隐私协议Privacy Policy

1概述Overview

本隐私协议说明成都图样图森科技有限公司（“我们”）在你使用手指鼓 FingerDrum（“本 App”）时如何处理信息。不同功能的数据流不同；是否登录、设备平台、云同步状态以及你是否启动 AI 分析都会影响处理范围。This Privacy Policy explains how Chengdu Tuyang Tusen Technology Co., Ltd. ("we", "us") processes information when you use FingerDrum (the "App"). Data flows vary by feature: signing in, your platform, cloud-sync status, and whether you start AI analysis all affect what is processed.

2我们处理的数据Data we process

• 账号与登录：邮箱、昵称、邮箱验证状态、密码哈希，或 Apple / Google 登录标识与令牌；会话记录可包含 IP 地址、User-Agent 与时间戳。无需登录即可使用部分本地功能，但账号是 AI 分析和账号绑定权益所必需的。Account and sign-in: email, display name, verification status, password hash, or Apple / Google identifiers and tokens. Session records may include IP address, User-Agent, and timestamps. Some local features work without signing in, but an account is required for AI analysis and account-bound entitlements.
• 购买与权益：商品 ID、平台、交易引用、到期与续订状态以及商店验证所需的收据/令牌。我们不接收你的银行卡或商店支付密码。Purchases and entitlements: product ID, platform, transaction reference, expiry and renewal status, plus receipts or tokens needed for store verification. We do not receive your card number or app-store payment password.
• 诊断、使用与服务日志：正式版本启用 Firebase Analytics 与 Crashlytics，可能处理安装标识符、页面/功能使用、设备与系统信息、App 版本、崩溃堆栈和性能信息。后端服务也可能记录 IP、请求路径、时间、User-Agent、任务状态及错误信息。Diagnostics, usage, and service logs: release builds enable Firebase Analytics and Crashlytics, which may process installation identifiers, screen or feature usage, device and OS information, App version, crash stacks, and performance information. Backend services may also log IP address, request path, time, User-Agent, job state, and errors.
• 支持邮件：当你联系我们时，我们会处理你的邮箱地址、邮件内容及为解决问题而提供的附件。Support email: when you contact us, we process your email address, message, and any attachments you provide to resolve the issue.

3创作数据、本地存储与云同步Creative data, local storage & sync

• 普通歌曲导入：你从系统文件选择器导入的背景歌曲会复制到本 App 的本地目录。除非你随后对该歌曲启动 AI 分析，否则这份歌曲不会由 FingerDrum 后端上传。Ordinary song import: a backing song selected through the system file picker is copied into the App's local storage. FingerDrum does not upload that song to our backend unless you later start AI analysis for it.
• 本地工程与生成结果：循环、音序事件、普通导入歌曲、AI 下载回来的三条音轨以及生成鼓谱保存在设备的 App 目录中。移除歌曲、删除工程、清除 App 数据或卸载 App 的影响取决于具体平台和是否已同步到云端。Local projects and generated results: loops, sequencer events, ordinary imported songs, the three AI stems downloaded by the App, and generated drum charts are stored in the App's device directories. The effect of removing a song, deleting a project, clearing App data, or uninstalling depends on the platform and whether data was synced.
• iCloud（iOS）：当设备可用 iCloud 容器时，工程 JSON、布局、设置以及导入或麦克风录制的自定义 pad 采样可写入你的 iCloud Documents。相关数据由 Apple 按你的 iCloud 设置处理，卸载 App 不保证删除 iCloud 副本。iCloud (iOS): when an iCloud container is available, project JSON, layouts, settings, and custom pad samples imported or recorded through the microphone may be written to your iCloud Documents. Apple processes that data under your iCloud settings; uninstalling the App does not guarantee deletion of the iCloud copy.
• Google Drive（Android）：只有在你主动授权后，工程 JSON 才会同步到 Google Drive 的私有 appDataFolder。工程可包含名称、BPM、演奏/音序事件、布局和本地音频文件名引用，但该同步不会上传歌曲或 stem 音频字节。Google Drive (Android): project JSON syncs to the private Google Drive appDataFolder only after you grant access. A project may include its name, BPM, performance or sequencer events, layout, and local audio filenames, but this sync does not upload song or stem audio bytes.

4AI 分析数据流AI analysis data flow

AI 分析需要登录。点击“确认开始分析”后，本 App 会读取并上传你选择的整首音频（包括原文件名）。Cloudflare Workers 接收请求并把源音频存入 Cloudflare R2，再向 RunPod Serverless 提交不可猜测的源文件地址。RunPod 使用分轨与鼓点转录模型生成鼓、人声、bass、other、伴奏等处理文件，以及 BPM 和鼓谱数据；本 App 下载并使用人声、鼓、伴奏三轨与鼓谱草案。AI analysis requires sign-in. After you tap “Start analysis,” the App reads and uploads the full selected audio file, including its original filename. Cloudflare Workers receives the request and stores the source in Cloudflare R2, then submits an unguessable source URL to RunPod Serverless. RunPod uses stem-separation and drum-transcription models to create processed drum, vocal, bass, other, and accompaniment files plus BPM and drum-chart data. The App downloads and uses the vocal, drum, and accompaniment stems and a drum-chart draft.

