Privacy Policy 私隱政策
The English version governs. The Chinese translation is provided for convenience. 本頁以英文版本為準,中文翻譯僅供參考。
1. Introduction
Welcome to Siu Tim Siu Dai (少甜少底). The app is operated by SIUTIMSIUDAI, a sole proprietorship registered in Hong Kong ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share your personal information when you use our mobile application.
2. Information We Collect
- Account Information: When you create an account, we may collect basic profile information required for authentication.
- Dietary, Health and Log Data: We collect the text, recipes, and food logs you input, together with the body metrics you provide (such as height, weight, age, and activity level) and the nutrition targets and weight history derived from them, to provide meal estimations, recipe substitutions, and personalized targets.
- Photos: When you photograph a meal, or choose an existing photo, to estimate its nutrition, that image is sent for analysis (see Section 3) and is stored with the corresponding entry in your food diary. When you photograph your kitchen or pantry to list ingredients, that image is sent for analysis but is not stored. When you scan a product barcode, the camera reads the code on your device itself: no image is stored, and none is sent anywhere. Only the barcode number leaves your device, as described in Section 3.
- Device and Usage Data: We collect standard diagnostic data to ensure the app functions correctly and securely.
3. Artificial Intelligence and Third-Party Processing (Important)
To provide core app functionality, we rely on a small number of third-party services. Some of these, such as smart recipe substitutions and meal macro estimation, use artificial intelligence.
- Google Cloud Integration: The text and dietary logs you input, and the meal and kitchen photos you capture for analysis, are sent to and processed by Google Cloud (our AI infrastructure provider) to estimate nutrition and identify ingredients.
- Data Training: Your personal data and food logs are strictly used to process your immediate request and are not used by Google Cloud to train public AI models.
- Breached Password Check: When you choose a new password, we check it against the Have I Been Pwned database of passwords exposed in public data breaches. Your password is never sent. It is converted on your device into a SHA-1 hash, and only the first five characters of that hash are transmitted; the service returns every entry sharing those five characters, and the comparison is completed on your device. The service therefore cannot determine your password, nor whether the result was a match. No email address, account identifier or other personal data accompanies the request. This check runs only when a password is being set — never when you sign in — and if the service cannot be reached your password is accepted as normal.
- Subscription Processing (RevenueCat): Our Pro and Max subscriptions are handled through Apple's in-app purchase system, with subscription status managed for us by RevenueCat, Inc. To tell whether a subscription is active, we share a randomly generated app user identifier and the App Store purchase receipt with RevenueCat. This is not linked to your email address, and no payment card details ever reach us or RevenueCat — those stay with Apple.
- Recipe Import: When you import a recipe from a web address you paste in, that address is sent to our own server, which fetches the page and passes it back to the app to read the recipe details. The request to the recipe website therefore comes from us rather than from your device, and no third-party proxy service is involved. Only the address is sent — never your account details — so we suggest importing only from sites you trust.
- Barcode Lookup (Open Food Facts): When you scan a product barcode, that barcode number is sent from your device to Open Food Facts, a free and open database of food products, which returns the product name and the nutrition figures recorded for it. As with any ordinary web request, your device's network address is visible to that service, but no account identifier, email address or diary data accompanies it. The nutrition figures shown for a scanned product come from that database and are not estimated by us.
4. Family Sharing
The Max plan lets a subscriber (a "manager") invite family members to link their accounts. Linking is optional and always starts with an invitation you choose to accept.
- What is shared: Once you accept an invitation, the manager can view and manage (create, edit, and delete) your meal and nutrition logs, and can see your display name and calorie targets so they can label those logs for you. Your recipes, pantry, meal plans, shopping lists, and account settings are never shared.
- One direction only: The manager does not share their own logs back to you, and linking does not give you any paid features from their plan.
- Leaving: You keep your own account and can leave the family at any time from within the app, which ends the manager's access.
5. Data Retention and Deletion
We retain your data only as long as necessary to provide our services. You have the right to delete your data at any time. You can instantly wipe all local device data and delete your server account by navigating to the Profile tab in the app and selecting Delete Account.
6. Contact Us
If you have questions about this Privacy Policy, please contact us at support@siutimsiudai.app.
