ZHIYA GROWTH LEGAL / 知芽成长法律文档
我们如何收集、使用、存储、保护和共享您的个人信息及儿童个人信息How we collect, use, store, protect, and share your personal information and children personal information.
知芽成长由上海洞元网络科技有限公司提供。我们深知个人信息和儿童个人信息对您家庭的重要性，将按照《个人信息保护法》《数据安全法》《网络安全法》《未成年人保护法》《儿童个人信息网络保护规定》等要求处理信息。
本政策适用于您使用知芽成长 App、小程序、H5、后台服务、AI 能力、成长记录、健康档案、家庭协作、支付和客服等服务时的信息处理活动。
若某项功能存在单独授权弹窗、专项规则或第三方服务说明，该等说明与本政策共同构成完整隐私规则；不一致时，以更能保护您权益和更贴近具体功能的规则为准。
Zhiya Growth is provided by Shanghai Dongyuan Network Technology Co., Ltd. We understand the importance of personal information and children personal information to your family, and will process information in accordance with applicable laws and regulations including the Personal Information Protection Law, Data Security Law, Cybersecurity Law, Law on the Protection of Minors, and rules on children personal information protection.
This Policy applies when you use the Zhiya Growth app, mini programs, H5 pages, backend services, AI capabilities, growth records, health files, family collaboration, payments, customer support, and related services.
If a function has a separate authorization prompt, special rule, or third-party service notice, those notices and this Policy together form the complete privacy rules. In case of inconsistency, the rule that better protects your rights and better fits the specific function will prevail.
2.1 账号与身份信息：手机号、验证码校验结果、登录密码加密摘要、微信 OpenID/UnionID、Apple ID 标识符、昵称、头像、账号状态、注册时间、登录记录。
2.2 宝宝与家庭信息：宝宝昵称或代号、生日/预产期、性别、头像、身高、体重、头围、喂养、睡眠、排便、体温、疫苗、体检、过敏/回避食物、家庭成员关系和协作权限。宝宝真实姓名不是必填项，我们建议使用昵称或代号。
2.3 用户主动上传内容：文字记录、AI 对话、图片、相册、音频、PDF、表格、体检报告、检验单、疫苗本、成长档案、分享内容和反馈工单。
2.4 设备与日志信息：设备型号、操作系统、App 版本、网络状态、IP 地址、请求时间、接口路径、错误日志、风控事件、支付状态变化、推送送达状态、必要的设备标识符或安装标识。
2.5 支付与权益信息：订单号、商品/权益名称、金额、支付渠道、交易状态、退款状态、Apple IAP 票据校验结果、宝豆余额与流水。我们不会保存完整银行卡号或支付账户密码。
2.6 客服与安全信息：您提交的联系方式、问题描述、截图、沟通记录、账号核验信息、风险处置记录。
2.1 Account and identity information: mobile number, verification code results, encrypted password digest, WeChat OpenID/UnionID, Apple ID identifier, nickname, avatar, account status, registration time, and login records.
2.2 Baby and family information: baby nickname or alias, birth date or expected date, gender, avatar, height, weight, head circumference, feeding, sleep, stool, body temperature, vaccination, checkups, allergies or avoided foods, family member relationships, and collaboration permissions. A baby's real name is not required, and we recommend using a nickname or alias.
2.3 Content actively uploaded by users: text records, AI conversations, images, albums, audio, PDFs, spreadsheets, medical reports, lab reports, vaccination books, growth files, shared content, and feedback tickets.
2.4 Device and log information: device model, operating system, app version, network status, IP address, request time, API path, error logs, risk-control events, payment status changes, push delivery status, and necessary device identifiers or installation identifiers.
2.5 Payment and benefit information: order number, product or benefit name, amount, payment channel, transaction status, refund status, Apple IAP receipt verification results, bean balance, and bean ledger. We do not store complete bank card numbers or payment account passwords.
2.6 Customer support and security information: contact information, issue descriptions, screenshots, communication records, account verification information, and risk handling records that you submit.
3.1 提供核心服务：创建账号、添加宝宝、记录成长数据、生成成长报告、整理健康档案、提供 AI 育儿问答、图片和文件理解、疫苗计划、家庭协作和通知提醒。
3.2 个性化与体验优化：根据宝宝月龄、历史记录、家庭偏好和已授权信息提供更贴合的提示、提醒和内容整理。我们不会将儿童个人信息用于商业广告定向投放。
3.3 安全与风控：识别异常登录、设备风险、刷量、接口滥用、支付风险、内容安全风险和账号盗用风险。
3.4 支付与权益交付：创建订单、校验支付、发放宝豆或会员权益、处理退款和对账。iOS 虚拟商品或数字权益遵守 Apple IAP 规则。
3.5 合规与审计：履行法律法规、监管要求、争议处理、审计追溯和保护用户、儿童及平台合法权益。
3.6 AI 质量优化：默认不将可识别个人身份的儿童信息用于公开模型训练。若未来需要使用脱敏数据进行质量改进，我们会依法进行匿名化/去标识化处理，并在需要时取得您的单独同意或提供关闭入口。
3.7 匿名群体学习为可选功能，仅在您主动开启对应同意后处理差分隐私保护后的训练贡献；关闭后不再提交新的贡献。
3.1 To provide core services: creating accounts, adding babies, recording growth data, generating growth reports, organizing health files, providing AI parenting Q&A, image and file understanding, vaccination plans, family collaboration, and reminders.
