1. 收集嘅資料

Skylight 可能處理你主動提供、使用服務時產生，或由你授權嘅第三方提供嘅資料。

• 帳戶及聯絡資料，包括電話號碼、登入供應者識別碼及顯示名稱。
• 出生日期、時間、地點，以及由此產生嘅星座、八字與配對資料。
• 個人檔案、相片、認證自拍、大概位置、偏好及你選擇公開嘅內容。
• 你主動建立安全約會 session 時所需嘅精確背景位置、約會時間／地點／備註，以及你提供嘅緊急聯絡人姓名及電話。
• 貼文、留言、私人訊息、舉報、封鎖及其他安全紀錄。
• 裝置、推送、連線、診斷資料，以及 App Store 提供嘅交易識別資料；我哋唔會取得完整付款卡資料。

2. 使用分析

我哋使用 Firebase Analytics 收集彙總嘅 App 使用資料，例如工作階段、瀏覽畫面、裝置平台及功能互動，用作了解流量同改善產品。分析事件唔包含電話、出生資料、訊息內容、精確位置或認證自拍；iOS 版本亦唔使用廣告識別碼作分析。

3. 真人認證及人臉資料

當你主動進行真人認證，App 會按畫面指示擷取你眨眼或轉頭時嘅自拍畫面。畫面會以加密連線傳送到 Skylight 控制、託管於 Amazon Web Services（AWS）EC2 嘅私人伺服器。伺服器內運行嘅模型會處理人臉偵測、動作／面部特徵點、活體及防翻拍信心分數，只用作確認畫面中只有一人、動作符合指示、申請人係真人，以及減少假帳戶；受限制嘅管理員亦可基於相同目的作人工安全覆核。Skylight 唔會建立可重用嘅人臉模板或人臉識別碼、唔會將資料同其他人或人臉資料庫比對，亦唔會用於廣告、分析、配對或訓練模型。

認證自拍及活體、防翻拍、人臉偵測信心分數會暫時儲存在上述 EC2 私人環境，唔會存放於七牛雲，亦唔會公開、出售或交畀第三方作人臉分析。AWS 只提供受合約及保密責任約束嘅雲端基礎設施。當管理員批准或拒絕認證申請，認證自拍及相關信心分數會即時刪除；等候覆核嘅資料會在提交後 30 日自動刪除；刪除帳戶時亦會即時刪除相關自拍及分數。之後只會在帳戶有效期間保存認證通過／不通過結果及相關時間，用作顯示認證狀態及防止濫用，並會在刪除帳戶時刪除。

4. 使用目的

資料用於建立及保護帳戶、確認年齡與真人身份、提供配對及命理分析、顯示距離、傳送訊息與通知、處理天幣和 VIP 權益、防止欺詐、調查舉報、改善可靠性及履行法律責任。

5. 分享及服務供應者

資料只會按需要交由受合約及保密責任約束嘅雲端託管、媒體儲存、推送通知、身份登入、通訊、分析及 App Store 付款服務供應者處理。上載嘅個人檔案、社群及聊天圖片，以及 Live Photo 動態影片，會交由阿里雲內容安全服務作裸露、暴力、兒童安全、詐騙及其他違規風險掃描。資料亦可能依法向主管機關披露。我哋唔會出售你嘅交友、訊息或出生資料。

6. 公開範圍

你選擇公開嘅個人檔案、貼文及留言可被其他用戶看到。完整出生日期、時間、地點、聯絡資料、認證自拍及私人訊息唔會成為公開個人檔案內容。匿名貼文會按產品規則隱藏身份。

7. 保存及刪除

安全約會屬自願功能，只在你建立 session 後使用背景位置；你須先獲緊急聯絡人同意先提供對方資料。Session 到期六小時後會停用分享 token 並清除精確位置；完成、取消或到期 session 嘅聯絡人、地點、備註、相片及定位資料，預設在最後狀態更新 30 日後清除。Skylight 唔係緊急服務或人身安全保證；有即時危險請直接聯絡當地緊急服務。

帳戶有效期間會保存提供服務所需嘅資料。刪除帳戶後，我哋會刪除個人檔案、相片、你發佈嘅貼文，並清除你留下嘅留言及私人訊息內容；其餘個人資料會刪除或去識別化。安全、退款、爭議、審計或法律要求所需嘅有限紀錄，可能在必要期間以限制存取方式保留。

8. 你嘅權利及選擇

你可在 App 更新資料、管理位置及通知權限、封鎖用戶、撤回已連結登入方式，並在設定永久刪除帳戶。查閱、更正、刪除、撤回同意或其他私隱要求可電郵 skylight@yauhingtech.com。

9. 年齡及安全

Skylight 只供 18 歲或以上人士使用。我哋使用存取控制、加密傳輸及審計措施保護資料，但任何系統都無法保證絕對安全。

1. Data we collect

Skylight may process information you provide, information generated when you use the service, and information from third parties you authorise.

