隐私政策
Privacy Policy
版本：2026-11-10 · 本版本在 EasySwing 正式服务公布时生效。独立开发测试服务适用其另行提供的政策。
Version: 2026-11-10 · Effective when this version is published for the official EasySwing service. Separate development services provide their own policies.
1. 适用范围与联系
本政策适用于 EasySwing App 及其后端服务。隐私请求：privacy_easyswing@yeah.net；使用支持：support_easyswing@yeah.net。
2. 处理的信息与用途
- 账号：Apple 登录标识、可用邮箱、会话凭据，用于登录和账号安全。我们不会获取 Apple 密码。
- 商店地区：登录后，支持此功能的版本会将 App Store 商店的国家／地区代码与账号关联，用于支持地区可用性和了解各市场的使用情况。它可能与实际所在地不同。此功能不申请定位权限、不使用 GPS；该记录随账号删除。
- AI 分析：经你同意，向 EasySwing 后端和下述 AI 接收方发送视频关键帧、连续画面拼图、时间戳、动作及相关球员资料提示，用于定位挥拍、生成报告。验证已有问题还会使用相关报告、问题摘要、标准和画面；追问会使用报告、相关画面、当前问题及最近最多 12 条对话。图片可能包含人脸或旁人，不用于身份识别。当前请求不上传完整原视频或头像。
- 本机记录：原视频、缩略图、已保存报告、对话、资料和训练记录主要保存在设备上。Apple 健康训练、时长、活动能量和心率摘要仅经授权用于本机展示及统计，不自动发送至业务后端或 AI。你主动写进问题或反馈的健康内容会随该内容传输。
- 购买与运行：商品、交易标识、状态、权益和用量用于核验购买、恢复及防重复扣次；Apple 处理付款资料。主动提交的反馈、可选联系方式和 App／系统版本、请求时间、状态、用量、故障及网络信息用于支持、排障和安全。
- 报告反馈统计：打开报告时，App 自动向 EasySwing 后端发送报告及提升项标识、排除状态；排除或撤销时更新该状态。你提交的准确度评价、相关模型、提示词版本、教练判断风格和 App／系统版本也用于统计反馈数量、比例及改进报告质量。这些记录与账号关联；排除仅表示个人不认可，不视为已证实的 AI 错误。此统计不额外上传原视频、画面或报告正文，也不用于广告追踪。
- 消息与通知：保存发送给你的站内消息、正文版本、已读及确认时间，用于服务提示和重要通知。开启推送后，将设备推送令牌、安装标识、语言和通知偏好与账号及登录会话关联，令牌加密保存在后端，用于发送消息提醒。
3. 接收方与处理地区
EasySwing 后端通过 OpenAI 官方 API 向 OpenAI 发送上述必要图片与上下文，用于完成你请求的分析、验证及追问。业务后端及数据库托管于美国；OpenAI 的处理地点取决于其适用服务安排，我们不承诺 AI 内容仅在美国处理。云托管及备份服务处理运行所需信息，处理可能发生在你所在地区以外。
Apple 提供登录、购买及授权的健康服务。开启推送时，Apple 推送通知服务（APNs）接收设备令牌、消息标题与摘要、以及用于打开对应消息的账号和消息标识；推送不包含原视频、健康记录、AI 密钥或付款凭据。
按 OpenAI API 数据政策，API 内容默认不用于训练，除非主动选择共享；正式服务未开启该共享。安全监测日志通常可保留至 30 天，法律或安全原因可能延长；图片还可能适用安全审查例外。请求设置不保存响应，不代表零留存。这些说明不适用于开发测试网关。
App 的 AI 授权页显示接入类型。更换数据接收方或重要处理方式时，会更新披露及授权版本，并在发送前重新征求同意。我们要求接收方提供符合本政策及适用要求的数据保护。
4. 选择与权限
首次使用 AI 前单独征求同意；拒绝仍可使用本机训练记录。可在账号 → AI 数据分享撤回授权，之后的新分析、验证与追问需重新授权；已经发出的请求无法撤回。相机、相册及 Apple 健康权限按使用场景申请，可在 iPhone 设置或健康 App 管理。可选资料及反馈联系方式可以不填。请只提交有权使用的素材。
推送需要系统通知授权和 App 内消息通知开关；可在 App 或 iPhone 设置关闭，站内消息仍可查看。通知标题或摘要可能出现在锁屏上，可通过系统设置隐藏预览。消息已读与“确认已知悉”分别记录，均不代表购买、续订或同意更改权益。
5. 保存与删除
本机内容保留至你删除内容、账号本机数据或 App。云端任务结果当前默认保留 7 天并由维护任务清理，这不是所有数据的统一期限。账号、交易、额度、安全及支持记录保留服务所需的最少信息；账号删除后仍可能保留核验交易、处理争议及履行法律义务所需记录。运维时可创建加密恢复快照，并将密文副本保存在受限的异地设备；这不提供用户完整历史的云备份或固定恢复时点承诺。恢复快照仅用于恢复及安全，在不再为这些目的所需时清理；恢复时继续执行已受理的删除要求。第三方日志及备份按其适用约定处理，本机删除不等于第三方即时删除。
可在 App 删除视频或账号；卸载 App 不会删除云端账号，删除账号不会取消 Apple 订阅或删除 Apple 健康原始训练。访问、更正、导出、删除或其他隐私请求请联系隐私邮箱，我们核实身份后处理。
消息及回执随云端账号删除；撤回或到期的公告不再展示，但账号存在时可保留必要回执。关闭消息通知停用该设备的推送，退出登录或登录凭据失效后停止向该会话推送；关闭通知不等于即时删除已有令牌或回执。
6. 保护与更新
使用 HTTPS、钥匙串和受限访问保护信息。当前不接入广告追踪、不出售个人信息，也不将健康数据用于广告。未达到适用同意年龄的用户应取得监护人同意。重要处理变化会更新政策并在必要时重新征求同意；中英文切换不改变同一版本的授权。
1. Scope and contact
This policy covers EasySwing and its backend. Privacy: privacy_easyswing@yeah.net. Support: support_easyswing@yeah.net.
