Privacy Notice (draft)
Draft · to be confirmed once the hosting region is decided. Lists only data the site actually collects and uses.
What we collect
Sign-in: phone number or email address, a hash of the code (no plain code stored), a hash of the request IP (rate limiting only, no plain IP), session token hashes.
Training: plans, sessions, sets and favourites you enter; private by default.
Phone numbers are used only to deliver sign-in codes via the SMS provider (Aliyun SMS); no ID documents or payment data; no third-party ads or behavioural tracking.
AI features
When plan matching, weekly-report explanation or poster copy call an external text model, only de-identified data is sent (equipment, time, weekly numbers) — never email, display name or raw logs.
AI output is labelled with its source and "not human-reviewed" status; changes to your training need your confirmation.
Export and deletion
You may request an export of your training data or deletion of your account; deletion removes your training records. Staff bylines follow the content rules.
During development, request via the site contact channel; the formal process is published once the region is set.
Development stage
The site is not publicly launched; data lives in a project-specific database and runtime secrets are injected by the deployment, never written into code or docs.
This notice will change version with the hosting region and final text.