一、我们如何收集和使用个人信息

我们遵循合法、正当、必要和诚信原则，仅为明确、合理的目的处理与功能直接相关的信息。具体以您实际使用的功能为准。

敏感个人信息

当前 App 的常规注册和验布管理功能不要求提供身份证号码、精确定位、通讯录、短信内容或生物识别信息。若未来某项功能确需处理敏感个人信息，我们将说明必要性和对个人权益的影响，并依法取得单独同意。

他人信息

当您邀请企业成员或提交含有他人信息的业务资料时，请确保已取得相关人员授权或具备其他合法处理依据，不要向我们提供与功能无关的信息。

二、系统权限

App 需要联网以完成登录、同步设备状态和获取业务数据。除联网所需的基础能力外，我们仅在您主动使用相关功能时申请必要权限，并由操作系统弹窗征求授权。

我们不会通过权限读取与当前功能无关的内容。您可以在手机系统设置中撤回权限；撤回不影响此前基于授权已经完成的处理。

三、我们如何使用信息

我们会将个人信息用于以下目的：

• 创建和维护账号，完成登录、绑定、验证和会话管理；
• 提供企业、成员、设备、验布结果和报表等功能；
• 发送由您主动触发的短信或邮件验证码；
• 保障服务安全，防范恶意注册、接口滥用和异常登录；
• 响应咨询、投诉、账号申诉和个人信息权利请求；
• 排查故障、改善服务质量，并履行法律法规规定的义务。

如需将信息用于本政策未说明的新目的，我们会依法另行告知并在需要时取得您的同意。我们不会利用您的个人信息进行与 Sinano 服务无关的个性化广告。

四、第三方 SDK、受托处理与外部服务

观帛 App 客户端集成 Google ML Kit 条码扫描 SDK。为完成验证码发送和文件存储，我们的服务器还会使用以下外部基础服务。各服务提供方仅可为下列目的处理必要信息。

Google ML Kit 属于客户端第三方 SDK；阿里云短信、对象存储和邮件发送属于服务端数据处理，不代表 App 集成了对应客户端 SDK。我们会通过权限控制、合同约定和其他合理措施保护信息。Google ML Kit 的具体处理规则、存储地点及可能发生的跨境处理以 Google 的公开政策和实际服务配置为准；如依法需要履行个人信息跨境提供义务，我们将另行告知并取得必要授权。

五、共享、转让与公开披露

我们不会出售您的个人信息。除以下情况外，我们不会向其他个人信息处理者提供您的信息：

• 已取得您的单独同意；
• 为履行您作为一方当事人的合同所必需；
• 按照法律法规、诉讼程序或行政、司法机关依法提出的要求；
• 在合并、分立、重组、资产转让或类似交易中确需转移时，我们将告知接收方信息，并要求其继续履行本政策；
• 为保护您、其他用户或公众的生命健康、财产安全且难以取得同意的紧急情况。

企业管理员可在其授权范围内查看所属企业成员、设备和业务数据。这属于企业协作功能，而非向无关第三方公开。请企业管理员按照内部授权和保密制度使用相关信息。

六、信息存储期限与地点

1. 除本政策第四节披露的 Google ML Kit 可能依据其公开政策和实际服务配置在境外处理必要的应用、设备及诊断信息外，我们原则上在中华人民共和国境内存储境内运营过程中收集的信息。对于实际发生的个人信息跨境提供，我们将依法履行告知、单独同意及其他合规义务。
2. 账号信息在账号存续期间保存；账号注销生效后，我们将删除或匿名化可识别身份的信息，但法律法规另有要求的除外。
3. 短信和邮箱验证码仅在短期内有效。发送记录、安全日志和操作审计记录将在满足安全管理、争议处理和法定义务所需的合理期限内保存。
4. 企业设备、验布结果和生产报表等业务数据按照企业服务期限、企业管理要求及法律规定保存。账号退出企业后，您可能失去访问权限，但不当然导致企业业务数据删除。
5. 超过必要保存期限后，我们将删除信息或进行匿名化处理，法律法规要求继续保存的除外。

七、我们如何保护信息

我们采取访问控制、身份认证、传输保护、密码散列、日志审计、接口限流、备份和员工权限管理等合理措施保护信息，努力防止未经授权的访问、泄露、篡改或丢失。

互联网环境无法保证绝对安全。如发生可能对您权益造成影响的个人信息安全事件，我们将依法采取补救措施，并通过 App 通知、短信、邮件或公告等方式告知事件情况和建议措施。

