1. 引言
本《隐私政策》（以下简称"本政策"）旨在向您说明：当您下载、安装、使用 LensEats 时，我们会如何收集、使用、存储、共享您的个人信息，以及您依法所享有的权利。请您在使用本应用前仔细阅读并充分理解本政策的全部内容，特别是以加粗形式标识的条款。在征得您的同意后，我们方开始收集和使用您的个人信息。
2. 我们如何收集和使用您的个人信息
本应用的核心功能是对您拍摄的菜单图片进行 AI 识别、翻译、汇率换算与过敏原提示。为实现上述功能，我们需要在不同场景下收集以下信息：
| 使用场景 | 信息类型 | 使用目的 | 是否必需 |
|---|---|---|---|
| 扫描菜单 | 相机权限、菜单图片 | 调用相机拍摄菜单图片，并上传至本应用服务器交由 AI 服务（阿里云通义千问）进行 OCR 识别、翻译、过敏原识别 | 必需 |
| 从相册选取图片 | 相册访问权限、所选菜单图片 | 读取您主动选择的菜单图片用于上述识别（仅读取您选择的单张图片，不读取相册全部内容） | 选用 |
| 免费用户每日扫描配额管理 | 设备标识符（iOS IDFV / Android ANDROID_ID）、IP 地址 | 用于识别同一设备、统计当日扫描次数、防止刷量滥用 | 必需 |
| VIP 订阅购买与恢复 | 设备标识符、Apple 内购交易凭证（JWS）、订阅状态、订阅到期时间 | 通过 Apple App Store 完成内购付款；将交易凭证提交至本应用服务器（api.wandaotour.cn）校验，并保存订阅状态以便您在重装/换机后恢复购买 | 购买 VIP 时必需 |
| 语音点餐辅助 | 麦克风/扬声器调用（不录音、不上传） | 使用系统 TTS 将翻译后的菜品名称朗读给服务员听 | 选用 |
| 本地偏好设置 | 语言、目标币种、过敏原偏好 | 仅保存在您的设备本地，不上传服务器 | 选用 |
菜单图片不保存：您上传的菜单图片仅在服务器内存中临时停留以完成 AI 识别，处理完成后即被立即删除，不在我们的服务器或任何第三方处长期保存。
不收集您的姓名、身份证、电话、定位、通讯录、短信、通话记录、应用安装列表、剪贴板等信息。
3. 我们如何使用 Cookie 和同类技术
本应用不使用 Cookie、不嵌入网页跟踪像素、不投放广告标识符（IDFA/OAID）。我们仅在您的设备本地使用 localStorage 保存您的偏好设置（如界面语言、目标币种），这些数据不会上传到我们的服务器。
4. 第三方 SDK 与服务清单
为提供完整功能，本应用集成了下列第三方 SDK / 服务。我们已审慎评估其安全性与合规性，并要求其遵守《个人信息保护法》：
| SDK / 服务 | 提供方 | 用途 | 共享的个人信息 | 处理地点 |
|---|---|---|---|---|
| 通义千问 VL（DashScope API） | 阿里云计算有限公司 | 对菜单图片进行 OCR、翻译、过敏原识别 | 菜单图片（不含其他个人信息） | 中国境内（阿里云） |
| Apple StoreKit / 内购框架 | Apple Inc.（苹果中国分发主体由"云上贵州"承接） | 处理 VIP 订阅付款、自动续费、订阅恢复 | 您的 Apple ID 由 Apple 自身管理，本应用不直接接触 | 由 Apple 决定（境内 + 境外） |
| cordova-plugin-purchase（CdvPurchase） | 开源（Fovea / Cordova 社区） | 封装 Apple StoreKit 内购接口，处理订阅购买、续费与恢复 | 无独立数据外发；交易凭证仅发往本应用服务器（api.wandaotour.cn） | 本地 + 中国境内 |
| Capacitor 原生桥接（相机、TTS、设备 ID） | Ionic Team（开源） | 调用 iOS/Android 原生相机、扬声器、设备标识 API | 无数据外发，仅本地调用 | 本地 |
5. 我们如何存储与保护您的个人信息
- 存储地点：本应用业务数据全部存储于位于中国境内（阿里云华东 2 上海）的服务器。
- 存储期限：菜单图片处理完即删（不超过 5 分钟内存暂存）；扫描配额计数（设备 ID + 当日次数）保留 90 天后自动清理；订阅状态在订阅有效期内保留，到期失效后保留 6 个月用于您申请恢复购买。
- 安全措施：全程 HTTPS 加密传输；服务器仅开放必要端口；按"最小权限"原则限制内部访问；定期备份并对备份加密。
- 数据泄露应对：如发生或可能发生个人信息泄露事件，我们将在 72 小时内向监管部门报告，并通过应用内推送、邮件等方式告知受影响用户。
6. 个人信息的对外提供与跨境传输
我们承诺不向无关第三方出售、出租或交换您的个人信息。除本政策第 4 节列示的第三方 SDK 外，我们不会主动向其他方共享您的个人信息。
关于跨境传输：本应用的业务数据（菜单图片识别、扫描配额、订阅凭证校验）全部由位于中国境内的服务器（api.wandaotour.cn，阿里云华东 2 上海）处理，我们不会主动将您的个人信息传输至中国境外。
当您购买或恢复 VIP 订阅时，您与 Apple 之间的付款交易由 Apple App Store 处理。Apple 作为独立的个人信息处理者，可能依据其自身政策在全球范围内处理相关数据；该过程不在本应用控制范围内，受 Apple《隐私政策》（https://www.apple.com/legal/privacy/）约束。本应用仅接收 Apple 返回的交易凭证用于在境内服务器校验订阅状态，不涉及由我们发起的跨境数据传输。
7. 您依法享有的权利
依据《个人信息保护法》第四章，您对自己的个人信息享有以下权利：
- 知情权与决定权：您有权知悉、决定我们如何处理您的个人信息，并限制或拒绝处理；
- 查阅、复制权：您可联系我们查阅、复制您留存于服务器上的扫描配额记录与订阅状态；
- 更正、补充权：如您发现我们处理的信息有错，可要求更正；
- 删除权：您有权要求我们删除您的个人信息（卸载本应用即可清除本地数据；服务器侧记录可通过邮件申请删除）；
- 撤回同意权：您可随时通过系统设置撤回相机、相册等单项权限授权；
- 注销账户权：本应用不强制注册账户。如您曾购买 VIP，可通过邮件 contact@wandaotour.cn 申请删除与订阅关联的设备标识符记录；
- 解释说明权：您有权要求我们解释本政策内容。
我们将在收到您的请求后 15 个工作日内回复并处理。
8. 未成年人保护