5服务商与第三方Processors & third parties

• Cloudflare：Workers、D1、KV、R2 与可观测性，用于 API、账号数据库、限流、AI 文件存储及服务日志。Cloudflare: Workers, D1, KV, R2, and observability for APIs, the account database, rate limiting, AI file storage, and service logs.
• RunPod：为 AI 分轨、BPM 检测与鼓谱草案提供 GPU 算力。RunPod: GPU processing for AI stem separation, BPM detection, and drum-chart drafts.
• Google Firebase：Analytics 与 Crashlytics，用于使用分析、崩溃与稳定性诊断。详见 Firebase 隐私与安全说明。Google Firebase: Analytics and Crashlytics for usage analysis, crash reporting, and stability diagnostics. See Firebase Privacy and Security.
• Apple 与 Google：Apple / Google 登录、iCloud、Google Drive、App Store / Google Play 购买与验证，分别受其政策和你的账号设置约束。Apple and Google: Apple / Google sign-in, iCloud, Google Drive, and App Store / Google Play purchases and verification, each governed by its policies and your account settings.
• Resend：代表我们发送邮箱验证和密码重置邮件。Resend: sends account verification and password-reset emails for us.

6用途、共享与跨境处理Purposes, sharing & international processing

我们处理数据用于提供你请求的功能、验证账号与购买、同步工程、完成 AI 分析、保障安全、排查故障、响应支持请求以及遵守法律。我们不会出售你的个人信息，也不会用你的歌曲进行广告定向。我们仅向上述服务商、你选择的平台提供方，或依法有权的机构提供实现这些目的所需的数据。相关服务可能在你所在国家/地区之外处理数据。We process data to provide requested features, authenticate accounts and purchases, sync projects, complete AI analysis, secure and troubleshoot the service, respond to support, and comply with law. We do not sell your personal information or use your songs for ad targeting. We disclose data only as needed to the providers above, the platforms you choose, or authorities with lawful grounds. Those services may process data outside your country or region.

7保存与删除Retention & deletion

• 本地内容通常保留到你在 App 内移除、清除 App 数据或卸载；已同步到 iCloud / Google Drive 的副本需按对应平台功能和设置另行管理。Local content generally remains until you remove it in the App, clear App data, or uninstall. Copies synced to iCloud or Google Drive must also be managed through the relevant platform features and settings.
• 在 App 内成功删除账号会删除主要账号记录、登录会话、关联登录账号和账号绑定权益。本机项目不受影响；AI 文件不会因删除账号而自动删除。购买验证、反欺诈、安全或争议处理记录可能按法律和合理业务需要继续保留。A successful in-App account deletion removes the primary account record, login sessions, linked sign-in accounts, and account-bound entitlements. Local projects are unaffected, and AI files are not automatically deleted with the account. Purchase-verification, anti-fraud, security, or dispute records may be retained where required by law or reasonable business needs.
• AI 源音频与生成文件、服务日志及诊断数据目前没有由我们统一承诺的固定保存期限；它们会按提供功能、安全、故障排查、争议处理及法定义务所需保留，并受相应服务商政策约束。We currently do not promise a single fixed retention period for AI source audio and generated files, service logs, or diagnostics. They are retained as needed for feature delivery, security, troubleshooting, disputes, and legal obligations, subject to provider policies.

8权限与选择Permissions & choices

• 麦克风：仅在你使用采样功能时请求，用于录制自定义 pad 音色；你可在系统设置中撤销。Microphone: requested when you use sampling to record a custom pad sound; you can revoke it in system settings.
• 文件：系统选择器只向 App 提供你选择的文件。AI 上传必须由你另行主动开始。Files: the system picker gives the App access only to files you select. AI upload starts only through a separate action initiated by you.
• Google Drive：Android 工程同步需你授权 Drive appDataFolder 权限，可在 Google 账号中撤销。Google Drive: Android project sync requires your authorization to the Drive appDataFolder scope, which you can revoke in your Google account.

9你的权利与儿童隐私Your rights & children

视适用法律而定，你可能有权访问、更正、删除、获取副本、限制或反对处理，并可撤回基于同意的后续处理。撤回不会使撤回前的处理失效，也无法撤回已经提交且当前不可取消的 AI 任务。你可在 App 内管理账号和部分本地/云端工程，或发邮件提出请求；我们可能需要核验身份，并会按法律要求和技术可行性处理。Depending on applicable law, you may have rights to access, correct, delete, obtain a copy, restrict or object to processing, and withdraw consent for future processing. Withdrawal does not invalidate earlier processing and cannot cancel an already submitted AI job that is currently non-cancellable. You can manage your account and some local or cloud projects in the App, or email a request. We may need to verify your identity and will respond as required by law and technical feasibility.

本 App 不面向适用法律规定的最低年龄以下儿童。若你认为儿童未经所需监护人同意向我们提供了个人信息，请联系我们。The App is not directed to children below the minimum age set by applicable law. If you believe a child provided personal information without required parental consent, contact us.

10安全与政策变更Security & policy changes

我们采用合理的技术与组织措施保护数据，但任何设备、传输或云存储都无法保证绝对安全。我们可能更新本协议；重大变更会在 App 内或本页面公示，并更新顶部日期。We use reasonable technical and organizational safeguards, but no device, transmission, or cloud storage can be guaranteed completely secure. We may update this Policy; material changes will be posted in the App or on this page, and the date above will be revised.

11联系我们Contact us

如对本协议、数据处理或权利请求有疑问，请联系：[email protected]。请求删除 AI 数据时，请尽可能提供账号邮箱、分析时间和任务相关信息；由于历史任务未与账号建立可查询映射，我们可能无法定位全部历史文件。For questions about this Policy, our data practices, or rights requests, contact [email protected]. For AI-data deletion requests, provide the account email, approximate analysis time, and any job details available. Because historical jobs were not linked to accounts through a searchable mapping, we may be unable to locate every historical file.

成都图样图森科技有限公司 · Chengdu Tuyang Tusen Technology Co., Ltd.Chengdu Tuyang Tusen Technology Co., Ltd.