Moonlex 隐私政策 Moonlex Privacy Policy

欢迎使用 Moonlex（下称"我们"）。Moonlex 是 Candle X 智能助眠灯及床头终端的配套应用，为您提供睡眠报告、灯光环境流程、助眠声音与 Moonlex AI 睡眠助手等健康生活方式功能。

我们秉持本地优先（Local-first）的隐私理念：您的睡眠与健康相关数据默认保存在您的设备本地，仅当您登录账号、购买订阅或连接设备时，才会传输为提供服务所必需的最少信息。

本政策适用于 Moonlex 的 iOS 应用及其相关服务。使用 Moonlex，即表示您已阅读并同意本政策。

Welcome to Moonlex ("we", "us", "our"). Moonlex is the companion app for Candle X, a smart sleep light and bedside terminal, offering sleep reports, light-environment routines, soothing sounds, and the Moonlex AI sleep assistant.

We follow a local-first privacy approach: your sleep and wellness data stays on your device by default. Only the minimum information needed to provide a service is transmitted when you sign in, purchase a subscription, or connect your device.

This policy applies to the Moonlex iOS app and related services. By using Moonlex, you agree to the practices described in this policy.

当您使用 Apple 登录、Google 登录或邮箱验证码登录时，我们会收集该会话所需的账号资料：显示名称、邮箱地址、第三方登录标识、您选择的地区/国家及时区。登录验证本身由平台方（Apple / Google）在设备端完成，我们仅保存运营您账号所必需的资料。

如您不登录，您仍可使用本地演示与大部分核心功能，此时我们不会创建您的账号，也不会在服务器存储上述资料。

When you sign in with Apple, Google, or your email (one-time verification code), we collect the account profile needed for the session: your display name, email address, provider identifier, selected country/region, and time zone. Sign-in itself is handled by the platform provider (Apple / Google) on your device; we only store the profile needed to operate your account.

If you do not sign in, you can still use the local demo and most core features, and we do not create an account or store the profile above on our servers.

如果您购买 Moonlex AI 订阅，支付由 Apple 通过其 App Store 支付系统处理。为校验并维护您的订阅，我们会从 Apple 获取交易信息（如交易编号、商品、环境与订阅状态），并在服务器记录校验结果。我们不会获取或存储您的银行卡号、支付密码等支付详情。

If you purchase a Moonlex AI subscription, payment is processed by Apple through the App Store payment system. To validate and maintain your subscription, we receive transaction information from Apple (such as transaction ID, product, environment, and subscription status) and record the verification result on our servers. We never receive or store your card number or other payment details.

为了配对并控制您的 Candle X 设备，我们可能收集：设备 ID、设备名称、型号、固件版本、连接/在线状态，以及灯光、声音、温度/湿度等传感器状态。此类数据主要用于运行您的设备与呈现设备状态；在本地优先模式下，它们保存在您的设备上。

我们还会收集运行 App 所必需的基础技术信息，如设备型号、操作系统版本与应用版本，用于兼容性与问题排查。

To pair and control your Candle X device, we may collect: device ID, device name, model, firmware version, connection/online status, and sensor state such as light, sound, temperature, and humidity. This data is used to operate your device and show its status; in local-first mode it is stored on your device.

We also collect basic technical information needed to run the app, such as device model, OS version, and app version, for compatibility and troubleshooting.

您在应用中记录的睡眠时段、睡眠报告、唤醒曲线、睡前流程、灯光反馈与偏好设置等数据。此类数据默认保存在您的设备本地（UserDefaults），用于生成睡眠洞察、个性化灯光环境并优化您的睡眠计划。

我们不会将您的睡眠数据与 Apple Health / HealthKit 关联，也不会在未另行告知并获得您同意的情况下上传至云端。

Data you record in the app, such as sleep sessions, sleep reports, wake curves, bedtime routines, light feedback, and preferences. This data is stored locally on your device (UserDefaults) by default, and is used to generate sleep insights, personalize your light environment, and refine your sleep plan.

We do not link your sleep data to Apple Health / HealthKit, and we will not upload it to the cloud unless we inform you and obtain your consent first.

