Gansapp
隐私政策
Privacy Policy · 生效及最近更新日期：2026-10-18 · English version
Gansapp 重视你的隐私。本政策说明我们在你使用 gansapp.com 及其上各应用时，收集哪些个人信息、如何使用和保护，以及你享有的权利。
一、个人信息处理者
本平台由个人开发者 Kin Gan 运营，是本政策所述个人信息的处理者。联系方式：support@gansapp.com。
二、我们收集的信息
- 账号信息：邮箱注册时的邮箱地址和加密后的密码；使用 GitHub / Google 登录时，对方提供的昵称、邮箱和头像。
- 钱包与订单信息：积分余额、积分流水、订单及支付状态。银行卡等支付信息由 Creem 直接收集处理，我们不会获得完整卡号。
- 用量记录：每次使用的时间、应用、模型、token 数量、搜索次数和扣除积分，用于计费和对账。我们不在服务器上保存你的提问和回答原文。
- 上传的文件：你上传的 PDF / Markdown / TXT 仅在内存中提取文字用于回答，我们不保存文件；提取出的文字会随提问发送给 AI 模型服务商。
- 技术信息：IP 地址、浏览器类型、错误日志等，由托管服务商短期保留，用于安全防护与故障排查。登录凭据（token）保存在你浏览器的本地存储中。我们不使用广告或跨站追踪 Cookie。
三、我们如何使用
用于：提供和保障服务；在各应用间识别你的账号（单点登录）；计量用量、维护积分钱包；处理购买与退款；防范滥用（如批量注册薅取赠送积分）；回复客服咨询；履行法定义务。我们不会出售你的个人信息，也不会用你的内容训练模型。
四、委托处理与跨境传输
为提供服务，我们委托以下服务商处理必要的信息。因此你的信息可能在你所在国家或地区之外（包括美国、欧盟和中国）被处理；我们只向每个服务商提供其履行职能所必需的信息。使用本服务即表示你同意上述跨境处理。
| 服务商 | 用途 | 处理地 |
|---|---|---|
| Convex | 账号、积分钱包、订单等数据的存储与登录鉴权 | 美国 |
| Vercel | 网站托管与运行 | 全球边缘网络 |
| GitHub / Google | 第三方登录（仅在你选择时） | 美国 |
| 硅基流动 SiliconFlow 等 AI 模型服务商 | 处理你的提问与上传文档，生成回答 | 中国 |
| Brave Search、Tavily | 联网搜索（仅发送检索关键词） | 美国 |
| Creem | 支付处理、收据与税务（Merchant of Record） | 欧盟 / 全球 |
| OpenFreeMap | 地图底图加载 | 欧盟 |
五、保存期限
账号、钱包和订单记录在账号存续期间保存，并按会计、税务和争议处理需要在交易后保留（通常不超过 5 年）；用量记录最长保留 24 个月。你可以随时申请注销账号，我们会在法定保留义务之外删除或匿名化你的信息。
六、你的权利
你有权查阅、复制、更正、删除你的个人信息，撤回同意，注销账号，以及对处理方式提出异议。请发送邮件至 support@gansapp.com，我们会在 15 个工作日内答复。你也可以向所在地的个人信息保护主管部门投诉。
七、安全与未成年人
我们采用 HTTPS 加密传输、密码哈希存储、短时效登录凭据和访问控制等措施保护你的信息。本平台不面向 14 周岁以下的儿童，我们不会故意收集其个人信息。
八、政策更新
本政策更新时，我们会在本页面发布新版本；重大变更会在本平台显著位置提示。
Privacy Policy
Effective / last updated: 2026-10-18. If the Chinese and English versions differ, the Chinese version prevails, except where the law of your place of residence requires otherwise.
1. Who we are
Gansapp (gansapp.com) is operated by Kin Gan, an individual developer, who is the controller of the personal data described here. Contact: support@gansapp.com.
2. Data we collect
- Account data: email address and password hash (email sign-up), or the name, email and avatar provided by GitHub/Google when you use third-party sign-in.
- Wallet and order data: credit balance, ledger entries, orders and payment status. Card details are collected and processed by Creem; we never receive full card numbers.
- Usage data: per-request metering records (time, App, model, token counts, number of searches, credits charged). We do not store the text of your questions or answers on our servers.
- Uploaded documents: PDF/Markdown/TXT files are converted to text in memory to answer your question and are not stored by us; the extracted text is sent to the AI model provider with your question.
- Technical data: IP address, browser type and error logs kept briefly by our hosting provider for security and debugging. Your sign-in token is stored in your browser’s local storage. We do not use advertising or cross-site tracking cookies.
3. How we use data
To provide and secure the service, authenticate you across Apps, meter usage and maintain your wallet, process purchases and refunds, prevent abuse (e.g. multi-account bonus farming), respond to support requests and comply with legal obligations. We do not sell your personal data and do not use your content to train models.
4. Service providers and international transfers
We use the processors listed in the Chinese section above (Convex, Vercel, GitHub/Google, AI model providers such as SiliconFlow, Brave Search, Tavily, Creem, OpenFreeMap). Your data may therefore be processed outside your country, including in the United States, the EU and China. We share only what each provider needs to perform its function.
5. Retention
Account, wallet and order records are kept while your account exists and for as long as required for accounting, tax and dispute purposes (typically up to 5 years after the transaction). Usage records are kept for up to 24 months. You may request deletion of your account at any time.
6. Your rights
Depending on your location you may have the right to access, correct, export or delete your personal data, to withdraw consent, and to object to or restrict processing. Email support@gansapp.com; we respond within 15 working days. You may also lodge a complaint with your local data protection authority.
7. Security and children
We use HTTPS, hashed passwords, short-lived sign-in tokens and access controls. The Platform is not directed to children under 14 and we do not knowingly collect their data.
8. Changes
We will post updates to this policy on this page and notify you of material changes on the Platform.