Privacy Policy
隐私政策
1. Introduction
This Privacy Policy explains how Mylus collects, uses, shares, and protects your personal information when you use the Service. We are committed to handling your data responsibly and transparently.
Because Mylus is a training tool that works with body and health-related information, parts of the data we process may be considered sensitive. We treat that data with corresponding care.
2. Information we collect
Account information: your email address, the sign-in method and identifier you use (email, Apple, or Google), and your account ID. If you sign in with Apple and choose to hide your email, we receive an Apple private-relay address instead of your real email.
If you join the launch-notification list on https://mylus.app, we collect your email address and language preference only to tell you when Mylus becomes available. We keep that record until we send the notification or you ask us to remove it.
Body and demographic data: height, weight, birth year (used to derive your age), and gender.
Training profile: your training goal (sport performance or general fitness) and chosen sport or objective, training experience, weekly training frequency, training venue/environment, and available equipment.
Health and injury data: the injuries, pain history, and physical limitations you choose to tell us about. This is sensitive data, used to make your training plans safer; we process it only with your separate explicit consent.
Plans and activity: the training plans we generate for you, your workout check-ins (including completion, effort metrics, any pain you report, and optional short pain notes the coach can read), and your feedback on plans.
Coach messages: messages you send to the in-app AI coach and the coach's replies are stored so the conversation can continue. You can review recent conversation history in the app.
Derived coaching preferences: we may infer a small number of communication and training-habit preferences from your conversations. Two items are chosen from a fixed list: how detailed you want replies to be, and the time of day you usually train. Further items are short notes: how you want the coach to address you (at most 20 characters), the custom reply tone you want (at most 80 characters; both can also be set by you in the app), plus notes (at most 60 characters) about equipment quirks, schedule constraints, or what currently motivates you; notes that look like a web address or email, or that contain a long run of digits, are discarded. These are not health or injury information, and they are not used to generate your training plans. The coach uses them only to adjust how it words its replies. In the app you can see the full list, set how the coach addresses you and the reply tone, delete any entry, and turn the feature off (Profile → What the coach remembers).
Technical and usage data: app interactions, log data, device type, app language, and basic technical information needed to operate and secure the Service.
We do not collect payment-card details (any purchases are handled by the app store), medical records, or precise location.
3. How we use your information
We use your information to: create, generate, and adjust your personalized training plans; apply safety filtering based on your injury and health information; operate, maintain, secure, and support the Service; and comply with our legal obligations.
We do not use your data to train or improve machine-learning models — Mylus generates your plans from the information you provide together with general scientific references, and your data is not fed back into any model training. We also do not sell your personal information.
4. Legal bases for processing
Where data-protection laws such as the GDPR apply, we process your information on the basis of: performance of our contract with you (to provide the Service); your explicit consent (for processing your health and injury data, which is special-category data, and for launch-notification emails if you opt in on our website); our legitimate interests (such as securing and maintaining the Service); and compliance with legal obligations.
You may withdraw consent at any time, without affecting processing already carried out.
5. How we share information
We share information with service providers who process data on our behalf, such as cloud-hosting and authentication providers, under contracts that require them to protect it. We may also disclose information where required by law or to protect rights, safety, and the integrity of the Service.
We use a third-party product-analytics service (Amplitude) to understand how features are used so we can improve the Service. For this we share usage events labelled with a random identifier (such as screens opened and actions completed) and basic device information; this data does not include your name, email, or health and injury details, and we have disabled the storage of IP addresses.
We do not sell your personal information, and we do not share it for third-party advertising.
6. Data retention
We keep your information for as long as your account is active or as needed to provide the Service, and thereafter only as required for legitimate business or legal purposes. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where retention is legally required.
7. Security
We use technical and organizational measures designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
8. Your rights
Depending on where you live, you may have rights under local law to access, correct, delete, or restrict the use of your personal information, and to object to certain processing. Residents of the EEA/UK (GDPR), California (CCPA/CPRA), and China (PIPL), among others, have specific rights under local law.
What you can do in the app today: view and update your training profile; review recent AI-coach conversation history; see the derived coaching preferences the coach has inferred, set how the coach addresses you and the reply tone, delete them one by one, or turn that feature off entirely; and delete your account. Deleting your account removes or anonymizes your personal data, including stored conversations and derived coaching preferences, within a reasonable period except where retention is legally required.
There is no in-app data-export download. To request a copy of your data, or a correction beyond what the app allows, email [email protected]. We will respond within the period required by applicable law. You may also have the right to lodge a complaint with your local data-protection authority.
9. International data transfers
Your information may be processed in countries other than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) to protect information transferred across borders.
10. Children's privacy
The Service is intended only for adults aged 18 and over. It is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us personal information, contact us so we can delete it.
11. Changes to this Policy
We may update this Privacy Policy from time to time. We will provide notice of material changes, for example within the app, and update the "last updated" date above.
12. Contact
For privacy questions or requests, contact us at [email protected].
