隐私政策
Plant Hub隐私政策
Planthub 由上海序溯智能科技有限公司运营。本政策说明我们如何收集、使用、存储和保护您的信息，以及您如何管理这些信息。图片和对话仅用于提供服务，不用于训练模型。请在使用前阅读本政策。
一、我们收集的信息
1.1 您主动提供的信息
（1）账号信息：手机号或邮箱注册、登录时，我们处理您提供的手机号、邮箱、昵称和密码（经安全散列处理）。通过 Apple 登录时，处理 Apple 用户标识及您授权的姓名、邮箱，邮箱可能为 Apple 隐藏邮箱。Android 微信登录处理授权返回的 OpenID、UnionID、昵称和头像。
（2）个人资料：您在编辑个人资料时提供的性别、生日、城市、个人简介、头像等信息。
（3）收货信息：当您在商城购买商品时，我们会收集收货人姓名、手机号码、收货地址。
（4）支付信息：当您进行交易时，我们会收集交易金额、交易时间、支付方式等信息。我们不直接收集您的银行卡号等敏感金融信息，支付由第三方支付机构处理。
（5）客服沟通：当您联系我们时，我们会收集您提供的问题描述、联系方式及沟通记录。
1.2 使用服务过程中收集的信息
（1）植物数据：您添加的植物信息（名称、品种、照片）、养护记录、花园配置数据。
（2）图片数据：您上传用于植物识别、病虫害诊断的植物图片，以及您发布的帖子图片、头像图片等。我们可能对图片进行AI分析以提供识别和诊断服务。
（3）位置信息：您授权定位时，获取设备位置并发送至定位服务以确定城市，提供天气及养护建议。设备可能提供精确坐标。您可选择大致位置、关闭权限，或手动选城市。我们不持续获取后台位置。
（4）对话记录：您与小芽的对话、主动添加的图片及与请求相关的植物和养护记录，用于生成回复、保存会话和提供建议，不用于训练模型。
（5）社区内容：您在社区发布的帖子、评论、点赞记录、私信内容。
（6）签到与积分：您的签到记录、积分变动记录。
1.3 自动收集的设备与日志信息
（1）设备信息：处理设备型号、系统及应用版本、语言等信息以适配功能及排查问题。启用消息提醒时，将 Apple 推送设备令牌关联当前账号。iOS 不读取 IMEI、OAID 或广告标识符，不进行跨应用广告跟踪。
（2）网络信息：网络类型（Wi-Fi/移动数据）、IP地址。
（3）应用信息：应用版本号、崩溃日志、功能使用统计数据。
（4）日志与反馈：处理访问时间、接口响应及错误信息以保障安全和排查问题。问题反馈包括您主动填写的描述、联系方式、截图和相关应用版本信息。
二、我们如何使用信息
2.1 提供和维护服务：使用您的信息来提供、维护和改进我们的各项服务，包括账号管理、植物养护、AI识别、社区交流、商城交易等核心功能。
2.2 AI 服务：使用小芽、识别、诊断或图像生成功能时，将该次请求所需的文字、图片及相关植物养护上下文发送至 DeepSeek 或阿里云百炼，生成结果。图片和对话只用于提供服务，不用于训练模型。请勿提交与服务无关的敏感信息。
2.3 个性化推荐：根据您的植物偏好、浏览历史和使用习惯，为您推荐可能感兴趣的植物内容和商品。
2.4 安全保障：用于账号安全验证、风险识别、反欺诈、反作弊等安全目的。
2.5 客户服务：响应您的咨询、处理您的投诉和建议。
2.6 统计分析：对服务使用情况进行统计分析，以改进产品功能和用户体验。
2.7 法律义务：遵守适用的法律法规、监管要求或有权机关的合法请求。
三、信息的存储与保护
