SupWand
生效日期 · Effective July 30, 2026

SupWand 隐私政策

运营主体：深圳市赛杰电子有限公司。本政策说明 SupWand 如何处理与账号、应援棒控制和线上房间有关的信息。

简体中文 English

1. 我们处理的信息

为提供账号和线上房间功能，我们处理手机号码、显示名称、服务端用户 ID、identifierForVendor、用户设置的设备名称、房间名称、成员关系、成员角色、同步状态、房间操作、灯光命令、发送者标识和发送时间。

为提供内容安全能力，我们还会处理用户提交的房间举报类别、处理状态，以及用户主动建立的房主屏蔽关系。服务端/API 预留可选举报说明字段，但当前 iOS 客户端不采集或上传自由文本说明。

正式服务端和代理还会记录粗粒度路由类别、HTTP 方法/状态、请求标识、请求耗时和网络地址，用于安全、可用性、故障排查和性能维护。这些请求日志和监控信息可能与账号或会话关联。

我们不接入广告 SDK，不将这些信息用于广告或跨 App、跨网站跟踪，也不出售个人信息。

2. 蓝牙和应援棒数据

App 在设备本地读取兼容应援棒的蓝牙广播、信号强度、外设名称以及服务和特征 UUID，用于发现、连接和控制。这些扫描数据不上传到当前服务器，并在扫描结束或 App 退出后从运行内存释放。

当用户检查固件更新或完成固件安装时，App 会将已连接应援棒的外设标识及当前或安装后的固件版本发送到当前服务器，用于匹配兼容更新和记录本次安装结果。外设标识与安装版本的映射也保存在本机，用于后续更新判断；当前服务器仅在运行进程内短暂保留安装结果，不将其持久化到数据库。

应援棒昵称、语言和界面设置保存在设备本地，可由用户修改，并通常在卸载 App 时由系统移除。

3. 麦克风和律动功能

用户主动启用声音律动后，App 仅在设备本地实时计算声音强度。原始麦克风音频不上传、不录制、不保存，音频帧处理后即从内存释放。线上同步可能发送派生灯光参数，但不发送原始音频。

4. 信息用途

相关信息仅用于账号认证、会话安全、蓝牙控制、线上房间协作、灯光同步、内容过滤、举报处理、用户屏蔽、服务可用性监控、故障排查、性能维护、安全审计以及响应数据删除请求。

5. 保存和删除

  • 登录凭据保存在 iOS Keychain；服务器仅保存不可直接还原的凭据摘要。
  • 房间灯光事件默认保留 7 天，过期后由清理任务删除。
  • 待处理举报会保留至审核完成；已处理或已驳回的举报最多保留 180 天，用于申诉、安全审计和重复违规判断，之后由清理任务删除。房主屏蔽关系保留至账号删除。
  • 正式请求日志和监控数据按现有运行日志轮转和数据最小化原则保留，不设定或承诺未经运行配置支持的固定保留天数。
  • 用户可在“我的—关于 App—删除账号”中发起删除。二次确认后，全部会话会被撤销，账号个人信息、自有房间、成员关系和屏蔽关系会被删除，其他房间中必须保留的历史发送者和举报身份会被匿名化。
  • 法律义务、争议处理或安全调查所需的信息，可能在必要范围和期限内继续保存。

6. 信息共享和服务提供方

当前版本不向广告商或数据经纪商共享信息。我们使用阿里云承载服务器、数据库备份和短信验证码服务。Apple 可能依据其自身条款处理 App Store 分发、系统权限和设备服务相关信息。

7. 安全措施

我们采用 HTTPS、受保护的设备会话、凭据摘要、管理员角色权限、危险操作二次验证和审计日志等措施。任何系统都无法保证绝对安全；如发现问题，请通过支持中心联系我们。

8. 儿童隐私和适用地区

SupWand 首发面向中国大陆用户，不属于儿童专用产品。未成年人应在监护人阅读并同意本政策及《服务条款》后使用账号和线上功能。我们不投放基于年龄的广告，也不主动要求年龄、学校或监护人信息。

9. 政策更新

如数据用途、保留期、服务提供方或产品功能发生实质变化，我们会更新本政策和生效日期，并在法律要求时提供额外通知或征得同意。

10. 联系我们

SupWand Privacy Policy

Operator: Shenzhen Sunjet Electronic Co., Ltd. This policy explains how SupWand processes information for accounts, lightstick control, and online rooms.

