1. 引言
欢迎使用“潜记”（Divenote）（以下简称“本应用”）。我们需要收集和使用您的某些信息，以便为您提供服务。本隐私政策旨在向您说明我们如何收集、使用、存储和保护您的个人信息。
2. 我们收集的信息
本应用可能会收集以下类型的信息：
- 账号信息：电子邮件地址、用户名（用于注册、登录、找回密码、账号安全）。
- 识别图片数据（识别阶段）：当您主动上传图片进行 AI 识别时，我们会处理您上传的图片及其 MIME 类型等必要技术信息。
- 收藏数据（保存阶段）：当您点击“添加到记录/我的收集”时，我们会将图片及相关记录信息持久化存储（存储基础设施位于阿里云），包括物种名称、分类节点、置信度、备注、时间等。
- 位置信息（可选）：当您使用地图相关功能时，我们可能请求定位权限，用于显示当前位置和附近潜点。
- 反馈与通信信息：当您提交反馈时，您主动提供的反馈内容和联系方式。
3. 数据处理阶段说明
- 阶段 1：识别处理（未保存）：图片仅用于本次识别处理；未点击“添加到记录”时，不会写入“我的收集”长期存储。
- 阶段 2：保存到我的收集：仅在您主动点击“添加到记录/我的收集”后，相关图片与记录才会被持久化保存，用于跨设备查看与管理。
4. 我们如何使用信息
- 提供、维护和改进本应用功能。
- 完成海洋生物识别并展示结果。
- 保存并管理您的“我的收集”记录。
- 响应您的反馈和支持请求。
5. 信息共享与第三方保护
我们不会出售您的个人信息。我们仅在必要范围内共享数据，并要求接收方提供同等或更高的保护水平。
- 第三方 AI 服务：在您授权后，我们会通过自有网关将识别图片及必要技术信息发送给 火山引擎，仅用于海洋生物识别，不用于广告跟踪。
- 基础设施服务商：我们使用 阿里云（Alibaba Cloud） 提供日志、图片等数据存储及相关基础设施服务；为实现邮件通知等功能，我们可能使用邮件服务提供商处理必要数据。
- 法律要求：在法律法规、法院命令或监管要求下披露。
6. 数据保留与删除（90 天口径）
- “我的收集”数据在您未主动删除前持续保留。
- 您删除单条“我的收集”记录后，主业务数据将被删除；备份或日志副本最长保留 90 天后清理。
- 您注销账号后，主账号数据将被删除；与账号关联的残余副本按最长 90 天窗口清理。
7. 同意与撤回
您可以在注册环节及识别环节授权第三方 AI 识别数据处理。您也可以在 App 内 “我的 -> 设置 -> 撤回 AI 识别授权” 进行撤回。撤回后将无法继续使用识别功能，直至您重新同意。
8. 数据安全
我们采取合理的安全措施来保护您的信息，防止未经授权的访问、披露、修改或破坏。但请注意，互联网传输无法保证 100% 安全。
9. 您的权利
您有权访问、更正或删除您的个人信息。您可以通过应用内设置或联系我们行使上述权利。
10. 儿童隐私
本应用不面向 13 岁以下儿童。若监护人发现儿童向我们提供了个人信息，请联系我们，我们将采取删除措施。
11. 隐私政策的变更
我们可能不时更新本隐私政策。更新后的版本将发布在本页面。
12. 联系我们
如果您对本隐私政策有任何疑问，请联系我们：
1. Introduction
Welcome to Divenote ("the App"). We need to collect and use certain information to provide you with our services. This Privacy Policy explains how we collect, use, store, and protect your personal information.
2. Information We Collect
The App may collect the following categories of data:
- Account Information: email and username for registration, login, password reset, and account security.
- Identification Image Data (Identification Stage): when you upload an image for AI identification, we process your image and necessary technical metadata (such as MIME type).
- Collection Data (Save Stage): when you tap “Add to Collection”, we persist the image and related record fields (such as species name, taxonomy node, confidence, notes, and timestamp) on Alibaba Cloud infrastructure.
- Location Information (Optional): when map features are used, location permission may be requested to show nearby dive spots.
- Feedback and Contact Data: content and contact details that you voluntarily submit in feedback.
3. Two-Stage Data Processing
- Stage 1: Identification Processing (Not Saved): if you do not tap “Add to Collection”, identification images are used only for that identification request and are not persisted as collection records.
- Stage 2: Saved to Collection: only when you explicitly tap “Add to Collection” do we persist the image and related record for cross-device viewing and management.
4. How We Use Information
- To provide, maintain, and improve app functionality.
- To run marine species AI identification and return results.
- To save and manage your personal collection records.
- To respond to feedback and support requests.
5. Information Sharing and Third-Party Protection
We do not sell personal information. We only share data on a need-to-know basis and require recipients to provide the same or higher level of protection.
- Third-Party AI Service: with your consent, identification images and necessary technical metadata are sent via our gateway to Volcengine Ark solely for marine species identification, not for ad tracking.
- Infrastructure Providers: we use Alibaba Cloud for operational logs, image storage, and related infrastructure services; we may also use email service providers for account communications.
- Legal Requirements: disclosure when required by law, court order, or regulators.
6. Data Retention and Deletion (90-Day Window)
- Collection data is retained until you delete it.
- After deleting a collection record, primary business data is removed; backup/log residual copies may be retained for up to 90 days.
- After account deletion, primary account data is removed; residual copies tied to the account are cleaned within up to 90 days.
7. Consent and Withdrawal
You can grant third-party AI processing consent during registration and identification flows. You can withdraw consent in “Profile -> Settings -> Revoke AI Identification Authorization”. After withdrawal, identification features are unavailable until you consent again.
8. Data Security
We implement reasonable safeguards to protect your data from unauthorized access, disclosure, modification, or destruction. However, internet transmission cannot be guaranteed as 100% secure.
9. Your Rights
You may access, correct, or delete your personal information through in-app settings or by contacting us.
10. Children's Privacy
The App is not directed to children under 13. If a parent or guardian believes a child has provided personal data, please contact us and we will take deletion steps.
11. Changes to Privacy Policy
We may update this Privacy Policy from time to time. Updates will be published on this page.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us at: