生效及更新日期：2026 年 10 月 3 日。本政策适用于「搭友搭」（英文名 Pally）App。个人信息处理者：苏州搭友搭健康科技有限公司；联系邮箱：hanbo@dayouda.cn。我们不出售个人信息，不进行跨 App 跟踪，不将个人信息或健康数据用于第三方广告。
根据你实际使用的功能，我们可能处理：手机号、短信验证结果、Apple 登录用户标识、昵称和头像；游客或设备安装标识、推送标识及必要的安全日志；年龄、性别、身高、体重、身体围度、目标和活动习惯；饮食、饮水、食谱、训练、经期、照片、语音转写文字、AI 对话及搭子互动。相机、相册、麦克风、语音识别和通知权限均在使用对应功能时申请。
这些信息用于创建和保护账号，保存及同步记录，计算热量与营养目标，展示趋势，生成你主动请求的 AI 结果，提供搭子共享和提醒，处理会员权益、客服与申诉，以及排查故障和防止滥用。我们通过 App 输入、系统授权接口和你主动发起的操作收集，不会因拒绝非必要权限而停止提供无关的基础功能。
健康、经期、身体测量、饮食与训练记录可能属于敏感个人信息。我们仅为向你提供健康管理、训练记录、恢复分析和你主动请求的 AI 功能，在充分必要范围内处理，并通过功能说明、系统授权或单独的 AI 数据处理确认取得相应同意。拒绝或撤回后，对应功能可能无法使用，但不影响其他功能。对于本政策更新前已经注册并使用记录功能的用户，我们依据你此前接受的协议与本政策继续处理上述信息；你可随时在「我的 → 关于搭友搭 → 保存健康记录到云端」中关闭，关闭后我们不再上传新的记录。
在你通过系统允许定位后，我们仅在从本 App 新开始训练时获取一次位置，用于保存本场训练地点并向 Apple 天气服务请求当时该地点的室外天气。位置和天气可随训练记录保存到你的账号；不会向搭子展示精确训练地点，不会向 AI 复盘发送地点坐标，也不会用当前位置补写历史训练。拒绝或撤销定位不影响训练计时、组数或保存。删除训练记录会同时删除该条云端位置与天气；退出账号会清除本机相关缓存。权限可在系统设置中随时调整。
经你逐项授权后，我们可能读取活动能量、步数、体能训练及路线、心率、心率变异性、静息心率、睡眠、呼吸率、血氧、体重、身高和经期数据；可能写入你在 App 内记录的体重、饮水、饮食能量与营养素、体能训练及活动能量。用途包括展示健康趋势、估算恢复状态和结算活动返还。你可随时在系统「健康」App 中调整权限。我们不出售这些数据，也不用于广告、营销或无关的数据挖掘。
只有在你单独同意并主动使用 AI 功能时，我们才会向火山引擎豆包大模型发送完成请求所需的数据，例如餐食照片或文字、AI 对话，以及必要的年龄、身高、体重、目标、饮食、训练、步数和睡眠摘要。我们不会发送手机号、Apple ID 或完整 HealthKit 原始记录。相关数据用于返回食物识别、食谱、训练计划、对话和复盘结果，不用于广告。你可拒绝或撤回 AI 同意并继续使用非 AI 功能；请勿上传无关敏感内容或他人信息。
腾讯云 CloudBase 与对象存储为我们提供中国境内的账号、数据库、云函数、图片临时处理和安全运维服务；Apple 提供登录、HealthKit、推送、语音识别和 App Store 交易服务。使用语音输入时，音频由 Apple 的系统语音识别能力处理，我们取得转写文字但不在自己的服务器保存原始录音。服务商仅在实现相应功能所需范围处理数据，并承担合同及法律规定的保密和安全义务。Apple 独立处理 Apple 账户、系统权限及支付信息，我们不获取你的银行卡信息。
AI 功能出错时，我们的服务器会自动记录你的账号标识、出错的功能名称、错误代码和发生时间，用于定位和修复故障。我们不保存错误的原始文字，只保存一段不可读的故障指纹，用来判断同一个故障出现了多少次。这类记录最长保存 90 天，到期自动删除；你注销账号时也会一并删除。我们不用它构建用户画像，不用于追踪或广告。App 内另有一份排障日志只保存在你的手机上，仅当你主动导出并发送给我们时才会离开设备，也可在「我的 → 清除诊断日志」随时清除。
搭子推荐默认关闭。你主动开启「接受搭子推荐」后，你的昵称、头像、目标类型和自我介绍可能展示给匹配到的其他用户，对方可以向你发送搭子申请并附一句留言；关闭后你不再被推荐，也不会收到新的申请。为了匹配合适的人，我们会在服务器端使用你的目标类型、年龄、体重以及最近是否使用过本 App，这些信息不会展示给其他用户。健康数据不会在推荐中展示，只有双方同意建立搭子关系，并由你逐项开启饮食、运动、体重等共享项目后，对方才能看到对应内容；你可随时关闭项目、解除关系、举报和屏蔽。有人向你发出搭子申请或同意你的申请时，我们可能通过系统通知提醒你，你可在系统设置中关闭。请勿在互动内容中提交无权分享的他人信息。依法需要对外提供、公开或变更处理目的时，我们会另行告知并按要求取得同意。
账号和云端记录主要存储在中国境内。账号资料及你保存的饮食、训练、体重、经期、食谱和搭子数据，通常保存至你主动删除相关记录或注销账号；餐食图片在完成识别后安排删除，部分文字餐食描述和识别结果可能为保持结果一致、减少重复处理而缓存；会员交易、安全与申诉记录按履行合同、保障安全和法定义务所需期限保存。各类信息在实现目的、缓存更新或法定期限届满后删除或匿名化。境外用户的数据会传输至中国境内处理。
你可在 App 内查看和更正档案与记录，管理系统权限和搭子共享，撤回 AI 同意，并在「我的」页底部注销账号。你也可通过联系邮箱申请查阅、复制、更正、补充、删除个人信息，撤回同意或说明处理规则。为防止冒用，我们可能先核验身份；会在适用法律规定的期限内答复。撤回同意不影响撤回前基于同意开展的处理。
注销会解除登录和搭子关系，并删除或匿名化与账号关联且不再必要的数据，操作不可恢复。依法必须保留的交易、安全、审计或争议记录不会立即删除，但会被限制用于法定义务或争议处理，并在期限届满后处理。你还应在系统「健康」App 中单独管理已写入 Apple 健康的数据；注销账号不会替你删除 Apple 健康中的记录。
我们采取 HTTPS 传输、令牌校验、访问控制、账号隔离和必要日志等措施保护数据。互联网服务不存在绝对安全；发生可能影响你权益的个人信息安全事件时，我们会依法采取补救措施，并告知事件影响、已采取措施和可降低风险的建议。
本服务仅面向年满 18 周岁的用户，不向未满 18 周岁者提供注册服务。若发现误收未成年人个人信息，我们会停止处理并依法删除；监护人可通过联系邮箱提出请求。
我们会在 App 内提供最新政策。处理目的、敏感信息范围、共享对象或你的权利发生重大变化时，会显著提示，并在法律要求时重新取得同意。个人信息处理者及运营主体：苏州搭友搭健康科技有限公司；注册地址：江苏省苏州市相城区元和街道聚茂街185 号活力商务广场A栋 2106 A室；联系电话：+86 13646202313。问题、权利请求、投诉或申诉请联系 hanbo@dayouda.cn，或使用 App「我的 → 面对面沟通」。
Effective and last updated: 3 October 2026. This policy applies to the Pally (搭友搭) app. Personal information handler: Suzhou Dayouda Health Technology Co., Ltd. Email: hanbo@dayouda.cn. We do not sell personal information, we do not track you across other companies' apps or websites, and we do not use personal information or health data for third-party advertising.