3.1 存储地点：当前业务后端部署在新加坡，账号、植物、养护和对话等业务数据在该后端处理和存储。图片使用腾讯云对象存储。短信、天气、定位、内容安全和 AI 由第八节所述服务商处理，因此可能涉及跨境传输。我们使用 HTTPS 和访问权限管理保护数据，并按适用要求处理跨境数据。
3.2 存储期限：仅在提供服务、处理售后、保障安全及履行适用法定义务所需的期限内保留数据。您可删除内容或申请注销账号；我们据请求删除或匿名化相应信息，依法必须保留的交易、安全记录等除外。
3.3 安全措施：使用 HTTPS/TLS 加密传输、密码散列、账号鉴权和访问权限管理等措施保护个人信息。
3.4 尽管我们采取了上述安全措施，但请您理解，由于技术限制和可能存在的恶意手段，在互联网环境中无法保证信息的百分之百安全。如发生个人信息安全事件，我们将按照法律法规要求及时通知您。
四、信息的共享与披露
4.1 我们不会向第三方出售您的个人信息。在以下情况下，我们可能会共享您的信息：
（1）获得您的明确同意后。
（2）业务处理：仅在提供您请求的功能所必需的范围内由相关服务人员处理信息，不为无关目的向其他主体披露。
（3）服务提供商：仅向第八节所述服务商提供完成登录、支付、推送、短信、定位、天气、存储、审核和 AI 请求所必需的信息，不提供与该服务无关的账号密码。
（4）法律法规要求：根据法律法规、法律程序、政府主管部门的强制性要求。
（5）保护合法权益：为保护我们、我们的用户或公众的合法权益、财产或安全免受损害。
五、您的权利
5.1 查阅和更正：可在“我的-账号信息”修改资料，并在相应功能中管理植物、养护记录及会话。
5.2 删除：可在相应功能内删除内容，或联系本政策末尾的客服邮箱提出个人信息删除请求。
5.3 撤回同意：您可以在设备设置中关闭相机、位置、存储等权限，或在"设置"中管理通知、定位等偏好设置。撤回同意不影响此前基于您同意所进行的信息处理的合法性。
5.4 账号注销：在“我的-账号信息-注销账号”直接确认提交申请，无需另外联系客服或说明原因。我们在15个工作日内人工处理，完成前通过 App 内反馈记录回复确认。注销会删除或匿名化账号及关联的个人资料、植物、养护、对话、社区内容和上传图片，依法须保留的交易与安全记录除外。Apple 自动续订需在 Apple 订阅管理中单独取消，不影响您申请注销。
5.5 获取副本：您有权获取您个人信息的副本，可通过联系我们提出请求。
5.6 如您需要行使上述权利，请通过本政策末尾提供的联系方式与我们联系。我们将在15个工作日内响应您的请求。
六、未成年人保护
6.1 我们非常重视对未成年人个人信息的保护。如果您是未满18周岁的未成年人，请在法定监护人的陪同下阅读本政策，并在征得法定监护人同意后使用我们的服务。
6.2 对于经监护人同意而收集的未成年人个人信息，我们仅在法律法规允许、监护人明确同意或保护未成年人所必要的情况下使用或披露。
6.3 如果监护人发现我们在未获监护人同意的情况下收集了未成年人的个人信息，请联系我们，我们会尽快删除相关信息。
七、Cookie 和类似技术
7.1 为确保网站正常运转、为您获得更轻松的访问体验，我们可能在您的设备上存储Cookie或类似技术。
7.2 您可以通过浏览器设置管理Cookie。但请注意，停用Cookie可能影响您对本平台部分功能的正常使用。
八、第三方SDK与服务
8.1 客户端SDK
Apple 系统服务（仅 iOS）
运营主体：Apple Inc.