1. 引言
本《隐私政策》说明当你使用本服务时，Mylus 如何收集、使用、共享和保护你的个人信息。我们致力于以负责任、透明的方式处理你的数据。
由于 Mylus 是一款会处理身体与健康相关信息的训练工具，我们处理的部分数据可能被视为敏感信息。我们会对这类数据给予相应的审慎处理。
2. 我们收集的信息
账号信息：你的邮箱地址、你所用的登录方式与标识符（邮箱、Apple 或 Google）以及账号 ID。当你使用 Apple 登录并选择隐藏邮箱时，我们收到的是 Apple 的私密转发地址，而非你的真实邮箱。
若你在 https://mylus.app 登记上线通知，我们仅收集你的邮箱与语言偏好，用于在 Mylus 上线时通知你。该记录保留至我们发出通知或你要求删除。
身体与人口统计数据：身高、体重、出生年份（用于推算年龄）和性别。
训练档案：你的训练目标（专项表现或通用健身）及所选运动或目标、训练经验、每周训练频率、训练场地/环境，以及可用器材。
健康与伤病数据：你选择告知我们的伤病、疼痛史与身体限制。这属于敏感数据，用于让你的训练计划更安全；我们仅在获得你单独、明确的同意后才处理。
计划与活动数据：我们为你生成的训练计划、你的训练打卡（包括完成情况、强度指标、你报告的任何疼痛，以及你选择为某次疼痛填写的短备注；教练在相关对话里能看到这些备注），以及你对计划的反馈。
教练对话：你发给应用内 AI 教练的消息及教练回复会被保存，以便对话继续。你可以在应用内查看近期对话历史。
派生教练偏好：我们可能从你的对话中推断出少量沟通与训练习惯偏好。其中两项取值来自固定清单：你希望回复多详细，以及你通常训练的时段。另有若干短备注：你希望教练如何称呼你（最多 20 个字符）、你希望教练使用的回复语气（最多 80 个字符；两者均可在应用内自行填写），以及关于器材使用习惯、日程限制或当前训练动机的备注（各不超过 60 个字符）；看起来像网址、邮箱或含有一长串数字的备注会被丢弃。这些不是健康或伤病信息，也不参与训练计划的生成。教练只用它们调整回复的措辞。你可以在应用内查看完整清单、自行设置称呼与回复语气、逐条删除，或整体关闭该功能（我的档案 → 教练记住的偏好）。
技术与使用数据：应用内交互、日志数据、设备类型、应用语言，以及运营和保护本服务所需的基础技术信息。
我们不收集支付卡信息（任何购买均由应用商店处理）、病历，或精确位置。
3. 我们如何使用信息
我们使用你的信息以：创建、生成并调整你的个性化训练计划；基于你的伤病与健康信息进行安全过滤；运营、维护、保护并支持本服务；以及遵守我们的法律义务。
我们不会使用你的数据来训练或改进机器学习模型——Mylus 是结合你提供的信息与通用科学依据来生成计划的，你的数据不会被回流用于任何模型训练。我们也不会出售你的个人信息。
4. 处理的法律依据
在 GDPR 等数据保护法律适用的情形下，我们基于以下依据处理你的信息：履行与你的合同（以提供本服务）；你的明确同意（用于处理属于特殊类别数据的健康与伤病数据，以及你在网站上选择接收上线通知时的邮件）；我们的正当利益（例如保护和维护本服务）；以及遵守法律义务。
你可随时撤回同意，且不影响在此之前已进行的处理。
5. 我们如何共享信息
我们会与代表我们处理数据的服务提供商（例如云托管与身份验证提供商）共享信息，并通过合同要求其予以保护。在法律要求，或为保护权利、安全及本服务完整性之必要时，我们也可能披露信息。
我们使用第三方产品分析服务（Amplitude）了解各功能的使用情况，以改进本服务。为此我们共享以随机标识符标记的使用事件（如打开的页面、完成的操作）与基本设备信息；这些数据不包含你的姓名、邮箱、健康或伤病详情，且我们已关闭 IP 地址的存储。
我们不会出售你的个人信息，也不会为第三方广告而共享你的个人信息。
6. 数据留存
在你的账号处于活跃状态，或为提供本服务所必需的期间内，我们会保留你的信息；此后仅在合法商业或法律目的所必需的范围内保留。当你删除账号时，我们将在合理期限内删除或匿名化你的个人数据，但法律要求保留者除外。
7. 安全
我们采用旨在保护你信息的技术与组织措施，包括传输过程加密与访问控制。由于没有任何传输或存储方式是绝对安全的，我们无法保证绝对的安全性。
8. 你的权利
视你所在地区而定，你可能依当地法律享有访问、更正、删除或限制使用你个人信息的权利，以及反对某些处理的权利。欧洲经济区/英国（GDPR）、加利福尼亚州（CCPA/CPRA）以及中国（《个人信息保护法》）等地的居民，依当地法律享有特定权利。
应用内目前可以：查看并更新训练档案；查看近期 AI 教练对话历史；查看教练推断出的派生教练偏好，自行设置教练如何称呼你以及回复语气，并逐条删除或整体关闭该功能；以及删除账号。删除账号后，我们将在合理期限内删除或匿名化你的个人数据（包括已存储的对话与派生教练偏好），但法律要求保留者除外。
应用内没有数据导出下载。如需索取你的数据副本，或进行应用内无法完成的更正，请发邮件至 [email protected]。我们将在适用法律规定的期限内回复。你也可能有权向当地数据保护监管机构投诉。
9. 跨境数据传输
你的信息可能在你所在国家/地区以外被处理。在必要时，我们会采用适当的保障措施（例如标准合同条款）来保护跨境传输的信息。
10. 儿童隐私
本服务仅面向 18 周岁及以上的成年人。本服务不面向任何未满 18 周岁者，我们也不会在知情的情况下收集未满 18 周岁者的个人信息。如你认为有未满 18 周岁者向我们提供了个人信息，请联系我们以便删除。
11. 本政策的变更
我们可不时更新本《隐私政策》。我们将就重大变更予以通知（例如在应用内），并更新上方的“最近更新”日期。
12. 联系我们
如有隐私相关疑问或请求，请通过 [email protected] 联系我们。