1. 簡介
歡迎使用少甜少底(Siu Tim Siu Dai)。本應用程式由 SIUTIMSIUDAI(於香港註冊的獨資經營)營運(下稱「我們」)。我們致力保護您的私隱。本私隱政策說明,當您使用我們的流動應用程式時,我們如何收集、使用及分享您的個人資料。
2. 我們收集的資料
- 帳戶資料:當您建立帳戶時,我們可能會收集身分驗證所需的基本個人檔案資料。
- 飲食、健康及記錄資料:我們會收集您在應用程式內輸入的文字、食譜及飲食記錄,連同您提供的身體數據(例如身高、體重、年齡及運動量)以及據此計算的營養目標及體重紀錄,以提供餐膳估算、食譜替代建議及個人化目標。
- 相片:當您拍攝餐膳相片(或選擇現有相片)以估算其營養時,該相片會傳送作分析(見第 3 節),並會與您飲食日記中的相應記錄一併儲存。當您拍攝廚房或食材庫以列出食材時,該相片會傳送作分析,但不會被儲存。當您掃描產品條碼時,相機會直接在您的裝置上讀取該條碼:不會儲存任何影像,亦不會傳送任何影像。只有條碼號碼會離開您的裝置,詳見第 3 節。
- 裝置及使用資料:我們會收集標準診斷資料,以確保應用程式正常及安全運作。
3. 人工智能及第三方處理(重要)
為提供核心功能,我們依賴少量第三方服務。當中部分(例如智能食譜替代及餐膳營養估算)會使用人工智能。
- Google Cloud 整合:您輸入的文字及飲食記錄,以及您為分析而拍攝的餐膳及廚房相片,會傳送至 Google Cloud(我們的人工智能基礎設施供應商)並由其處理,以估算營養及辨識食材。
- 資料訓練:您的個人資料及飲食記錄僅用於處理您當下的請求;Google Cloud 不會使用這些資料來訓練公開的人工智能模型。
- 外洩密碼檢查:當您設定新密碼時,我們會將其與 Have I Been Pwned(記錄公開資料外洩事件中曝光密碼的資料庫)比對。我們不會傳送您的密碼。密碼會在您的裝置上轉換為 SHA-1 雜湊值,而我們只會傳送該雜湊值的首五個字元;該服務會回傳所有共用這五個字元的紀錄,比對則在您的裝置上完成。因此,該服務無法得知您的密碼,亦無法得知比對結果是否吻合。有關要求不會附帶電郵地址、帳戶識別碼或任何其他個人資料。此檢查僅在設定密碼時執行,登入時絕不會執行;若無法連接該服務,您的密碼會照常獲接納。
- 訂閱處理(RevenueCat):我們的 Pro 及 Max 訂閱透過 Apple 的應用程式內購買系統處理,並由 RevenueCat, Inc. 代為管理訂閱狀態。為判斷訂閱是否生效,我們會將一個隨機產生的應用程式用戶識別碼,以及 App Store 的購買收據交予 RevenueCat。這些資料不會與您的電郵地址關聯。任何信用卡資料都不會傳送至我們或 RevenueCat,一律由 Apple 保管。
- 食譜匯入:當您貼上網址匯入食譜時,該網址會傳送至我們自己的伺服器,由伺服器擷取該網頁,再交回應用程式讀取食譜內容。因此,向食譜網站發出的要求來自我們,而非您的裝置,過程亦不涉及任何第三方代理服務。只會傳送該網址,絕不包含您的帳戶資料,因此我們建議只從您信任的網站匯入。
- 條碼查詢(Open Food Facts):當您掃描產品條碼時,該條碼號碼會由您的裝置傳送至 Open Food Facts(一個免費開放的食品資料庫),並由其回傳產品名稱及所記錄的營養數據。與任何一般網絡要求一樣,該服務可見您裝置的網絡位址,但不會附帶任何帳戶識別碼、電郵地址或日記資料。已掃描產品所顯示的營養數據來自該資料庫,並非由我們估算。
4. 家庭共享
Max 方案容許訂閱者(「管理者」)邀請家庭成員連結帳戶。連結屬自願性質,並必定由您選擇接受邀請開始。
- 共享的內容:當您接受邀請後,管理者可查看及管理(建立、編輯及刪除)您的餐膳及營養記錄,並可查看您的顯示名稱及卡路里目標,以便為您的記錄加上標示。您的食譜、食材庫、餐膳計劃、購物清單及帳戶設定則絕不會共享。
- 單向共享:管理者不會向您共享其本人的記錄,連結亦不會為您帶來其方案的任何付費功能。
- 離開:您保留自己的帳戶,並可隨時於應用程式內離開家庭,管理者的存取權亦會就此終止。
5. 資料保留及刪除
我們僅會在提供服務所需的期間內保留您的資料。您有權隨時刪除您的資料。您可於應用程式的「個人檔案」分頁選擇「刪除帳戶」,即時清除所有本機裝置資料並刪除您的伺服器帳戶。
6. 聯絡我們
如您對本私隱政策有任何疑問,請透過電郵 support@siutimsiudai.app 與我們聯絡。