Privacy Policy 隐私政策

Introduction 引言

Entropy ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we access, collect, use, store, share, and safeguard your information when you use the Entropy mobile application (the "App").

By using the App, you agree to the collection, use, and handling of your information as described in this Privacy Policy. If you do not agree with the practices described here, please do not use the App.

本隐私政策旨在向您说明我们如何访问、收集、使用、存储、共享和保护您的个人信息。使用本应用即表示您同意本政策所述的数据处理实践。

Developer Information 开发者信息

This App is developed and operated under the Entropy product name:

Formal legal-entity details and a registered business address will be added before any public paid launch or jurisdictional requirement that requires them. Do not use the service if you need a contracted medical, clinical, or regulated provider.

Personal and Sensitive User Data We Collect 我们收集的个人及敏感用户数据

We collect the following categories of data, all of which are considered personal and sensitive under Google Play policies:

For the first release, we do not collect: medical diagnosis records, Health Connect / HealthKit data, precise location data, contacts, call logs, SMS data, microphone recordings, browsing history, or an inventory of other apps on your device.

第一版不收集：病历/诊断记录、Health Connect / HealthKit 数据、精确位置、通讯录、通话记录、短信、麦克风录音、浏览历史或您设备上的其他应用清单。

If you are a U.S. consumer, please also review our Consumer Health Data Privacy Notice for additional disclosures about wellness, nutrition, mood, sleep, activity, and related inferences.

How We Use Your Data 我们如何使用您的数据

We limit the use of your data strictly to the following purposes:

• Core Service Delivery: Providing wellness summaries, self-tracking scores, and personal logs visible to you in the App.
• AI-Powered Analysis: Processing your food photos and mood descriptions to generate real-time wellness summaries.
• Account Management: Managing your account, authenticating logins, and ensuring service security.
• Service Improvement: Improving our AI analysis models using only anonymized, de-identified, aggregated data.
• Communications: Sending you important service-related notifications (e.g., policy changes, security alerts).

We do not use your personal data for advertising. We do not sell, trade, or rent your personal and sensitive user data to any third party.

我们不会将您的个人数据用于广告目的。我们不会出售、交易或出租您的个人及敏感用户数据给任何第三方。

Data Sharing & Third-Party Services 数据共享与第三方服务

We may share your data with the following categories of service providers, solely for the purposes described in this policy:

• AI Processing Providers: When you submit food photos or mood descriptions, the content is transmitted to our AI service provider (Groq) for real-time analysis. This processing is handled under the provider's applicable data-handling terms — see Section 6 for details.
• Cloud Infrastructure: Our servers are hosted on secure cloud infrastructure to ensure data availability and reliability.
• Embedding Services: We use Voyage AI for semantic search and retrieval to improve result organization and retrieval quality.
• Push Notification Providers: If notifications are enabled, a push token may be processed by Firebase Cloud Messaging and our notification delivery providers solely to deliver service notifications.

All third-party service providers are contractually obligated to handle your data securely and solely for the specified service purposes. They are prohibited from selling your personal data.

We may also disclose your data when required by law, valid governmental request, or to protect our legal rights.

所有第三方服务提供商均有合同义务安全处理您的数据，且仅用于指定服务目的。他们被禁止出售您的个人数据。

AI Processing & Ephemeral Data Handling AI 处理与临时数据说明

The original images and raw text are transmitted securely to our AI service for analysis. We do not use raw submissions to build advertising profiles; we store the analytical results that you see in the App and rely on service providers to process submitted content under their applicable data-handling terms.

原始图像和原始文本会安全传输至我们的 AI 服务进行分析。我们不会将原始提交用于广告画像；我们仅存储您在应用中看到的分析结果，并要求服务商按照其适用的数据处理条款处理提交内容。

Data Storage & Security 数据存储与安全

We implement industry-standard security measures to protect your personal and sensitive user data:

• Encryption in Transit: Data transmissions are protected using HTTPS/TLS.
• Encryption at Rest: Production data is protected with access controls and provider-managed storage encryption.
• Password Security: Your password is hashed using the bcrypt algorithm. We cannot access or recover your plaintext password.
• Access Control: Database access is strictly limited to authorized personnel and services only.
• Server Location: Your data is stored on secure servers. We do not store data on mainland China servers.

While we employ robust security measures, no method of electronic storage or transmission is 100% secure. We continuously review and improve our security practices.

