理 14 周岁以下儿童个人信息的活动。本规则是《知芽成长隐私政策》的组成部分；如保护标准不一致，以更有利于儿童权益保护的规则为准。
1. Scope
These Rules apply to Zhiya Growth processing personal information of children under 14 in baby profiles, growth records, albums, health files, AI Q&A, intelligent child-care observations, vaccination reminders, family collaboration, sharing, and related functions. These Rules form part of the Zhiya Growth Privacy Policy. If protection standards differ, the rule more favorable to children rights protection will prevail.
二、监护人同意与责任
您添加宝宝资料、上传儿童照片或健康档案、邀请家庭成员查看儿童资料时，应确认您是儿童父母或其他法定监护人，或已取得监护人合法授权。您应谨慎管理家庭成员权限，避免无关人员访问儿童信息。
2. Guardian Consent and Responsibility
When adding baby profiles, uploading children photos or health files, or inviting family members to view children information, you should confirm that you are the child's parent or other legal guardian, or have obtained lawful authorization from the guardian. You should manage family member permissions carefully to avoid unrelated access to children information.
三、最小必要收集
我们仅为实现育儿记录和成长服务所必需而收集儿童信息，包括昵称/代号、出生日期或预产期、性别、成长测量数据、喂养睡眠等日常记录、疫苗和体检资料、您主动上传的照片/文件。我们不要求填写真实姓名，不主动收集身份证件、人脸模板、精确定位轨迹等非必要敏感信息。
3. Minimum Necessary Collection
We only collect children information necessary for parenting records and growth services, including nickname or alias, birth date or expected date, gender, growth measurements, feeding and sleep records, vaccination and checkup materials, and photos or files actively uploaded by you. We do not require real names and do not actively collect unnecessary sensitive information such as identity documents, facial templates, or precise location tracks.
四、使用目的限制
儿童信息仅用于提供成长记录、提醒、报告整理、AI 辅助问答、健康档案管理、家庭协作、安全保护和法律要求的审计。我们不会出售、出租儿童个人信息，不会将儿童个人信息用于商业广告定向投放。
4. Purpose Limitation
Children information is used only for growth records, reminders, report organization, AI-assisted Q&A, health file management, family collaboration, security protection, and legally required audits. We will not sell or rent children personal information and will not use it for targeted commercial advertising.
五、共享与委托处理
因云存储、短信、推送、AI/OCR/语音识别、支付或安全服务需要委托第三方处理儿童相关数据时，我们会遵循最小必要原则，并通过合同、安全评估、权限控制和日志审计约束第三方。未经监护人授权或法律允许，我们不会向无关第三方披露儿童个人信息。
5. Sharing and Entrusted Processing
When cloud storage, SMS, push notifications, AI/OCR/speech recognition, payments, or security services require third-party processing of children-related data, we follow the minimum necessary principle and restrict third parties through contracts, security assessments, permission controls, and log audits. Without guardian authorization or legal permission, we will not disclose children personal information to unrelated third parties.
六、安全保护措施
我们对儿童信息采取高敏感等级保护，包括访问权限控制、传输加密、敏感字段加密或脱敏、短期签名 URL、操作日志审计、异常访问监控、员工权限最小化和数据备份恢复机制。
6. Security Measures
We apply high-sensitivity protection measures to children information, including access permission control, transmission encryption, sensitive-field encryption or desensitization, short-term signed URLs, operation log audits, abnormal access monitoring, least-privilege employee access, and backup recovery mechanisms.
七、监护人权利
监护人可依法访问、复制、更正、删除儿童信息，撤回授权，删除宝宝资料，移除家庭成员权限，注销账号或要求停止处理。为防止冒用，我们可能要求验证账号控制权和监护关系。
7. Guardian Rights
Guardians may access, copy, correct, delete, and withdraw authorization for children information, delete baby profiles, remove family member permissions, cancel accounts, or request that processing stop. To prevent misuse, we may require verification of account control and guardianship.
八、删除与响应时限
您可通过 App 内入口或联系 support@dongyuanat.com 要求删除儿童信息。我们将在完成身份验证后依法及时处理；通常在 15 个工作日内答复，紧急安全问题会优先处理。法律法规要求留存的交易、安全和审计记录将在法定期限内保存，并采取隔离和最小访问措施。
8. Deletion and Response Time
You may request deletion of children information through in-app entries or by contacting support@dongyuanat.com. We will process requests promptly according to law after identity verification, usually responding within 15 working days. Urgent security issues will be prioritized. Transaction, security, and audit records required by law will be retained for the statutory period and protected through isolation and minimum access controls.