Privacy Policy隐私政策

Effective date: October 30, 2026生效日期：2026 年 10 月 30 日

Muf (“we”, “us”) is operated by Qingdao Ketai Software Co., Ltd. This policy explains what we collect, how we use it, and the choices you have. We built Muf to be privacy-first: much of your data never leaves your device. 沐肤（“我们”）由青岛科泰软件有限公司运营。本政策说明我们收集哪些信息、如何使用，以及你拥有的选择。沐肤以隐私优先为原则设计：你的大量数据从不离开设备。

1. Information we collect一、我们收集的信息

• Account: an anonymous account ID is created so you can use the app; if you sign in with Apple, we receive the identifier Apple provides (and a name only if you choose to share it).账号：为使你能使用 App，会创建一个匿名账号 ID；若使用「通过 Apple 登录」，我们会收到 Apple 提供的标识（仅在你选择分享时收到昵称）。
• Skin analysis: when you run a skin test, a face photo is processed to produce your results. Results (scores, skin type and the problem heatmaps drawn for your report) are saved to your account so you can see history and trends. We do not keep your original photo and never use it for facial recognition or identification.测肤：当你进行测肤时，会处理一张面部照片以生成结果。结果（分数、肤型以及为报告生成的问题热力图）会保存到你的账号，用于查看历史与趋势。我们不保留原始照片，也绝不用于人脸识别或身份识别。
• Profile: optional quiz answers (skin type, concerns).档案：可选的问卷答案（肤型、困扰）。
• Coach messages: text you send to the AI coach, plus a short summary of your skin profile, are processed to generate a reply.教练对话：你发给 AI 教练的文字，以及你的肤质概要，会被处理以生成回复。
• Purchases: subscription/credit status via the App Store. We never receive your card details.购买：通过 App Store 处理订阅/credit 状态；我们不会收到你的银行卡信息。
• Stored only on your device (never uploaded to us): routine check-ins & streaks, skincare goals, menstrual-cycle logs, lifestyle logs, product tracker, daily brief cache and progress photos.仅存在你的设备（从不上传给我们）：护肤打卡与连续天数、护肤目标、生理周期记录、生活方式记录、产品追踪、每日简报缓存与进展照片。

Usage statistics and feedback使用统计与反馈

Muf sends one anonymous daily open count containing the date, first or returning open, app and operating-system versions, and installation channel. These requests contain no account, device or installation identifier. Ordinary server security logs may record connection information.沐肤每天发送一次匿名打开计数，包含日期、首次或再次打开、App 与系统版本及安装渠道。此类请求不携带账号、设备或安装标识。服务器常规安全日志可能记录连接信息。

Detailed usage sharing is optional and off until you agree. It includes a separate analytics device identifier, device and app details, screens and features used, session duration, errors, crash reports and performance metrics. It does not include skin photos, skin reports, diary or coach-message text, or Apple sign-in credentials. In Settings → Privacy & Data, you can turn sharing off and request deletion of uploaded usage data. Turning sharing off clears pending events; it does not remove already uploaded records or anonymous aggregate counts. Event and diagnostic details are normally retained for up to 180 days, and connection IP information for up to 90 days.详细使用统计由你自愿开启，同意前不上传。包括独立的统计设备标识、设备与 App 信息、使用的页面和功能、会话时长、错误、崩溃及性能数据；不包括测肤照片、肤况报告、日记或教练对话正文、Apple 登录凭据。你可在「设置 → 隐私与数据」关闭分享或请求删除已上传的使用数据。关闭分享会清空待上传事件，但不会删除已经上传的记录或匿名汇总计数。事件和诊断明细通常保留不超过 180 天，连接 IP 信息不超过 90 天。

When you send feedback, we receive the message, optional contact information and attachments you select, together with an installation identifier and app/device version details, to respond and troubleshoot. Feedback and usage statistics are handled by our own operations service at feedback.ketaiyun.com, without advertising or third-party tracking SDKs.发送反馈时，我们会收到你的正文、主动提供的联系方式与附件，以及安装标识、App 和设备版本，用于回复及排查。反馈和使用统计由我们自有的 feedback.ketaiyun.com 运营服务处理，不接入广告或第三方追踪 SDK。

2. How we use information二、我们如何使用信息

• To provide skin analysis, routines, the AI coach, ingredient scan and tracking.用于提供测肤、护肤方案、AI 教练、成分检测与追踪。
• To operate your account and process purchases.用于运行你的账号与处理购买。
• To keep the service secure and fix problems.用于保障服务安全与排查问题。

3. Camera, photos & location三、相机、照片与定位

• Camera: used only for skin analysis and ingredient scan, when you start them.相机：仅在你开始测肤或成分检测时使用。
• Photos: progress-album photos you add stay on your device; captures you save go to your own photo library.照片：你添加到进展相册的照片仅存在本机；你保存的拍照会存入你自己的相册。
• Location (optional): used only to fetch local UV and humidity for daily tips. Your coordinates are sent to a weather service to get the forecast and are not stored or uploaded to us.定位（可选）：仅用于获取本地紫外线与湿度以给出当日建议。坐标会发送给天气服务以取得数据，不会被我们存储或上传。

4. Third-party processors四、第三方处理方

We use trusted providers to deliver certain features. They process data only to perform their service and are not permitted to use it for their own purposes:我们使用受信任的服务商来提供部分功能。他们仅为完成相应服务而处理数据，不得用于自身目的：

• AI coach provider: receives your coach messages and a short skin-profile summary to generate replies.AI 教练服务商：接收你的教练对话与肤质概要以生成回复。
• Skin-analysis provider: receives the face image to compute skin metrics.测肤服务商：接收面部图片以计算肤质指标。
• Apple: handles Sign in with Apple and in-app purchases.Apple：处理「通过 Apple 登录」与内购。
• Weather service: receives coordinates to return local UV/humidity.天气服务：接收坐标以返回本地紫外线/湿度。

5. Retention & deletion五、留存与删除

• On-device data is removed when you use “Clear on-device data” in the app or delete the app.当你在 App 内使用「清除本机数据」或删除 App 时，本机数据即被移除。
• To delete your account and all cloud data (skin-test history, heatmaps, coach logs and purchase records), use Me → Settings → Delete Account in the app — deletion is immediate and permanent. You can also email us.如需删除账号及全部云端数据（测肤历史、热力图、教练记录、购买记录等），可在 App 内「我的 → 设置 → 删除账号」一键完成，立即永久删除；也可发邮件联系我们。

6. Security六、安全

Data in transit is encrypted (HTTPS). No method of storage or transmission is 100% secure, but we take reasonable measures to protect your information.传输中的数据经过加密（HTTPS）。没有任何存储或传输方式能做到 100% 安全，但我们采取合理措施保护你的信息。

7. Children七、未成年人

Muf is not directed to children under 13, and we do not knowingly collect their personal information.沐肤不面向 13 周岁以下儿童，我们不会有意收集其个人信息。

8. Your rights八、你的权利

You may access, correct or delete your data, and withdraw permissions (camera, location, notifications) at any time in iOS Settings. Contact us to exercise any right.你可随时访问、更正或删除你的数据，并在 iOS「设置」中撤回权限（相机、定位、通知）。如需行使权利，请联系我们。

9. Changes九、政策更新

We may update this policy; we will revise the “Effective date” above and, for material changes, notify you in the app.我们可能更新本政策；届时会修改上方「生效日期」，重大变更会在 App 内通知你。

10. Contact十、联系我们

Qingdao Ketai Software Co., Ltd. — 青岛科泰软件有限公司 —— ketaiyun@gmail.com