FAMILYCAL · PRIVACY
同日-家庭日历 · 隐私政策
运营者：Jing Wu
生效及更新日期：2026 年 10 月 19 日
联系邮箱：race604@gmail.com
同日 FamilyCal 帮助家庭共享日历、记录事项与交流安排。本政策说明我们如何处理信息，以及你可以作出的选择。
1. 我们处理哪些信息
账号信息包括注册邮箱、账号标识，以及使用 Apple 登录时 Apple 提供的标识、可用的姓名与邮箱（可使用隐藏邮箱）。家庭资料包括家庭名称、成员称呼、角色、由成人管理的儿童档案和主动填写的生日等信息；儿童档案无需独立登录或儿童邮箱。
你保存的内容包括日程名称、时间、手动输入的地点、参加或帮忙家人、备注、重复规则、学校通知、生日纪念日、随手记、家庭留言、文字消息、已读/知晓记录，以及举报和屏蔽记录。你也可以选择保存就医详情，例如医院、医生、备注和准备清单，并明确指定授权范围。请只提交你有权处理、确有需要的信息。
认证、邮件及基础设施提供商处理服务请求时也可能接收网络地址、请求时间、错误与安全诊断信息，用于运行服务、排查问题和防止滥用。联系支持时，我们会收到你提供的邮件及附件。
当前客户端不申请通讯录、设备定位、照片、相机或麦克风权限；日程地点由你手动填写。我们未接入广告或跨应用追踪 SDK，不将这些信息用于广告追踪。
2. 用途、家庭共享与服务提供商
我们使用信息提供登录、保存和同步、家庭协作、权限控制、交流安全、客户支持和本机提醒。普通内容会向同一家庭成员展示；医疗详情、受限来源及派生内容按明确授权展示，管理员身份不绕过这些权限。请私下分享邀请码，在填写他人信息前获得相应授权。
我们使用 Supabase 提供账号与业务数据存储（当前数据库项目位于新加坡），Resend 投递账号邮件，Apple 提供你选择的 Apple 登录，Cloudflare Pages 托管网页；可选文字助手使用 DeepSeek。数据可能在你所在国家或地区以外处理，各提供商的基础设施和安全日志也可能在不同地点处理。数据库所在地区不代表全部处理都只在该地区完成。
我们仅为提供服务、安全、履行法律义务或处理你的请求而使用、向必要服务提供商披露信息；也会按你选择的家庭授权共享内容。我们不出售你的个人信息。
3. 可选 AI 文字助手
首次真实发送前，应用会说明接收方 DeepSeek、数据范围和用途，并征求明确同意。许可限当前登录和家庭会话。拒绝不发送模型请求，普通日历功能可继续使用。
同意后，你输入的消息、同一助手会话的上下文，以及完成查询或生成草稿所需的家人称呼、成员标识和普通日程字段可能发送至 DeepSeek。自动查询会排除已识别的就医和明确受限记录及受限来源；你手动输入的消息仍可能包含敏感信息。请勿输入不希望发送给模型服务的内容。
在「家庭 → AI 数据分享」或助手盾牌入口可撤回、重新授权。撤回会取消在途请求、清空本机助手上下文和未保存草稿，丢弃旧结果；已经发送的数据无法通过本机撤回收回。模型服务对已接收数据的处理受其服务政策及适用法律约束；我们不承诺其零保留或不用于训练。如需相关访问或删除协助，请联系运营者。
助手不会自动扫描家庭聊天，不提供 OCR。AI 可能出错，新增或修改必须由你检查并明确保存后才写入日历。
4. 存储、保留与安全
业务内容为提供服务保留，直到你删除内容、删除账号或不再需要提供相应服务；必要的安全、支持或法律记录按处理目的及适用法律保留。我们采取身份验证、传输加密和服务端访问控制等措施，但任何系统都不能保证绝对安全。
设备保存登录会话和按账号、环境、家庭隔离的近期快照。业务快照以最后成功同步时间为准保留最多 7 天；退出登录或应用确认权限失效时会清理相关缓存。服务提供商日志、备份及系统备份可能在各自清理周期内暂时保留，删除在线数据不表示所有历史备份立即清除；恢复备份时应继续执行已提出的删除。我们不承诺未经验证的固定备份清除天数。
通知需逐设备授权，按最近成功同步的数据安排本机提醒；就医和受限内容使用通用文案。离线设备无法立即知道另一设备上的改期、取消或撤权，联网重新打开应用后才更新。
5. 你的选择与删除账号
你可编辑、删除本人有权限管理的内容，选择敏感详情的访问范围，撤回 AI 分享同意，或在系统设置关闭通知。你也可通过下方邮箱请求访问、更正、删除个人信息或提出隐私问题；我们会按需核实身份并依法处理。
账号删除入口为「家庭 → 我的家庭与账号 → 删除账号」，未加入家庭时引导页也有入口。应用会逐家庭说明影响，要求再次核验密码；关联 Apple 的账号须在 iPhone/iPad 以原 Apple 身份重新验证，由服务端撤销本应用 Apple 授权。唯一管理员需明确选择接任成人。
删除会移除账号、本人成员资料、本人内容及个人审计记录。有其他成人的家庭保留其他人的资料与内容；无其他成人的家庭连同儿童档案和内容一并删除。为保留其他家人的内容与原有权限，系统只保留无身份成员标记、无正文来源节点及固定对话的匿名结构。其他人手动填写或复制的文字不会自动改写。
删除后本机退出并清理缓存与提醒；离线设备重新联网打开后更新。处理响应丢失的随机回执在完成后去除账号关联和交接信息，只保留匿名随机摘要及技术时间。退出登录或卸载不等于删除账号。删除不可恢复，请先阅读应用中的完整影响说明。
6. 儿童资料、交流安全及政策更新
