一、清单说明
本清单根据知芽成长当前产品能力、服务端调用和移动端集成情况维护。实际启用的 SDK 或服务会因平台、版本、系统权限和功能开关不同而不同。我们会持续更新本清单。
1. List Description
This list is maintained based on the current product capabilities, server-side calls, and mobile integrations of Zhiya Growth. SDKs or services actually enabled may vary by platform, version, system permissions, and feature switches. We will continue to update this list.
二、账号登录类
微信开放平台：用于微信登录、账号绑定和必要的授权校验，可能处理微信 OpenID/UnionID、昵称、头像和授权凭证。
Apple Sign in：用于 iOS Apple ID 登录，可能处理 Apple 用户标识、授权码、身份令牌和邮箱授权状态。
2. Account Login Services
WeChat Open Platform: used for WeChat login, account binding, and necessary authorization verification. It may process WeChat OpenID/UnionID, nickname, avatar, and authorization credentials.
Apple Sign in: used for iOS Apple ID login. It may process Apple user identifiers, authorization codes, identity tokens, and email authorization status.
三、支付类
微信支付、支付宝：用于非 iOS 或规则允许场景的订单支付、退款、对账和支付状态通知，处理订单号、金额、商品描述、支付状态等必要信息。
Apple IAP：用于 iOS App 内虚拟商品和数字权益购买，处理交易标识、票据校验结果、商品 ID 和订单状态。
3. Payment Services
WeChat Pay and Alipay: used for order payment, refund, reconciliation, and payment status notifications in non-iOS or rule-permitted scenarios, processing necessary information such as order number, amount, product description, and payment status.
Apple IAP: used for purchases of virtual goods and digital benefits inside the iOS app, processing transaction identifiers, receipt verification results, product IDs, and order status.
四、云存储、短信和推送
阿里云 OSS 或等效云存储：用于保存用户主动上传的图片、音频、文件、报告和静态资源，访问使用鉴权或签名 URL。
阿里云短信或等效短信服务：用于发送登录验证码、安全验证和必要通知，处理手机号和短信发送状态。
APNs、厂商推送或统一推送服务：用于发送疫苗提醒、成长提醒、家庭协作和系统通知，处理设备推送标识、通知标题、通知状态。
4. Cloud Storage, SMS, and Push
Alibaba Cloud OSS or equivalent cloud storage: used to store images, audio, files, reports, and static resources actively uploaded by users. Access uses authentication or signed URLs.
Alibaba Cloud SMS or equivalent SMS service: used to send login verification codes, security verification, and necessary notifications, processing mobile numbers and SMS delivery status.
APNs, vendor push, or unified push services: used to send vaccination reminders, growth reminders, family collaboration messages, and system notifications, processing device push identifiers, notification titles, and notification status.
五、AI、OCR 和语音服务
DeepSeek：用于文字问答和内容生成，可能处理您输入的问题、必要的近期对话，以及与回答直接相关的宝宝月龄、成长或健康记录。
火山引擎（含豆包/Ark）：用于图片理解、报告或文件解析、语音转文字和语音合成，可能处理您主动提交的图片、音频、文件内容、待播报文字及必要上下文。
Microsoft Edge 在线语音服务：仅在语音播报链路启用或作为可用回退时，用于把回答文字合成为语音，处理范围为待播报文字和语音参数。
私有 OCR/ASR Worker：在部署启用时用于本地或受控环境中的文件文字提取和语音处理。实际启用能力以当前服务配置和您主动使用的功能为准。
5. AI, OCR, and Speech Services
DeepSeek: used for text Q&A and content generation. It may process your prompt, necessary recent conversation context, and baby age, growth, or health records directly relevant to the answer.
Volcano Engine, including Doubao/Ark: used for image understanding, report or file parsing, speech-to-text, and speech synthesis. It may process images, audio, file content, text to be spoken, and necessary context that you actively submit.
Microsoft Edge online speech service: used only when speech playback is enabled or as an available fallback to synthesize answer text into audio. It processes the text to be spoken and speech parameters.
Private OCR/ASR workers: when deployed, used for text extraction and speech processing in local or controlled environments. The capabilities actually enabled depend on current service configuration and the function you actively use.
六、基础安全和统计
我们可能使用服务端日志、崩溃分析、安全风控、接口监控和性能统计能力，以保障账号安全、排查故障和优化体验。相关数据会按最小必要原则处理，并通过脱敏、聚合或权限控制降低风险。
6. Basic Security and Statistics
We may use server-side logs, crash analysis, security risk control, API monitoring, and performance statistics to protect account security, troubleshoot issues, and optimize experience. Relevant data is processed under the minimum necessary principle and risk is reduced through desensitization, aggregation, and permission controls.
七、管理方式
如您希望了解某一版本实际启用的 SDK 或服务，或需要行使个人信息权利，可联系 support@dongyuanat.com。我们会结合您的平台、App 版本和功能使用情况说明。
7. Management
If you want to learn which SDKs or services are actually enabled in a specific version, or need to exercise personal information rights, contact support@dongyuanat.com. We will explain based on your platform, app version, and feature usage.