1. Information We Process

To provide account and online-room features, we process phone number, display name, server user ID, identifierForVendor, user-assigned device name, room names, memberships, roles, sync state, room actions, lighting commands, sender identifiers, and timestamps.

For content-safety features, we also process room-report categories, review status, and room-owner block relationships created by users. The server/API reserves an optional report-details field, but the current iOS client does not collect or upload free-text report details.

Production servers and proxies also record coarse route categories, HTTP methods and status codes, request identifiers, request duration, and network addresses for security, availability, troubleshooting, and performance maintenance. This request-log and monitoring information may be linked to an account or session.

We do not integrate advertising SDKs, use this information for advertising or cross-app or cross-website tracking, or sell personal information.

2. Bluetooth and Lightstick Data

The app locally reads Bluetooth advertisements, signal strength, peripheral names, and service and characteristic UUIDs from compatible lightsticks for discovery, connection, and control. This scan data is not uploaded to the current server and is released from memory after scanning ends or the app exits.

When the user checks for a firmware update or completes a firmware installation, the app sends the connected lightstick's peripheral identifier and current or installed firmware version to the current server to match a compatible update and record that installation result. The identifier-to-installed-version mapping is also stored locally for later update decisions. The current server keeps the installation result only in process memory and does not persist it to the database.

Lightstick nicknames, language, and interface settings are stored locally, can be changed by the user, and are normally removed by the operating system when the app is uninstalled.

3. Microphone and Rhythm Features

When the user activates sound rhythm, the app calculates sound intensity locally in real time. Raw microphone audio is not uploaded, recorded, or saved, and audio frames are released after processing. Online sync may send derived lighting parameters but never raw audio.

4. How We Use Information

We use this information only for authentication, session security, Bluetooth control, online-room collaboration, lighting synchronization, content filtering, report handling, user blocking, service-availability monitoring, troubleshooting, performance maintenance, security auditing, and responding to deletion requests.

5. Retention and Deletion

  • Sign-in credentials are stored in iOS Keychain; the server stores only non-reversible credential digests.
  • Room lighting events are retained for 7 days by default and then removed by a retention task.
  • Pending reports are retained until review is complete. Resolved or dismissed reports are retained for no more than 180 days for appeals, security auditing, and repeat-abuse assessment and are then removed by a cleanup task. Room-owner block relationships remain until account deletion.
  • Production request logs and monitoring data are retained under existing runtime-log rotation and data-minimization practices. We do not state or promise a fixed retention period that is not supported by the operating configuration.
  • Users can request deletion from My — About App — Delete Account. After secondary confirmation, all sessions are revoked, account personal information, owned rooms, memberships, and block relationships are deleted, and sender and report identities in historical records that must remain are anonymized.
  • Information required for legal obligations, disputes, or security investigations may be retained only as necessary.

6. Sharing and Service Providers

We do not share information with advertisers or data brokers. We use Alibaba Cloud for hosting, database backups, and SMS verification. Apple may process App Store distribution, system-permission, and device-service information under its own terms.

7. Security

We use HTTPS, protected device sessions, credential digests, role-based administration, reauthentication for dangerous operations, and audit logs. No system can guarantee absolute security; contact support if you discover an issue.

8. Children and Regions

SupWand initially serves mainland China and is not designed specifically for children. Minors should use account and online features only after a parent or guardian reviews and agrees to this policy and the Terms of Service. We do not serve age-based advertising or request age, school, or guardian details.

9. Policy Changes

If data uses, retention, providers, or product functionality change materially, we will update this policy and its effective date and provide any notice or consent required by law.

10. Contact Us