Privacy Policy / 隐私政策

Data controller / 数据控制者

Privacy contact: privacy@sameway.app · General support: support@sameway.app · Legal notices: legal@sameway.app

隐私联系：privacy@sameway.app · 一般支持：support@sameway.app · 法律通知：legal@sameway.app

This policy applies to the Sameway website, installed web app, account features, trips, rooms, matching, email notifications, and contact communications.

本政策适用于 Sameway 网站、安装版网页应用、账号功能、行程、聊天室、匹配、邮件通知和联系沟通。

Sameway is intended for users aged 18 or older. Sameway is not intended for children, and users must not create an account if they are under 18.

Sameway 仅面向 18 岁及以上用户。本服务不面向儿童，未满 18 岁的用户不得创建账号。

• Account and authentication data: email address, account identifier, authentication status, account status, and login/session information. / 账号与认证数据：邮箱地址、账号标识符、认证状态、账号状态以及登录/会话信息。
• Registration legal records: 18+ confirmation, Terms and Community Guidelines acceptance, Privacy Policy acknowledgement, document versions, acceptance time, and interface language. / 注册法律记录：18 岁以上确认、使用条款和社区准则接受记录、隐私政策阅读确认、文件版本、确认时间及界面语言。
• Profile data: display name, avatar, city, age range, biography, and preferred language. / 个人资料数据：显示名称、头像、城市、年龄范围、简介和偏好语言。
• Trip and activity data: destination, arrival date, optional trip number, optional origin, optional activity name, room identifiers, and user-entered trip details. / 行程与活动数据：目的地、到达日期、可选班次号、可选出发地、可选活动名称、聊天室标识符及用户填写的行程详情。
• Communication data: rooms, room membership, chat messages, private-chat requests, message timestamps, last-read information, and related metadata. / 通信数据：聊天室、聊天室成员关系、聊天消息、私聊请求、消息时间戳、最后阅读信息和相关元数据。
• Matching data: selected category, quiz answers, question-set version, match score/count, shared-answer count, general shared-answer summaries, and match results. / 匹配数据：所选类别、问卷答案、题组版本、匹配分数/数量、共同答案数量、概括性共同答案总结和匹配结果。
• Safety and moderation data: blocks, reports, reported content, reporter and reported-user identifiers, moderation status and decisions, administrator review fields, restrictions, bans, and abuse-prevention records. / 安全与审核数据：拉黑、举报、被举报内容、举报人与被举报用户标识、审核状态和决定、管理员审核字段、限制、封禁及反滥用记录。
• Notification and email data: the daily email preference; delivery email address; notification type; aggregate unread, invitation, match, or update count; send time; delivery status; provider metadata; error information; and stored notification-log metadata. Notification emails do not contain quiz answers, chat-message, private-request, or group-message content. Public-room messages are never emailed. / 通知与邮件数据：每日邮件偏好；用于发送的邮箱地址；通知类型；聚合未读、邀请、同频或更新数量；发送时间；送达状态；服务商元数据；错误信息及存储的通知日志元数据。通知邮件不包含答题、聊天消息、私聊申请或小组消息正文，公共聊天室消息不会通过邮件发送。
• Product-event and technical records: feature-usage events for match diagnostics and server/provider technical logs that can include timestamps, request information, browser/device information, IP addresses, and security events. / 产品事件与技术记录：用于匹配诊断的功能使用事件，以及可能包含时间戳、请求信息、浏览器/设备信息、IP 地址和安全事件的服务器/服务商技术日志。
• Anonymous Explore sharing diagnostics: a random per-tab identifier, content identifier and type, share-source category, interface language, funnel step, and timestamp. These records are not linked to an account and do not contain names, email addresses, chat content, device information, referrers, or IP addresses. / 匿名探索分享诊断：随机的单标签页标识符、内容标识与类型、分享来源类别、界面语言、转化步骤和时间戳。这些记录不关联账号，也不包含姓名、邮箱、聊天内容、设备信息、来源页面或 IP 地址。
• Uploaded files: profile avatar images in avatar storage. / 上传文件：头像存储中的个人资料头像图片。
• Contact-request data: sender address, message content, attachments, and communication history for messages sent to Sameway contact addresses. / 联系请求数据：发送到 Sameway 联系邮箱的发件人地址、消息内容、附件和沟通历史。

