What we collect

我们收集什么

• Account — your email address and a securely hashed password (we never store your password in readable form). If you sign in with Google, WeChat or Alipay instead, we store the link to that provider account, not your provider password.账号 —— 你的邮箱和经安全哈希的密码(我们绝不以可读形式存储密码)。若你改用 Google、微信或支付宝登录,我们只存储与该第三方账号的关联,不存你的第三方密码。
• Purchases — a record of each order (product, amount, time, and the payment reference from Dodo Payments) so we can grant and support what you bought. We never receive or store your card number.购买记录 —— 每笔订单的记录(商品、金额、时间,以及来自 Dodo Payments 的支付凭据),用于开通与售后。我们绝不接收或存储你的银行卡号。
• Usage counters — how many AI messages you have used, to enforce plan limits. We log per-message token counts for cost accounting; these are not tied to the content of your messages.用量计数 —— 你已使用的 AI 消息数,用于执行方案额度。我们会记录每条消息的 token 数用于成本核算;这些数据不与你消息的内容关联。
• Visit logs — when you open a page on this site or download one of our apps, our server records the time, your IP address (and the approximate country, province and city it belongs to, looked up offline on our server), the page or file, and your browser's user-agent string. We use this only to count visits and downloads and to spot abuse; no cookies or third-party analytics are involved, and the records are deleted after one year.访问日志 —— 当你打开本站页面或下载我们的应用时,服务器会记录时间、你的 IP 地址(以及在我们服务器上离线查得的大致国家、省份和城市)、所访问的页面或文件,以及浏览器的 User-Agent。这些记录仅用于统计访问与下载次数、发现滥用;不使用 Cookie,也没有第三方统计,记录在一年后删除。
• Content you create — measurements (SonoScope) stay on your device; they are sent to us only transiently when you ask the AI about them (see below). Track sessions and telemetry you save to the cloud (Traceline) are stored so you can reach them across devices.你创建的内容 —— 测量数据(声镜)保存在你的设备上,仅在你就其向 AI 提问时短暂发送给我们(见下)。你保存到云端的赛道记录与遥测(速迹)会被存储,以便跨设备访问。

Frostflare coasters

霜焰 Frostflare 杯垫

When you manage a coaster with the Frostflare app or WeChat mini program, this is what we handle and why.

当你通过霜焰 App 或微信小程序管理杯垫时,我们处理以下数据。

• The coaster and its binding — its serial number (derived from the chip's factory ID), which account it is bound to, the name you gave it, when it was bound and when it was last online.杯垫与绑定 —— 杯垫的序列号(由芯片出厂编号生成)、绑定到哪个账号、你为它起的名字、绑定时间和最近在线时间。
• What the coaster reports — while online it reports its current state (plate, heatsink and room temperature, humidity, power and energy use, fan speed, fault codes, firmware version) and its settings (target temperature, mode, brightness, timers, alarms with the notes you wrote for them, and so on). We keep only the latest report, not a history: it is what the app shows, including while the coaster is offline.杯垫上报的状态 —— 杯垫联网时会上报当前状态(盘面、散热器与室内温度,湿度,功率与用电量,风扇转速,故障码,固件版本)和它的设置(目标温度、模式、亮度、定时、闹钟及你为闹钟写的备注等)。服务器只保存最近一次上报,不保存历史,用于在 App 中显示,包括杯垫离线时。
• Weather city — the city you choose for the coaster, with that city's coordinates and time zone, so we can send it the weather and the time. It is the city you picked, not your location: we never read the phone's or the coaster's position.天气城市 —— 你为杯垫选择的城市,以及该城市的坐标和时区,用于向杯垫推送天气和时间。这是你选择的城市,不是你的定位:我们从不读取手机或杯垫的位置。
• Pictures and programs — the pictures in your library (only the finished 560×170 image the app makes, never your original photo; at most 50 per account) and the temperature programs you create.图片与程序 —— 你图库中的图片(只保存 App 处理后的 560×170 成品图,从不保存原始照片;每个账号最多 50 张)以及你创建的温控程序。
• Watchlist — the stock symbols you add under 自选, used to send quotes to your coaster.自选 —— 你在「自选」中添加的股票代码,用于向杯垫推送行情。
• Markets — a picture or program you share is shown publicly after a manual review, with your account nickname (never your email). We also record which listings you added and any report you file.市场 —— 你分享的图片或程序经人工审核后公开展示,并附上你的账号昵称(从不显示邮箱)。我们也会记录你添加过哪些内容,以及你提交的举报。
• Activation — each coaster's activation record (serial, how and when it was activated). When you redeem an activation code, we record which account used it for which coaster.激活 —— 每台杯垫的激活记录(序列号、激活方式和时间)。兑换激活码时,我们会记录该码由哪个账号用于哪台杯垫。
• Wi-Fi and Bluetooth — when you set up a coaster, the Wi-Fi name and password you enter go straight to the coaster over an encrypted Bluetooth connection and are stored only on the coaster; they never pass through or stay on our servers. The phone's scans for nearby Bluetooth devices and Wi-Fi networks are used only to find the coaster and pick a network, and are not uploaded.Wi-Fi 与蓝牙 —— 配网时,你输入的 Wi-Fi 名称和密码通过加密的蓝牙连接直接发送给杯垫,只保存在杯垫上,既不经过、也不保存在我们的服务器上。手机扫描附近的蓝牙设备和 Wi-Fi 网络,只用于找到杯垫和选择网络,结果不会上传。
• Phone permissions — the app and the mini program ask for Bluetooth, location (Android requires it to list Wi-Fi networks and Bluetooth devices), photos and camera only when a step needs them, for the purposes above. Location is never uploaded or stored.手机权限 —— App 和小程序只在某一步需要时才请求蓝牙、位置(安卓上列出 Wi-Fi 网络和蓝牙设备必须此权限)、相册和相机权限,用途如上。位置信息不会上传,也不会保存。

