Privacy Policy 隐私政策

Introduction 引言

Entropy ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we access, collect, use, store, share, and safeguard your information when you use the Entropy mobile application (the "App").

By using the App, you agree to the collection, use, and handling of your information as described in this Privacy Policy. If you do not agree with the practices described here, please do not use the App.

本隐私政策旨在向您说明我们如何访问、收集、使用、存储、共享和保护您的个人信息。使用本应用即表示您同意本政策所述的数据处理实践。

Entropy 不面向中国大陆居民、位于中国大陆的用户，或代表中国大陆用户使用本服务的人开放。请不要从中国大陆提交个人信息、加入等待名单、创建账号或使用本网站、App、API、付费计划及相关服务。

Developer Information 开发者信息

This App is developed and operated under the Entropy product name:

Entropy is currently operated under the Entropy product name while the formal legal entity and registered business address are being finalized. Formal legal-entity details and a registered business address will be added before any public paid launch, paid advertising campaign, app store production listing, or jurisdictional requirement that requires them. Do not use the service if you need a contracted medical, clinical, or regulated provider.

Personal and Sensitive User Data We Collect 我们收集的个人及敏感用户数据

We collect the following categories of data, all of which are considered personal and sensitive under Google Play policies:

For the first release, we do not collect: medical diagnosis records, Health Connect / HealthKit data, precise location data, contacts, call logs, SMS data, microphone recordings, browsing history, or an inventory of other apps on your device.

第一版不收集：病历/诊断记录、Health Connect / HealthKit 数据、精确位置、通讯录、通话记录、短信、麦克风录音、浏览历史或您设备上的其他应用清单。

Our website waitlist is not available in mainland China and does not ask for medical history, symptoms, diagnosis information, age, height, weight, or other health-profile details.

If you are a U.S. consumer, please also review our Consumer Health Data Privacy Notice for additional disclosures about wellness, nutrition, mood, sleep, activity, and related inferences.

How We Use Your Data 我们如何使用您的数据

We limit the use of your data strictly to the following purposes:

• Core Service Delivery: Providing wellness summaries, self-tracking scores, and personal logs visible to you in the App.
• AI-Powered Analysis: Processing your food photos and mood descriptions to generate real-time wellness summaries.
• Account Management: Managing your account, authenticating logins, and ensuring service security.
• Service Improvement: Improving our AI analysis models using only anonymized, de-identified, aggregated data.
• First-Party Product Analytics: Measuring aggregate activation, logging, paywall, subscription, entitlement, and referral funnels using low-sensitivity app interaction events. We do not use these events for advertising or cross-app profiling.
• Communications: Sending you important service-related notifications (e.g., policy changes, security alerts).
• Waitlist and Early Access: Managing launch notifications, platform interest, beta invitations, and consent records.
• Research Comments: Moderating anonymous public comments on Research Watch notes and preventing spam, abuse, medical-advice requests, or disclosure of personal contact details.
• Subscriptions: Verifying Google Play purchases, maintaining paid-plan access, restoring purchases, preventing fraud, and supporting billing-related requests.

We do not use your personal data for advertising. We do not sell, trade, or rent your personal and sensitive user data to any third party.

我们不会将您的个人数据用于广告目的。我们不会出售、交易或出租您的个人及敏感用户数据给任何第三方。

Data Sharing & Third-Party Services 数据共享与第三方服务

We may share your data with the following categories of service providers, solely for the purposes described in this policy:

• AI Processing Providers: When you submit food photos or mood descriptions, the content is transmitted to our AI service provider (Groq) for real-time analysis. This processing is handled under the provider's applicable data-handling terms — see Section 6 for details.
• Cloud Infrastructure: Our app servers and databases are hosted on secure cloud infrastructure to ensure data availability and reliability.
• Website, Waitlist, and Research Comment Infrastructure: Cloudflare hosts the Entropy website and Pages Functions used for the waitlist and moderated research comments. Waitlist submissions and research comments are stored in Cloudflare D1. If enabled, Cloudflare Turnstile may process technical anti-abuse signals, such as browser, network, request, and site-key information, to help prevent spam and automated abuse. See Cloudflare's Turnstile privacy notice.
• Embedding Services: We use Voyage AI for semantic search and retrieval to improve result organization and retrieval quality.
• Push Notification Providers: If notifications are enabled, a push token may be processed by Firebase Cloud Messaging and our notification delivery providers solely to deliver service notifications.
• Google Play Billing: Android subscription purchases are processed by Google Play. We receive purchase verification metadata, such as product ID, subscription state, expiration time, order identifier, and purchase-token verification results, to grant and manage paid access.

All third-party service providers are contractually obligated to handle your data securely and solely for the specified service purposes. They are prohibited from selling your personal data.

We may also disclose your data when required by law, valid governmental request, or to protect our legal rights.

所有第三方服务提供商均有合同义务安全处理您的数据，且仅用于指定服务目的。他们被禁止出售您的个人数据。

AI Processing & Ephemeral Data Handling AI 处理与临时数据说明

The original images and raw text are transmitted securely to our AI service for analysis. We do not use raw submissions to build advertising profiles; we store the analytical results that you see in the App and rely on service providers to process submitted content under their applicable data-handling terms.

For image analysis, our server currently accepts JPEG, PNG, and WebP files up to the configured size limit, strips supported metadata before AI processing, rejects HEIC/HEIF images because server-side metadata stripping is not yet supported for those formats, and applies per-user rate limits. The AI prompt context is minimized and does not include your medical-record text. Product analytics events do not contain meal photos, raw health logs, food text, mood notes, or purchase tokens.

原始图像和原始文本会安全传输至我们的 AI 服务进行分析。我们不会将原始提交用于广告画像；我们仅存储您在应用中看到的分析结果，并要求服务商按照其适用的数据处理条款处理提交内容。

对于图片分析，服务器当前仅接受 JPEG、PNG 和 WebP，并在发送给 AI 服务前剥离支持的图片元数据；由于暂不支持可靠的服务端元数据剥离，HEIC/HEIF 暂不接受。图片分析按用户限频，AI 上下文会尽量最小化，且不包含您的病历文本。产品指标事件不包含餐食照片、原始健康日志、食物文本、情绪笔记或购买 token。

Data Storage & Security 数据存储与安全

We implement industry-standard security measures to protect your personal and sensitive user data:

• Encryption in Transit: Data transmissions are protected using HTTPS/TLS.
• Encryption at Rest: Production data is protected with access controls and provider-managed storage encryption.
• Google Sign-In and Review Access: Public users authenticate through Google Sign-In. Entropy does not collect or store public account passwords in the current release. Reviewer access codes are checked against a server-side hash and are not stored as user passwords.
• Access Control: Database access is strictly limited to authorized personnel and services only.
• Server Location: Your data is stored on secure servers. We do not store data on mainland China servers.

While we employ robust security measures, no method of electronic storage or transmission is 100% secure. We continuously review and improve our security practices.

Data Retention & Deletion Policy 数据保留与删除政策

App Retention: We retain your personal data for the duration of your active use of the App. Data is kept to provide you with continuous access to your historical self-tracking scores, wellness summaries, and reports.

Waitlist Retention: We retain waitlist and early-access data until beta or launch communication is completed, until you unsubscribe or request deletion, or for as long as reasonably needed to maintain consent, abuse-prevention, and legal records. If you request deletion of waitlist data, we delete it from active systems after verification and processing, generally within 30 days. Residual backup copies, if any, are scheduled to expire or be overwritten within 90 days unless limited retention is required for security, legal, or disaster-recovery needs.

Subscription Retention: We retain subscription and purchase metadata while your account is active and for as long as reasonably required for paid-plan access, restoration, fraud prevention, support, tax, accounting, dispute handling, and legal compliance. Account deletion removes active entitlement records after verification and processing, except where limited billing records must be retained to meet legal, accounting, security, or dispute-related obligations.

Deletion: When you request account deletion (available in-app under Profile → Delete Account Permanently), the following happens:

• All personal data associated with your account is deleted from active production systems after verification and processing, generally within 30 days.
• This includes: account credentials, profile data you provided, all food logs, entropy scores, AI analysis results, and any other data linked to your account.
• Residual backup copies, if any, are not used for active service restoration except for security, legal, or disaster-recovery needs and are scheduled to expire or be overwritten within 90 days.
• Account deletion is permanent and cannot be undone.

Temporary account deactivation or "freezing" is not available. All deletion requests result in removal of your account from active service systems, subject to the backup and legal-retention limits described above.

You may also request deletion of waitlist-only data by emailing privacy@getentropy.app from the email address used to join the waitlist.

