Privacy Policy / 隐私政策

Data controller / 数据控制者

Privacy contact: privacy@sameway.app · General support: support@sameway.app · Legal notices: legal@sameway.app

隐私联系：privacy@sameway.app · 一般支持：support@sameway.app · 法律通知：legal@sameway.app

This policy applies to the Sameway website, installed web app, account features, trips, rooms, matching, email notifications, and contact communications.

本政策适用于 Sameway 网站、安装版网页应用、账号功能、行程、聊天室、匹配、邮件通知和联系沟通。

Sameway is intended for users aged 18 or older. Sameway is not intended for children, and users must not create an account if they are under 18.

Sameway 仅面向 18 岁及以上用户。本服务不面向儿童，未满 18 岁的用户不得创建账号。

• Account and authentication data: email address, Supabase user ID, authentication status, account status, and login/session information. / 账号与认证数据：邮箱地址、Supabase 用户 ID、认证状态、账号状态以及登录/会话信息。
• Profile data: display name, avatar, city, age range, biography, and preferred language. / 个人资料数据：显示名称、头像、城市、年龄范围、简介和偏好语言。
• Trip and activity data: destination, arrival date, optional trip number, optional origin, optional activity name, generated room keys, and user-entered trip details. / 行程与活动数据：目的地、到达日期、可选班次号、可选出发地、可选活动名称、生成的聊天室键及用户填写的行程详情。
• Communication data: rooms, room membership, chat messages, private-chat requests, message timestamps, last-read information, and related metadata. / 通信数据：聊天室、聊天室成员关系、聊天消息、私聊请求、消息时间戳、最后阅读信息和相关元数据。
• Matching data: selected category, quiz answers, question-set version, match score/count, shared-answer count, general shared-answer summaries, and match results. / 匹配数据：所选类别、问卷答案、题组版本、匹配分数/数量、共同答案数量、概括性共同答案总结和匹配结果。
• Faith & Values data: consent status and version, Faith & Values answers, resulting match score/count, and general shared-answer summaries displayed for that category. / 信仰与价值观数据：同意状态及版本、信仰与价值观答案、产生的匹配分数/数量，以及该类别展示的概括性共同答案总结。
• Safety and moderation data: blocks, reports, reported content, reporter and reported-user identifiers, moderation status and decisions, administrator review fields, restrictions, bans, and abuse-prevention records. / 安全与审核数据：拉黑、举报、被举报内容、举报人与被举报用户标识、审核状态和决定、管理员审核字段、限制、封禁及反滥用记录。
• Notification and email data: match email preference, email address used for delivery, email type, send time, delivery status, provider message ID, error information, and stored notification-log metadata. / 通知与邮件数据：匹配邮件偏好、用于发送的邮箱地址、邮件类型、发送时间、送达状态、服务商消息 ID、错误信息及存储的通知日志元数据。
• Product-event and technical records: match funnel events stored in product_events and server/provider technical logs that can include timestamps, request information, browser/device information, IP addresses, and security events. / 产品事件与技术记录：存储在 product_events 中的匹配漏斗事件，以及可能包含时间戳、请求信息、浏览器/设备信息、IP 地址和安全事件的服务器/服务商技术日志。
• Uploaded files: profile avatar images in the Supabase avatars storage bucket. / 上传文件：Supabase avatars 存储桶中的个人资料头像图片。
• Contact-request data: sender address, message content, attachments, and communication history for messages sent to Sameway contact addresses. / 联系请求数据：发送到 Sameway 联系邮箱的发件人地址、消息内容、附件和沟通历史。

• You provide data directly when creating an account, editing your profile, adding trips, answering quizzes, sending messages, or contacting Sameway. / 你在创建账号、编辑资料、添加行程、回答问卷、发送消息或联系 Sameway 时直接提供数据。
• Sameway generates data when you use features, such as room memberships, match results, notification logs, and product events. / 你使用功能时，Sameway 会生成聊天室成员关系、匹配结果、通知日志和产品事件等数据。
• Other users can provide data about you through reports, blocks, private-chat requests, invitations, room messages, or other interactions. / 其他用户可能通过举报、拉黑、私聊请求、邀请、聊天室消息或其他互动提供与你有关的数据。
• Authentication, hosting, email, storage, and mailbox providers generate or process technical records needed to operate the service. / 认证、托管、邮件、存储和邮箱服务商会生成或处理运营服务所需的技术记录。

An email address and authentication data are required to create and maintain an account. If required data is not provided, Sameway cannot provide the account or the relevant feature.

