隐私政策
小新同学（Xinny）由武汉金桐树科技有限公司提供和运营。本政策适用于小新同学应用、配套 Apple Watch 应用、小组件及相关服务。如对个人信息处理有任何疑问，请联系 admin@jintongshu.com。
本次公测免费，无内购或订阅。本地选角、手工创作和宠物互动无需登录；健康读取、设备 AI 和通知权限分别由你选择。阅读本政策本身不代表授予这些权限。
1. 我们处理哪些信息
- 账号信息：使用 Apple 登录时，我们处理 Apple 提供的用户标识、邮箱（可为隐藏邮箱）及登录状态，用于创建、管理和保护账号。我们不会获取你的 Apple 账号密码，也不请求真实姓名或通讯录。
- 伙伴与互动信息：包括伙伴名字、造型、人格、喜好、创作选择和共同经历。它们主要保存在设备上；使用云端功能时，服务会处理相应的角色、偏好及近期互动，以生成内容、接续陪伴和改进推荐。
- 健康与健身信息：在你授权的范围内，只读访问以下记录及其时间、来源、设备和相关标记，用于健康展示、恢复与精力估计，以及另行同意后的 AI 陪伴。实际读取范围取决于你的授权、设备支持和已有记录。
- 心脏与体征：心率、静息及步行平均心率、心率恢复、心率变异性及心跳间隔、呼吸频率、血氧、睡眠腕温、体温、收缩压、舒张压和血糖。
- 睡眠与日常：睡眠、日照、正念，以及本人记录的心情、标签和关联事项。
- 活动与体能：步数、活动及静息能量、锻炼及站立时间、爬楼层数、体能训练和有氧适能。
- 步行与步态：步行及跑步距离、步行速度、步长、不对称性、双脚支撑时间比例、步行稳定性、上下楼速度和六分钟步行距离。
- 运动表现：跑步速度、功率、步幅、垂直振幅和触地时间；骑行距离、速度、功率和踏频；游泳距离和划水次数。
- 身体测量：体重、身体质量指数（BMI）、体脂率、去脂体重、身高和腰围。
- 饮食与营养：饮水、咖啡因、摄入能量、蛋白质、碳水化合物、脂肪、纤维、糖、钠、钾、钙和铁。
- 通知与使用信息：包括用于识别当前安装和发送通知的标识、语言、时区、提醒偏好，以及相关通知的投递、打开、接受、完成和拒绝等状态，用于按照你的选择提供提醒、接续互动和了解功能效果。
- 服务与反馈信息：提供网络服务时会处理 IP 地址、必要的请求与错误信息，用于安全保护、使用额度和故障排查。你可通过上述邮箱或 TestFlight 反馈问题、举报不当 AI 内容，建议注明相关内容和出现时间。我们处理你主动提供的联系方式、问题描述及附件；请不要发送账号密码、验证码或无关的健康资料。
2. 健康信息与 AI 服务
健康信息属于敏感个人信息。我们已停止向 DeepSeek 提交新的健康 AI 请求，旧版健康生成入口也由服务端拦截。设备端 AI 功能将随后续 App 更新提供：在「设置 → 陪伴约定」单独开启后，使用 Apple Foundation Models 的设备端模型处理已授权记录，生成宠物表现并选择愿望，无需登录。
设备 AI 需要受支持的设备、地区和语言，并开启 Apple Intelligence。健康记录、衍生心情及相关互动不发送给 DeepSeek；设备模型不可用时继续本地陪伴，不回退到云端。手机可向配对 Watch 和本机小组件提供受保护的展示摘要。
DeepSeek（杭州深度求索人工智能基础技术研究有限公司）仅用于非健康 AI 创作和个性化陪伴。创作按次征求同意；自动个性化陪伴需单独开启，发送相应创作选择、角色人格、偏好和非健康互动。不会为了生成内容发送 Apple 登录凭据、账号邮箱或通知推送标识。
状态分是恢复与精力的非临床估计；AI 心情用于宠物表现，不是本人心理状态测量。这些结果不用于医学诊断或治疗，也不写入 Apple 健康。
过去已发送的数据仍按适用保留期限与撤回流程处理，停用不等于第三方已删除历史数据。DeepSeek 的非健康输入与输出适用其隐私政策及开放平台协议，可能用于模型训练和服务优化；我们不承诺第三方零留存、排除训练或即时删除。
我们不出售个人信息，不将健康数据用于广告、营销或广告画像，不进行跨应用广告追踪，也不自行使用健康记录训练模型。
3. 信息共享与处理地区
我们只在提供服务所需的范围内，与受委托提供账号、数据存储、网络安全和消息投递服务的合作方处理必要信息，并限制其访问和使用范围。AI 服务接收方及其处理条件已在上文单独说明。我们不会公开你的个人信息；因你的明确要求或法律规定必须提供信息的，按相应范围处理。