八、您的个人信息权利

在法律规定范围内，您可以：

• 通过 App 个人资料或账号设置查看、更正用户名、手机号、邮箱、显示名称等信息；
• 通过系统设置撤回相机、相册或文件访问等权限；
• 申请查询、复制、更正、补充或删除您的个人信息；
• 要求解释本政策和个人信息处理规则；
• 注销账号，或通过本政策列明的联系方式提出其他请求；
• 对我们的处理结果进行投诉。

为保障安全，我们可能要求您验证身份。对于重复、超出合理限度、可能侵害他人权益或法律规定无需响应的请求，我们可能依法拒绝并说明理由。

九、账号注销

您可以在 App 的“账号与安全”或“设置”页面，或通过公开的账号删除页面提交注销申请。当前注销设有 7 天冷静期。提交后系统将退出账号；冷静期内重新登录会撤销注销申请。

冷静期届满且注销条件满足后，我们会停用账号，删除或匿名化手机号、邮箱、微信标识、头像等身份信息，并清除有效登录凭证。企业业务数据、依法应保存的审计记录和争议处理材料可能按照企业权限或法定期限继续保存。

十、未成年人个人信息

本服务主要面向企业生产管理人员，不以未成年人为目标用户。未满 18 周岁的用户应在监护人指导下使用。若涉及不满 14 周岁未成年人的个人信息，我们会依法取得监护人同意并采取专门保护措施。

十一、政策更新

我们可能根据法律法规或功能变化更新本政策。发生处理目的、信息类型、共享对象等重大变化时，我们会通过弹窗、页面提示或其他显著方式告知，并在法律要求时重新取得您的同意。

您可以在 App 的“设置”或“关于”页面随时查看当前版本。页面顶部的更新日期和生效日期用于标识政策版本。

十二、联系我们

个人信息处理者：深圳硅纳智慧科技有限公司

注册地址：深圳市福田区福田街道福山社区福华三路与金田路交界处东南侧卓越世纪中心、皇岗商务中心1号楼4704A

个人信息保护联系邮箱：fish@sinano-ai.com

我们目前未设置客服电话。如需咨询、投诉或行使个人信息相关权利，请通过上述邮箱联系我们。

收到请求后，我们会进行身份核验，并在合理期限内答复。对处理结果有异议的，您还可以向履行个人信息保护职责的主管部门投诉。

1. How We Collect and Use Personal Information

We follow the principles of lawfulness, fairness, necessity, and good faith. We process only information directly related to clear and reasonable purposes. The information actually processed depends on the features you use.

Sensitive Personal Information

The App's standard registration and fabric-inspection management features do not require a government identification number, precise location, contacts, SMS content, or biometric information. If a future feature requires sensitive personal information, we will explain why it is necessary and how it may affect your rights, and obtain separate consent as required by law.

Information About Other People

When you invite an enterprise member or submit business material containing another person's information, make sure you have that person's authorization or another lawful basis. Do not provide information unrelated to the feature.

2. System Permissions

The App requires network access to sign you in, synchronize equipment status, and retrieve business data. Apart from basic network capability, we request a permission only when you choose to use the relevant feature, and the operating system will ask for your authorization.

We do not use permissions to read content unrelated to the current feature. You may withdraw permissions in your device settings. Withdrawal does not affect processing already completed on the basis of your prior authorization.

3. How We Use Information

We use personal information to:

• create and maintain accounts and manage sign-in, linking, verification, and sessions;
• provide enterprise, member, equipment, fabric-inspection result, and reporting features;
• send an SMS or email verification code that you request;
• protect the services and prevent abusive registrations, interface misuse, and unusual sign-ins;
• respond to inquiries, complaints, account appeals, and personal-information rights requests; and
• troubleshoot faults, improve service quality, and comply with legal obligations.

If we intend to use information for a new purpose not described in this Policy, we will provide additional notice and obtain your consent where required. We do not use your personal information for personalized advertising unrelated to the Sinano services.

4. Third-Party SDKs, Entrusted Processing, and External Services

The 观帛 App integrates the Google ML Kit Barcode Scanning SDK. Our servers also use the following external infrastructure services to deliver verification codes and store files. Each provider may process necessary information only for the purposes described below.

Google ML Kit is a third-party client SDK. Alibaba Cloud SMS, OSS, and email delivery are server-side processing services and do not mean that the corresponding client SDKs are integrated into the App. We use access controls, contractual terms, and other reasonable safeguards to protect information. Google ML Kit's specific processing rules, storage locations, and possible cross-border processing are governed by Google's published policies and the actual service configuration. Where applicable law requires additional notice or authorization for a cross-border transfer, we will provide that notice and obtain the necessary authorization.

