Privacy Policy · 私隱政策

Core Commitments · 核心承諾

Everything you write is private to you · 您寫下的一切僅您本人可見。No other user can see your journal, mood, or food entries · 其他用戶無法查閱您的日記、情緒或精神食糧內容。
This is enforced in the database itself, not merely by app logic: row-level security means a request carrying your login can only ever read your own rows · 這項保護寫在資料庫本身，並非僅靠應用程式邏輯： row-level security 令一個帶著您登入身分的請求，永遠只讀得到屬於您的資料。
Voice Burn audio is never stored · Voice Burn 錄音絕不保存：the recording is discarded after 30 seconds and only the energy measurement is kept · 錄音於 30 秒後銷毀，只保留能量分析數值。
We never sell your data, and we do not run advertising · 我們絕不出售您的資料，亦不經營廣告業務。
You may export or permanently delete everything at any time · 您可隨時匯出或永久刪除全部資料。

What We Collect · 我們收集的資料

Account information · 帳戶資料: email, nickname, profile photo (optional) · 電郵、暱稱、個人頭像（選填）。
Mental food data · 精神食糧資料: your fridge contents, assessment answers, food profiles, photos you voluntarily upload · 雪櫃內容、評估答案、食糧檔案、自願上載的相片。
Daily journal entries · 每日記錄: mood, gratitude / setback / diary text, metadata from four mood input gestures · 心情、感恩／挫折／日記文字、四種情緒輸入的元數據。
Usage telemetry · 使用統計: page views, deploy version. We do not use third-party tracking · 頁面瀏覽、部署版本。我們不使用第三方追蹤工具。

What We Never Do · 我們絕不做的事

✕ We never sell your data to any third party for marketing · 絕不出售您的資料予第三方作行銷用途。
✕ We never show your personal records to another person · 絕不向任何其他人展示您的個人記錄。
✕ No facial recognition; we do not analyse the content of your voice recordings, only their energy level · 不進行面部識別；不分析語音內容，僅計算能量值。
✕ We never use what you write to train our own models, and our service providers are contractually barred from training on it · 絕不使用您寫下的內容訓練我們的模型，服務供應商亦受合約禁止用作訓練。
✕ No cross-site tracking cookies · 不使用跨網站追蹤 Cookie。

Age and Younger Users · 年齡及年輕用戶

Mental Fridge is for users aged 13 and above · 精神雪櫃適用於13 歲或以上用戶。
Users under 18 receive exactly the same privacy protection as everyone else. There is no parent or guardian account, and no one — including us — has a way to read a young user’s entries · 未滿 18 歲用戶享有與其他用戶完全相同的私隱保護。本服務沒有家長或監護人帳戶，任何人（包括我們）都沒有途徑查閱年輕用戶的記錄。
If we learn that an account belongs to someone under 13, we delete it and its data · 若我們得悉某帳戶屬於未滿 13 歲人士，將刪除該帳戶及其資料。

Data Storage and Retention · 數據儲存及保存期

All data stored on Supabase, in the Tokyo, Japan region (ap-northeast-1), with database row-level security enforced · 所有資料儲存於 Supabase，位於日本東京區（ap-northeast-1），資料庫強制啟用 row-level security。
Food photos stored in Supabase Storage; bucket RLS restricts you to modifying or deleting only your own sub-folder · 食糧相片儲於 Supabase Storage，bucket 設 RLS：僅可修改或刪除自己的 sub-folder。
Account deletion: upon your request, all personal data is deleted within 30 days · 帳戶刪除：您提出要求後 30 日內刪除所有個人資料。

Third-Party Services · 第三方服務

Supabase (database, auth, storage) — operated by Supabase Inc.; our data is hosted in its Tokyo, Japan region · 由 Supabase Inc. 營運，我們的資料存放於其日本東京區。
Vercel (hosting) — operated by Vercel Inc. · 由 Vercel Inc. 營運。
Google OAuth (if you choose Google sign-in) — we receive only your email and name · 如使用 Google 登入，我們僅取得電郵及姓名。
Anthropic (Claude API)— several features send the text you write to Anthropic’s API so it can generate a personalised response: mental check-up analysis, food recommendations, food exploration questions, the exploration map, BenBen chat, and time capsule messages. Your email, name and account ID are never sent with it. Anthropic processes this as our service provider and does not use it to train its models · 部分功能會將您輸入的文字送至 Anthropic 的 Claude API，以生成個人化回應，包括：精神體檢分析、食糧推薦、食糧探索問題、探索地圖、BenBen 對話、時間囊訊息。不會一併傳送您的電郵、姓名或帳戶 ID。Anthropic 以我們的服務供應商身分處理有關內容，並不會用於訓練其模型。
No other analytics or advertising trackers · 無其他分析或廣告追蹤工具。

Your Rights · 您的權利

Export all your data at any time (CSV / JSON) · 隨時匯出您的全部資料。
Delete your journals, food entries, time capsules, or account at any time · 隨時刪除日記、食糧、時間囊或帳戶。
Correct inaccurate data directly within the app · 於應用程式內直接修正錯誤資料。
Ask us what personal data we hold about you, under the Hong Kong Personal Data (Privacy) Ordinance · 依香港《個人資料（私隱）條例》查詢我們持有您的哪些個人資料。

This policy may be updated. We will notify you by email of material changes. The last updated date is shown at the top of this page. Questions: hello@mentalfridge.com
本政策可能更新。重大變動將以電郵通知。最後更新日期顯示於頁首。查詢：hello@mentalfridge.com