Privacy Policy / 隐私政策
Privacy Policy
1. Who handles your data
This Policy describes Digital Color AI for iOS and Android. Operator and platform data controller: 中国广东中佳智能科技有限公司. Registered address: No. 210 Dongfu South Road, Nantou Town, Zhongshan City, Guangdong Province, P.R.China (2nd Floor, Building 1; 2nd Floor, Building 2). Privacy contact: digitalcolor@yeah.net. Effective date: 13 September 2026. The operator determines how account, platform, security and service-operation data are handled. Each salon determines which customer records its authorized staff enter and use for salon services; where applicable, the operator processes those records on the salon’s documented instructions to provide hosting, synchronization and support.
2. Account and salon information
Registration and sign-in process your email, password or third-party authentication information, display name, account identifier, salon invitation and membership information, and login session tokens. Apple or Google sign-in, when selected, supplies the account information authorized through that provider. These data support authentication, session restoration and salon permissions. Remember-me preferences and session information are stored on the device according to the chosen login settings.
3. Customer records and images
When entered or saved, customer records can include name, phone number, birthday, hair characteristics, allergy notes, stylist notes, photographs and service history. Formula and AI-proposal records can include before/after images and treatment details. Records and images may be stored locally and uploaded to the service’s cloud database and file storage for salon access and synchronization. Allergy notes may be sensitive health-related information. Salons should collect only necessary information with an appropriate legal basis and any required customer consent.
4. AI hair-color image processing
When you request cloud hair-color generation, the app identifies the recipient and processing location and asks for confirmation before upload. The selected customer photo and task information are uploaded to our service. Our server obtains the target-color swatch and sends the customer image, swatch, generation instructions and any optional reference image to Volcengine Ark, operated by Beijing Volcano Engine Technology Co., Ltd., using Doubao Seedream through a Beijing-region endpoint in mainland China. Volcengine processes these materials to generate the requested image and for security, abuse prevention and legal compliance under its applicable service terms and data processing agreement. Under the provider’s standard model terms, submitted and generated content is not used to train or improve base models unless the customer separately opts in; we do not instruct or authorize such general training for this feature. If the production provider changes, the disclosure and this Policy will be updated before customer photos are sent. Our service stores task status and generated results in access-controlled cloud storage. Switching or disabling a provider does not itself delete earlier uploads. Contact digitalcolor@yeah.net for a verified deletion request. Consent to the general Terms does not replace the separate confirmation required before photo transfer.
5. Device, location and notification information
Connected-device features process device identifiers, salon association, local network addresses, connection state, formula commands, task status and operation records. When location permission is available and the server requests a device-location update, the app can upload coordinates, accuracy and a reverse-geocoded address linked to the connected device. Push features register a notification token associated with the account/device to deliver task updates. Android uses Firebase Cloud Messaging; iOS uses Apple Push Notification service. Permission requirements vary by platform and feature.
6. Service providers and data access
Supabase, Inc. provides account authentication, database, file storage and server functions; the project’s primary database, Auth service and Storage objects are hosted in the AWS Singapore region (ap-southeast-1). Beijing Volcano Engine Technology Co., Ltd. processes hair-color generation inputs and results in mainland China as described in section 4. Apple and Google process authentication information when their sign-in options are chosen; Apple Push Notification service and Firebase Cloud Messaging process notification delivery data. Authorized salon personnel can access records belonging to their salon according to assigned roles. The operator’s administrators and support personnel may access the minimum data needed to operate the service, investigate security incidents, respond to verified support requests or comply with law, and are subject to confidentiality and access controls. Network and infrastructure providers receive IP addresses and technical request metadata needed to deliver and secure requests.
7. Purposes and legal grounds
We process account and session information to perform the service contract and secure access; salon and customer records to provide requested record-management and synchronization services; photographs, sensitive notes, location and AI inputs on consent or another legal basis supplied by the relevant salon where required; device and notification information to perform requested functions; security and diagnostic data for our legitimate interests in preventing abuse, maintaining reliability and resolving faults; and records required to meet legal obligations. Where consent is the basis, it may be withdrawn without affecting processing already lawfully completed. We do not use acceptance of the Terms as consent for advertising, unrelated analytics or general model training.