本应用主要面向成年用户。我们不会主动收集 14 周岁以下未成年人的个人信息。若您是未成年人的监护人，发现未成年人在未取得您同意的情况下使用本应用，请通过本政策第 11 节联系方式与我们联系，我们将在核实后及时删除相关信息。若我们在不知情的情况下处理了 14 周岁以下未成年人的个人信息，将在发现后立即删除。
9. 本政策的更新
我们可能适时修订本政策。修订后我们将在本页面顶部更新"最后更新"日期；如发生重大变更（如收集信息范围扩大、用途变更、第三方共享变更），我们将在 App 内通过弹窗、推送等显著方式告知您，并在适用情况下重新征得您的同意。
10. 个人信息保护负责人
根据《个人信息保护法》第五十二条，我们指定以下人员负责本应用的个人信息保护工作：
- 姓名：胡霞
- 邮箱：contact@wandaotour.cn
- 电话：+86 158 0222 5413
您可就个人信息保护事宜直接与本负责人联系。
11. 投诉、举报与联系我们
如您对本政策、对我们处理个人信息的方式有任何疑问、意见或投诉，可通过以下方式联系：
- 运营主体：万岛游（天津）旅行有限公司
- 注册地址：天津市河东区大直沽街道神州花园 5-2-401
- 客服邮箱：contact@wandaotour.cn（5 个工作日内回复）
如您认为我们的处理行为侵犯了您的合法权益，您也可以向国家网信办违法和不良信息举报中心（12377.cn）、工业和信息化部 12381 涉诈预警平台，或向当地网信、电信主管部门、消费者协会投诉，亦可向人民法院提起诉讼。
1. Introduction
This Privacy Policy explains what personal information we collect when you download, install, or use LensEats, how we use, store and share it, and the rights you have. Please read this policy carefully — especially provisions shown in bold — before using the App. We only begin collecting and using your personal information after you have given your consent.
2. What We Collect and How We Use It
The App's core function is to perform AI recognition, translation, currency conversion and allergen alerts on menu photos you take. To enable these features, we collect the following information:
| Scenario | Information | Purpose | Required? |
|---|---|---|---|
| Scan a menu | Camera permission, menu image | Capture the menu photo and upload it to our server for OCR / translation / allergen recognition by Alibaba Qwen AI | Required |
| Pick from photo library | Photo library permission, selected image | Read only the photo you actively select (we never scan your full library) | Optional |
| Free-tier daily quota enforcement | Device identifier (iOS IDFV / Android ANDROID_ID), IP address | Identify the same device, count daily scans, prevent abuse | Required |
| VIP subscription purchase / restore | Device identifier, Apple in-app purchase receipt (JWS), subscription status, expiration date | Process Apple in-app purchase; submit the transaction receipt to our server (api.wandaotour.cn) for validation and persist subscription status so you can restore on re-install or device change | Required only when subscribing |
| Waiter voice assist | Speaker access (no audio recorded or uploaded) | Use on-device TTS to read translated dish names aloud | Optional |
| Local preferences | Language, target currency, allergen choices | Stored locally on your device only; never uploaded | Optional |
Menu images are not retained: uploaded images live only in server memory during AI processing and are deleted immediately afterwards. Nothing is persisted on our servers or with any third party.
We do not collect your name, ID number, phone number, geolocation, contacts, SMS, call logs, installed-app list, or clipboard.
