隐私政策 · 生效日期：2026 年 9 月 20 日

你的数据如何被使用

本政策适用于苏醒强提供的焙桥 iOS 应用及本说明站点。焙桥用于管理生豆、曲线和烘焙记录，并连接用户自己的 Kaffelogic 烘焙机与 RoastSpan 无线模块。

1. 保存在设备上的资料

生豆资料、包装原图、曲线、烘焙记录、备注和偏好设置保存在 App 的本地存储中。设备连接所需的地址、设备信息与有限诊断记录也用于本地连接及故障排查。普通的本地查看和编辑不会自动把这些资料上传到开发者的云端。iOS 备份可能根据你的系统设置包含 App 数据。

2. 可选的照片智能识别

你选择图片、配置识别服务并同意上传后，App 才会通过 HTTPS 将上传副本和必要的任务标识发送至焙桥的阿里云函数计算服务，再由阿里云百炼处理，以提取生豆资料。当前默认服务部署于中国大陆北京地域。上传副本会重新编码并移除 EXIF、GPS 等图片元数据；这不会遮盖直接出现在图片内容中的信息，请只选择需要识别的包装图片。

识别服务凭据保存在设备 Keychain 中，用于验证服务访问，不用于广告或跨 App 跟踪。焙桥不将你的包装资料用于广告画像或出售。

3. 保存与清理

未完成识别任务的图片、临时资料、模型响应和技术诊断保留在本机，以支持恢复和排错；当该任务所有候选都已保存或忽略后，App 会清理该任务的临时文件。已保存到豆库的资料和原图会继续保留，直至你在 App 中删除。

焙桥识别后端在请求处理期间使用图片与结果，不将图片或识别全文写入业务数据库或业务日志。服务可能产生请求标识、图片数量与大小、模型、耗时、用量、状态及错误码等技术信息，用于运行与排错。云平台可能按其平台设置和服务协议处理网络及运行日志。

阿里云百炼的现行隐私说明表示，调用数据不用于模型训练，同时会依相关要求存储调用产生的数据。具体保留和处理方式以其隐私说明及所链接的服务协议为准。本机任务清理不代表第三方云端数据同步删除。

4. 设备权限与网络

相机用于拍摄包装；照片访问用于导入你选择的图片；本地网络用于发现和连接你的 RoastSpan 模块与烘焙机。你可以在 iOS 设置中管理相关权限。拒绝相机或云端识别授权后，仍可手动录入生豆资料。连接烘焙机所需信息在本地网络中与设备交换，不因连接动作自动上传至照片识别服务。

5. 你的选择与删除请求

可在 App「关于我的 → 智能识别」中撤销图片上传授权，阻止之后的识别上传。撤销不会自动删除已发送到服务商的数据。可通过 App 的删除功能管理已保存的资料；带有「最近删除」的项目按界面显示的保留规则清理。卸载 App 会移除其本地容器，但系统备份、导出的副本及 Keychain 凭据可能有独立的保存周期。

如需了解、纠正或申请删除开发者持有的数据，请联系 303018115@qq.com 并说明相关日期与事项。我们将核实请求并处理可控制的数据；涉及第三方留存时，会依据其机制协助处理。

6. TestFlight、反馈及本网页

使用 TestFlight 时，Apple 会按其政策处理测试设备信息、使用统计、崩溃与反馈。你主动发送的反馈、邮件、截图或诊断文件会用于排查所述问题；请避免包含无关的个人信息。问题处理完成且无继续支持需要后，我们会清理相应支持资料；有保留要求的除外。

本说明站点不设置广告或自行嵌入访问分析脚本。网站托管与网络服务商可能为提供访问处理 IP 地址、浏览器信息及访问日志。外部链接由相应服务商按其政策处理。

7. 政策更新

数据处理方式变化时，我们会更新本页的生效日期与内容。需要重新取得同意的变更，将通过 App 中的授权流程处理。

How your data is used

This policy covers BakeBridge (焙桥), the iOS app provided by Xingqiang Su, and this information website. The app manages green coffee, profiles and roast records, and connects to your own Kaffelogic roaster through a RoastSpan wireless module.

简体中文

1. Data on your device

Coffee details, original packaging photos, profiles, roast records, notes and preferences are stored locally. Device addresses, device information and limited diagnostics support local connections and troubleshooting. Ordinary local viewing and editing do not automatically upload these records to the developer’s cloud. Your iOS backup settings may include app data.

2. Optional photo recognition

After you select photos, configure the service and authorize uploads, the app sends re-encoded copies and necessary task identifiers over HTTPS to the developer’s Alibaba Cloud Function Compute service and then Alibaba Cloud Model Studio to extract coffee details. The default service is hosted in Beijing, mainland China. Upload copies have EXIF and GPS metadata removed; information visible inside the image is not obscured. Select only the packaging images you wish to recognize.

Service credentials are stored in the device Keychain to authorize access. They are not used for advertising or tracking across apps. BakeBridge does not sell your packaging data or use it for advertising profiles.

3. Storage and cleanup

Unfinished recognition tasks retain temporary photos, task information, model responses and technical traces on the device for recovery and troubleshooting. The app clears a task’s temporary files after all its candidates have been saved or ignored. Details and original images saved to your coffee library remain until you delete them.

The recognition backend uses images and responses while processing a request. It does not write images or full recognition text to an application database or application logs. Technical records may include request identifiers, image counts and sizes, model, duration, usage, status and error codes. Cloud platforms may process network and operational logs under their settings and terms.

Alibaba Cloud’s current notice says API data is not used for model training, while data generated by calls may be retained under applicable requirements. See its privacy notice and linked service terms. Clearing local task files does not delete third-party cloud records.

4. Permissions and local networking

The camera captures packaging, photo access imports selected images, and local-network access discovers and connects to your RoastSpan module and roaster. Manage permissions in iOS Settings. You can enter coffee details manually without photo recognition. Information exchanged with a roaster over the local network is not automatically uploaded to the recognition service.

5. Your choices and deletion requests

Revoke image-upload authorization in About Me → Smart Recognition to stop future recognition uploads. Revocation does not delete previously transmitted data from service providers. Use the app’s deletion controls for saved records; items with a Recently Deleted area follow the retention shown there. Uninstalling removes the local app container, while system backups, exported copies and Keychain entries may persist separately.

For access, correction or deletion requests concerning data held by the developer, email 303018115@qq.com with the relevant date and context. We will verify the request, handle data we control and assist with applicable third-party processes.

6. TestFlight, support and this website

Apple processes TestFlight device information, usage statistics, crash reports and feedback under its policies. Feedback, emails, screenshots and diagnostics you choose to send are used to investigate the issue. Avoid unrelated personal information. We clear support material after the issue is resolved and continuing support no longer needs it, unless retention is required.

This website has no advertising or developer-added analytics scripts. Hosting and network providers may process IP addresses, browser information and access logs to deliver the site. Linked services apply their own policies.

7. Changes

We update this page and its effective date when processing changes. Where renewed consent is needed, the app’s authorization flow will request it.