Apple 提供登录、健康授权、配对同步、通知及 TestFlight 分发等服务。通过 TestFlight 测试时，Apple 可能向开发者提供使用、崩溃和反馈信息，详见 Apple 隐私政策。
本地资料保存在你的设备上。使用云端功能时，相关信息可能在中国境内及新加坡处理和存储，网络服务也可能涉及其他地区。我们会按照适用法律处理跨境传输，在需要时履行告知、取得同意及其他适用要求。你可以选择不登录、不开启云端 AI，并继续使用本地陪伴。
本政策页面无需登录，不读取应用内的健康记录，不设置广告或统计脚本。访问网页时，网络服务会处理保障页面送达和安全所必需的技术信息。
4. 信息保留与保护
- 设备上的伙伴和偏好保留至你删除或移除应用数据；仅保留有限的近期愿望状态用于互动接续和去重，不另存共同完成记录。健康缓存可在应用内关闭并清除；手表和小组件仅接收对应功能所需的记录、摘要或互动状态。
- 云端 AI 生成内容按类型短期保留，历史云端心情在 30 分钟后到期、愿望在 6 小时后到期、造型在 24 小时后到期，到期后定期清理。相关请求与用量记录保留 7 天。
- 云端邀请经历与明细反馈通常保留 90 天，投递及相关生成诊断保留 30 天。账号及提醒资料在服务需要期间保留；授权撤回记录用于防止旧授权再次生效，注销账号时一并清理。后台管理操作审计保留 365 天。
- 你主动提供的反馈用于处理对应事项，可通过邮箱申请删除。服务合作方的安全日志、备份及依法留存信息按其适用条件处理；本服务完成删除，不代表所有第三方已同时完成删除。
我们采取加密传输、设备安全存储、身份校验和访问权限控制等措施，限制工作人员访问。任何网络或存储方式都无法保证绝对安全；发生影响个人信息安全的事件时，我们会依法采取措施并提供必要通知。
5. 你的选择与权利
- 调整健康读取：在系统健康权限中调整范围，或在「设置 → 数据与连接」选择「关闭并清除本地健康数据」。应用不会删除 Apple 健康中的原始记录。
- 关闭 AI 陪伴：在「设置 → 陪伴约定」关闭「个性化陪伴」，停止非健康云端 AI 请求，并发起云端停用。离线时保留待处理事项，联网并恢复原账号后继续；失败时会显示实际状态。AI 创作按次确认，不同意时可继续手工创作。
- 关闭健康 AI：后续设备 AI 版本可在「设置 → 陪伴约定」关闭「设备 AI 健康陪伴」，停止生成并清理本机衍生结果。旧版健康外传入口不再生成；历史授权可撤回并发起云端清理，离线时保留清理事项。
- 提醒：在「陪伴约定」调整可打扰时段或关闭提醒，也可使用系统通知设置。关闭通知不会删除账号。
- 退出与注销：通过「设置 → 账号」退出登录或注销账号。退出结束本机会话；注销需要重新 Apple 授权，会撤销登录授权并删除共用账号及关联的服务端业务数据，可能影响使用该身份的其他同公司应用。本地伙伴仍保留，其他设备上的本地文件不会被远程抹除。
- 查阅、更正、复制、删除及其他请求：请发送邮件至 admin@jintongshu.com，说明需要处理的事项。我们会在合理核实身份后依法处理，不会要求账号密码或验证码。
撤回授权不影响撤回前已进行的处理。遇到网络或第三方操作失败，应用会提示实际状态；已送达的通知可能无法远程撤回。涉及第三方数据的权利请求，我们会提供必要协助。
6. 未成年人
未成年人应在监护人指导下阅读本政策和使用服务，特别是在授权健康读取、使用云端 AI 或提交反馈之前。监护人如对未成年人的信息有疑问，或需要更正、删除信息，请通过上述邮箱联系我们。我们不会为广告目的处理未成年人的健康信息。
7. 政策更新与联系
服务或处理方式变化时，我们会更新本页面及生效日期。涉及处理目的、信息范围或接收方的重大变化时，将以适当方式告知，并在需要时重新取得同意。
个人信息处理者：武汉金桐树科技有限公司
联系邮箱：admin@jintongshu.com
Privacy Policy
Xinny (小新同学) is provided and operated by 武汉金桐树科技有限公司 (Wuhan Jintongshu Technology Co., Ltd.). This policy covers the app, its companion Apple Watch app, widgets, and related services. Contact: admin@jintongshu.com.