使用目的：通过 Apple 登录、订阅购买与恢复、消息推送；相机、相册和定位由系统按授权提供。
处理信息：Apple 用户标识及授权的姓名/邮箱、商品及交易标识、推送设备令牌；不获取银行卡信息。
隐私政策：https://www.apple.com/legal/privacy/
微信与支付宝 SDK（仅 Android 等相应平台）
运营主体：腾讯相关服务主体、支付宝（中国）网络技术有限公司
使用目的：在相应平台启用微信登录、分享或微信/支付宝支付时调用；iOS 会员订阅使用 Apple 内购。
处理信息：相应功能所需的第三方用户标识、订单号、金额及交易状态。
隐私政策：https://privacy.qq.com/ 及 https://opendocs.alipay.com/common/02kiq3
腾讯位置服务（服务端）
运营主体：深圳市腾讯计算机系统有限公司
使用目的：授权定位或主动请求城市定位时确定城市，提供天气及养护建议。
处理信息：完成城市定位所需的坐标或 IP 地址。
隐私政策：https://lbs.qq.com/userAgreements/agreements/privacy
8.2 后端AI及云服务SDK
运营主体：杭州深度求索人工智能基础技术研究有限公司
使用目的：小芽文字与图片理解、知识问答及植物养护建议。
收集信息：用户上传的植物图片、用户对话内容、植物养护记录（用于生成个性化建议）
隐私政策：https://cdn.deepseek.com/policies/zh-CN/deepseek-privacy-policy.html
阿里云DashScope（百炼）
运营主体：阿里云计算有限公司
使用目的：请求所需的文字/图片向量化、检索重排及 AI 图像生成。
收集信息：用户上传的植物图片、对话文本（用于API调用处理）
隐私政策：https://www.aliyun.com/product/dashscope
腾讯云对象存储 COS
运营主体：腾讯云计算（北京）有限责任公司
使用目的：存储用户上传图片及应用静态资源。
处理信息：您选择上传的头像、植物照片、帖子图片和反馈截图。
隐私政策：https://cloud.tencent.com/document/product/301/11470
阿里云短信服务
运营主体：阿里云计算有限公司
使用目的：手机号注册验证、密码重置验证码发送
收集信息：手机号码
隐私政策：https://www.aliyun.com/product/sms
腾讯云内容安全
运营主体：腾讯云计算（北京）有限责任公司
使用目的：对发布的文字、图片和其他需要审核的内容进行安全检测。
处理信息：相关文字及图片；仅为安全审核发送必要内容。
隐私政策：https://cloud.tencent.com/document/product/301/11470
和风天气API
运营主体：和风互联科技（北京）有限公司
使用目的：获取城市天气预报，用于植物养护建议生成
收集信息：用户所在城市名称
隐私政策：https://www.qweather.com/terms/privacy
8.3 基础设施
业务服务部署在新加坡，使用 PostgreSQL 存储业务数据、Redis 提供会话及限流能力。媒体资源使用腾讯云对象存储。AI、短信、天气及定位通过相应服务商处理，不代表全部数据均在中国大陆境内处理。
8.4 权限说明
以下权限在您使用相关功能时申请，可在系统设置中管理。消息通知用于您开启的养护与社区消息提醒，拒绝通知不影响其他功能。
| 权限名称 | 使用目的 | 可否关闭 |
| 相机/摄像头 | 拍摄植物照片进行识别、诊断及发布帖子 | 是 |
| 相册/存储读取 | 从相册选择植物图片进行识别、诊断及发布帖子 | 是 |
| 位置信息 | 获取城市信息提供天气服务及植物养护建议 | 是（可在系统设置中关闭） |
| 存储写入 | 保存生成的效果图及缓存图片资源 | 是（可在系统设置中关闭） |
关闭上述权限可能影响对应功能的正常使用，但不影响其他基本服务。
8.5 第三方信息处理
我们仅为您请求的功能调用相关第三方服务，并在必要范围内提供信息。您可通过上述链接查阅其隐私政策；我们仍承担适用法律要求的个人信息保护责任。
九、隐私政策的变更
9.1 我们可能会不时修订本隐私政策。修订后的政策将在本平台公告，重大变更将以弹窗通知等方式告知您。
9.2 对需要您重新同意的重大变更，我们将在启用相关处理前再次征求同意。
十、联系我们
如您对本隐私政策有任何疑问、意见或建议，或需要行使您的个人信息权利，请通过以下方式联系我们：
个人信息权利与隐私联系邮箱：[email protected]
客服邮箱：[email protected]
我们将在15个工作日内响应您的请求。
Privacy Policy · English
Plant Hub Privacy Policy
Planthub is operated by Shanghai Seqtrace Intelligent Technology Co., Ltd. This policy explains how we collect, use, store and protect information and how you can manage it. Images and conversations are used only to provide services, not to train models. Please read this policy before use.