3.2 Personalization and experience improvement: providing more relevant prompts, reminders, and content organization based on baby age, historical records, family preferences, and authorized information. We do not use children personal information for targeted commercial advertising.
3.3 Security and risk control: detecting abnormal logins, device risks, traffic abuse, API misuse, payment risks, content safety risks, and account theft risks.
3.4 Payment and benefit delivery: creating orders, verifying payments, issuing beans or membership benefits, processing refunds, and reconciliation. iOS virtual goods and digital benefits comply with Apple IAP rules.
3.5 Compliance and audit: fulfilling laws, regulatory requirements, dispute handling, audit traceability, and protecting the lawful rights of users, children, and the platform.
3.6 AI quality improvement: by default, we do not use identifiable children information to train public models. If de-identified data is needed for quality improvement in the future, we will anonymize or de-identify it according to law and obtain separate consent or provide an opt-out entry when required.
3.7 Anonymous group learning is optional. We process differentially private training contributions only after you actively enable the corresponding consent. Turning it off stops new contributions.
4.1 相机权限：用于拍摄宝宝照片、上传健康档案、识别报告或记录成长瞬间。拒绝后可继续使用不依赖拍摄的功能。
4.2 相册/照片权限：用于选择或保存成长相册、报告截图、头像和分享图片。iOS 写入相册会在系统弹窗中说明用途。
4.3 麦克风权限：用于语音输入、哭声或音频线索分析等您主动触发的场景。未触发相关功能时不会录音。
4.4 通知权限：用于疫苗提醒、成长记录提醒、家庭协作提醒、订单或系统消息。您可在系统设置中关闭。
4.5 网络权限：用于登录、同步记录、AI 服务、支付、云存储和推送。
4.6 剪贴板、定位、通讯录、日历等权限：当前核心功能默认不主动读取；如未来新增，会在触发前说明目的并依法征得授权。
4.1 Camera: used to take baby photos, upload health files, identify reports, or record growth moments. If denied, functions that do not rely on camera remain available.
4.2 Photos/album: used to select or save growth album photos, report screenshots, avatars, and sharing images. On iOS, the system prompt explains the purpose when saving to photos.
4.3 Microphone: used for voice input, crying or audio clue analysis, and other scenarios actively triggered by you. We do not record audio unless the relevant function is triggered.
4.4 Notifications: used for vaccination reminders, growth record reminders, family collaboration reminders, order messages, and system messages. You may turn them off in system settings.
4.5 Network: used for login, data synchronization, AI services, payments, cloud storage, and push notifications.
4.6 Clipboard, location, contacts, calendar, and similar permissions: current core functions do not actively read them by default. If added in the future, we will explain the purpose before triggering and obtain authorization according to law.
5.1 本产品核心围绕婴幼儿和儿童成长记录。我们将儿童个人信息作为高敏感等级数据处理，遵循最小必要、监护人同意、目的限定、安全保障和可删除原则。
5.2 添加宝宝、记录儿童健康档案、上传儿童照片或共享给家庭成员前，您应确认自己是父母或其他法定监护人，或已取得监护人的合法授权。
5.3 我们不要求填写儿童真实姓名，不主动收集儿童身份证件号码、人脸识别模板、精确定位轨迹等非必要敏感信息。
5.4 监护人可查看、更正、删除儿童信息，移除家庭成员权限，注销账号或要求删除宝宝资料。我们将在身份验证后依法及时处理。
5.5 我们不会出售、出租儿童个人信息，不会将儿童个人信息用于商业广告定向投放，也不会在未取得合法授权的情况下向无关第三方共享。
5.6 宝宝成长事实、健康档案和家庭记录仅向具备该宝宝访问权限的家庭成员开放。个人 AI 聊天默认仅当前账号可见；主养人以及被主养人单独授予“小队聊天”权限的成员，可查看同一宝宝范围内的家庭聊天。您可在家庭成员页面随时调整或撤回该权限。
5.1 This product focuses on infant and child growth records. We treat children personal information as highly sensitive data and follow the principles of minimum necessity, guardian consent, purpose limitation, security protection, and deletion availability.