Depending on the features you actually use, we may process: your mobile number, SMS verification result, Sign in with Apple user identifier, nickname and avatar; guest or device installation identifiers, push identifiers and necessary security logs; age, gender, height, weight, body measurements, goals and activity habits; and food, water, recipes, workouts, menstrual cycle, photos, text transcribed from speech, AI conversations and buddy interactions. Camera, photo library, microphone, speech recognition and notification permissions are each requested when you use the corresponding feature.
We use this information to create and protect your account; to store and sync your records; to calculate calorie and nutrition targets; to display trends; to generate the AI results you request; to provide buddy sharing and reminders; to handle membership benefits, support and appeals; and to diagnose faults and prevent abuse. We collect it through what you enter in the app, through system permission interfaces, and through actions you start yourself. Declining an optional permission does not stop us providing unrelated basic features.
Health, menstrual cycle, body measurement, food and workout records may constitute sensitive personal information. We process them only to provide health management, workout logging, recovery analysis and the AI features you request, and only to the extent adequate and necessary. Consent is obtained through feature descriptions, system authorisation, or the separate AI data processing confirmation. If you decline or withdraw consent, the corresponding feature may become unavailable, but other features are unaffected. For users who registered and began using the logging features before this policy was updated, we continue to process the above information on the basis of the terms and policy you previously accepted; you can switch this off at any time under "Me → About Pally → Save health records to the cloud", after which we stop uploading new records.
With your system location permission, we capture a location once when you start a new workout in this app, to save its place and request the outdoor weather at that time from Apple Weather. Location and weather may be saved with the workout in your account. We do not show your precise workout location to buddies, send its coordinates for AI reviews, or use your current location to fill past workouts. Declining or revoking location does not affect timers, sets or workout saving. Deleting a workout removes its cloud location and weather; signing out clears related local caches. You can change location permission in system Settings.
With your item-by-item authorisation, we may read active energy, steps, workouts and routes, heart rate, heart rate variability, resting heart rate, sleep, respiratory rate, blood oxygen, weight, height and menstrual cycle data. We may write the weight, water, dietary energy and nutrients, workouts and active energy that you record in the app. This is used to display health trends, estimate recovery status, and settle activity-based calorie credit. You can change these permissions at any time in the system Health app. We do not sell this data and do not use it for advertising, marketing or unrelated data mining.