在获得您授权后，Moonlex 可能使用以下系统权限，每项权限仅在需要时请求，您可随时在系统设置中修改或撤销：

• 蓝牙（Bluetooth）：发现并连接 Candle X 设备；
• 相机（Camera）：配对时扫描二维码；
• 麦克风（Microphone）：用于未来的声音/睡眠音频功能（当前未启用）；
• 本地网络（Local Network）：连接您本地的小智（Xiaozhi）服务器以使用 Moonlex AI 对话。

With your consent, Moonlex may use the following system permissions. Each is requested only when needed, and you can change or revoke it at any time in system Settings:

• Bluetooth: to discover and connect your Candle X device;
• Camera: to scan a QR code when pairing;
• Microphone: reserved for future sound / sleep-audio features (not currently enabled);
• Local Network: to reach your local Xiaozhi server for Moonlex AI conversations.

我们不使用第三方广告 SDK，不出售您的数据，不进行行为广告或跨应用跟踪。我们可能收集有限的、匿名的聚合使用数据（如功能使用统计），用于改进产品与体验。

如果您联系客服，您可以自愿提供诊断日志，我们仅将其用于解决您遇到的问题，并在问题解决后按需删除。

We do not use third-party advertising SDKs, do not sell your data, and do not engage in behavioral advertising or cross-app tracking. We may collect limited, anonymous, aggregated usage data (such as feature usage statistics) to improve the app.

If you contact support, you may voluntarily share diagnostic logs, which we use only to resolve your issue and delete when no longer needed.

我们将收集到的信息用于以下目的：

• 提供并运营 Moonlex 的功能：睡眠报告、灯光环境流程、助眠声音与 Moonlex AI；
• 创建、登录并维护您的账号；
• 处理并维护您的订阅与购买记录；
• 个性化您的灯光环境、唤醒曲线与睡眠计划；
• 提供客户支持并响应您的请求；
• 检测、预防并处理安全与技术问题；
• 履行法律义务，以及行使和捍卫我们的合法权利。

We use the information we collect to:

• Provide and operate Moonlex's features: sleep reports, light-environment routines, soothing sounds, and Moonlex AI;
• Create, authenticate, and maintain your account;
• Process and maintain your subscription and purchases;
• Personalize your light environment, wake curve, and sleep plan;
• Provide customer support and respond to your requests;
• Detect, prevent, and address security or technical issues;
• Comply with legal obligations and exercise and defend our legal rights.

我们不会出售您的个人信息。我们仅在以下有限情形下共享信息：

• 服务提供商：帮助我们运营服务的云服务与邮件服务等提供商，他们受合同约束保护您的信息且不得将其用于其他目的；
• 支付与订阅：与 Apple 共享必要信息以处理订阅交易并接收校验结果；
• 登录提供方：Apple 或 Google 仅处理您选择的登录验证，我们不会向他们共享您的睡眠数据；
• 法律要求：为遵守法律、回应传票/法院命令，或为保护我们及他人的权利、财产与安全；
• 业务交易：在合并、收购、重组或出售资产时，您的信息可能作为交易的一部分转移，我们将通过本政策通知您。

We do not sell your personal information. We share information only in these limited circumstances:

• Service providers: cloud hosting and email providers that help us operate our services, who are contractually bound to protect your information and use it only for the services they provide to us;
• Payments & subscriptions: the necessary information is shared with Apple to process subscription transactions and receive verification results;
• Sign-in providers: Apple or Google handles only the sign-in verification you choose; we do not share your sleep data with them;
• Legal requirements: to comply with law, respond to subpoenas or court orders, or protect our and others' rights, property, or safety;
• Business transactions: in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction, and we will notify you through this policy.

• 您的睡眠与健康数据默认存储在设备本地，应用不会在未获您同意的情况下将其上传；
• 账号与订阅数据通过加密连接（HTTPS）传输，存储于我们位于云端的服务器，并设有访问控制、密钥管理与安全审计；
• 我们不对订阅交易 JWS 等敏感凭证进行明文记录，App Store 私钥等敏感凭据仅存于服务端安全环境；
• 我们采取行业标准的组织与技术措施保护您的信息。但请注意，任何传输或存储方式都无法保证 100% 的安全。

• Your sleep and wellness data is stored locally on your device by default and is not uploaded without your consent;
• Account and subscription data is transmitted over encrypted connections (HTTPS), stored on our cloud servers, and protected by access controls, key management, and security audits;
• We do not store sensitive credentials such as subscription transaction JWS in plain text; private keys such as the App Store Connect key reside only in a secure server environment;
• We apply industry-standard organizational and technical measures to protect your information. However, no method of transmission or storage can guarantee 100% security.