• You provide data directly when creating an account, editing your profile, adding trips, answering quizzes, sending messages, or contacting Sameway. / 你在创建账号、编辑资料、添加行程、回答问卷、发送消息或联系 Sameway 时直接提供数据。
• Sameway generates data when you use features, such as room memberships, match results, notification logs, and feature-usage events. / 你使用功能时，Sameway 会生成聊天室成员关系、匹配结果、通知日志和功能使用事件等数据。
• Other users can provide data about you through reports, blocks, private-chat requests, invitations, room messages, or other interactions. / 其他用户可能通过举报、拉黑、私聊请求、邀请、聊天室消息或其他互动提供与你有关的数据。
• Authentication, hosting, email, storage, and mailbox providers generate or process technical records needed to operate the service. / 认证、托管、邮件、存储和邮箱服务商会生成或处理运营服务所需的技术记录。

An email address, password, authentication account identifier, and authentication/session data are required to create and maintain an account. Profile display name and preferred language are required account-profile fields: if you do not choose a display name, Sameway initializes one from the email prefix; preferred language defaults to English unless you choose Chinese. If required data is not provided, Sameway cannot provide the account or the relevant feature.

创建和维护账号需要邮箱地址、密码、认证账号标识符以及认证/会话数据。资料显示名称和偏好语言是必需的账号资料字段：如果你未选择显示名称，Sameway 会根据邮箱前缀初始化；偏好语言默认英文，除非你选择中文。如果不提供必需数据，Sameway 无法提供账号或相关功能。

Avatar, city, age range, and biography are optional profile fields. Trip destination and arrival date are required when you add a trip; trip number, origin, and activity name are optional. Room messages, private-chat requests, match answers, reports, feedback, and contact messages are provided only when you choose those features.

头像、城市、年龄范围和简介是可选资料字段。添加行程时，目的地和到达日期为必填；班次号、出发地和活动名称为可选。聊天室消息、私聊请求、匹配答案、举报、反馈和联系消息仅在你选择相应功能时提供。

Profile information shown on user profile pages can be viewed by logged-in users who can access those pages, including matched users or users reaching the profile from product flows. Match result cards show display name, avatar, city, biography preview, match count, and shared-answer summaries when available.

用户资料页展示的资料可由能够访问这些页面的已登录用户查看，包括匹配用户或从产品流程进入资料页的用户。匹配结果卡片会在可用时展示显示名称、头像、城市、简介预览、匹配数量和共同答案总结。

Information you post in a room is visible to the participants who can access that room. Private-chat requests are visible to the requester and receiver. Authorized administrators can review reports and relevant content for safety and moderation.

你在聊天室发布的信息对可以访问该聊天室的参与者可见。私聊请求对请求方和接收方可见。经授权的管理员可以为安全和审核目的查看举报及相关内容。

When you add a trip, Sameway stores destination and arrival date and stores optional trip number, origin, and activity name if you provide them. Sameway reuses an active destination, trip, or activity room when that conversation is still open. After the final member leaves and the room is dissolved, a later plan creates a new room without the previous room's members or messages.

你添加行程时，Sameway 会存储目的地和到达日期，并在你提供时存储可选班次号、出发地和活动名称。Sameway 会根据这些信息创建或复用目的地、班次和活动聊天室，并将你加入相关聊天室。

Room messages include the sender, room, content, timestamps, and related moderation/deletion fields. Room membership includes membership status and last-read information.

聊天室消息包含发送者、聊天室、内容、时间戳以及相关审核/删除字段。聊天室成员关系包含成员状态和最后阅读信息。

Sameway compares answer keys within the same match category and counts the answers two users selected in common. The applicable question set and threshold determine whether a match is shown. The result includes a match count and general summaries of shared preferences when summary content exists.

Sameway 会比较两名用户在同一匹配类别中的选择答案，并计算双方选择相同的题目数量。系统根据适用题组及匹配阈值决定是否展示匹配，结果包括相同选择数量，并在存在总结内容时包括共同偏好的概括性总结。

The matching process is automated and suggests potentially compatible users. It does not produce legal effects, does not determine access to essential services, and users make their own decisions about contacting or meeting others. Specific non-shared answers are not disclosed to another user.

匹配流程是自动化的，用于建议可能同频的用户。它不会产生法律效力，不决定基本服务的访问权限；用户自行决定是否联系或见面。未共同选择的具体答案不会披露给另一名用户。

Users can block or report other users or content. Reports can include identifiers, reported content, explanatory text, evidence snapshots, status, and administrator review information. Authorized administrators can review reports and relevant content, mute users, ban users, and update moderation status.