5.2 Before adding baby profiles, recording children health files, uploading children photos, or sharing them with family members, you should confirm that you are the parent or other legal guardian, or have obtained lawful authorization from the guardian.
5.3 We do not require children real names, and do not actively collect unnecessary sensitive information such as children identity document numbers, facial recognition templates, or precise location tracks.
5.4 Guardians may view, correct, and delete children information, remove family member permissions, cancel accounts, or request deletion of baby profiles. We will process such requests after identity verification according to law.
5.5 We will not sell or rent children personal information, will not use children personal information for targeted commercial advertising, and will not share it with unrelated third parties without lawful authorization.
5.6 Baby growth facts, health files, and family records are available only to family members who have access to that baby. Personal AI chats are visible only to the current account by default. The primary caregiver and members separately granted Team chat access by the primary caregiver may view family chats for the same baby. You can change or revoke this permission on the Family Members page.
6.1 为实现服务，我们可能委托或接入第三方服务，包括云存储、短信、推送、支付、Apple 登录、微信登录/支付、AI 模型、OCR/语音识别、崩溃分析和基础安全服务。我们会按照最小必要原则传输信息，并通过合同、权限控制、加密、日志审计等措施约束第三方。
6.2 支付服务会处理订单号、金额、商品名称、支付状态、退款状态等必要交易信息；Apple IAP 会处理票据校验和交易标识。
6.3 云存储服务用于保存您主动上传的图片、音频、文件和报告，访问会使用签名 URL、鉴权和权限校验。
6.4 在首次向第三方 AI 服务发送数据前，我们会通过独立弹窗明确列出接收方和发送的数据范围，并取得您的明确同意。您拒绝后，相关数据不会发送，不影响记录、档案等不依赖第三方 AI 的功能；您可在“我的-隐私与权限”随时撤回。
6.5 当您主动使用相应 AI 功能时，我们会按实现该功能所需的最小范围向第三方服务传输数据：DeepSeek 处理您输入的文字问题、必要的近期对话，以及与回答直接相关的宝宝月龄、成长或健康记录；火山引擎（含豆包/Ark 能力）处理您主动提交用于图片理解、报告解析或语音识别的图片、音频、文件内容及必要上下文，也可能处理用于语音播报的回答文字；Microsoft Edge 在线语音服务仅在语音播报链路启用或作为可用回退时处理待合成的回答文字。具体使用取决于您主动触发的功能和当时启用的服务配置。
6.6 我们不会为了模型调用主动向上述 AI 服务发送您的手机号、邮箱、Apple/微信登录凭证、设备广告标识符或支付信息。数据通过 HTTPS/TLS 传输。我们通过供应商审核、合同和安全措施，要求上述第三方提供与本政策相同或同等的个人信息保护。
6.7 除获得您同意、履行合同必要、保护重大合法权益、依法披露或监管要求外，我们不会向第三方共享可识别个人身份的信息。
6.1 To provide services, we may entrust or connect to third-party services, including cloud storage, SMS, push notifications, payments, Apple login, WeChat login/payment, AI models, OCR/speech recognition, crash analysis, and basic security services. We transmit information under the minimum necessary principle and restrict third parties through contracts, permission controls, encryption, and log audits.
6.2 Payment services process necessary transaction information such as order numbers, amounts, product names, payment status, and refund status. Apple IAP processes receipt verification and transaction identifiers.
6.3 Cloud storage services store images, audio, files, and reports that you actively upload, and access is controlled by signed URLs, authentication, and permission checks.
6.4 Before any data is first sent to a third-party AI service, a separate prompt identifies the recipient and data scope and asks for your explicit permission. If you refuse, the data is not sent and non-AI records and files remain available. You may withdraw permission anytime under Profile - Privacy & Permissions.
6.5 When you actively use the relevant AI function, we transmit only the data necessary to provide that function: DeepSeek processes your text prompt, necessary recent conversation context, and baby age, growth, or health records directly relevant to the answer; Volcano Engine services, including Doubao/Ark capabilities, process images, audio, file content, and necessary context that you actively submit for image understanding, report parsing, or speech recognition, and may process answer text for speech synthesis; Microsoft Edge online speech services process answer text only when speech playback is enabled or used as an available fallback. Actual use depends on the function you trigger and the service configuration enabled at that time.
6.6 We do not intentionally send your mobile number, email address, Apple or WeChat login credentials, advertising identifier, or payment information to these AI services for model processing. Data is transmitted over HTTPS/TLS. We require these providers, through supplier review, contracts, and security controls, to provide the same or equivalent personal-information protection as this Policy.
6.7 Except with your consent, where necessary to perform a contract, to protect important lawful rights, as required by law, or by regulatory requirements, we will not share identifiable personal information with third parties.