创建和维护账号需要邮箱地址和认证数据。如果不提供必需数据，Sameway 无法提供账号或相关功能。

Profile fields shown in the profile form—display name, avatar, city, age range, biography, and preferred language—are editable profile information. Trips, rooms, chats, and match answers are provided when you choose those features.

资料表单中的显示名称、头像、城市、年龄范围、简介和偏好语言是可编辑的资料信息。行程、聊天室、聊天和匹配答案仅在你选择相应功能时提供。

Faith & Values participation is entirely optional. Declining Faith & Values consent does not prevent use of unrelated Sameway features.

参加信仰与价值观搭子完全自愿。拒绝信仰与价值观同意不会影响使用无关的 Sameway 功能。

Profile information shown on user profile pages can be viewed by logged-in users who can access those pages, including matched users or users reaching the profile from product flows. Match result cards show display name, avatar, city, biography preview, match count, and shared-answer summaries when available.

用户资料页展示的资料可由能够访问这些页面的已登录用户查看，包括匹配用户或从产品流程进入资料页的用户。匹配结果卡片会在可用时展示显示名称、头像、城市、简介预览、匹配数量和共同答案总结。

Information you post in a room is visible to the participants who can access that room. Private-chat requests are visible to the requester and receiver. Authorized administrators can review reports and relevant content for safety and moderation.

你在聊天室发布的信息对可以访问该聊天室的参与者可见。私聊请求对请求方和接收方可见。经授权的管理员可以为安全和审核目的查看举报及相关内容。

When you add a trip, Sameway stores destination and arrival date and stores optional trip number, origin, and activity name if you provide them. Sameway creates or reuses destination, trip, and activity rooms according to those details and joins you to the relevant rooms.

你添加行程时，Sameway 会存储目的地和到达日期，并在你提供时存储可选班次号、出发地和活动名称。Sameway 会根据这些信息创建或复用目的地、班次和活动聊天室，并将你加入相关聊天室。

Room messages include the sender, room, content, timestamps, and related moderation/deletion fields. Room membership includes membership status and last-read information.

聊天室消息包含发送者、聊天室、内容、时间戳以及相关审核/删除字段。聊天室成员关系包含成员状态和最后阅读信息。

Sameway compares answer keys within the same match category and counts the answers two users selected in common. The applicable question set and threshold determine whether a match is shown. The result includes a match count and general summaries of shared preferences when summary content exists.

Sameway 会比较两名用户在同一匹配类别中的选择答案，并计算双方选择相同的题目数量。系统根据适用题组及匹配阈值决定是否展示匹配，结果包括相同选择数量，并在存在总结内容时包括共同偏好的概括性总结。

The matching process is automated and suggests potentially compatible users. It does not produce legal effects, does not determine access to essential services, and users make their own decisions about contacting or meeting others. Specific non-shared answers are not disclosed to another user.

匹配流程是自动化的，用于建议可能同频的用户。它不会产生法律效力，不决定基本服务的访问权限；用户自行决定是否联系或见面。未共同选择的具体答案不会披露给另一名用户。

Faith & Values participation is entirely optional. Answers can reveal religious or philosophical beliefs and can therefore constitute special-category data. Sameway processes those answers only after explicit consent for the Faith & Values matching purpose.

参加信仰与价值观搭子完全自愿。答案可能透露宗教或哲学信念，因此可能构成特殊类别数据。Sameway 仅在获得明示同意后，为信仰与价值观匹配目的处理这些答案。

Faith & Values answers are used to calculate and display relevant matching results to matched users, including match count and general shared-answer summaries. Sameway does not show individual non-shared answers to another user, does not use these answers for advertising targeting, and does not automatically assign or infer a religion beyond the answers voluntarily provided.