本产品面向管理家庭安排的成人，不是供儿童独立注册使用的儿童应用。成人应有权填写儿童资料，并只提供所需信息。发现未经授权的儿童资料可联系我们处理。
你可举报留言或消息、屏蔽发送者，并在「家庭 → 家庭交流安全」联系支持。举报不扩大管理员对受限内容的权限；屏蔽不隐藏共享日程和分工。运营者 Jing Wu 通过支持邮箱接收并处理安全反馈。
我们会在本页更新政策并注明日期。对数据处理的重要变化，会按需要在应用中告知或重新征求同意。
FAMILYCAL · PRIVACY
FamilyCal Privacy Policy
Operator: Jing Wu
Effective and updated: October 19, 2026
Contact: race604@gmail.com
FamilyCal helps families share calendars, capture notes and discuss plans. This policy explains how we process information and the choices available to you.
1. Information we process
Account information includes email and account identifiers, plus the identifier and available name/email provided by Sign in with Apple, including a private relay address if you choose it. Family profiles include family names, member names, roles, adult-managed child profiles and optional birthdays. Child profiles do not require a separate login or child email.
Your content includes event titles, times, manually entered places, participants, helpers, notes, repeat rules, school notices, birthdays, Inbox items, board posts, messages, read acknowledgements, reports and blocks. You may optionally enter medical appointment details, including hospital, doctor, notes and preparation lists, and explicitly choose access. Only submit information you are entitled to process and need to store.
Authentication, email and infrastructure providers may receive network addresses, request times, errors and security diagnostics to operate the service, investigate issues and prevent abuse. Support emails and attachments contain whatever you choose to send.
Current clients do not request access to contacts, device location, photos, camera or microphone. Places are typed manually. We have no advertising or cross-app tracking SDK and do not use this information for advertising tracking.
2. Purposes, family sharing and providers
We use information for authentication, storage, synchronization, collaboration, access controls, communication safety, support and local reminders. Ordinary content is visible within the family. Medical details, restricted sources and derived content follow explicit access permissions; being an administrator does not bypass them. Share invitation codes privately and obtain appropriate authorization before entering another person's information.