7.1 我们原则上将个人信息存储在中国大陆境内服务器。若未来涉及跨境提供个人信息，将依法履行告知、单独同意、安全评估或标准合同等义务。
7.2 存储期限以实现处理目的所必需的最短时间为原则：账号信息在账号存续期间保存；成长记录和宝宝资料在您主动删除或账号注销后依法删除或匿名化；订单和审计日志按法律要求留存；安全日志按风控和审计需要有限期保存。共享家庭中的主养人注销前需先转移主养人身份，避免删除其他家庭成员仍有权使用的数据。
7.3 我们采用 HTTPS/TLS 传输、账号级聊天内容加密、宝宝级访问授权、日志脱敏、数据库权限隔离、短期签名 URL、操作审计、风险监控、备份恢复和最小权限管理等措施保护数据。
7.4 互联网服务无法保证绝对安全。如发生个人信息安全事件，我们将依法采取补救措施，并以 App 内通知、公告、短信、邮件或其他合理方式告知相关情况。
7.1 In principle, we store personal information on servers within mainland China. If personal information needs to be transferred across borders in the future, we will fulfill notification, separate consent, security assessment, standard contract, or other legal requirements.
7.2 Retention periods follow the principle of minimum time necessary to achieve the processing purpose: account information is retained while the account exists; growth records and baby profiles are deleted or anonymized after you delete them or cancel the account; orders and audit logs are retained as legally required; security logs are retained for a limited period based on risk control and audit needs. A primary caregiver must transfer that role before cancelling an account in a shared family, preventing deletion of data that other authorized members still use.
7.3 We use HTTPS/TLS transmission, account-level chat-content encryption, baby-level access authorization, log desensitization, database permission isolation, short-term signed URLs, operation audits, risk monitoring, backup recovery, and least-privilege management to protect data.
7.4 Internet services cannot guarantee absolute security. If a personal information security incident occurs, we will take remedial measures according to law and notify affected parties through in-app notices, announcements, SMS, email, or other reasonable methods.
8.1 您有权访问、复制、更正、补充、删除您的个人信息，也有权撤回同意、注销账号、解除家庭协作关系、管理宝宝资料和关闭非必要推送。
8.2 您可在 App 内通过“我的-账号与安全/隐私设置/宝宝资料/家庭成员”等入口操作；如入口暂未覆盖，可通过客服联系我们。
8.3 为保护账号和儿童数据安全，我们可能需要验证身份、监护关系或账号控制权。对合理请求，我们通常将在 15 个工作日内答复；法律法规另有规定的除外。
8.4 您撤回授权或删除信息后，可能导致部分功能无法继续使用，但不影响此前基于授权已经进行的信息处理活动的效力。
8.1 You have the right to access, copy, correct, supplement, and delete your personal information, withdraw consent, cancel your account, remove family collaboration relationships, manage baby profiles, and turn off non-essential push notifications.
8.2 You may operate through entries such as "Me - Account and Security / Privacy Settings / Baby Profile / Family Members" in the app. If an entry is not yet available, you may contact customer support.
8.3 To protect account and children data security, we may need to verify identity, guardianship, or account control. We usually respond to reasonable requests within 15 working days unless otherwise required by law.
8.4 After you withdraw authorization or delete information, some functions may no longer be available, but the validity of processing already conducted based on previous authorization will not be affected.
9.1 若您未满 18 周岁，应在父母或其他监护人指导下使用本服务。
9.2 若我们发现未成年人在未取得监护人同意的情况下提供个人信息，会依法删除或采取其他必要措施。
9.3 对于儿童相关功能，我们默认以监护人作为操作主体，并提供更严格的数据访问、删除和家庭成员权限控制。
9.1 If you are under 18, you should use the services under the guidance of your parents or other guardians.
9.2 If we discover that a minor has provided personal information without guardian consent, we will delete it or take other necessary measures according to law.
9.3 For child-related functions, guardians are treated as the default operators, and stricter data access, deletion, and family member permission controls are provided.
10.1 我们可能根据法律法规、产品功能、第三方服务或安全要求更新本政策。重大变更将通过 App 内弹窗、公告、站内信或其他合理方式提示。
10.2 本政策最新版本将在 App 内隐私政策页面和公开链接展示。
10.3 如您有隐私、儿童信息、账号注销、数据删除、App Store 审核或安全相关问题，请联系：support@dongyuanat.com。
10.1 We may update this Policy based on laws and regulations, product functions, third-party services, or security requirements. Material changes will be prompted through in-app pop-ups, announcements, messages, or other reasonable methods.
10.2 The latest version of this Policy will be displayed on the in-app privacy policy page and public links.
10.3 If you have questions about privacy, children information, account cancellation, data deletion, App Store review, or security, contact support@dongyuanat.com.