信仰与价值观答案用于向相关匹配用户计算并展示匹配结果，包括匹配数量和概括性共同答案总结。Sameway 不会向另一名用户展示个人未共同选择的答案，不会将这些答案用于广告定向，也不会在用户自愿提供的答案之外自动指定或推断宗教信仰。

The repository verifies account deletion deletes Faith & Values answers and consent records. The product allows retaking the questionnaire. A dedicated in-app Faith & Values consent-withdrawal control was not found; you can request withdrawal by contacting privacy@sameway.app. Withdrawal does not affect processing lawfully carried out before withdrawal.

仓库中可验证，删除账号会删除信仰与价值观答案及同意记录。产品允许重做问卷。未发现专门的应用内信仰与价值观撤回同意控件；你可以通过 privacy@sameway.app 请求撤回。撤回不影响撤回前已合法进行的处理。

Users can block or report other users or content. Reports can include identifiers, reported content, explanatory text, evidence snapshots, status, and administrator review information. Authorized administrators can review reports and relevant content, mute users, ban users, and update moderation status.

用户可以拉黑或举报其他用户或内容。举报可能包含标识符、被举报内容、说明文字、证据快照、状态和管理员审核信息。经授权的管理员可以查看举报和相关内容、禁言用户、封禁用户并更新审核状态。

Safety records are retained only as long as needed for safety, abuse prevention, dispute resolution, legal claims, or compliance. Sameway does not disclose the reporter’s identity to the reported user unless required by law or necessary for proceedings.

安全记录仅在安全、反滥用、争议解决、法律主张或合规所需期间保存。除非法律要求或程序需要，Sameway 不会向被举报用户披露举报人身份。

Transactional and service emails include authentication, account operation, security, and important service messages. Optional match notification emails are controlled by the profile notification toggle and can be disabled in profile settings.

交易性和服务邮件包括认证、账号运营、安全和重要服务消息。可选匹配通知邮件由资料页通知开关控制，可以在个人资料设置中关闭。

Sameway uses Resend for transactional and notification email delivery. Sameway uses Cloudflare Email Routing for inbound domain email and Google/Gmail to read and process legal, privacy, and support inquiries.

Sameway 使用 Resend 发送交易性和通知邮件。Sameway 使用 Cloudflare Email Routing 接收域名邮件，并使用 Google/Gmail 阅读和处理法律、隐私与支持咨询。

Sameway does not currently use advertising cookies or third-party behavioral advertising trackers.

Sameway 目前不使用广告 Cookie 或第三方行为广告追踪器。

Service providers process data under their applicable agreements and instructions. Some providers can act as independent controllers for limited operational data under their own terms.

服务提供商根据其适用协议和指示处理数据。部分服务商可能依其自身条款对有限运营数据作为独立控制者处理。

Some providers can process personal data outside the EEA. Transfers are handled, where applicable, using mechanisms recognized by GDPR Chapter V, such as an adequacy decision, the EU–US Data Privacy Framework for a certified entity, EU Standard Contractual Clauses, and supplementary safeguards when required. Users can contact privacy@sameway.app for more information about the applicable transfer safeguards.

部分服务商可能在欧洲经济区以外处理个人数据。在适用时，传输会使用 GDPR 第五章认可的机制，例如充分性决定、适用于认证实体的欧盟—美国数据隐私框架、欧盟标准合同条款，以及必要时的补充保障措施。用户可以联系 privacy@sameway.app 了解适用传输保障措施的更多信息。

The code does not define general fixed retention periods. Account and profile data are generally retained while the account is active. Feature data is retained while needed to provide the relevant feature, safety, reliability, dispute-resolution, legal-claim, or compliance purpose.

代码未定义一般固定保存期限。账号和资料数据通常在账号有效期间保存。功能数据会在提供相关功能、安全、可靠性、争议解决、法律主张或合规目的所需期间保存。

Account deletion is irreversible. The implemented deletion flow removes the avatar file, anonymizes the public.users profile and account status, anonymizes report references and text involving the user, clears administrator references involving the user, deletes private-chat requests, blocks, trips, room memberships, match results, match answers, match sessions, sensitive consents, notification preferences, match notification state, product events, feedback reports by the user, messages sent by the user, and deletes the Supabase Auth user. Email notification logs are anonymized by clearing the user ID and metadata.

