隐私政策
最后更新：2026 年 7 月 20 日 · 生效地：新加坡（PDPA）
1. 我们是谁
故知（Guzhi）是一款正在测试中的社交产品，由邹泽仁在新加坡运营。本政策解释我们收集哪些信息、怎么用、跟谁分享、你拥有哪些权利。
如你对个人数据有任何疑问，可发信到 hello@guzhi.app（数据保护联系人）。
2. 我们收集什么
- 联系方式：邮箱、可选的其他联系渠道（Telegram、微信、Instagram 等由你填写）。
- 你写下的内容："最近一直在想的事"、爱听的歌、读过的文章、日常吐槽、边界偏好、约会偏好等你在报名表和站内主动填写的自由文本。
- 结构化偏好：年龄段、在新加坡的身份、想认识的关系类型、时间偏好等选择项。
- 技术信息：提交时的 IP 地址（用于反滥用）、浏览器语言。
- 互动信息：你对匹配对象的反馈（喜欢 / 不合适 / 举报）、你查看的内容。
我们不要求身份证、生物特征、精确地理位置或支付信息（如未来引入付费功能，我们会另行披露并使用第三方支付服务商如 Stripe）。
3. 我们怎么用
- 匹配：基于你写下的内容抽取知识图谱，与其他用户做确定性比对，计算共鸣度。匹配算法本身不调用大型语言模型。
- 预演对话：对高共鸣的候选对，我们用大型语言模型（Anthropic Claude）在后台生成"如果你们见面可能怎么聊"的文本，帮助我们判断是否值得推荐见面。
- 通知：发匹配结果、见面建议、产品更新到你的邮箱。
- 安全与运营：反滥用、频率限制、举报审核、人工边界确认。
我们不会：把你的个人内容用作广告投放；把你的匹配结果或写下的内容公开展示；卖给第三方。
4. 谁能看到
- 其他用户：只有当双方达到匹配阈值并且你选择接受见面后，对方才能看到你的显示名和你主动允许分享的联系方式。你写下的原始文本对其他用户不可见。
- 我们（运营方）：为做人工边界审核，运营人员可查看你的报名内容和匹配摘要。承诺不作第二用途、不外传。
- 数据处理方（Data Processors）：
- Supabase（数据库托管，服务器地区视 Supabase 项目设置而定）
- Anthropic（Claude 大模型，用于抽取和预演，位于美国；输入不用于其模型训练）
- Vercel（网站与函数托管）
- 未来可能引入的邮件服务商（如 Resend）与支付服务商（如 Stripe），届时更新本政策
5. 跨境传输
上述数据处理方可能位于新加坡之外。我们只与承诺提供不低于新加坡 PDPA 要求的保护标准的处理方合作。你提交即表示同意此类跨境传输。
6. 保留多久
报名信息保留至你请求删除，或账号连续 24 个月未活跃后自动清理，以先到者为准。安全日志（IP、提交时间）保留 90 天。已完成的匹配摘要保留 12 个月以做算法改进。
7. 你的权利（PDPA）
- 访问：索取我们持有的你的所有数据副本。
- 更正：修改错误的信息。
- 撤回同意 / 删除：要求删除你的账户与相关数据。
- 投诉：如认为我们处理不当，可向新加坡个人数据保护委员会（PDPC）投诉。
自助入口：/my-data（下载或永久删除你的数据）。也可发信到 hello@guzhi.app，我们在 30 天内响应。
8. Cookie 与本地存储
我们只在必要范围内使用浏览器 localStorage（保存语言偏好、私密入口链接等）。不使用第三方追踪 Cookie，不接入 Google Analytics 或类似服务。
9. 儿童
本服务仅面向 18 岁及以上人士。我们不故意收集未成年人数据。如你发现有未成年账号，请告知我们立即删除。
10. 变更
本政策如有实质性变更，我们会通过邮件通知已注册用户，并在页面顶部更新"最后更新"日期。
配套阅读：服务条款 · 回到首页
Privacy Policy
Last updated: 20 July 2026 · Governing law: Singapore (PDPA)
1. Who we are
Guzhi is a social product in testing, operated in Singapore by Zou Zeren. This policy explains what we collect, how we use it, who we share with, and your rights.
Contact our data protection contact at hello@guzhi.app.
2. What we collect
- Contact: email; optional platform handle (Telegram, WeChat, Instagram etc.) if you provide one.
- Free text you write: "what's on your mind", music, articles, daily notes, boundaries, dating preferences, and other free-text answers you submit.
- Structured preferences: age band, Singapore status, relationship intent, availability, and other selections.
- Technical: submission-time IP address (for abuse prevention), browser language.
- Interaction: your reactions to matches (like / not for me / report), pages you view.
We do not request national ID, biometrics, precise geolocation, or payment information (should paid features launch, we will use a third-party processor such as Stripe and update this policy).
3. How we use it
- Matching: we extract a knowledge graph from your free text and run a deterministic comparison against other users. The matching algorithm itself does not call any large language model.
- Rehearsing conversation: for high-affinity candidate pairs, we use Anthropic Claude to generate a "what your conversation could look like" text, to judge whether to recommend meeting.
- Notifications: emailing match results, meeting suggestions, and product updates.
- Safety & operations: abuse prevention, rate limiting, human review of reports and boundary checks.
We do not: use your personal content for advertising; publicly display your matches or free text; sell to third parties.
4. Who sees it
- Other users: only after both sides pass matching thresholds and you choose to accept a meeting can the other person see your display name and any handle you elected to share. Your raw free text is never shown to other users.
- Us (operator): operators may read your submission and match summaries for human boundary review. No secondary use, no external disclosure.
- Data processors:
- Supabase (database hosting; region per project settings)
- Anthropic (Claude LLM for extraction & rehearsal; US-based; inputs are not used for model training)
- Vercel (site & function hosting)
- Future email provider (e.g. Resend) and payment processor (e.g. Stripe) will be added to this policy when introduced.
5. Cross-border transfer
Processors above may sit outside Singapore. We only work with processors that commit to protection standards no lower than Singapore's PDPA requires. By submitting, you consent to such transfers.
6. Retention
Registration data is kept until you request deletion, or 24 months of continuous inactivity, whichever comes first. Security logs (IP, timestamps) are kept 90 days. Completed match summaries are kept 12 months for algorithm improvement.
7. Your rights (PDPA)
- Access: request a copy of the data we hold about you.
- Correction: fix incorrect information.
- Withdrawal / deletion: ask us to delete your account and related data.
- Complaint: lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore.
Self-serve: /my-data (download or permanently delete). Or email hello@guzhi.app; we respond within 30 days.
8. Cookies & local storage
We use browser localStorage only where necessary (language preference, private-entry link). No third-party tracking cookies, no Google Analytics or equivalent.
9. Children
This service is for users 18 and older. We do not knowingly collect data from minors; notify us and we will delete.
10. Changes
Material changes are announced by email to registered users and reflected in the "Last updated" date at the top.
See also: Terms of Service · Back to home