2. Information and purposes
- Accounts: Apple identifiers, available email and session credentials enable sign-in and account security. We do not receive Apple passwords.
- App Store region: After sign-in, supported versions send your App Store storefront country code linked to your account, to support regional availability and understand usage by market. It may differ from your location. We do not request location permission or use GPS for this. This record is deleted with your account.
- AI: With consent, our backend and the recipient below receive keyframes, contact sheets, timestamps, stroke details and relevant player hints to locate swings and generate reports. Verification also uses related reports, issue summaries, criteria and images. Follow-ups use the report, relevant images, question and up to 12 recent messages. Images may show faces or bystanders; we do not use them for identification. Current requests do not upload full original videos or avatars.
- Local records: Original videos, thumbnails, saved reports, conversations, profiles and workouts are primarily on-device. Authorized Apple Health workouts, duration, active energy and heart-rate summaries support local display and totals; they are not automatically sent to our backend or AI. Health details you type into questions or feedback travel with that content.
- Purchases and operations: Products, transaction IDs, status, entitlements and usage support verification, recovery and prevention of duplicate charges against allowances. Apple handles payment details. Submitted feedback, optional contact, app/OS version, request time, status, usage, errors and network information support assistance, troubleshooting and security.
- Report feedback statistics: When you open a report, the app automatically sends report and improvement-item identifiers and exclusion states to the EasySwing backend; excluding or restoring an item updates that state. Accuracy ratings you submit, associated model, prompt version, coaching style and app/OS versions also support feedback counts, proportions and report-quality improvements. These records are linked to your account. Exclusion reflects personal disagreement, not a verified AI error. These statistics do not additionally upload original videos, images or report text and are not used for advertising tracking.
- Messages and notifications: We retain notices sent to you, content versions and read or acknowledgement timestamps for service updates and important notices. Enabling alerts links the device push token, installation ID, language and notification preference to your account and sign-in session. Tokens are encrypted on our backend to deliver alerts.
3. Recipients and locations
The EasySwing backend sends the necessary images and context above to OpenAI through its official API for your requested analysis, verification and follow-ups. Our business backend and database are hosted in the United States. OpenAI processing locations depend on its applicable service arrangements; we do not promise US-only AI processing. Hosting and backup services process operational information, potentially outside your location.
Apple provides sign-in, purchases and authorized Health services. When alerts are enabled, Apple Push Notification service (APNs) receives the device token, notification title and preview, and account/message identifiers used to open the matching notice. Push payloads do not include original videos, Health records, AI keys or payment credentials.
Under OpenAI API data controls, API content is not used for training by default unless sharing is enabled. Our production service does not enable this sharing. Safety logs may remain for up to 30 days, or longer for legal or safety reasons; images may also be subject to safety-review exceptions. Disabling response storage is not zero retention. These provisions do not cover the development gateway.
The AI consent screen identifies the connection type. Recipient or material processing changes require updated disclosure and consent versions, with renewed permission before sending data. We require recipients to provide protection consistent with this policy and applicable requirements.
4. Choices and permissions
We request separate consent before AI use. Declining leaves local workout records available. Withdraw through Account → AI data sharing; new analyses, verifications and follow-ups then require consent again. Already-sent requests cannot be recalled. Camera, photo and Health access is requested when needed and managed in iPhone Settings or Health. Profile fields and feedback contact are optional. Submit only authorized material.
Push alerts require system permission and the in-app message-alert switch. Disable them in the app or iPhone Settings; the inbox remains available. Titles or previews may appear on the lock screen; system settings can hide previews. Read and acknowledgement receipts are separate and neither constitutes a purchase, renewal or agreement to benefit changes.
5. Retention and deletion
Local content remains until you delete it, the account's local data or the app. Cloud job results currently default to seven days, subject to maintenance cleanup; other records have separate retention. We retain minimal account, transaction, allowance, security and support records needed for service, transaction verification, disputes and legal obligations, including where necessary after account deletion. Operations may create encrypted recovery snapshots and retain encrypted copies on a restricted offsite device. This does not provide full-history user cloud backup or guarantee a recovery point. Snapshots are used for recovery and security and removed when no longer necessary for those purposes. Restores must reapply accepted deletion requests. Third-party logs and backups follow applicable arrangements; local deletion is not immediate deletion by third parties.
Delete videos or your account in-app. Uninstalling does not delete your cloud account. Account deletion does not cancel Apple subscriptions or delete original Apple Health workouts. Contact the privacy email for access, correction, export, deletion or other requests; we verify identity before processing.
Messages and receipts are deleted with your cloud account. Withdrawn or expired notices are hidden, while necessary receipts may remain while the account exists. Disabling alerts deactivates that device's push registration. Sign-out or invalid session credentials stop alerts to that session; disabling alerts does not immediately delete existing tokens or receipts.
6. Protection and changes
HTTPS, Keychain and restricted access protect information. We do not currently use advertising tracking, sell personal information or use Health data for advertising. Users below the applicable consent age need guardian consent. Material changes receive updated policies and renewed consent where necessary. Switching language does not change consent for the same version.