Only where you have separately consented and actively use an AI feature do we send the data needed to complete your request to the Volcano Engine Doubao large language model, for example a meal photo or description, your AI conversation, and the necessary summaries of your age, height, weight, goal, food, workouts, steps and sleep. We do not send your mobile number, Apple ID, or complete raw HealthKit records. The data is used to return food recognition, recipes, training plans, conversation and review results, and is not used for advertising. You may decline or withdraw AI consent and continue to use non-AI features. Please do not upload unrelated sensitive content or other people's information.
Tencent Cloud CloudBase and its object storage provide our account, database, cloud function, temporary image processing and security operations services within mainland China. Apple provides sign-in, HealthKit, push notification, speech recognition and App Store transaction services. When you use voice input, the audio is processed by Apple's system speech recognition; we receive the transcribed text and do not store the original audio on our own servers. Service providers process data only to the extent needed to deliver the relevant feature and are bound by contractual and statutory confidentiality and security obligations. Apple independently handles your Apple Account, system permissions and payment information; we never receive your bank card details.
When an AI feature fails, our server automatically records your account identifier, the name of the feature that failed, the error code and the time, so that we can locate and fix the fault. We do not keep the original text of the error, only an unreadable fault fingerprint used to count how many times the same fault has occurred. These records are kept for no more than 90 days and are then deleted automatically; they are also deleted when you delete your account. We do not use them to build user profiles, or for tracking or advertising. A separate troubleshooting log is kept only on your phone; it leaves your device only if you choose to export it and send it to us, and you can clear it at any time under "Me → Clear diagnostic logs".
Buddy suggestions are off by default. If you switch on "Accept buddy suggestions", your nickname, avatar, goal type and self-introduction may be shown to other users we match you with, and they can send you a buddy request with a short message; once you switch it off, you are no longer suggested to others and will not receive new requests. To find suitable matches, our servers use your goal type, age, weight and whether you have used the app recently; this information is not shown to other users. Health data is never shown in suggestions. Another person can see your food, workout, weight or other content only after you have both agreed to become buddies and you have switched on that specific sharing item. You can turn an item off, end the relationship, report and block at any time. When someone sends you a buddy request or accepts yours, we may let you know with a system notification, which you can turn off in system Settings. Please do not submit other people's information that you have no right to share. If we are legally required to provide information externally, make it public, or change the purpose of processing, we will inform you separately and obtain consent where required.
Accounts and cloud records are stored primarily within mainland China. Account details and the food, workout, weight, menstrual cycle, recipe and buddy data you save are generally kept until you delete the record or delete your account. Meal images are scheduled for deletion once recognition is complete; some text meal descriptions and recognition results may be cached to keep results consistent and avoid repeated processing. Membership transaction, security and appeal records are kept for as long as needed to perform the contract, maintain security and meet statutory obligations. Each category is deleted or anonymised once its purpose is fulfilled, the cache is refreshed, or the statutory period expires. Data of users outside mainland China is transferred to mainland China for processing.
You can view and correct your profile and records in the app, manage system permissions and buddy sharing, withdraw AI consent, and delete your account at the bottom of the "Me" page. You may also email us to access, copy, correct, supplement or delete your personal information, withdraw consent, or ask us to explain our processing rules. To prevent misuse we may first verify your identity, and we will respond within the period required by applicable law. Withdrawing consent does not affect processing carried out on the basis of that consent before it was withdrawn.
Deleting your account ends your sign-in and buddy relationships, and deletes or anonymises data associated with the account that is no longer necessary. This cannot be undone. Transaction, security, audit or dispute records that must be retained by law are not deleted immediately; their use is restricted to those statutory obligations or to handling the dispute, and they are dealt with once the retention period expires. You should separately manage any data already written to Apple Health in the system Health app; deleting your account does not delete records held in Apple Health.
We protect data using HTTPS transport, token verification, access control, account isolation and necessary logs. No internet service can be absolutely secure. If a personal information security incident occurs that may affect your rights, we will take remedial action as required by law and inform you of its impact, the measures we have taken, and what you can do to reduce your risk.
This service is available only to users aged 18 or older, and we do not offer registration to anyone under 18. If we find that we have collected a minor's personal information without proper basis, we will stop processing it and delete it as required by law. A guardian may contact us by email to make a request.
We make the current policy available in the app. Where there is a material change to our purposes, the scope of sensitive information, who we share with, or your rights, we will give prominent notice and, where the law requires it, obtain your consent again. Personal information handler and operating entity: Suzhou Dayouda Health Technology Co., Ltd. Registered address: Room 2106A, Building A, Huoli Business Plaza, No. 185 Jumao Street, Yuanhe Subdistrict, Xiangcheng District, Suzhou, Jiangsu, China. Telephone: +86 13646202313. For questions, rights requests, complaints or appeals, contact hanbo@dayouda.cn or use "Me → Talk to the Team" in the app.