• 本地数据：保存在您的设备上，直至您将其删除（例如删除 App 或重置演示数据）。
• 账号数据：在您的账号有效期间予以保留；注销后，我们将删除或匿名化处理您的个人信息，除非法律要求保留。
• 订阅记录：根据 Apple 的要求及财务/税务义务，在必要期限内保留交易记录。
• 您可随时在应用中执行删除账号（个人中心 > 删除账号），该操作将清除本地个人资料、设备配对、睡眠记录与偏好设置。

• Local data: stays on your device until you delete it (for example, by deleting the app or resetting demo data).
• Account data: retained while your account is active; after deletion, we will delete or anonymize your personal information unless retention is required by law.
• Subscription records: retained for the period required by Apple's requirements and financial/tax obligations.
• You can delete your account at any time in the app (Profile > Delete account), which erases your local profile, device pairing, sleep records, and preferences.

您可以通过以下方式控制您的数据：

• 隐私控制：应用内的隐私设置允许您随时开启或关闭睡眠监测、自动调整、音频联动与动态唤醒等功能；
• 权限管理：您可在系统"设置"中随时修改或撤销蓝牙、相机、麦克风与本地网络权限；
• 删除账号：您可在应用中删除账号并清除本地数据；
• 导出数据：如需导出您的个人数据副本，可通过下方联系方式提出请求。

根据您所在司法辖区的法律（如欧盟《通用数据保护条例》GDPR、中国《个人信息保护法》PIPL 等），您可能还享有访问、更正、删除、限制处理、反对处理与数据可携等权利。如需行使这些权利，请通过第 10 节联系方式与我们联系，我们将在法律规定的期限内响应。

You can control your data in the following ways:

• Privacy controls: the in-app privacy settings let you turn sleep monitoring, automatic adjustment, audio linking, and dynamic wake on or off at any time;
• Permission management: you can change or revoke Bluetooth, camera, microphone, and local network permissions at any time in system Settings;
• Delete account: you can delete your account and erase local data in the app;
• Export data: to request a copy of your personal data, contact us using the details in Section 10.

Depending on your jurisdiction (for example, the EU GDPR or China's PIPL), you may also have rights to access, rectify, delete, restrict, object to, and port your personal information. To exercise these rights, contact us using the details in Section 10; we will respond within the period required by law.

Moonlex 面向一般成人用户，不面向 13 周岁以下的儿童，我们不会故意收集儿童的个人信息。如果您认为有儿童向我们提供了个人信息，请通过第 10 节联系方式告知我们，我们将及时删除相关信息。

Moonlex is intended for general adult users and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us using the details in Section 10, and we will delete the information promptly.

Moonlex 提供健康生活方式洞察与灯光环境建议。它不是医疗器械，不用于诊断、治疗、治愈或预防任何疾病，也不能替代专业医疗建议或医疗诊断。应用中的睡眠数据与评分仅用于个人健康参考，不应作为任何医疗判断的依据。

如您有睡眠障碍或健康疑虑，请咨询专业医疗人员。

Moonlex provides wellness insights and light-environment suggestions. It is not a medical device, does not diagnose, treat, cure, or prevent any disease, and is not a substitute for professional medical advice or diagnosis. Sleep data and scores in the app are provided for personal wellness reference only and should not be relied upon for any medical determination.

If you have sleep disorders or health concerns, please consult a qualified medical professional.

我们可能不时更新本隐私政策。页面顶部的"最近更新"日期反映最新修订。若发生重大变更（如新增云端同步或扩大数据收集范围），我们将通过应用内通知或其他适当方式提前告知您，并在取得您同意后（如法律要求）实施。

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. If a material change occurs (for example, adding cloud sync or expanding data collection), we will notify you in advance through in-app notice or other appropriate means, and implement it with your consent where required by law.

如果您对本隐私政策、您的数据或隐私权有任何疑问、意见或请求（包括数据删除与导出请求），请通过以下方式与我们联系：

我们通常会在 15 个工作日内回复您的请求。

If you have any questions, concerns, or requests about this Privacy Policy, your data, or your privacy rights (including deletion and export requests), please contact us at:

We typically respond within 15 business days.