I. Information We Collect
1.1 Information you provide
(1) Account information: We process the phone number, email, nickname and password you provide for registration/sign-in (passwords are securely hashed). Sign in with Apple provides an Apple user identifier and any authorized name/email, which may be a private relay address. WeChat sign-in on Android processes the authorized OpenID, UnionID, nickname and profile photo.
(2) Profile information: Information you provide when editing your profile, such as gender, birthday, city, personal biography and profile photo.
(3) Delivery information: When you purchase products in the shop, we collect the recipient's name, mobile phone number and delivery address.
(4) Payment information: When you make a transaction, we collect information such as the transaction amount, time and payment method. We do not directly collect sensitive financial information such as your bank card number. Payments are processed by third-party payment institutions.
(5) Customer support communications: When you contact us, we collect the problem descriptions, contact details and communication records you provide.
1.2 Information collected while you use our services
(1) Plant data: Plant information you add (names, varieties and photos), care records and garden configuration data.
(2) Image data: Plant images you upload for plant identification and pest and disease diagnosis, as well as images in your posts, profile photos and other images. We may analyze images using AI to provide identification and diagnostic services.
(3) Location: With permission, we obtain device location and send it to the location service to determine your city for weather and care suggestions. The device may supply precise coordinates. You can allow approximate location, disable permission, or select a city manually. We do not continuously collect background location.
(4) Conversations: Messages to Xiaoya, images you attach and relevant plant/care context are used to generate replies, save history and provide suggestions, not to train models.
(5) Community content: Posts, comments, like records and private messages you publish in the community.
(6) Check-ins and points: Your check-in records and records of changes to your points.
1.3 Automatically collected device and log information
(1) Device information: Device model, OS/app version and language support features and troubleshooting. When you enable remote notifications, an Apple push device token is associated with your account. iOS does not read IMEI, OAID or advertising identifiers or track you across apps for advertising.
(2) Network information: Network type (Wi-Fi/mobile data) and IP address.
(3) Application information: App version, crash logs and feature usage statistics.
(4) Logs and feedback: Access times, API responses and error information support security and troubleshooting. Bug reports include the description, contact details, screenshots and relevant app version that you submit.
II. How We Use Information
2.1 Providing and maintaining services: We use your information to provide, maintain and improve our services, including core features such as account management, plant care, AI identification, community interaction and shop transactions.
2.2 AI services: For Xiaoya, identification, diagnosis or image generation, we send the text, images and relevant plant/care context required for that request to DeepSeek or Alibaba Cloud DashScope to generate results. Images and conversations are used only to provide services, not to train models. Avoid submitting unrelated sensitive information.
2.3 Personalized recommendations: Based on your plant preferences, browsing history and usage habits, we recommend plant content and products that may interest you.
2.4 Security: For security purposes such as account verification, risk identification, fraud prevention and prevention of cheating.
2.5 Customer service: Responding to your inquiries and handling your complaints and suggestions.
2.6 Statistical analysis: Analyzing service usage statistically to improve product features and user experience.
2.7 Legal obligations: Complying with applicable laws and regulations, regulatory requirements or lawful requests from competent authorities.