Data Retention & Deletion Policy 数据保留与删除政策

Retention: We retain your personal data for the duration of your active use of the App. Data is kept to provide you with continuous access to your historical self-tracking scores, wellness summaries, and reports.

Deletion: When you request account deletion (available in-app under Profile → Delete Account Permanently), the following happens:

• All personal data associated with your account is deleted from active production systems after verification and processing, generally within 30 days.
• This includes: account credentials, profile data you provided, all food logs, entropy scores, AI analysis results, and any other data linked to your account.
• Residual backup copies, if any, are not used for active service restoration except for security, legal, or disaster-recovery needs and are scheduled to expire or be overwritten within 90 days.
• Account deletion is permanent and cannot be undone.

Temporary account deactivation or "freezing" is not available. All deletion requests result in removal of your account from active service systems, subject to the backup and legal-retention limits described above.

Your Rights 您的权利

Under applicable data protection laws (including GDPR, CCPA, and other regional privacy regulations), you have the following rights:

• Right of Access: You may request a copy of all personal data we hold about you.
• Right to Rectification: You may correct or update your personal information at any time within the App.
• Right to Erasure ("Right to be Forgotten"): You may request complete deletion of your account and all associated data.
• Right to Data Portability: You may request an export of your data in a machine-readable format.
• Right to Restrict Processing: You may request that we limit the processing of your personal data under certain circumstances.
• Right to Withdraw Consent: You may withdraw your consent to data processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Object: You may object to the processing of your personal data for specific purposes.

To exercise any of these rights, please contact us at privacy@getentropy.app. We will respond to your request within 30 days.

如需行使上述任何权利，请发送邮件至 privacy@getentropy.app，我们将在30天内回复您的请求。

Children's Privacy 未成年人保护

The App is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. Additionally, our target audience does not include anyone under the age of 16.

If we become aware that we have inadvertently collected personal data from a child under 13, we will take immediate steps to delete such data from our servers.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@getentropy.app so we can take appropriate action.

本应用不面向13岁以下儿童，我们的目标受众也不包括16岁以下的未成年人。如果我们发现收集了未成年人的数据，将立即删除。

International Data Transfers 国际数据传输

Your data may be transferred to and processed in countries other than the country in which you are resident. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer data internationally, we implement appropriate safeguards in accordance with applicable data protection laws, including:

• Standard contractual clauses approved by relevant authorities
• Compliance with the EU-U.S. Data Privacy Framework, UK Extension, and Swiss-U.S. Data Privacy Framework where applicable
• Ensuring all data transfers maintain the same level of protection required by GDPR and applicable regulations

Cookies, SDKs & Tracking Technologies Cookie、SDK 与追踪技术

The App does not use cookies, advertising trackers, or analytics SDKs for advertising purposes.

We may use essential SDKs for core functionality only:

• Network Communication: For secure API communication with our servers.
• Image Processing: For camera and gallery access when you choose to submit food photos.

No third-party advertising SDKs are integrated. We do not engage in cross-app tracking or behavioral advertising profiling.

Prominent Disclosure & Consent 显著披露与同意

In accordance with Google Play's User Data policy, the App provides clear, prominent in-app disclosures before collecting or processing any personal and sensitive user data. Specifically:

• Before accessing your camera or gallery for food photo analysis, the App explains what data will be collected and how it will be used.
• Health profile data is collected only when you voluntarily choose to provide it within the App, with clear explanations of its purpose.
• Consent is obtained through affirmative user action (tapping to agree) and is never assumed from navigation or inactivity.
• You can withdraw consent at any time by discontinuing use or requesting account deletion.

Android Permissions Android 权限说明

The first Android release requests only the permissions needed for core app functionality. It does not request location permissions or Health Connect permissions.

All permissions are requested using Android's runtime permission system. You can revoke any permission at any time through your device's system settings.

Changes to This Privacy Policy 隐私政策变更

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes:

• We will update the "Effective Date" and "Version" at the top of this page.
• We will notify you through an in-app notification.
• For material changes, we will request your renewed consent before continuing to process your data.

We encourage you to review this Privacy Policy periodically.

Contact Us 联系我们

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related inquiries within 30 days.

如有任何关于本隐私政策或数据处理实践的疑问、关切或请求，请通过上述方式联系我们。我们将在30天内回复所有与隐私相关的查询。