This beta is free, with no in-app purchases or subscriptions. Choosing or manually creating a pet and local interactions do not require an account. Health access, on-device AI, and notifications are separate choices. Reading this policy does not grant those permissions.
1. Information we process
- Account: the identifier, email address (which may be a private relay address), and sign-in information provided by Apple, used to create, manage, and protect your account. We do not receive your Apple password or request your real name or contacts.
- Companions and interactions: names, appearance, personality, preferences, creation choices, and shared experiences. These are primarily stored on your device. Cloud features process the relevant companion, preferences, and recent interactions to generate content, maintain continuity, and improve recommendations.
- Health and fitness: with permission, read-only access to the records below, including their times, sources, devices, and related markers, for health displays, recovery and energy estimates, and AI companionship with separate consent. Availability depends on your permissions, device, and existing records.
- Heart and vital signs: heart rate, resting and walking average heart rate, heart rate recovery, heart rate variability and heartbeat intervals, respiratory rate, oxygen saturation, sleeping wrist temperature, body temperature, systolic and diastolic blood pressure, and blood glucose.
- Sleep and daily life: sleep, daylight, mindfulness, and self-recorded moods, labels, and associations.
- Activity and fitness: steps, active and resting energy, exercise and stand time, flights climbed, workouts, and cardio fitness.
- Walking and mobility: walking and running distance, walking speed, step length, asymmetry, double support percentage, steadiness, stair ascent and descent speed, and six-minute walk distance.
- Exercise performance: running speed, power, stride length, vertical oscillation, and ground contact time; cycling distance, speed, power, and cadence; swimming distance and stroke count.
- Body measurements: weight, body mass index (BMI), body fat percentage, lean body mass, height, and waist circumference.
- Diet and nutrition: water, caffeine, dietary energy, protein, carbohydrates, fat, fiber, sugar, sodium, potassium, calcium, and iron.
- Notifications and use: installation and notification identifiers, language, time zone, reminder preferences, and related delivery, opening, acceptance, completion, and rejection events support reminders, continuity, and evaluation of features.
- Service and feedback: IP addresses and necessary request and error information support security, usage limits, and troubleshooting. You can report issues or inappropriate AI content through the email above or TestFlight; include the relevant content and when it appeared. We process the contact details, descriptions, and attachments you provide. Do not send passwords, verification codes, or unnecessary health information.
2. Health information and AI
Health information is sensitive. We have stopped forwarding new health AI requests to DeepSeek. The server also blocks health generation from older app versions. On-device AI will arrive in a subsequent app update: a separate opt-in in Companion Agreements allows Apple Foundation Models’ on-device model to use authorized records for pet expressions and wishes, without sign-in.
On-device AI requires a supported device, region and language, with Apple Intelligence enabled. Health records, derived moods and related interactions are not sent to DeepSeek. When the device model is unavailable, local companionship continues without cloud fallback. Protected display summaries may be shared with the paired Watch and on-device widgets.
DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.) remains available only for non-health creation and personalized companionship. Creation asks permission each time; automatic companionship needs separate opt-in and sends relevant choices, personality, preferences and non-health interactions. Apple login credentials, account email and notification identifiers are not sent for content generation.
The state score is a non-clinical estimate of recovery and energy. AI moods are pet expressions, not measurements of the person’s mental state. Neither is intended for diagnosis or treatment, and results are not written to Apple Health.
