1. 适用范围与运营主体

本政策适用于茶灵感网站、Android 与 iOS 应用。运营主体为玛伦科技（深圳）有限公司。茶灵感是一款围绕饮品解读、卡片收藏、神秘娱乐和私人圈子互动的产品。

2. 我们处理的信息

• 账号资料：邮箱、用户名、登录方式、账号标识及你主动填写的资料。
• 用户内容：你上传的饮品或手掌照片、输入或转写的文字、Lumi 对话、选择的主题，以及保存的卡片和历史记录。
• 设备与日志：随机安装标识、设备型号、操作系统、应用版本、语言、网络状态、请求时间、接口路径、崩溃和错误日志。IP 地址可能被短暂处理用于安全和粗略国家识别；分析系统不保存原始 IP，只可能保存不可逆的加密摘要。
• 偏好与进度：语言设置、卡组、连续记录、任务进度、通知偏好，以及你为星座功能主动提供的出生月份和日期。年龄门槛只保存是否达到最低年龄，不保存你在年龄确认中输入的完整生日。

3. 使用目的

我们仅在提供账号、饮品或手掌识别、图案候选、星座与卡片内容、语音转文字和朗读、收藏、分享、社区安全、故障排查、安全防护及产品改进所必需的范围内处理信息。

4. 相机、相册与照片

只有在你主动选择拍照或上传时，我们才会申请相机或相册权限。原始饮品或手掌图片用于完成当次识别与内容生成，默认不做长期保存，也不会用于面部、指纹、身份或其他生物识别。请勿上传身份证件、金融资料、医疗资料、他人隐私或你无权使用的内容。

5. AI 与语音处理

你提交的照片、问题和必要上下文可能被安全传输给云服务、AI 模型、语音识别和语音合成服务，以完成识别、生成、转写与朗读。麦克风只在你主动按住说话时录音；原始录音在完成转写后默认不长期保存，转写文字可作为 Lumi 对话的一部分保存。Lumi 是由 AI 驱动的虚构神谕角色，生成内容可能不准确。我们不会出售个人信息。

6. 保存、共享与安全

账号、卡片、进度、Lumi 对话及社区数据会按功能需要保存在本地或服务器。详细分析事件通常最多保存 180 天；账号、支付权益、安全、审计及法律要求的记录可能保存更久。举报时，相关文字片段会随举报保存，供安全审核使用。我们不为分析收集精确 GPS 位置。我们仅向提供云计算、AI、语音、统计、安全或客服能力的服务商共享必要信息，并要求其按约定处理。

7. 你的权利

你可以不上传照片或录音、关闭权限、调整语言和通知、删除本地记录，或申请查询、更正、复制、删除个人信息及注销账号。已登录用户可在应用的“我的 / Profile”页面点击“删除账号”立即提交删除，也可访问我们的账号删除页面。账号删除会清除账号、收藏、对话、社区资料以及与该账号和已关联安装标识相关的分析数据；法律要求保留的支付、安全或审计记录除外。为保护账号安全，我们可能先核验身份。

8. 儿童

茶灵感不允许 13 周岁以下儿童使用。年龄确认仅在设备上保存是否达到最低年龄，不上传或保存完整出生日期。若我们发现收集了 13 周岁以下儿童的个人信息，将尽快删除并关闭相关账号。

9. 政策更新与联系我们

我们可能因功能、法律或安全要求更新本政策。重大变更会通过页面或应用内提示说明。隐私问题、账号注销或数据删除请求可发送至 support@chalinggan.app。

1. Scope and operator

This policy applies to the Chalinggan website, Android app, and iOS app. Chalinggan is operated by Malun Technology (Shenzhen) Co., Ltd. It is an entertainment product built around drink readings, card collection, mystical play, and private-circle interactions.

2. Information we process

• Account data, including email, username, sign-in method, account identifier, and information you choose to provide.
• User content, including drink or palm photos, typed or transcribed text, Lumi conversations, selected themes, saved cards, and history.
• Device and log data, including device model, operating system, app version, language, network status, request time, API path, and error logs. An IP address may be processed briefly for security and coarse country detection, but the raw address is not stored in analytics; only a one-way keyed hash may be retained for abuse prevention.
• Preferences and progress, including language, deck, streak, challenge progress, notification choices, and the birth month and day you voluntarily provide for zodiac features. The age gate stores only whether the minimum age was met; it does not retain the complete date entered for age confirmation.

3. Why we use information

We process information only as needed to provide accounts, drink or palm recognition, pattern candidates, zodiac and card content, speech transcription and playback, collections, sharing, community safety, troubleshooting, security, abuse prevention, and product improvement.

4. Camera, photo library, and images

We request camera or photo-library access only after you choose to take or upload a photo. Original drink or palm images are processed to complete the current recognition and content request and are not retained long term by default. They are not used for face, fingerprint, identity, or other biometric recognition. Do not upload identity documents, financial or medical records, another person’s private information, or content you cannot lawfully use.

5. AI and voice processing

Photos, questions, and necessary context may be securely sent to cloud, AI-model, speech-recognition, and text-to-speech providers to complete recognition, generation, transcription, and playback. The microphone records only while you deliberately hold the talk control. Original recordings are not retained long term by default after transcription; transcribed text may be stored as part of your Lumi conversation. Lumi is a fictional oracle powered by AI, and its generated responses may be inaccurate. We do not sell personal information.

6. Storage, sharing, and security

Accounts, cards, progress, Lumi conversations, and community data may be stored locally or on our servers as required by the feature. Detailed analytics events are normally retained for up to 180 days, while account, payment-entitlement, security, audit, and legally required records may be retained longer. When you report content, the relevant text excerpt is retained with the report for safety review. We do not collect precise GPS location for analytics. We share only necessary information with providers of cloud, AI, voice, analytics, security, or support services and require them to process it within agreed purposes.

7. Your choices and rights

You may choose not to upload a photo or recording, turn off permissions, change language or notifications, delete local records, or request access, correction, portability, deletion, or account closure. Signed-in users can submit immediate deletion from Me / Profile → Delete account in the app, or use our account-deletion page. Account deletion removes the account, collection, conversations, community profile, and analytics linked to that account and its associated installation identifiers, except payment, security, audit, or other records we must retain by law. We may verify your identity before acting on a request.

8. Children

Chalinggan is not available to children under 13. Age confirmation stores only whether the minimum age is met on the device; the complete birth date is not uploaded or retained. If we learn that we collected personal information from a child under 13, we will delete it and close the related account as soon as reasonably possible.

9. Updates and contact

We may update this policy when features, laws, or security requirements change. Material updates will be explained on the page or in the app. For privacy questions, account closure, or deletion requests, email support@chalinggan.app.