隐私政策 / Privacy Policy
中文
本说明介绍象桃桃圈（Peaphant Album）的账号、相册、聊天和付费数字服务如何处理信息，包括不登录账号使用分享页或临时会话的访客。
1. 账号及服务信息
我们处理注册或绑定时提供的邮箱或手机号、账号 ID、个人资料、密码的哈希值、验证结果、登录会话和设备标识，用于注册、登录、账号恢复和安全管理。我们也处理会员、存储、订单和支付状态，用于提供购买的权益和处理订单问题。
2. 内容、聊天及访问记录
你上传的相册图片、视频、商品说明和发送的聊天内容会由应用及服务器处理，用于保存、展示、分享和消息送达。相册和聊天功能会保存相应内容、关联记录和访问权限。服务器会记录 IP、访问时间、登录状态及浏览器或设备提供的信息，用于安全、服务诊断和访客功能。
分享页或临时会话的所属商家可查看与其入口有关的访客记录，包括访客标识、IP、大致归属地、运营商和可获得的设备信息。大致归属地根据 IP 查询得到，并非设备的精准定位，也可能不准确。你选择公开或分享的内容可被获准的接收人查看；他们可能保存自己的副本。
3. 本机存储及设备权限
Cookie、本机存储和媒体缓存用于保持登录或访客会话、保存设置和加载已查看的内容。浏览器、系统或 APP 的缓存清理会影响这些本机数据。拍照、发送媒体及语音或视频通话需要相应的设备权限；你可通过设备设置管理权限，关闭权限会影响相关功能。
4. 服务商及境外处理
为提供功能，信息会按需要由服务器、存储、内容分发、验证及通信服务商处理。相册媒体使用 Bunny 存储和分发，当前相册存储位于新加坡；IP 归属地查询向 IP-API Pro 发送待查询的 IP；使用阿里云 RTC 的通话由其处理相应的通话连接和音视频数据。验证码发送由配置的邮件或短信服务商处理接收地址及验证码消息。处理地点可能随功能和服务商不同，可能在你所在地以外。
5. 主动翻译及可选客服功能
主动请求文字翻译时，所选文字和目标语言会发送至服务器及其配置的翻译服务商。图片翻译先在设备上识别文字，再发送识别出的文字进行翻译；本机图片识别步骤不向翻译服务商上传原图。图片作为聊天或相册内容的保存、传输仍按上述内容处理方式进行。若使用已启用的 AI 客服，输入内容、相关对话及为答复所需的本人订单摘要可能提交给配置的 AI 服务商。请勿在这些功能中输入密码、验证码或不必要的敏感信息。
6. 付款
Paddle 处理其结账页面要求的购买人及付款资料。我们向 Paddle 提供订单、账号和套餐等必要的购买关联信息，并接收交易结果用于发放权益和核对订单。Paddle 对其自身处理的信息适用其隐私政策及结账页面的相关说明。
7. 安全及保留
我们使用密码哈希、会话校验及内容权限控制等措施保护信息，但任何网络服务都无法保证绝对安全。内容、服务记录和相关备份按提供服务、安全、争议处理和适用法律所需进行保留；不同类别的数据可能采用不同处理方式。账号注销不代表付款、安全或必要业务记录立即全部消失。接收人保存的内容副本不由我们直接控制。
8. 信息请求及联系
可使用账号中的设置，或向[email protected]提出查询、访问、更正、删除信息或其他适用的数据权利请求。我们可能需要核验身份和请求范围，并说明适用限制及处理结果；不要发送密码或验证码。客服邮箱也是隐私问题的联系渠道。更新本说明时会在本页列明日期。
English
This policy describes how Peaphant Album (象桃桃圈) processes information for accounts, albums, chat, and paid digital services, including visitors using shared pages or temporary chat without an account.
1. Account and service information
We process the email address or phone number supplied for registration or account binding, account ID, profile details, password hashes, verification results, login sessions, and device identifiers for registration, login, account recovery, and security. We also process membership, storage, order, and payment status information to provide purchased features and resolve order issues.
2. Content, chat, and visit records
The application and servers process uploaded album images, videos, product descriptions, and sent chat content to store, display, share, and deliver them. Album and chat features store the corresponding content, associated records, and access permissions. Servers record IP addresses, visit times, login status, and information provided by browsers or devices for security, diagnostics, and visitor features.
The merchant associated with a shared entry or temporary conversation can see its visitor records, including visitor identifiers, IP addresses, approximate locations, network providers, and available device information. IP-based locations are not precise device locations and may be inaccurate. Content you make public or share is visible to permitted recipients, who may retain copies.
3. Local storage and device permissions
Cookies, local storage, and media caches maintain login or visitor sessions, save preferences, and load previously viewed content. Browser, system, or APP cache clearing affects local data. Taking pictures, sending media, and voice or video calls require the relevant device permissions. You can manage permissions in device settings; disabling them affects the corresponding features.
4. Providers and processing abroad
Servers and storage, content delivery, verification, and communication providers process information as needed to deliver features. Album media uses Bunny storage and delivery; the current album storage location is Singapore. IP-API Pro receives IP addresses for approximate location lookups. Calls using Alibaba Cloud RTC involve its processing of connection and audio/video data. Configured email or SMS providers process recipient details and verification messages. Processing locations vary by feature and provider and may be outside your country.
5. Requested translation and optional support features
When you request text translation, the selected text and target language are sent to our server and its configured translation provider. Image translation first recognises text on your device and then sends the recognised text for translation; the local recognition step does not upload the original image to the translation provider. Storing or transmitting that image as chat or album content still follows the content processing described above. If you use an enabled AI support feature, your input, relevant conversation, and a summary of your own order needed for the reply may be sent to the configured AI provider. Do not enter passwords, verification codes, or unnecessary sensitive information.
6. Payments
Paddle processes buyer and payment information requested in its checkout. We provide necessary order, account, and plan information to link purchases and receive transaction results to grant features and reconcile orders. Paddle's own processing is covered by its Privacy Policy and the relevant notices in its checkout.
7. Security and retention
We use measures including password hashing, session checks, and content access controls, but no online service can guarantee absolute security. Content, service records, and associated backups are retained as needed for service delivery, security, disputes, and applicable law; different categories may be handled differently. Closing an account does not immediately erase every payment, security, or necessary business record. We do not directly control copies retained by recipients.
8. Information requests and contact
Use account settings or contact [email protected] to request information, access, correction, deletion, or other applicable data rights. We may need to verify your identity and the request's scope and explain applicable limitations and the outcome. Do not send passwords or verification codes. This email also handles privacy questions. Updates will show their date on this page.