账号删除不可逆。已实现的删除流程会移除头像文件，匿名化 public.users 资料和账号状态，匿名化涉及该用户的举报引用和文本，清除涉及该用户的管理员引用，删除私聊请求、拉黑记录、行程、聊天室成员关系、匹配结果、匹配答案、匹配会话、敏感同意、通知偏好、匹配通知状态、产品事件、该用户提交的反馈、该用户发送的消息，并删除 Supabase Auth 用户。邮件通知日志会通过清除用户 ID 和元数据进行匿名化。

Limited records can remain when legal retention duties or legal claims require it. Technical logs, email delivery logs, and provider backups follow provider and operational criteria that are not fixed in the repository.

在法律保存义务或法律主张需要时，有限记录可能继续保留。技术日志、邮件送达日志和服务商备份遵循服务商及运营标准，仓库中未固定具体期限。

Subject to the legal conditions, you have rights of access under Article 15 GDPR, rectification under Article 16, erasure under Article 17, restriction under Article 18, data portability under Article 20, objection under Article 21, withdrawal of consent under Article 7(3), and complaint under Article 77.

在符合法律条件时，你享有 GDPR 第 15 条访问权、第 16 条更正权、第 17 条删除权、第 18 条限制处理权、第 20 条数据可携权、第 21 条反对权、第 7(3) 条撤回同意权，以及第 77 条投诉权。

Withdrawal does not affect prior lawful processing. The right to object applies particularly to legitimate-interest processing. Portability applies only when its legal conditions are met. Sameway can require identity verification and handles requests within the periods required by applicable law. Send requests to privacy@sameway.app.

撤回不影响此前合法处理。反对权尤其适用于基于合法利益的处理。数据可携权仅在其法律条件满足时适用。Sameway 可能要求身份验证，并会在适用法律要求的期限内处理请求。请将请求发送至 privacy@sameway.app。

You can complain to the Bavarian State Office for Data Protection Supervision, Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), or another competent supervisory authority, particularly in the EU country of your residence, workplace, or alleged infringement.

你可以向 Bavarian State Office for Data Protection Supervision / Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) 或其他有管辖权的监管机构投诉，尤其是你在欧盟的居住地、工作地或涉嫌侵权发生地的监管机构。

BayLDA complaint page / BayLDA 投诉页面

Sameway uses technical and organizational measures intended to protect personal data against unauthorized access, loss, misuse and alteration. Verified measures include Supabase authentication, Supabase Row Level Security policies for user data, role-based administrator checks, and owner-scoped avatar storage write policies. No online service can guarantee absolute security.

Sameway 使用旨在保护个人数据免受未经授权访问、丢失、滥用和篡改的技术和组织措施。已验证措施包括 Supabase 认证、针对用户数据的 Supabase 行级安全策略、基于角色的管理员检查，以及按所有者范围限制的头像存储写入策略。任何在线服务都无法保证绝对安全。

Sameway does not sell personal data. Sameway does not use Faith & Values answers for advertising, does not use religious or philosophical-belief data to build advertising profiles, and does not disclose those answers to advertisers.

Sameway 不出售个人数据。Sameway 不会将信仰与价值观答案用于广告，不会使用宗教或哲学信念数据建立广告画像，也不会向广告商披露这些答案。

Sameway updates this policy when features, providers, legal requirements, or data practices change. The updated page displays a revised “Last updated” date. Where required by law or appropriate because of a material change, Sameway will provide additional notice.

当功能、服务商、法律要求或数据实践发生变化时，Sameway 会更新本政策。更新后的页面会显示修订后的“最后更新”日期。在法律要求或重大变更适合另行通知时，Sameway 会提供额外通知。

Privacy: privacy@sameway.app · Support: support@sameway.app · Legal: legal@sameway.app

隐私：privacy@sameway.app · 支持：support@sameway.app · 法律：legal@sameway.app

ImpressumTerms of Use / 使用条款