用户可以拉黑或举报其他用户或内容。举报可能包含标识符、被举报内容、说明文字、证据快照、状态和管理员审核信息。经授权的管理员可以查看举报和相关内容、禁言用户、封禁用户并更新审核状态。

Safety records are retained only as long as needed for safety, abuse prevention, dispute resolution, legal claims, or compliance. Sameway does not disclose the reporter’s identity to the reported user unless required by law or necessary for proceedings.

安全记录仅在安全、反滥用、争议解决、法律主张或合规所需期间保存。除非法律要求或程序需要，Sameway 不会向被举报用户披露举报人身份。

Transactional and service emails include authentication emails sent by Supabase Auth, account operation, security, and important service messages. Sameway also sends at most one combined interaction email per UTC day through Resend for new matches, private-chat requests, delayed private unread messages, companion-group invitations, important group updates, and group unread summaries. These categories can be disabled in profile settings.

交易性和服务邮件包括由 Supabase Auth 发送的认证邮件、账号运营、安全和重要服务消息。Sameway 还会通过 Resend 每个 UTC 自然日最多发送一封合并互动邮件，内容包括新同频、私聊申请、延迟私聊未读、同行小组邀请、重要小组更新和小组未读数量。用户可通过个人资料页的一个总开关关闭全部互动摘要邮件。

Public-room messages use in-app notifications only and are never included in email. Notification emails contain aggregate counts and links only; they do not contain specific quiz answers, chat-message, private-request, or group-message content.

公共聊天室消息仅在 App 内提醒，绝不会进入邮件。通知邮件只包含聚合数量和入口链接，不包含具体答题、聊天消息、私聊申请或小组消息正文。

Sameway uses Supabase Auth for authentication emails, Resend for daily interaction-summary delivery, Cloudflare Email Routing for inbound domain email, and Google/Gmail to read and process legal, privacy, and support inquiries.

Sameway 使用 Supabase Auth 发送认证邮件，使用 Resend 发送每日互动摘要，使用 Cloudflare Email Routing 接收域名邮件，并使用 Google/Gmail 阅读和处理法律、隐私与支持咨询。

Sameway does not currently use advertising cookies or third-party behavioral advertising trackers.

Sameway 目前不使用广告 Cookie 或第三方行为广告追踪器。

Service providers process data under their applicable agreements and instructions. Some providers can act as independent controllers for limited operational data under their own terms.

服务提供商根据其适用协议和指示处理数据。部分服务商可能依其自身条款对有限运营数据作为独立控制者处理。

Supabase offers a DPA with EU Standard Contractual Clauses and project-region selection; Sameway uses the project region configured for its Supabase project. Vercel offers a DPA and is EU–US Data Privacy Framework certified. Resend offers a DPA and is EU–US Data Privacy Framework certified. Cloudflare offers a customer DPA, EU Standard Contractual Clauses, and is listed in the Data Privacy Framework program. Cloudflare Email Routing can process inbound domain email globally. The current inbound mailbox uses Gmail as a destination mailbox under the applicable Google consumer-service terms, not a verified Google Workspace processor arrangement. Contact privacy@sameway.app for transfer-safeguard requests.

Supabase 提供包含欧盟标准合同条款的数据处理协议，并提供项目区域选择；Sameway 使用其 Supabase 项目已配置的项目区域。Vercel 提供数据处理协议，并已获得欧盟—美国数据隐私框架认证。Resend 提供数据处理协议，并已获得欧盟—美国数据隐私框架认证。Cloudflare 提供客户数据处理协议、欧盟标准合同条款，并列于数据隐私框架计划。Cloudflare Email Routing 可能在全球处理入站域名邮件。当前入站邮箱使用 Gmail 作为目标邮箱，适用 Google 消费者服务条款，而非已验证的 Google Workspace 处理者安排。如需了解传输保障措施，请联系 privacy@sameway.app。

Sameway has not set a single fixed retention period for every data category. Account and profile data are generally retained while the account is active. Feature data is retained while needed to provide the relevant feature, safety, reliability, dispute-resolution, legal-claim, or compliance purpose.

