Miyang Privacy Policy
米羊科技（上海）有限公司 (hereinafter "Miyang" or "we") understands the importance of personal information to you. We will strictly comply with the Personal Information Protection Law of the People's Republic of China (《中华人民共和国个人信息保护法》), the Cybersecurity Law of the People's Republic of China (《中华人民共和国网络安全法》), the Data Security Law of the People's Republic of China (《中华人民共和国数据安全法》), and other laws and regulations, and take reasonable measures to protect the security of your personal information. Please read this Privacy Policy carefully before using this service.
The legal bases on which we process your personal information mainly include: (1) obtaining your consent (Article 13, paragraph 1 of the Personal Information Protection Law (《个人信息保护法》)); (2) necessity for concluding or performing a contract to which you are a party (Article 13, paragraph 2); (3) necessity for performing statutory duties or statutory obligations (Article 13, paragraph 3).
This Policy covers the following:
I. What Information We Collect
We collect only the minimum information necessary to provide the service, as follows:
1.1 Information You Provide
| Scenario | Information collected | Required? | Purpose |
|---|---|---|---|
| Register / sign in | Email address | Required | Create an account, receive a verification code, and authenticate identity |
| Register an account | Nickname | Optional | Personalized display; not providing it does not affect core features |
| Link a third-party account (such as Watcha) | Unique identifier, nickname, and avatar from the third-party platform | Optional | Link after sign-in in the user center, for account association |
| Edit profile | Nickname, avatar URL | Optional | Update your profile |
Information marked "Required" is needed to provide core services. If you refuse to provide it, you will not be able to complete registration or sign-in. Information marked "Optional" does not affect basic use of the service.
1.2 Information Collected Automatically While the Service Runs
| Type of information | Description |
|---|---|
| Device information | Device ID, device name, operating-system platform, and CPU architecture reported when a client (such as Alice) is linked |
| Access logs | Sign-in time, last active time, and client IP (used for verification-code checks and security protection; raw IPs are not stored long-term) |
| Session information | Access Token and Refresh Token, used to maintain the signed-in state |
1.3 Email Verification Code
When you register or sign in, we send a 6-digit verification code to the email address you provide, to verify that you control that email. The code is valid for 5 minutes and expires after use. We send mail through Tencent Exmail SMTP. The message contains only the verification code and no other personal information.
1.4 CAPTCHA
Before sending a verification code, we use Tencent Cloud Captcha (Tianyu) for CAPTCHA verification. During this process, your client IP and verification-behavior data are sent to Tencent Cloud for validation. See Tencent Cloud's privacy policy for the specific rules. We ourselves do not store raw captcha ticket data.
1.5 Alice Client Usage Statistics
While running, the Alice client automatically reports the following usage statistics for product improvement and service-quality monitoring:
- How often each feature is used and how long you stay on it
- Model call counts and Token consumption
- Error logs (de-identified; they do not include conversation content)
- Device information (operating system, CPU architecture, screen resolution)
The above data does not include your conversation content, and is used only to understand feature usage and stability.
1.6 De-identified Profile Tags (Requires Your Consent)
The Alice client can extract abstract category tags from conversations (such as occupation category and usage preferences) to help us improve later versions. This feature has the following characteristics:
- Enabled only after you give express consent on first use; off by default
- Only abstract category tags are reported; they do not include conversation text, names, company names, or other identifiable information
- You may turn it off at any time in the Alice client under Settings → Privacy & Data; reporting stops immediately after you turn it off
II. How We Use Information
We use the information we collect for the following purposes:
- Providing the service: account creation, identity authentication, maintaining the signed-in state, and device management;
- Security protection: identifying abnormal sign-ins, preventing malicious registration, and CAPTCHA;
- Service improvement: statistical analysis (not including data that can identify an individual);
- Legal compliance: responding to requirements of laws and regulations.
We will not use your personal information for purposes unrelated to providing the service, and we do not deliver targeted advertising. After you give express consent, we may use de-identified abstract tags (such as occupation category and usage preferences) to improve products and services. You may turn this feature off at any time in the client settings.
III. Sharing and Provision of Information to Others
We will not sell your personal information to third parties.The following circumstances are excepted:
- With your express authorization: for example, sharing your account information via OAuth with a third-party application you actively authorize (such as the Alice client);
- Necessary for service operations: when we integrate Tencent Cloud's captcha service, necessary information is transmitted to Tencent Cloud;
- Legal requirements: disclosure as required by laws and regulations or by government authorities;
- Corporate change: if Miyang undergoes a merger, acquisition, or similar event, personal information will be transferred together with the business, and we will give advance notice.
IV. Storage and Security of Information
4.1 Place and Period of Storage
Your personal information is stored on servers in the People's Republic of China and is not transferred across borders. We retain relevant information while you use this service; after account cancellation, we will, within 30 calendar days complete the deletion or anonymization of personal information. Where laws and regulations specify a different retention period (for example, logs must be kept for no less than six months), those rules prevail.
4.2 Security Measures
- Passwords are stored encrypted with the bcrypt algorithm; we cannot obtain your password in plaintext;
- Session tokens are signed with JWT (HS256), and validity is checked on the server;
- Communication between the server and the client uses HTTPS/TLS encryption;
- We conduct security reviews and dependency updates on a regular basis.
Despite the measures above, no system on the internet is absolutely secure. If a data-security incident occurs, we will notify you promptly as required by law.
V. Your Rights
Under applicable law, you have the following rights in respect of personal information:
- Access: After signing in, you can view your account information in the User Center;
- Correction: In the User Center you can change your nickname and avatar;
- Deletion: Apply to cancel your account, and data under the account will be deleted;
- Withdraw authorization: In the User Center you can unlink a third-party account or unlink a device;
- Obtain a copy: If you need to export personal data, please contact us.
- Turn off data reporting: In the Alice client under Settings → Privacy & Data, you may turn off reporting of de-identified profile tags at any time.
To exercise the above rights or if you have any privacy-related questions, please contact us using the details at the end of this Policy. We will reply within 15 business days.
VI. Protection of Minors
This service is intended primarily for adult users. Children under 14 must use this service under a guardian's supervision, and registration is deemed to mean the guardian has agreed to this Policy.
If you discover that we have collected a child's personal information without knowledge, please contact us immediately and we will delete it promptly.
VII. Updates to This Policy
We may update this Policy in light of business adjustments or legal requirements. After an update, the new version date will be shown on this page. For material changes, we will give advance notice by email or in-product notice.Your continued use of this service after an update is deemed agreement to the updated Policy.If you do not agree to the updated Policy, you have the right to stop using this service and contact us to cancel your account.
VIII. Contact Us
If you have any questions, comments, or complaints about this Privacy Policy, please contact:
- Email: connect@miyang.ai
- Website: https://miyang.cn
Our privacy contact will reply to your request within 15 business days.