8. Storage, security and retention
The primary Supabase database, Auth service and Storage objects are hosted in Singapore. Edge requests and service-provider operations may be handled in other regions needed to provide and secure the service. AI images are sent to mainland China when the user separately confirms a Volcengine request. Depending on the user’s location, these operations can involve international transfers. We use provider data-processing terms, contractual safeguards such as standard contractual clauses where applicable, access controls, transport encryption and data minimization, and request explicit consent for the AI transfer where required. Account credentials and memberships are kept while the account is active and are deleted when the account is permanently deleted. Notification tokens are kept until sign-out, invalidation or account deletion. Customer records, service history, uploaded images and AI results are kept while the salon needs them for requested services or legal recordkeeping, and are deleted or de-identified after a verified request, deletion by an authorized salon user, account deletion where linked, or termination of the relevant salon service, unless law requires longer retention. Device location is kept only while needed for the latest device status, operations or security. Technical and security logs are kept for the period configured by the relevant infrastructure provider and only as long as needed for security, troubleshooting or legal duties. Deleted database records may remain in protected backups until the applicable Supabase backup expires; deleted Storage files are not restored by database backup. Data retained solely for legal or backup purposes is restricted from ordinary use and removed when the applicable requirement or backup cycle ends.
9. Your choices and requests
You can manage camera, photo, location and notification permissions in system settings; disabling a permission can limit its related feature. Turning off a permission does not itself delete previously uploaded information. Subject to applicable law, you may request access, correction, deletion, portability, restriction or objection, and withdraw consent for consent-based processing without affecting prior lawful processing. You can permanently delete your account at Profile > Settings > Delete account. You may also contact digitalcolor@yeah.net or use https://legal.digitalcolorai.com; account identity may need verification. Customers whose records are managed by a salon can also contact that salon. Signing out or uninstalling is not cloud deletion; lawful retention exceptions and backup removal timing must be explained when applicable. You may complain to your competent data protection authority where provided by law.
10. Children, updates and contact
The application is intended for professional salon personnel. Account users must be at least 18 years old or the age of legal majority in their country or region, whichever is higher. The application is not directed to children. A salon that handles information about a minor customer must obtain any legally required parent or guardian authorization. Material changes to data handling will be disclosed before they apply, with renewed consent where required. Privacy questions and requests may be sent to digitalcolor@yeah.net or to the registered address above. This Policy should be read together with the current App Store privacy information and Google Play Data safety disclosure.
