爱陪伴 AMI 隐私政策
生效日期：2026-09 · 应用：爱陪伴 AMI — 老人健康陪伴
开发者联系邮箱：minengj@gmail.com
爱陪伴 AMI 是一款老人健康陪伴应用，帮助家人记录长者的饮食、用药、健康记录、语音日记与家人来访。本政策说明应用收集哪些数据、数据在哪里处理，以及如何删除数据。
1. 我们收集的数据
| 数据 | 用途 | 处理位置 | 说明 |
|---|
| 姓名/昵称、头像 | 应用中识别老人与家人 | 仅设备本地 | 由你自行填写，永不上传。 |
| 餐食照片 | 营养分析（估算千卡/蛋白质/碳水/脂肪） | 上传至我们的 AI 代理（腾讯云函数，广州）→ Kimi 视觉模型（月之暗面，北京） | 仅在执行该功能时传输，分析请求完成后我们不保留照片。 |
| 语音日记录音（m4a） | 语音备忘与转写 | 设备本地 + Apple 语音识别服务器 | 转写使用 Apple SFSpeechRecognizer，音频由 Apple 作为我们的处理方处理。 |
| 健康记录（饮食、排便、症状、用药） | 健康看板与用药提醒 | 仅设备本地 | 存储在应用沙盒容器内。 |
| 人脸数据（人脸特征向量 + 已登记家人称呼） | 识别来访家人 | 仅设备本地（macOS） | 人脸特征向量绝不离开设备；首次使用该功能前会请求明确同意。 |
爱陪伴 AMI 不收集广告标识符，不出售数据，也不将任何收集的数据用于跨应用/跨网站追踪。
2. 数据处理位置（跨境传输告知）
- 设备本地：人脸特征、健康记录、姓名、头像、语音日记文件仅存储在设备上的应用本地存储中。
- Apple：语音日记转写可能由 Apple 语音识别服务器处理，Apple 是本环节的处理方。
- 中国大陆服务器：使用 AI 餐食照片分析时，照片与分析提示词会发送至位于广州（腾讯云函数）的代理服务器，再转发至北京（月之暗面 Kimi 视觉模型）。这意味着，如果您在香港或海外使用爱陪伴 AMI，您的餐食照片可能被传输至并处理于位于中国大陆的服务器。使用该功能即表示您同意此跨境传输。代理服务器不保留照片，仅转发请求并返回模型文本结果。
3. AI 照片分析的区域可用性
位于中国大陆地区（设备地区设置 = CN）的用户，AI 餐食照片分析功能将被停用。其余功能（语音日记、用药提醒、健康记录、macOS 家人识别）均正常可用。
4. 同意
- 人脸识别（macOS）：首次登记家人人脸时，应用会请求您的明确同意。您可随时通过“删除数据”功能删除任何人脸登记，人脸数据立即删除。
- 餐食照片上传：首次上传前，应用会显示提示：“照片将上传云端识别营养”。
- 语音：相机/麦克风/语音识别权限由系统以中文用途说明的形式请求。
5. 保留与删除
- 所有数据均保存在您设备上的应用本地容器中。
- 应用内的“删除全部数据”按钮会立即、永久删除所有本地记录、已登记人脸、语音日记与设置。
- 从设备上卸载应用同样会删除所有数据。
6. 安全
- 数据存储在应用沙盒内，受 iOS/macOS 沙盒机制保护。
- AI 代理要求携带鉴权 token 请求头，无有效 token 的请求将被拒绝。需要说明：内嵌于客户端应用的 token 仅能阻止随意滥用，并非绝对安全——我们同时在服务端进行了限流与请求大小上限控制。
7. 非医疗设备声明
爱陪伴 AMI 是一款家庭陪伴与记录工具，不是医疗设备，不提供诊断；其估算结果（营养、健康趋势）仅供参考。医疗建议请务必咨询专业医护人员。
8. 儿童
爱陪伴 AMI 面向成年人与家庭照护者（13 岁以上），不面向儿童。
9. 政策变更
随着应用演进我们会更新本政策。重大变更将以更新上述生效日期、并在可行时通过应用内通知的方式体现。
10. 联系方式
关于本政策或您的数据的疑问：minengj@gmail.com
AMI Privacy Policy
Effective date: 2026-09 · App: AMI — 爱陪伴 (elder-care companion)
Developer contact: minengj@gmail.com
AMI is an elder-care companion app. It helps family members keep track of an elder's meals, medication, health records, voice diary, and family visits. This policy explains what data the app collects, where it is processed, and how you can delete it.
