幸运宝贝 隐私政策
幸运宝贝（LuckyBaby）是一款供家庭共同记录孕期的应用。我们的原则很简单：数据属于你的家庭，不做广告，不做社区，不出售、不共享给任何第三方用于营销。
1. 我们收集什么
- 你主动记录的内容：产检日期与结果、体重、症状、心情、胎动、宫缩、用药与补充剂打卡、报告照片、待产包清单、家庭动态与留言。
- 备孕与经期记录（选择「备孕中」或「只记经期」时）：月经开始与结束日期、经量、痛经程度、经期症状、同房记录、排卵试纸结果、基础体温，以及由这些推算出的排卵日与易孕期。
- 以上产检结果、体重、症状、月经与备孕记录都属于健康信息（敏感个人信息），其中同房记录属于性生活信息。我们仅在你首次使用并单独同意后处理，且只在你的家庭内可见——备孕与经期记录更严格，只有你和伴侣能看到，其他家人看不到。
- 账号信息：默认使用匿名账号；你可选择通过 Apple 登录或邮箱绑定，此时我们保存 Apple 提供的用户标识或你的邮箱地址，用于换机恢复。
- 设备信息：推送令牌（用于提醒）、语言与时区（用于按当地时间提醒）、错误日志（仅包含错误文本，不含记录内容）。
- 我们不收集手机号、通讯录、位置、设备唯一标识，不接入任何第三方广告或统计 SDK。
2. 数据怎么用
只用于向你和你邀请的家庭成员展示记录、发送提醒、同步与恢复数据。准妈妈决定每条记录对伴侣和家人的可见范围。
3. 数据存在哪里
数据加密传输后存储在 Supabase 提供的云数据库（当前位于日本东京区域），照片存储在私有存储桶，仅家庭成员可通过时效链接访问。我们通过数据库行级权限确保只有本家庭成员能读取本家庭数据。
4. 谁能看到
只有你的家庭成员（按准妈妈设定的可见范围）。开发者不会查看你的记录内容，除非你为排查问题主动提供。
5. 你的权利
- 随时在 App 内查看、修改、删除任何记录。
- 准妈妈可随时移出家庭成员。
- 在「家庭」页点「账号」可随时删除账号（无论是否绑定过登录方式都能删）：准妈妈删除账号会删除整个家庭的云端数据，包括报告照片；其他成员删除账号会退出家庭并删除自己的登录信息。删除不可恢复。
- 可联系我们索取数据副本或提出其他请求：liushuang19920505@gmail.com。
6. 未成年人
本应用面向成年人。我们不会主动收集未成年人信息。
7. 医疗声明
幸运宝贝不是医疗器械，不提供诊断或治疗建议。参考范围仅供了解，一切以医生判断为准。
8. 变更
政策更新会在 App 内提示。继续使用视为接受更新后的政策。
LuckyBaby Privacy Policy
LuckyBaby is a pregnancy journal shared by a family. Our principle is simple: your data belongs to your family. No ads, no community, and we never sell or share it with third parties for marketing.
1. What we collect
- What you record: checkup dates and results, weight, symptoms, mood, kicks, contractions, medication and supplement check-ins, report photos, hospital bag list, family feed and comments.
- Cycle and conception records (when you choose "Trying to conceive" or "Just my cycle"): period start and end dates, flow, cramp level, cycle symptoms, intimacy logs, ovulation test results, basal body temperature, and the ovulation and fertile-window estimates derived from them.
- All of the above — checkup results, weight, symptoms, cycle and conception records — is health data (sensitive personal information), and intimacy logs are sexual activity data. We process it only after your separate consent on first use, and it stays inside your family. Cycle and conception records are stricter still: only you and your partner can see them, never other relatives.
- Account: anonymous by default. If you link with Apple or email we store the Apple user identifier or your email address so you can restore on a new phone.
- Device: push token (reminders), language and time zone (local-time reminders), error logs (error text only, never your records).
- We do not collect phone numbers, contacts, location or device identifiers, and we use no third-party advertising or analytics SDKs.
2. How we use it
Only to show records to you and the family members you invite, send reminders, and sync or restore your data. The mom-to-be decides what her partner and family can see.
3. Where it lives
Data is encrypted in transit and stored in a Supabase cloud database (currently Tokyo, Japan). Photos live in a private bucket reachable only by family members via expiring links. Row-level permissions ensure only your family can read your family's data.
4. Who can see it
Only your family members, within the visibility the mom-to-be sets. The developers do not look at your records unless you share them to troubleshoot.
5. Your rights
- View, edit or delete any record in the app at any time.
- The mom-to-be can remove members at any time.
- Delete account any time from Family → Account (available whether or not you have linked a sign-in method): the mom-to-be's deletion removes the whole family's cloud data including report photos; other members leave the family and delete their sign-in. Deletion is permanent.
- Contact us for a data copy or other requests: liushuang19920505@gmail.com.
6. Children
The app is for adults. We do not knowingly collect data from children.
7. Medical disclaimer
LuckyBaby is not a medical device and does not diagnose or treat. Reference ranges are for general understanding only; always follow your doctor.
8. Changes
Updates are announced in the app. Continued use means you accept the updated policy.