3. Cookies and Similar Technologies
The App does not use cookies, tracking pixels, or advertising identifiers (IDFA / OAID). We only use on-device localStorage to save your preferences (e.g. UI language, target currency); these never leave your device.
4. Third-Party SDKs and Services
The App integrates the following third-party SDKs / services, each carefully evaluated for security and compliance and required to abide by PIPL:
| SDK / Service | Provider | Purpose | Personal Info Shared | Processing Location |
|---|---|---|---|---|
| Qwen-VL (DashScope API) | Alibaba Cloud | OCR, translation, allergen detection on menu images | Menu image only | Mainland China (Alibaba Cloud) |
| Apple StoreKit / In-App Purchase | Apple Inc. (Chinese distribution operated by GCBD) | Process VIP subscription, auto-renewal, restore purchases | Your Apple ID is managed by Apple; the App never accesses it directly | Determined by Apple |
| cordova-plugin-purchase (CdvPurchase) | Open source (Fovea / Cordova community) | Wraps the Apple StoreKit IAP API to handle subscription purchase, renewal and restore | No independent outbound data; transaction receipt is sent only to our server (api.wandaotour.cn) | On-device + Mainland China |
| Capacitor native bridges (Camera, TTS, Device) | Ionic Team (open source) | Access iOS/Android camera, speaker, device-id APIs | No outbound data; local API calls only | On-device |
5. Storage and Security
- Storage location: All business data is stored on servers located in mainland China (Alibaba Cloud, East China 2 / Shanghai).
- Retention period: Menu images are deleted immediately after processing (≤ 5 min in-memory); scan-quota counters (device ID + daily count) are retained 90 days then auto-pruned; subscription status is retained during the active term and for 6 months thereafter to support restore-purchases.
- Security measures: HTTPS end-to-end; minimal-port server exposure; least-privilege internal access; encrypted backups.
- Breach response: In the event of an actual or suspected personal-information breach, we will report to the competent regulator within 72 hours and notify affected users via in-app push or email.
6. Sharing and Cross-Border Transfer
We do not sell, rent or exchange your personal information with unrelated third parties. Except for the SDKs listed in Section 4, we do not proactively share your personal information.
Cross-border transfer: All business data (menu-image recognition, scan quotas, subscription-receipt validation) is processed on servers located in mainland China (api.wandaotour.cn, Alibaba Cloud East China 2 / Shanghai). We do not proactively transfer your personal information outside of China.
When you purchase or restore a VIP subscription, the payment transaction between you and Apple is handled by the Apple App Store. As an independent personal-information processor, Apple may process related data globally under its own policy; this is outside the App's control and governed by Apple's Privacy Policy. The App only receives the transaction receipt returned by Apple to validate subscription status on our in-China server, and no cross-border data transfer is initiated by us.
7. Your Rights under PIPL
Under Chapter IV of PIPL, you have the following rights regarding your personal information:
- Right to be informed and to decide: you may know and decide how your personal information is processed, and restrict or refuse such processing;
- Right of access and copy: contact us to access or obtain a copy of the scan-quota records and subscription status we hold;
- Right to correction: if any information we hold is inaccurate, you may request correction;
- Right to deletion: uninstalling the App clears all local data; server-side records can be deleted by emailing us;
- Right to withdraw consent: camera / photo / other single-item permissions can be revoked anytime via system settings;
- Right to deregister: the App requires no registration. If you previously purchased VIP, email contact@wandaotour.cn to delete the device-identifier record associated with your subscription;
- Right of explanation: you may ask us to explain any part of this policy.
We will respond and act within 15 working days of receiving your request.
8. Protection of Minors
The App is intended for adult users. We do not knowingly collect personal information from minors under 14 years of age. If you are a guardian and discover that a minor has used the App without your consent, please contact us via Section 11 and we will promptly delete the relevant information upon verification. If we become aware that we have processed personal information of a minor under 14 without consent, we will delete it immediately.
9. Updates to This Policy
We may update this policy from time to time. The "Last updated" date at the top of this page will be revised accordingly. For material changes (e.g., scope expansion, new purposes, new third-party sharing), we will provide a prominent in-app notice and, where applicable, re-request your consent.
10. Personal Information Protection Officer
Pursuant to Article 52 of PIPL, we designate the following officer for personal-information protection matters:
- Name: Hu Xia
- Email: contact@wandaotour.cn
- Phone: +86 158 0222 5413
11. Complaints, Reports and Contact
For any question, comment or complaint about this policy or our handling of personal information:
- Operator: Wandao Tour (Tianjin) Travel Co., Ltd.
- Registered address: Room 5-2-401, Shenzhou Garden, Dazhigu Street, Hedong District, Tianjin, P.R. China
- Email: contact@wandaotour.cn (reply within 5 working days)
If you believe our processing has infringed your rights, you may also file a complaint with the Cyberspace Administration of China (CAC) at 12377.cn, with the Ministry of Industry and Information Technology (MIIT), with your local consumer-protection authority, or bring a lawsuit before a People's Court.