1. 收集边界与数据最小化

1. Collection Boundary & Data Minimization

系统仅采集维持账号体系与客户端运行所必需的数据：账号标识、设备型号及基础运行日志。聊天内容、通讯录等业务负载不属于收集边界，从源头压缩隐私暴露面。

The system collects only what is required to maintain the account system and client operation: account identifiers, device models, and basic run logs. Business payloads such as chat content and contacts fall outside the collection boundary, minimizing the privacy surface by design.

2. 端到端加密与密文生命周期

2. End-to-End Encryption & Ciphertext Lifecycle

加密在发送端完成、于接收端终止，会话密钥仅在参与设备之间建立。传输层与存储层均为密文；服务端不持有解密密钥，因此在技术上不具备明文访问、检索或转发的可能。

Encryption begins at the sender and ends at the recipient; session keys exist only between participating devices. Data is ciphertext at both transport and storage layers. With no decryption key on the server, plaintext access, indexing, or forwarding is technically impossible.

3. 数据用途说明

3. Data-Use Specification

最小数据集仅用于下列功能性目的，不用于画像、广告或任何形式的商业化利用：

The minimal dataset serves only the functional purposes below — never profiling, advertising, or commercial use of any kind:

• 保障加密通道的稳定交付与迭代演进
• 支撑账号鉴权与访问控制
• 检测垃圾流量、钓鱼载荷与滥用行为

• Ensure reliable delivery and iterative improvement of encrypted channels
• Support account authentication and access control
• Detect spam traffic, phishing payloads, and abuse

4. 数据分享与披露条件

4. Sharing & Disclosure Conditions

默认策略为不共享、不出售。披露仅发生在两种情形：用户授权，或法律强制要求（例如司法机关依法的正式请求）。默认无第三方 SDK 接入处理通讯数据。

The default policy is no sharing and no selling. Disclosure occurs only in two cases: user authorization, or a legal mandate such as a lawful request from judicial authorities. No third-party SDK is embedded to process communications by default.

5. 隐私控制面与用户权限

5. Privacy Control Surface & User Permissions

客户端提供阅后即焚、双向删除、应用锁、防截屏、隐藏手机号等控制项，每项均可独立开关，用户对自身数据的可见性拥有最终决定权。

The client exposes self-destruct messages, mutual deletion, app lock, screenshot blocking, and phone-number hiding. Each control is independently togglable, giving users final authority over data visibility.

6. 联系方式与数据主体请求

6. Contact & Data-Subject Requests

数据主体可对本隐私政策、数据访问或删除等事项，通过官方网站联系支持团队；相关请求将按内部流程及时受理与处理。

Data subjects may contact the support team via the official website regarding this policy, data access, or deletion. Requests are acknowledged and processed promptly per internal procedures.