Previously transmitted data remains subject to the applicable retention and withdrawal processes; stopping new requests does not mean third parties have deleted historical data. Non-health inputs and outputs sent to DeepSeek are governed by its Privacy Policy and Open Platform Terms, which describe possible training and improvement uses. We do not guarantee zero retention, exclusion from training or immediate deletion by that provider.
We do not sell personal information, use health data for advertising, marketing, or advertising profiles, conduct cross-app advertising tracking, or ourselves use health records to train models.
3. Sharing and processing locations
We process necessary information with entrusted providers of account, storage, network security, and message delivery services, limiting access and use to service needs. The AI recipient and its conditions are explained separately above. We do not make your information public. Information requested by you or required by law is provided within the applicable scope.
Apple provides sign-in, health permissions, pairing, notifications, and TestFlight. TestFlight may share usage, crashes, and feedback with developers under Apple's Privacy Policy.
Local information remains on your devices. Cloud features may process and store relevant information in China and Singapore, with network services potentially involving other regions. We handle international transfers under applicable law, providing notices, obtaining consent, and meeting other requirements where applicable. You can use local companionship without signing in or enabling health sharing.
This policy page requires no login, does not read your app health records, and contains no advertising or analytics scripts. Network services process the technical information needed to deliver and protect the page.
4. Retention and protection
- Local companion data and preferences remain until you delete them or remove app data. A bounded set of recent wish states supports interaction continuity and deduplication; no separate shared-completion history is stored. Health caches can be disabled and cleared in the app. Watch and widgets receive only the records, summaries, or interaction state needed for their features.
- Cloud AI results expire after 30 minutes for moods, 6 hours for wishes, and 24 hours for designs, and are removed by periodic cleanup after expiry. Related request and usage records remain for 7 days.
- Cloud invitation experiences and detailed feedback are normally retained for 90 days, and delivery and related generation diagnostics for 30 days. Account and reminder information remains while needed. Consent-revocation records prevent reuse of old consent and are removed on account deletion. Administration audit records are retained for 365 days.
- Feedback is used to address your request and can be deleted on request by email. Providers' security logs, backups, and legally required records follow their applicable conditions. Our deletion does not confirm simultaneous deletion by all third parties.
We use encrypted transmission, secure device storage, authentication, and access controls, and limit staff access. No system is entirely secure. We will take appropriate action and provide legally required notices for incidents affecting personal information.
5. Your choices and rights
- Adjust Health permissions in system settings, or disable and clear local health data in Settings → Data & Connections. Original Apple Health records are not deleted.
- Turn off Personalized Companionship in Companion Agreements to stop non-health cloud AI requests and request cloud deactivation. Offline requests are retained until connectivity and the original account are restored; failures are reported. AI creation asks for permission each time, and manual creation remains available if you decline.
- In the upcoming on-device AI version, turn off On-device Health Companionship in Companion Agreements to stop generation and clear local derived results. Older health-generation requests are blocked. Historical sharing consent can still be withdrawn, with offline cloud cleanup queued until connectivity and the original account are restored.
- Adjust notification times or disable reminders in Companion Agreements. System notification controls are also available. Disabling notifications does not delete the account.
- Settings → Account offers sign-out and account deletion. Sign-out ends this device's session. Deletion requires fresh Apple authorization, revokes authorization, and removes the shared account and related server-side business data. This may affect other apps from our company using that identity. Local companions remain and files on other devices are not remotely erased.
- For access, correction, copies, deletion, or other applicable rights, email admin@jintongshu.com. We will reasonably verify identity and handle requests under applicable law, without requesting passwords or verification codes.
Withdrawal does not undo previous processing. The app reports network or provider failures; already-delivered notifications may not be retractable. We will assist with relevant third-party data requests.
6. Minors
Minors should review this policy and use the service with a guardian, especially before granting health access, using cloud AI, or sending feedback. Guardians can contact us about correction or deletion. We do not use minors' health information for advertising.
7. Updates and contact
We will update this page and effective date when our service or processing changes. Material changes to purposes, information categories, or recipients will be communicated appropriately, with renewed consent where required.
Personal information controller: 武汉金桐树科技有限公司 (Wuhan Jintongshu Technology Co., Ltd.)
Email: admin@jintongshu.com