III. Storage and Protection of Information
3.1 Processing locations: Our business backend is in Singapore, where account, plant, care and conversation data are processed and stored. Images use Tencent Cloud Object Storage. SMS, weather, location, moderation and AI providers process data as described in section VIII, so processing may cross borders. HTTPS and access controls protect data, subject to applicable cross-border requirements.
3.2 Retention: We retain information only as necessary to provide services, handle support, protect security and meet applicable legal obligations. You can delete content or request account deletion. We delete or anonymize corresponding data except records that must legally be retained.
3.3 Security: We use HTTPS/TLS transport, password hashing, authentication and access controls to protect personal information.
3.4 Despite these security measures, please understand that technical limitations and potential malicious methods make it impossible to guarantee complete information security on the Internet. If a personal information security incident occurs, we will notify you promptly as required by laws and regulations.
IV. Sharing and Disclosure of Information
4.1 We do not sell your personal information to third parties. We may share your information in the following circumstances:
(1) After obtaining your explicit consent.
(2) Operations: Authorized personnel process information only to provide requested features, without disclosing it to other parties for unrelated purposes.
(3) Providers: We provide only information required for the sign-in, payments, notifications, SMS, location, weather, storage, moderation and AI services in section VIII, not unrelated account passwords.
(4) Legal and regulatory requirements: As required by laws and regulations, legal proceedings or mandatory requirements of government authorities.
(5) Protection of lawful rights and interests: To protect the lawful rights and interests, property or safety of us, our users or the public from harm.
V. Your Rights
5.1 Access and correction: Edit your profile in Me - Account information and manage plants, care records and conversations in the relevant features.
5.2 Deletion: Delete content within the relevant features or contact the email below to request deletion of personal information.
5.3 Withdrawal of consent: You can disable permissions such as camera, location and storage in your device settings, or manage preferences such as notifications and location in "Settings". Withdrawing consent does not affect the lawfulness of prior information processing based on your consent.
5.4 Account deletion: Confirm directly in Me - Account information - Delete account; no separate support contact or explanation is required. We process requests manually within 15 working days and confirm through in-app feedback history before completion. We delete or anonymize the account and associated profile, plants, care records, conversations, community content and uploaded images, except transaction/security records legally retained. Cancel Apple renewals separately in Apple subscription settings; they do not prevent deletion requests.
5.5 Obtaining a copy: You have the right to obtain a copy of your personal information and may request one by contacting us.
5.6 To exercise these rights, please contact us using the details at the end of this policy. We will respond to your request within 15 working days.
VI. Protection of Minors
6.1 We take the protection of minors' personal information very seriously. If you are under 18, please read this policy with your legal guardian and obtain their consent before using our services.
6.2 For minors' personal information collected with a guardian's consent, we use or disclose it only where permitted by laws and regulations, explicitly agreed to by the guardian, or necessary to protect the minor.
6.3 If a guardian discovers that we have collected a minor's personal information without the guardian's consent, please contact us. We will delete the relevant information as soon as possible.
VII. Cookies and Similar Technologies
7.1 To ensure the website functions properly and make access easier, we may store cookies or similar technologies on your device.
7.2 You can manage cookies through your browser settings. Please note that disabling cookies may affect your normal use of some Platform features.
VIII. Third-Party SDKs and Services
8.1 Client SDKs
Apple system services (iOS only)
Operator: Apple Inc.
Purpose: Sign in with Apple, subscription purchases/restoration and push notifications; camera, photos and location use system permissions.
Information: Apple user identifier and authorized name/email, product/transaction identifiers and push device token; we do not receive bank card information.
Privacy policy: https://www.apple.com/legal/privacy/
WeChat and Alipay SDKs (Android and applicable platforms only)
Operators: Relevant Tencent service entities and Alipay (China) Network Technology Co., Ltd.
Purpose: WeChat sign-in/sharing or WeChat/Alipay payments where enabled; iOS memberships use Apple In-App Purchase.