Providers include Supabase for authentication and business data (the current database project is in Singapore), Resend for account emails, Apple for optional Apple sign-in, Cloudflare Pages for web hosting, and DeepSeek for the optional assistant. Processing may occur outside your country or region, and provider infrastructure and logs may be handled in other locations. The database location does not mean all processing takes place there.
We disclose information to necessary providers for the service, security, legal obligations or your requests, and to family members under your sharing choices. We do not sell personal information.
3. Optional AI assistant
Before the first real request, the app explains DeepSeek as the recipient, the data and its purpose, and asks for explicit permission limited to the current login and family session. Declining sends no model request and leaves ordinary calendar features available.
With permission, your messages, assistant conversation context, and relevant member names/identifiers and ordinary event fields may be sent to DeepSeek for queries and drafts. Automatic lookups exclude recognized medical and restricted records and restricted sources. Your own messages can still contain sensitive information. Do not enter anything you do not want transmitted.
Withdraw or renew permission in Family → AI data sharing or the assistant shield menu. Withdrawal cancels pending requests, clears local context and unsaved drafts, and discards old results. Information already sent cannot be recalled from your device. The provider handles received data under its policies and applicable law; we do not promise zero retention or exclusion from model training. Contact the operator for help with related access or deletion requests.
The assistant does not automatically scan family chats or provide OCR. AI can make mistakes. Review and explicitly save any proposed calendar addition or change.
4. Storage, retention and security
Business content is kept to provide the service until you delete it, delete your account or it is no longer needed for the service. Necessary security, support or legal records are kept for their purposes and applicable legal requirements. We use authentication, encryption in transit and server access controls; no system can guarantee absolute security.
The device stores sessions and recent snapshots isolated by account, environment and family. Business snapshots expire seven days after the last successful sync and are cleared on sign-out or a known loss of access. Provider logs, backups and system backups may remain temporarily within their respective cleanup cycles. Removing online data does not instantly erase every historical backup; deletion requests should continue to be honored after restoration. We do not promise an unverified fixed backup-erasure period.
Reminders require permission on each device and use the last synchronized data. Medical and restricted reminders use generic text. Reopen the device online after changes on another device to update cancellations, times or permissions.
5. Your choices and account deletion
Edit or delete content you are authorized to manage, choose sensitive-detail access, withdraw AI permission or disable notifications in system settings. Contact us to request access, correction or deletion of personal information or raise a privacy concern. We may verify your identity and respond under applicable law.
Open Family → My families & account → Delete account, also available before joining a family. The app explains the impact on each family and verifies your password again. Linked Apple accounts require fresh verification with the original Apple identity on iPhone/iPad, followed by server-side revocation of this app's Apple authorization. A sole administrator must choose an adult successor.
Deletion removes your account, member profile, authored content and personal audit records. Families with other adults retain other people's information and content; families with no other adults are deleted with their child profiles and contents. Anonymous member markers, source nodes without body text and fixed conversation structures preserve other people's content and original restrictions. Text manually written or copied by others is not automatically rewritten.
This device signs out and clears snapshots and reminders. Offline devices update when reopened online. On completion, random retry receipts lose account associations and handover details, retaining only an anonymous random digest and technical time. Signing out or uninstalling is not account deletion. Deletion is irreversible; read the full in-app impact summary first.
6. Children, safety and changes
The service is for adults managing family plans, not for independent child registration. Adults must be entitled to enter child profiles and should minimize the information provided. Contact us about unauthorized child information.
Report notes or messages, block authors and contact support in Family → Family communication safety. Reporting never widens access to restricted content. Blocking does not hide shared events or assignments. Jing Wu receives and handles safety reports through the support email.
Updates appear on this page with a date. Material changes will be communicated in the app or require renewed permission where appropriate.