隐私政策
1. 谁处理您的信息
本政策适用于 Digital Color AI 的 iOS 和 Android 应用。运营主体及平台个人信息处理者：中国广东中佳智能科技有限公司；注册地址：中山市南头镇东福南路210号（1号楼二层、2号楼二层）；隐私联系邮箱：digitalcolor@yeah.net；生效日期：2026年9月13日。运营方决定账号、平台、安全及服务运营信息的处理方式。各门店决定其授权人员为门店服务录入和使用哪些客户档案；在适用法律下，运营方依据门店的书面指示提供托管、同步和支持服务。
2. 账号与门店信息
注册和登录会处理邮箱、密码或第三方认证信息、显示姓名、账号标识、门店邀请和归属信息以及登录会话令牌。选择 Apple 或 Google 登录时，会获取您通过该服务授权的账号信息。这些数据用于身份认证、恢复登录状态和门店权限管理。记住登录的偏好及会话信息会按所选设置存储在设备上。
3. 客户档案与照片
您录入或保存的客户档案可能包含姓名、电话、生日、头发特征、过敏备注、发型师备注、照片和服务历史。配方及 AI 提案记录可能包含染前染后照片及处理详情。档案与照片可能保存在本地，并上传到云端数据库及文件存储，用于门店访问和同步。过敏备注可能属于敏感健康相关信息；门店应仅收集必要资料，具有适当法律依据，并取得所需客户同意。
4. AI 换发色图片处理
当您请求云端换发色生图时，应用会在上传前显示接收方和处理地区并要求确认。选定的客户照片及任务信息先上传到我们的服务，服务器取得目标发束色板后，将客户照片、色板、生成指令和可选辅助参考图发送至北京火山引擎科技有限公司运营的火山引擎火山方舟，通过中国大陆北京地域接口调用豆包 Seedream。火山引擎依据适用的服务条款和数据处理协议，为生成所请求的图片以及安全、滥用防范和法定义务处理上述材料。依据服务商标准模型条款，除非客户另行选择加入，提交内容和生成内容不会用于训练或改进基础模型；我们不会为本功能指示或授权此类通用模型训练。若生产供应商发生变化，我们会在发送客户照片前更新告知及本政策。我们的服务会在受访问控制的云端存储中保存任务状态和生成结果。切换或关闭供应商不会自动删除此前上传的数据；可通过 digitalcolor@yeah.net 提交经身份核实的删除请求。接受一般用户协议不能替代照片传输前的单独确认。
5. 设备、位置与通知信息
设备功能会处理设备标识、门店归属、局域网地址、连接状态、配方指令、任务状态和操作记录。在具有定位权限且服务器请求更新设备位置时，应用可能上传与当前连接设备关联的经纬度、精度和解析后的地址。推送功能会登记与账号或设备关联的通知令牌，用于发送任务更新。Android 使用 Firebase Cloud Messaging，iOS 使用 Apple Push Notification service。具体权限依平台和功能而异。
6. 服务商与数据访问
Supabase, Inc. 提供账号认证、数据库、文件存储和服务器函数服务；项目的主要数据库、Auth 服务及 Storage 对象托管于 AWS 新加坡区域（ap-southeast-1）。北京火山引擎科技有限公司按第4节所述在中国大陆处理换发色生图的输入及结果。选择第三方登录时，Apple 和 Google 会处理认证信息；Apple Push Notification service 与 Firebase Cloud Messaging 会处理通知投递数据。门店授权人员可按其角色访问所属门店的记录。运营方管理员和客服人员仅可为运营服务、调查安全事件、响应经核实的支持请求或履行法定义务而访问必要的最少数据，并受保密义务和访问控制约束。网络及基础设施服务商会接收提供和保护网络请求所必需的 IP 地址及技术请求信息。
7. 处理目的与法律依据
我们为履行服务合同并保障访问安全而处理账号和会话信息；为提供所请求的档案管理及同步服务而处理门店和客户记录；在法律要求时，依据相关门店取得的同意或其他合法依据处理照片、敏感备注、位置及 AI 输入；为实现所请求的功能而处理设备和通知信息；基于防范滥用、维护可靠性和排查故障的合法利益处理安全及诊断数据；并为履行法定义务保存必要记录。以同意为处理依据时，您可以撤回同意，但不影响撤回前已合法完成的处理。接受用户协议不构成对广告、无关分析或通用模型训练的同意。
8. 存储、安全与保存期限
Supabase 的主要数据库、Auth 服务及 Storage 对象托管于新加坡；边缘请求及服务商运营可能在提供和保护服务所需的其他地区处理。用户单独确认火山引擎请求后，AI 图片会发送至中国大陆。依用户所在地不同，上述处理可能构成跨境传输。我们采用服务商数据处理条款、适用时的标准合同条款等合同保障、访问控制、传输加密和数据最小化措施，并在法律要求时就 AI 跨境传输取得单独同意。账号凭据和门店成员关系在账号有效期间保存，并在永久注销账号时删除。通知令牌保存至退出登录、失效或账号注销。客户档案、服务历史、上传图片及 AI 结果在门店为提供所请求服务或依法留存所需期间保存；收到经核实的请求、门店授权人员删除、注销关联账号或相关门店服务终止后，将予以删除或去除账号标识，但法律要求延长保存的除外。设备位置仅在展示最新设备状态、执行操作或保障安全所需期间保存。技术及安全日志按相关基础设施服务商配置的期限保存，且仅在安全、故障排查或法定义务所需期间使用。已删除的数据库记录可能在受保护备份中保留至相应 Supabase 备份到期；已删除的 Storage 文件不会由数据库备份恢复。仅因法律或备份目的保留的数据会限制日常使用，并在相应要求或备份周期结束后删除。
9. 您的选择与权利请求
您可在系统设置中管理相机、照片、定位及通知权限，关闭权限可能影响对应功能，但不会自动删除此前上传的信息。依适用法律，您可申请访问、更正、删除、转移数据、限制或反对处理，并撤回基于同意的授权，撤回不影响此前处理的合法性。您可通过“我的 > 设置 > 注销账号”永久删除账号，也可联系 digitalcolor@yeah.net 或使用 https://legal.digitalcolorai.com；处理请求时可能需要验证身份。由门店管理档案的客户也可联系相应门店。退出登录和卸载应用不等于删除云端数据；适用的法定保留例外及备份删除时间应予说明。法律规定时，您可向有管辖权的数据保护机构投诉。
10. 未成年人、变更与联系
本应用面向专业门店人员。账号用户应年满18周岁，或达到所在国家或地区规定的更高法定成年年龄。本应用并非面向儿童。门店处理未成年客户资料时，应取得法律要求的父母或监护人授权。数据处理发生重大变更时，我们会在生效前告知，并在需要时重新取得同意。隐私问题及请求可发送至 digitalcolor@yeah.net，或寄送至上述注册地址。本政策应与当前 App Store 隐私信息及 Google Play 数据安全申报一并阅读。