FamilyCoins • Privacy Policy

FamilyCoins 隐私政策

更新日期：2026-10-16。FamilyCoins 只处理维持家庭金币、卡片、任务、心愿、成就、审批、跨设备同步和家长选择启用的智能体对话所必需的数据， 不做广告跟踪，也不会把家庭数据出售给第三方。

我们会处理的数据

• 手机号登录信息，用于识别家长账号或手机号孩子账号。

• 账号标识，用于维持云端登录和家庭成员绑定。

• 家庭数据，包括家庭名称、家庭码、成员昵称、头像、金币、卡片、任务、心愿、成就、审批、惩罚和增益状态。

• 本地偏好设置，例如音量、震动和最近登录状态。

这些数据怎么使用

• 在家庭成员之间同步金币、卡片、任务、心愿、成就、审批、惩罚和增益状态。

• 让家长管理任务、心愿、成就、家庭卡片、家庭成员和发放流程。

• 在你删除账号或删除家庭时，一并清理对应家庭数据。

• 维持账号登录状态和跨设备恢复。

相机权限

• 相机仅在你主动点击扫码时使用，用于扫描家庭二维码填写家庭码。

• 我们不会在后台调用相机，也不会把相机画面保存到云端。

云同步与第三方服务

• 家庭数据会保存在设备本地，并在你使用手机号登录时同步到阿里云 RDS Supabase 云端。

• 任务计划、心愿储蓄和成就进度也会一起同步，保证家长端和孩子端看到的是同一份家庭状态。

• 云端只保存实现家庭协作所需的数据，不用于广告画像，也不用于跨 App 跟踪。

• 当前不接入广告 SDK、第三方统计 SDK 或跨 App 跟踪服务。

可选的智能体对话

• 自由对话使用家长主动配置的第三方模型。家长选择厂商、模型及服务站点或区域，也可以填写自定义地址；不配置 API，仍可使用其他智能体功能。

• 需要模型回复时，聊天问题、必要的最近对话、伙伴名称和形象，以及当前孩子的账户与可见家庭规则摘要，会经 FamilyCoins 专用聊天网关发送给所配置的模型厂商。摘要可包括金币、卡片、任务、存借款、次数和技能状态，用于解释规则和提供建议。

• 智能体对话只能读取和分析这些信息，不能修改孩子账户、发放奖励、审批任务或更改家长设置。

• 保存的 API 密钥加密存放在云端，由聊天网关用于向所配置厂商验证请求，不会显示给孩子。

• 模型厂商按其隐私政策、服务条款和所选站点规则处理收到的内容，可能按 API 用量计费。请家长在配置前查看这些政策，并避免在对话中输入不必要的个人或敏感信息。

对话记录与家长控制

• FamilyCoins 提供最近 30 天的孩子对话记录，同家庭家长可在“成长与对话记录”中查看。超过 30 天的聊天正文由定时任务清理；不含正文的次数与防重复记录可继续保留。

• 家长测试对话只发送测试问题和最多 3 轮最近测试问答，不读取孩子账户，也不计入孩子次数或聊天记录。测试内容仅在当前页面临时显示，退出后清空；模型厂商收到的内容仍按其政策处理。

• 家长可在智能体设置中关闭“启用智能体”，或关闭某个孩子的“为这个孩子启用”并保存，以停止该范围内孩子的新对话请求。已有智能体资料会保留，关闭不会撤回已经发送给模型厂商的内容。

• 家长删除某个孩子的智能体时，会清理该智能体在 FamilyCoins 中的对话和成长等资料。模型厂商持有内容的保留或删除方式以其政策为准。

删除账号

• 家长和手机号孩子可以在 app 内发起删除当前账号。

• 删除后，该账号会从家庭中解绑；如果删除的是唯一创建家庭的家长，整个家庭也会一起删除。

联系方式

如果你对隐私政策或数据处理有疑问，请通过 App Store 产品页中的开发者联系方式与我们联系。

English Summary

Data We Handle

FamilyCoins processes only the data needed to support family coins, cards, approvals, rules, and cross-device sync. This includes phone sign-in account data, cloud account identifiers, family content, local app preferences, and optional companion chat configured by a parent.

How We Use It

We use this data only for app functionality, including family collaboration, account recovery, sync, parental workflows, and account or family deletion. We do not sell personal data and do not use it for advertising tracking.

Camera Access

Camera access is used only when a user actively chooses to scan a family QR code. Camera images are not uploaded or stored in the cloud.

Optional Companion Chat

• Open chat uses a third-party model configured by a parent. The parent chooses the provider, model and service site or region, or enters a custom URL. Other companion features work without an API configuration.

• When a model reply is needed, the message, necessary recent conversation, companion name and character, and a summary of the current child’s account and visible family rules are sent through the FamilyCoins chat gateway to the configured model provider. The summary may include coins, cards, tasks, savings, loans, usage counts and skills to explain rules and offer advice.

• Companion chat can only read and analyze this information. It cannot change the child’s account, issue rewards, approve tasks or change parental settings.

• Saved API keys are stored encrypted in the cloud and used by the chat gateway to authenticate requests to the configured provider. They are not shown to children.

• The model provider handles received content under its own privacy policy, terms and selected site rules, and may charge for API usage. Parents should review these policies before configuring a provider and avoid entering unnecessary personal or sensitive information.

Chat History and Parental Controls

• FamilyCoins provides the child’s chat history for the most recent 30 days. Parents in the same family can view it in Growth & Chat History. Scheduled cleanup removes message text older than 30 days; non-content records needed for quotas and duplicate prevention may remain.

• Parent test chat sends only the test message and up to 3 recent test exchanges. It does not read a child’s account or count toward the child’s quota or history. Tests are shown temporarily on the current page and cleared when it closes; the provider still handles received content under its own policy.

• Parents can turn off Enable companions, or turn off Enable for this child and save, to stop new child chat requests in that scope. Existing companion data is kept. Turning a companion off does not recall content already sent to a model provider.

• Deleting a child’s companion removes its chat history, growth and other companion data from FamilyCoins. Retention or deletion of content held by the model provider follows that provider’s policy.

Account Deletion

Parents and phone-account children can delete their current account in the app. If the deleted account is the only family creator parent, the related family is deleted as well.

Note for App Review: FamilyCoins does not use third-party advertising, cross-app tracking, or analytics SDKs. Camera permission is used only for QR code scanning. Family collaboration data is stored locally and synced through Alibaba Cloud RDS Supabase when needed for account and sync functionality. Optional companion chat sends the disclosed message context and account summaries through a dedicated chat gateway to the model provider configured by the parent, as described above.