Sameway 尚未为所有数据类别设置统一固定保存期限。账号和资料数据通常在账号有效期间保存。功能数据会在提供相关功能、安全、可靠性、争议解决、法律主张或合规目的所需期间保存。

Anonymous Explore sharing events are automatically deleted after 180 days. The random browser identifier exists only in the current tab session and is not linked to an account. / 匿名探索分享事件会在 180 天后自动删除。随机浏览器标识仅存在于当前标签页会话中，不与账号关联。

Account deletion is irreversible. The implemented deletion flow removes or anonymizes account profile data, avatar files, trips, room memberships, private-chat requests, blocks, messages sent by the user, matching data and consent records, notification preferences and notification state, feature-usage events, feedback submitted by the user, and account authentication records. Safety, moderation, feedback-review, and email-delivery records involving the user are anonymized where they must remain for safety, abuse-prevention, legal-claim, or compliance reasons.

账号删除不可逆。已实现的删除流程会移除或匿名化账号资料数据、头像文件、行程、聊天室成员关系、私聊请求、拉黑记录、用户发送的消息、匹配数据及同意记录、通知偏好和通知状态、功能使用事件、用户提交的反馈以及账号认证记录。涉及该用户的安全、审核、反馈复核和邮件送达记录，如因安全、反滥用、法律主张或合规原因必须保留，会进行匿名化处理。

Limited records can remain when legal retention duties or legal claims require it. Technical logs, email delivery logs, and provider backups follow provider and operational criteria and do not use one single fixed duration.

在法律保存义务或法律主张需要时，有限记录可能继续保留。技术日志、邮件送达日志和服务商备份遵循服务商及运营标准，不适用统一固定期限。

Subject to the legal conditions, you have rights of access under Article 15 GDPR, rectification under Article 16, erasure under Article 17, restriction under Article 18, data portability under Article 20, objection under Article 21, withdrawal of consent under Article 7(3), and complaint under Article 77.

在符合法律条件时，你享有 GDPR 第 15 条访问权、第 16 条更正权、第 17 条删除权、第 18 条限制处理权、第 20 条数据可携权、第 21 条反对权、第 7(3) 条撤回同意权，以及第 77 条投诉权。

Withdrawal does not affect prior lawful processing. The right to object applies particularly to legitimate-interest processing. Portability applies only when its legal conditions are met. Sameway can require identity verification and handles requests within the periods required by applicable law. Send requests to privacy@sameway.app.

撤回不影响此前合法处理。反对权尤其适用于基于合法利益的处理。数据可携权仅在其法律条件满足时适用。Sameway 可能要求身份验证，并会在适用法律要求的期限内处理请求。请将请求发送至 privacy@sameway.app。

You can complain to the Bavarian State Office for Data Protection Supervision, Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), or another competent supervisory authority, particularly in the EU country of your residence, workplace, or alleged infringement.

你可以向 Bavarian State Office for Data Protection Supervision / Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) 或其他有管辖权的监管机构投诉，尤其是你在欧盟的居住地、工作地或涉嫌侵权发生地的监管机构。

BayLDA complaint page / BayLDA 投诉页面

Sameway uses technical and organizational measures intended to protect personal data against unauthorized access, loss, misuse and alteration. Verified measures include Supabase authentication, Supabase Row Level Security policies for user data, role-based administrator checks, and owner-scoped avatar storage write policies. No online service can guarantee absolute security.

Sameway 使用旨在保护个人数据免受未经授权访问、丢失、滥用和篡改的技术和组织措施。已验证措施包括 Supabase 认证、针对用户数据的 Supabase 行级安全策略、基于角色的管理员检查，以及按所有者范围限制的头像存储写入策略。任何在线服务都无法保证绝对安全。

Sameway does not sell personal data or use personal data for third-party behavioral advertising.

Sameway 不出售个人数据，也不会将个人数据用于第三方行为广告。

Sameway updates this policy when features, providers, legal requirements, or data practices change. The updated page displays a revised “Last updated” date. Where required by law or appropriate because of a material change, Sameway will provide additional notice.

当功能、服务商、法律要求或数据实践发生变化时，Sameway 会更新本政策。更新后的页面会显示修订后的“最后更新”日期。在法律要求或重大变更适合另行通知时，Sameway 会提供额外通知。

Privacy: privacy@sameway.app · Support: support@sameway.app · Legal: legal@sameway.app

隐私：privacy@sameway.app · 支持：support@sameway.app · 法律：legal@sameway.app

ImpressumTerms of Use / 使用条款