Your Rights 您的权利

Under applicable data protection laws (including GDPR, CCPA, and other regional privacy regulations), you have the following rights:

• Right of Access: You may request a copy of all personal data we hold about you.
• Right to Rectification: You may correct or update your personal information at any time within the App.
• Right to Erasure ("Right to be Forgotten"): You may request complete deletion of your account and all associated data.
• Right to Data Portability: You may request an export of your data in a machine-readable format.
• Right to Restrict Processing: You may request that we limit the processing of your personal data under certain circumstances.
• Right to Withdraw Consent: You may withdraw your consent to data processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Object: You may object to the processing of your personal data for specific purposes.

To exercise any of these rights, please contact us at privacy@getentropy.app. We will respond to your request within 30 days.

如需行使上述任何权利，请发送邮件至 privacy@getentropy.app，我们将在30天内回复您的请求。

Children's Privacy 未成年人保护

The App is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. Additionally, our target audience does not include anyone under the age of 16.

If we become aware that we have inadvertently collected personal data from a child under 13, we will take immediate steps to delete such data from our servers.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@getentropy.app so we can take appropriate action.

本应用不面向13岁以下儿童，我们的目标受众也不包括16岁以下的未成年人。如果我们发现收集了未成年人的数据，将立即删除。

International Data Transfers 国际数据传输

Your data may be transferred to and processed in countries other than the country in which you are resident. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer data internationally, we implement appropriate safeguards in accordance with applicable data protection laws, including:

• Standard contractual clauses approved by relevant authorities
• Compliance with the EU-U.S. Data Privacy Framework, UK Extension, and Swiss-U.S. Data Privacy Framework where applicable
• Ensuring all data transfers maintain the same level of protection required by GDPR and applicable regulations

Cookies, SDKs & Tracking Technologies Cookie、SDK 与追踪技术

The App does not use cookies, advertising trackers, or analytics SDKs for advertising purposes.

The App may send first-party product usage events to Entropy's own API to measure aggregate activation, logging, paywall, subscription, entitlement, and referral funnels. These events use hashed anonymous/session identifiers and are not used for advertising or cross-app tracking.

The website may use Cloudflare Turnstile on waitlist and research comment forms to distinguish legitimate submissions from spam or automated abuse. Turnstile is used for security and abuse prevention, not for advertising or cross-site behavioral profiling by Entropy.

We may use essential SDKs for core functionality only:

• Network Communication: For secure API communication with our servers.
• Image Processing: For camera and gallery access when you choose to submit food photos.

No third-party advertising SDKs are integrated. We do not engage in cross-app tracking or behavioral advertising profiling.

Prominent Disclosure & Consent 显著披露与同意

In accordance with Google Play's User Data policy, the App provides clear, prominent in-app disclosures before collecting or processing any personal and sensitive user data. Specifically:

• Before accessing your camera or gallery for food photo analysis, the App explains what data will be collected and how it will be used.
• Health profile data is collected only when you voluntarily choose to provide it within the App, with clear explanations of its purpose.
• Waitlist emails are collected only after you submit the website form and affirmatively agree to receive launch communication or beta invitation emails.
• Research comments are collected only after you submit a comment and affirmatively agree to the discussion guidelines. Approved comments are public; rejected or pending comments are not displayed publicly.
• Consent is obtained through affirmative user action (tapping to agree) and is never assumed from navigation or inactivity.
• You can withdraw consent at any time by discontinuing use or requesting account deletion.

Android Permissions Android 权限说明

The first Android release requests only the permissions needed for core app functionality. It does not request location permissions or Health Connect permissions.

All permissions are requested using Android's runtime permission system. You can revoke any permission at any time through your device's system settings.

Changes to This Privacy Policy 隐私政策变更

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes:

• We will update the "Effective Date" and "Version" at the top of this page.
• We will notify you through an in-app notification.
• For material changes, we will request your renewed consent before continuing to process your data.

We encourage you to review this Privacy Policy periodically.

Email Communications 邮件沟通

If you join the waitlist, we may email you about launch availability, beta invitations, and related product updates you requested. You can unsubscribe or request deletion of your waitlist record at any time by contacting privacy@getentropy.app.

Before sending promotional or commercial bulk email, we will include a working unsubscribe mechanism and a valid postal address as required by applicable email laws. Until those commercial-email controls are in place, waitlist communication will be limited to requested launch, beta, operational, or individual follow-up messages.

Contact Us 联系我们

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related inquiries within 30 days.

如有任何关于本隐私政策或数据处理实践的疑问、关切或请求，请通过上述方式联系我们。我们将在30天内回复所有与隐私相关的查询。