• Account and contact data, including phone number, sign-in provider identifiers and display name.
• Date, time and place of birth, and the astrological, Bazi and compatibility data derived from them.
• Profile details, photos, verification selfies, approximate location, preferences and content you publish.
• When you actively create a Safe Date session: precise background location, date time/place/notes, and the emergency contact name and phone number you provide.
• Posts, comments, private messages, reports, blocks and related safety records.
• Device, push, connection and diagnostic data, plus App Store transaction identifiers. We do not receive full payment-card details.

2. Usage analytics

We use Firebase Analytics for aggregated usage information such as sessions, screens viewed, device platform and feature interactions. Analytics events do not contain phone numbers, birth details, message content, precise location or verification selfies. The iOS build does not use an advertising identifier for Analytics.

3. Liveness verification and face data

When you actively start liveness verification, the App captures selfie frames while you follow an on-screen blink or head-turn instruction. The frames are transmitted over an encrypted connection to a private Skylight-controlled server hosted on Amazon Web Services (AWS) EC2. Models running on that server process face detection, action/facial landmarks, and liveness and anti-spoofing confidence scores only to check that one person is present, the requested action occurred, the applicant is a real person, and to reduce fake accounts. Restricted administrators may manually review the same evidence for the same safety purpose. Skylight does not create a reusable face template or facial identifier, compare the data with another person or face database, or use it for advertising, analytics, matching or model training.

Verification selfies and liveness, anti-spoofing and face-detection confidence scores are stored temporarily in the private EC2 environment described above. They are not stored on Qiniu, made public, sold or shared with a third party for face analysis. AWS acts only as our contracted cloud-infrastructure provider. When an administrator approves or rejects a verification request, the verification selfies and related confidence scores are deleted immediately. Evidence awaiting review is automatically deleted 30 days after submission. Account deletion also deletes the associated selfies and scores immediately. After evidence deletion, only the pass/fail outcome and associated timestamps are retained while the account is active to display verification status and prevent abuse; those remaining records are deleted when the account is deleted.

4. How we use data

We use data to create and secure accounts, verify age and identity, provide matching and readings, calculate distance, deliver messages and notifications, manage coins and VIP benefits, prevent fraud, investigate reports, improve reliability and meet legal obligations.

5. Sharing and service providers

Data is shared only as needed with contracted providers for hosting, media storage, push notifications, identity login, communications, analytics and App Store payments. Profile, community and chat images, plus Live Photo motion videos, are sent to Alibaba Cloud Content Moderation to detect nudity, violence, child-safety, scam and other policy risks. Data may also be disclosed to authorities where legally required. We do not sell dating, message or birth data.

6. Visibility

Profile details, posts and comments you choose to publish may be visible to other users. Exact birth details, contact details, verification selfies and private messages are not public profile fields. Anonymous posts conceal identity according to product rules.

7. Retention and deletion

Safe Date is optional and uses background location only after you create a session. Obtain the emergency contact’s permission before providing their details. Six hours after expiry, the sharing token and precise location are erased. Emergency-contact, venue, note, photo and location data for completed, cancelled or expired sessions is erased by default 30 days after the last lifecycle update. Skylight is not an emergency service or personal-safety guarantee; contact local emergency services directly if danger is immediate.

We retain data while your account is active and as needed to provide the service. Account deletion removes profile data, photos and posts, and erases the content of comments and private messages you sent. Other personal data is deleted or de-identified. Limited records may be retained with restricted access where needed for safety, refunds, disputes, audits or legal obligations.

8. Your rights and choices

You can update your profile, manage permissions, block users, revoke linked sign-ins and permanently delete your account in Settings. Email skylight@yauhingtech.com to request access, correction, deletion, consent withdrawal or other privacy assistance.

9. Age and security

Skylight is only for people aged 18 or older. We use access controls, encrypted transport and audit measures to protect data, but no system can guarantee absolute security.