本页面帮助用户和审核人员理解 Ormo 的数据类型。App Store 产品页最终展示的“App 隐私”标签由 App Store Connect 生成；本页面不能替代该标签。实际处理取决于你使用的功能。
可能与账号关联的数据
| App Privacy 类别 | Ormo 中的示例 | 主要用途 |
|---|---|---|
| 联系信息－姓名、电话号码、电子邮件 | 昵称、手机号，以及用户主动绑定 Apple 登录后由 Apple 提供或隐藏的邮箱 | 注册、登录、资料展示、账号安全和支持 |
| 位置 | 主动记录的精确活动轨迹、旅行节点、照片中的可用地点；IP 所反映的大致区域 | 路线和旅行功能、网络安全与反滥用；账号数据区域依注册手机号国家/地区代码选择，不依 IP 选择 |
| 用户内容－照片或视频 | 头像、共同照片、旅行照片、票据截图和生成的视频 | 用户主动使用的资料、回忆、旅行和视频功能 |
| 用户内容－音频数据 | 用户主动录制并上传的语音回忆 | 在当前情侣空间存储和播放语音回忆 |
| 用户内容－电子邮件或文本信息 | 回声消息、聊天、内容回复和情侣互动文字 | 用户主动发起的沟通和情侣互动 |
| 用户内容－游戏内容和其他用户内容 | 画作、猜测、问答、心情、评论、旅行记录、举报和客服内容 | 互动、游戏、存储、共享、审核和支持 |
| 敏感信息 | 用户自愿填写的私密情侣问答可能涉及关系、性取向、亲密偏好或其他敏感观点 | 仅用于用户主动参加的私密情侣互动，不用于广告画像 |
| 健身数据 | 主动开始的活动类型、时间、里程和路线统计 | 一起动一动和活动记录；不读取 Apple 健康数据库 |
| 标识符 | Ormo 用户ID、推送设备令牌及必要的设备标识 | 账号、通知、安全和本区域服务 |
| 购买项目 | 订阅状态、商品、交易标识和权益记录 | 验证购买、发放权益、恢复购买、退款和防止重复发放 |
| 使用数据 | 功能访问、点击、任务状态和必要的服务交互记录 | 提供功能、统计服务状态、防止滥用和改进体验 |
| 诊断数据 | 错误、安全和性能日志、系统和 App 版本 | 排错、稳定性和安全 |
关联状态、用途和追踪
账号资料、位置记录、用户内容、敏感问答、购买权益和多数使用记录会与 Ormo 用户ID或情侣空间关联。上述数据主要用于 App 功能、账号管理、购买权益、安全、内容治理、客服和必要分析。Ormo 不出售个人信息，不以跨公司、跨 App 的广告画像为目的追踪用户。若未来引入会改变数据用途的第三方 SDK、广告或分析能力，我们会先更新实际配置、App Store Connect 声明和隐私政策，并按要求取得许可。
仅在设备端处理
没有上传服务器、仅在设备上即时处理的数据不构成 Ormo 的服务器收集。例如，用户浏览相册但没有选择的照片不会上传；“仅自己”或“只分享统计”的活动精确轨迹不上传。Apple MapKit 或 Apple 系统服务自行处理的数据由 Apple 按其政策管理。
第三方与存储区域
中国与海外服务区的核心业务数据相互隔离，不提供跨区情侣空间。短信、推送、地图、天气、支付和内容安全等独立服务商仍可能处理实现功能所必需的有限信息。远程推送不包含私密正文、精确轨迹或数据库标识；天气查询使用城市级信息；内容默认仅用本地规则审核，外部审核只能在明确告知并取得适用的单独同意后启用，且处理区域必须与当前服务区一致。详见《隐私政策》。
管理选择
你可以关闭权限、删除内容、管理已阻止用户、导出数据或注销账号。具体入口见《权限与数据使用说明》和《用户控制与账号注销》。
This page helps users and reviewers understand Ormo data types. The final App Privacy label on the App Store is generated from App Store Connect; this page does not replace it. Actual processing depends on the features you use.
Data that may be linked to an account
| App Privacy category | Ormo examples | Primary purposes |
|---|---|---|
| Contact Info－Name, Phone Number, Email Address | Nickname, phone number, and an email supplied or hidden by Apple after the user actively links Apple Sign In | Registration, sign-in, profiles, account security, and support |
| Location | Activity routes you record, trip stops, available selected-photo locations, and an approximate region reflected by IP | Route and trip features, network security, and abuse prevention. Account data region is selected from the registration phone country code, not IP. |
| User Content－Photos or Videos | Avatars, shared and travel photos, ticket images, and generated videos | User-requested profile, memory, trip, and video features |
| User Content－Audio Data | Voice memories the user records and uploads | Storage and playback inside the current Couple Space |
| User Content－Emails or Text Messages | Echo messages, chats, replies, and couple interaction text | User-requested communication and couple interactions |
| User Content－Gameplay and Other User Content | Drawings, guesses, answers, moods, comments, trips, reports, and support content | Interactions, games, storage, sharing, moderation, and support |
| Sensitive Info | Optional private couple answers may concern relationships, sexual orientation, intimate preferences, or other sensitive views | Only the private couple interaction the user chooses; not advertising profiles |
| Fitness | Activity type, time, distance, and route statistics from an activity you start | Together in Motion and activity records; Ormo does not read the Apple Health database |
| Identifiers | Ormo user ID, push token, and necessary device identifiers | Accounts, notifications, security, and regional services |
| Purchases | Subscription state, products, transaction identifiers, and entitlements | Purchase validation, fulfillment, restoration, refunds, and duplicate prevention |
| Usage Data | Feature visits, interactions, task status, and necessary service events | Functionality, service measurement, abuse prevention, and experience improvement |
| Diagnostics | Error, security, and performance logs, OS and app version | Troubleshooting, stability, and security |
Linkage, purposes, and tracking
Account details, location records, user content, sensitive answers, purchase entitlements, and most usage events are linked to an Ormo user ID or Couple Space. These data are primarily used for app functionality, accounts, entitlements, safety, moderation, support, and necessary analytics. Ormo does not sell personal information or track users across companies and apps for advertising profiles. If future SDKs, advertising, or analytics change these uses, Ormo will first update its configuration, App Store Connect disclosure, and Privacy Policy and obtain permission where required.
On-device processing
Data handled only on the device and not uploaded is not collected by Ormo's servers. Photos browsed but not selected are not uploaded, and precise routes in private or statistics-only activity mode are not uploaded. Apple manages data processed independently by MapKit or system services under its policies.
Providers and storage regions
Core business data is isolated between the China and overseas service regions, and cross-region Couple Spaces are unavailable. Independent SMS, push, map, weather, payment, and content-safety providers may still process limited data necessary for their functions. Remote push excludes private text, precise routes, and database identifiers; weather uses city-level information. Content uses local moderation rules by default. External moderation may be enabled only after clear disclosure and applicable separate permission, and its processing region must match the current service region. See the Privacy Policy.
Your controls
Turn off permissions, delete content, manage blocked users, export data, or delete your account. See Permissions and Data Use and User Controls and Account Deletion.