5. Sharing, Transfer, and Public Disclosure

We do not sell your personal information. We do not provide it to another personal-information processor except when:

• we have obtained your separate consent;
• it is necessary to perform a contract to which you are a party;
• applicable law, legal proceedings, or a lawful request from an administrative or judicial authority requires it;
• a merger, division, restructuring, asset transfer, or similar transaction requires a transfer, in which case we will notify you about the recipient and require it to continue complying with this Policy; or
• an emergency makes it necessary to protect the life, health, or property of you, another user, or the public and it is difficult to obtain consent.

An enterprise administrator may view enterprise members, equipment, and business data within the administrator's authority. This is an enterprise-collaboration feature and is not public disclosure to an unrelated third party. Administrators must use the information in accordance with internal authorization and confidentiality requirements.

6. Retention Period and Storage Location

1. As a general rule, information collected during our operations in mainland China is stored in mainland China, except that Google ML Kit may process necessary application, device, and diagnostic information outside mainland China under its published policies and the actual service configuration, as disclosed in Section 4. For any cross-border provision of personal information that actually occurs, we will satisfy applicable notice, separate-consent, and other compliance requirements.
2. Account information is retained while the account remains active. After account deletion takes effect, we delete or anonymize identifying information unless applicable law requires otherwise.
3. SMS and email verification codes remain valid only for a short period. Delivery records, security logs, and operation-audit records are retained for a reasonable period necessary for security management, dispute handling, and legal obligations.
4. Enterprise equipment, fabric-inspection results, production reports, and other business data are retained according to the enterprise service term, enterprise-management requirements, and applicable law. If your account leaves an enterprise, you may lose access, but the enterprise's business data is not necessarily deleted.
5. When the necessary retention period ends, we delete or anonymize information unless applicable law requires continued retention.

7. How We Protect Information

We use reasonable measures such as access controls, identity authentication, transmission protection, password hashing, log audits, interface rate limits, backups, and employee permission management to help prevent unauthorized access, disclosure, alteration, or loss.

No internet environment can be guaranteed absolutely secure. If a personal-information security incident may affect your rights, we will take remedial measures as required by law and notify you of the incident and recommended steps through an App notice, SMS, email, announcement, or another appropriate method.

8. Your Personal Information Rights

To the extent provided by applicable law, you may:

• view or correct your username, phone number, email address, display name, and other information through your App profile or account settings;
• withdraw camera, photo, or file-access permissions through your device settings;
• request access to, a copy of, correction of, supplementation of, or deletion of your personal information;
• request an explanation of this Policy and our personal-information processing rules;
• delete your account or submit another request using the contact details in this Policy; and
• make a complaint about our handling of your request.

To protect account security, we may ask you to verify your identity. We may refuse a request as permitted by law if it is repetitive, exceeds reasonable limits, may infringe another person's rights, or is not subject to a legal response requirement, and we will explain the reason.

9. Account Deletion

You may request account deletion through "Account & Security" or "Settings" in the App, or through the public account-deletion page. The current process includes a seven-day cooling-off period. Submission signs the account out; signing in during the cooling-off period cancels the deletion request.

When the cooling-off period ends and the deletion requirements are met, we disable the account, delete or anonymize identity information such as phone number, email address, WeChat identifiers, and avatar, and revoke active sign-in credentials. Enterprise business data, audit records required by law, and dispute-handling material may continue to be retained according to enterprise permissions or applicable retention periods.

10. Personal Information of Minors

The services are primarily intended for enterprise production-management personnel and are not directed to minors. A user under 18 should use the services under the guidance of a parent or guardian. If we process personal information of a child under 14, we will obtain the guardian's consent and use specialized protective measures as required by law.

11. Policy Updates

We may update this Policy because of changes in law or the services. If a material change concerns a processing purpose, information category, recipient, or similar matter, we will notify you through a pop-up, page notice, or another prominent method and obtain renewed consent where required by law.

You may view the current version at any time in "Settings" or "About" in the App. The last-updated and effective dates at the top identify the Policy version.

12. Contact Us

Personal information processor: Shenzhen Sinano Intelligent Technology Co., Ltd.

Registered address: Room 4704A, Building 1, Excellence Century Center / Huanggang Business Center, southeast of the intersection of Fuhua 3rd Road and Jintian Road, Fushan Community, Futian Subdistrict, Futian District, Shenzhen, China

Privacy contact email: fish@sinano-ai.com

We currently do not provide telephone support. Contact us at the email address above for inquiries, complaints, or requests concerning your personal information rights.

After receiving a request, we will verify your identity and respond within a reasonable period. If you disagree with our response, you may also complain to the competent authority responsible for personal-information protection.

This Policy is drafted in Chinese. The English version is provided for the convenience of non-Chinese readers. If the two versions are inconsistent, the Chinese version controls.