1. Data we collect
| Data | Purpose | Where it is processed | Notes |
|---|
| Name / nickname, avatar | Identify the elder and family members in-app | On device only | You choose what to enter. Never uploaded. |
| Meal photos | Nutrition analysis (calorie/protein/carbs/fat estimate) | Uploaded to our AI proxy (Tencent Cloud Functions, Guangzhou, mainland China) → Kimi vision model (Moonshot AI, Beijing, mainland China) | Photo is transmitted only to run this feature. Not stored by us after the analysis request completes. |
| Voice diary recordings (m4a) | Voice notes and transcription | On device + Apple speech recognition servers | Transcription uses Apple's SFSpeechRecognizer; audio is handled by Apple as our processor. |
| Health records (meals, bowel, symptoms, medication) | Health dashboard and reminders | On device only | Stored in the app's local container. |
| Face data (face embeddings + registered family names) | Recognize visiting family members | On device only (macOS) | Face embeddings never leave the device. First-use consent is requested before enabling this feature. |
AMI does not collect advertising identifiers, does not sell data, and does not use any collected data for tracking across apps or websites.
2. Where data is processed (cross-border notice)
- On-device: Face embeddings, health records, names, avatars, and voice diary files are stored only in the app's local storage on your device.
- Apple: Voice diary transcription may be processed by Apple's speech recognition servers. Apple is our processor for this step.
- Mainland China servers: When you use the AI meal-photo analysis, the photo and the analysis prompt are sent to our proxy server in Guangzhou (Tencent Cloud Functions) and then to the Kimi vision model (Moonshot AI, Beijing). This means that if you use AMI from Hong Kong or overseas, your meal photos may be transmitted to and processed on servers located in mainland China. By using this feature you consent to this cross-border transmission. The proxy does not retain photos; it forwards the request and returns the model's text result.
3. Regional availability of AI photo analysis
For users located in mainland China (device region = CN), the AI meal-photo analysis feature is disabled. All other features (voice diary, medication reminders, health records, family recognition on macOS) remain available.
4. Consent
- Face recognition (macOS): the first time you register a family member's face, the app asks for your explicit consent. You can delete any registered face at any time with the "delete data" control, which removes the face data immediately.
- Meal photo upload: before the first upload, the app shows a notice: “照片将上传云端识别营养” (photos will be uploaded to the cloud for nutrition analysis).
- Voice: camera / microphone / speech recognition permissions are requested by the system with purpose descriptions in Chinese.
5. Retention and deletion
- All data lives in the app's local container on your device.
- The “delete all data” button in the app erases all local records, registered faces, voice diaries, and settings immediately and permanently.
- Deleting the app from your device also removes all data.
6. Security
- Data is stored in the app sandbox, protected by iOS/macOS sandboxing.
- The AI proxy requires an authentication token header; requests without a valid token are rejected. Note that a token embedded in a client app is a deterrence against casual abuse, not absolute security — we additionally rate-limit and cap request sizes server-side.
7. Not a medical device
AMI is a family companionship and record-keeping tool. It is not a medical device, does not provide diagnosis, and its estimates (nutrition, health trends) are for informational purposes only. Always consult a qualified healthcare professional for medical advice.
8. Children
AMI is intended for adults and family caregivers (13+). It is not directed at children.
9. Changes to this policy
We will update this policy as the app evolves. Material changes will be reflected by updating the effective date above and, where practical, an in-app notice.
10. Contact
Questions about this policy or your data: minengj@gmail.com