Information: Third-party user identifiers, order numbers, amounts and transaction status needed for the selected feature.
Privacy policies: https://privacy.qq.com/ and https://opendocs.alipay.com/common/02kiq3
Tencent Location Service (server-side)
Operator: Shenzhen Tencent Computer Systems Company Limited
Purpose: Determine your city when you authorize location or request city detection, for weather and care suggestions.
Information: Coordinates or IP address needed to determine the city.
Privacy policy: https://lbs.qq.com/userAgreements/agreements/privacy
8.2 Backend AI and Cloud Service SDKs
Operator: Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co., Ltd.
Purpose: Xiaoya text/image understanding, knowledge questions and plant care suggestions.
Information collected: Plant images uploaded by users, user conversations and plant care records (to generate personalized suggestions)
Privacy policy: https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html
Alibaba Cloud DashScope (Bailian)
Operator: Alibaba Cloud Computing Co., Ltd.
Purpose: Text/image embeddings, retrieval reranking and AI image generation needed for the request.
Information collected: Plant images uploaded by users and conversation text (for processing API calls)
Privacy policy: https://www.aliyun.com/product/dashscope
Tencent Cloud Object Storage (COS)
Operator: Tencent Cloud Computing (Beijing) Co., Ltd.
Purpose: Store uploaded images and application static resources.
Information: Profile photos, plant photos, post images and feedback screenshots that you choose to upload.
Privacy policy: https://www.tencentcloud.com/document/product/301/17345
Alibaba Cloud SMS
Operator: Alibaba Cloud Computing Co., Ltd.
Purpose: Phone number registration verification and sending password reset verification codes
Information collected: Mobile phone numbers
Privacy policy: https://www.aliyun.com/product/sms
Tencent Cloud Content Moderation
Operator: Tencent Cloud Computing (Beijing) Co., Ltd.
Purpose: Safety review of published text, images and other content requiring moderation.
Information: Necessary text and images submitted for safety review.
Privacy policy: https://www.tencentcloud.com/document/product/301/17345
QWeather API
Operator: Hefeng Internet Technology (Beijing) Co., Ltd.
Purpose: Obtaining city weather forecasts to generate plant care suggestions
Information collected: The name of the user's city
Privacy policy: https://www.qweather.com/terms/privacy
8.3 Infrastructure
Our business backend runs in Singapore. PostgreSQL stores business data; Redis supports sessions and rate limits. Media use Tencent Cloud Object Storage. AI, SMS, weather and location are processed by the respective providers; not all information is processed within mainland China.
8.4 Permissions
Permissions below are requested for the features you choose and managed in device settings. Notifications support the care and community reminders you enable; declining does not prevent other features.
| Permission | Purpose | Can be disabled |
| Camera | Taking plant photos for identification, diagnosis and posts | Yes |
| Photo library/storage read access | Selecting plant images from the photo library for identification, diagnosis and posts | Yes |
| Location | Obtaining city information for weather services and plant care suggestions | Yes (in system settings) |
| Storage write access | Saving generated visualizations and caching image resources | Yes (in system settings) |
Disabling these permissions may affect the corresponding features, but does not affect other basic services.
8.5 Third-party processing
We call providers only for requested features and provide necessary information. The links above explain their privacy practices. We remain responsible for personal information protection as required by applicable law.
IX. Changes to the Privacy Policy
9.1 We may revise this Privacy Policy from time to time. Revised policies will be announced on the Platform, and significant changes will be communicated through methods such as pop-up notifications.
9.2 For significant changes requiring renewed permission, we ask for consent before enabling the relevant processing.
X. Contact Us
If you have any questions, comments or suggestions about this Privacy Policy, or need to exercise your personal information rights, please contact us as follows:
Privacy and personal information rights: [email protected]
Customer service: [email protected]
We will respond to your request within 15 working days.