Mental Fridge is operated from Hong Kong and handles your personal data in accordance with the six Data Protection Principles (DPP 1–6) of the Personal Data (Privacy) Ordinance (Cap. 486). This page states, principle by principle, what that means in practice.
精神雪櫃於香港營運，依照香港《個人資料（私隱）條例》（Cap. 486）六項保障原則（DPP 1-6）處理您的個人資料。本頁逐項說明實際做法。
DPP 1 · Purpose and Manner of Collection · 收集目的及方式
- We collect only what the app needs to work for you: your account details, what you put in your fridge, and what you write in your journal · 我們只收集應用程式運作所需的資料：帳戶資料、雪櫃內容、您寫下的日記。
- The data is used for one purpose — letting you record and review your own mental health over time · 資料只用於一個目的：讓您記錄並回顧自己的精神健康狀態。
- Nothing is collected covertly. Every field is one you filled in yourself, inside the app · 沒有任何資料是暗中收集的。每一欄都是您在應用程式內自行填寫。
DPP 2 · Accuracy and Retention · 資料準確及保留
- You can correct or delete any entry directly in the app at any time · 您可隨時於應用程式內直接修正或刪除任何記錄。
- When you delete your account, all personal data is permanently deleted within 30 days · 刪除帳戶後，全部個人資料於 30 日內永久刪除。
- We do not keep data longer than needed to provide the service to you · 我們不會保留超出提供服務所需期間的資料。
DPP 3 · Use of Personal Data · 個人資料使用
- Your journal, mood and food entries are never shown to any other person · 您的日記、情緒及食糧記錄絕不會展示予任何其他人。
- We do not sell, rent or share your personal data for marketing · 我們不會為行銷目的出售、出租或分享您的個人資料。
- Service providers · 服務供應商: our infrastructure and AI providers (Supabase, Vercel, and the Anthropic Claude API) process data on our instruction only, are contractually barred from using it for their own purposes or for model training, and never receive your name, email or account ID alongside what you write. See the Privacy Policy for the full list · 我們的基礎設施及 AI 供應商（Supabase、Vercel、Anthropic Claude API）僅按我們的指示處理資料，並受合約禁止用作自身用途或模型訓練，亦不會收到與內容一併傳送的姓名、電郵或帳戶 ID。完整清單見私隱政策。
DPP 4 · Security · 資料保安
- Where your data is held · 資料存放地點: on Supabase infrastructure in the Tokyo, Japan region(ap-northeast-1). Personal data therefore leaves Hong Kong; we state this openly so you can make an informed choice · 存放於 Supabase 位於日本東京區（ap-northeast-1）的基礎設施。個人資料因此會離開香港，我們主動說明，讓您在知情下作決定。
- All traffic is encrypted in transit (TLS); data is encrypted at rest by Supabase · 所有傳輸經 TLS 加密；靜態資料由 Supabase 加密儲存。
- Database row-level security is enforced on every table holding personal content, so a request can only ever read the rows belonging to the account that made it · 所有存放個人內容的資料表均強制啟用 row-level security，一個請求永遠只讀得到發出該請求的帳戶所擁有的資料。
- Uploaded photos live in a storage bucket with the same per-account restriction · 上載的相片存於同樣設有按帳戶分隔限制的儲存空間。
- Voice Burn recordings are never written to storage at all · Voice Burn 錄音完全不會寫入儲存空間。
DPP 5 · Openness · 資訊透明
DPP 6 · Access and Correction · 查閱及更正
- You may request a copy of all personal data we hold about you · 您可要求索取我們持有關於您的全部個人資料副本。
- Self-service export (CSV / JSON) and account deletion are built into the app, so you do not need to write to us for either · 應用程式內置自助匯出（CSV / JSON）及帳戶刪除功能，兩者均無須來函申請。
- Data access requests are answered within 40 days, as the Ordinance requires · 資料查閱要求將按條例規定於 40 日內回覆。
Data Breach Response · 資料外洩應對
If a breach affecting personal data is discovered, we notify affected users within 24 hours of discovery, state what was exposed, and report to the Privacy Commissioner for Personal Data where the Ordinance requires it.
如發現涉及個人資料的外洩事故，我們會於發現後 24 小時內通知受影響用戶，說明外洩範圍，並在條例要求時向個人資料私隱專員公署報告。
For privacy enquiries or a data access request, please contact hello@mentalfridge.com
私隱查詢或資料查閱要求，請聯絡 hello@mentalfridge.com
Questions? Contact · 如有問題，請聯絡 hello@mentalfridge.com