Who else processes your data

还有谁处理你的数据

• Dodo Payments — our merchant of record. It processes your payment, billing details and tax, and is the seller of record for the transaction. Card data is handled by Dodo, not by us.Dodo Payments —— 我们的收单主体。它处理你的支付、账单信息与税费,是交易的记录卖家。卡片数据由 Dodo 处理,不经我们。
• Alibaba Cloud Model Studio (Qwen) — our AI provider. When you use the AI assistant, your message and the data you attached (for example a measurement summary or session facts) are sent to its API to generate a reply. It operates in China; if you would rather this data not be sent there, do not use the AI features. We send only what is needed to answer, and not your email or password.阿里云百炼(通义千问) —— 我们的 AI 服务商。当你使用 AI 助手时,你的消息及所附数据(例如测量摘要或场次信息)会发送到其 API 以生成回复。该服务在中国境内运营;若你不希望此类数据被发送至此,请勿使用 AI 功能。我们仅发送生成回答所需的内容,不含你的邮箱或密码。
• Open-Meteo — the weather source for Frostflare coasters. Our server asks it for the weather by city name or coordinates; the request carries no account, email or coaster serial.Open-Meteo —— 霜焰杯垫的天气数据来源。我们的服务器按城市名称或坐标向其查询天气,请求中不含你的账号、邮箱或杯垫序列号。
• WeChat (Tencent) — if you use the Frostflare mini program, it runs inside WeChat, which processes what the platform needs to run it, under WeChat's own privacy policy.微信(腾讯) —— 如果你使用霜焰微信小程序,小程序运行在微信平台上,微信会处理运行小程序所需的数据,适用微信自身的隐私政策。
• Emails to support@ivy-drive.com — kept in our mailbox (Alibaba Cloud Enterprise Mail) and in our support console. To help us answer, the text of your email may be sent to the same AI provider to draft a reply; a person reads and edits every reply before it is sent, and nothing is sent automatically.发往 support@ivy-drive.com 的邮件 —— 保存在我们的邮箱(阿里云企业邮箱)和客服后台中。为便于回复,你的邮件正文可能会发送给上述 AI 服务商以起草回复;每一封回复都由人工审阅修改后才会发出,不会自动发送。
• Email delivery — we send confirmation codes and receipts from our own mail server. Our servers run on cloud infrastructure that processes data on our behalf.邮件发送 —— 我们通过自有邮件服务器发送验证码与收据。我们的服务器运行在代表我们处理数据的云基础设施上。

Your rights & choices

你的权利与选择

You can access, correct or delete your data, or ask for a copy, by emailing support@ivy-drive.com. Deleting your account removes your profile and cloud content; some order records are kept where the law requires. Depending on where you live, you may have additional rights under laws such as the GDPR or China's PIPL; tell us and we will honour them. We do not knowingly collect data from children under 13, and where a higher age of digital consent applies, we rely on parental consent as your law requires. 你可通过邮件 support@ivy-drive.com 访问、更正或删除你的数据,或索取副本。删除账号会移除你的资料与云端内容;部分订单记录会在法律要求下保留。视你所在地而定,你可能依据 GDPR 或中国《个人信息保护法》等享有额外权利;告知我们,我们将予以尊重。我们不会有意收集 13 岁以下儿童的数据;在适用更高数字同意年龄的地区,我们依你所在地法律要求以监护人同意为依据。