每日轻记（LeanLog）重视你的隐私。我们尽量少收集数据，并让健康记录留在你可控的范围内。
| 类型 | 用途 | 存储位置 |
|---|---|---|
| 体重、饮食、目标与身体资料 | 提供记录、统计与洞察 | 默认保存在你的设备（SwiftData）；若开启 iCloud，则经 Apple CloudKit 同步 |
| 餐食照片 | 识别食物并估算热量 | 设备本地保存你确认后的记录；识别时会上传至我们的 API（见下） |
| 健康 App 体重（可选） | 读写体重以保持一致 | 经 Apple HealthKit，仅在你授权后 |
| 通知 | 轻柔提醒记录 | 本地通知，不上传内容 |
| 匿名设备标识 | AI 调用配额与订阅状态 | 设备 Keychain 生成的 UUID，随请求发送至我们的 API |
| App Store 订阅凭证 | 验证 Pro 订阅 | 经 Apple；我们仅保存订阅到期等信息 |
| Sign in with Apple（可选） | 购买 AI 次数包时绑定余额，便于换机保留 | 经 Apple；我们保存 Apple 用户标识（sub）与次数余额，可选用私密接力邮箱 |
| AI 次数包购买凭证 | 验证消耗型内购入账 | 经 Apple；按交易号幂等入账，次数永不过期 |
| 技术日志（如请求 ID） | 排查识别服务故障 | 不含原图长期存储（见 API 设计） |
当你使用「拍照记录饮食」时，压缩后的餐食图片会发送至：
https://api.ulooo.com/leanlog/api/scran
并由我们的服务器转发至第三方 AI 服务：阿里云百炼（通义千问视觉模型，DashScope），用于食物识别与热量估算。识别结果仅作建议，保存前你可以修改。图片按服务端策略短期处理，不落盘长期保存原图，不用于广告画像。洞察文案（若启用云端）仅发送聚合统计数字，不发送照片。
首次打开 App 时，我们会展示隐私与第三方 AI 说明；你需同意后才能继续使用。你也可以始终使用手动记餐，不触发照片上传。
免费用户每月有有限 AI 调用次数；订阅用户每日额度更高。也可购买消耗型 AI 次数包（扫餐与洞察共用，永不过期）。订阅与次数包均通过 Apple 内购完成，价格以 App Store 显示为准。
购买次数包前需使用 Sign in with Apple，以便将余额挂到你的 Apple 身份并在换机后恢复。日记、免费额度与 Pro 订阅仍可不登录使用。你可在设置中退出登录或删除账号（删除账号会清空未使用的次数余额；本机日记仍保留）。
如有隐私问题，请联系：support@ulooo.com
LeanLog respects your privacy. We collect as little as possible and keep health logs under your control.
| Data | Purpose | Where |
|---|---|---|
| Weight, meals, goals, body profile | Logging, stats, insights | On-device by default (SwiftData); Apple CloudKit if iCloud is enabled |
| Meal photos | Food recognition & calorie estimates | Kept locally after you save; uploaded to our API for recognition |
| Apple Health weight (optional) | Read/write weight sync | HealthKit, only with your permission |
| Notifications | Gentle reminders | Local notifications; content not uploaded |
| Anonymous device ID | AI quota & subscription | UUID in Keychain; sent with API requests |
| App Store subscription | Verify Pro entitlement | Via Apple; we store expiry metadata |
| Sign in with Apple (optional) | Bind AI credit balance across devices | Via Apple; we store Apple user sub and credit balance; Hide My Email supported |
| AI credit pack receipts | Credit consumable purchases | Via Apple; idempotent by transaction ID; credits never expire |
| Technical logs (e.g. request IDs) | Debug recognition service | No long-term raw photo retention |
When you use photo meal logging, a compressed meal image is sent to:
https://api.ulooo.com/leanlog/api/scran
and forwarded by our servers to a third-party AI provider: Alibaba Cloud Model Studio / Bailian (Qwen vision models via DashScope) for food recognition and calorie estimates. Results are suggestions you can edit before saving. Photos are processed per server policy, are not retained as long-term raw images, and are not used for advertising profiles. Insight APIs (if enabled) send aggregated numbers only, not photos.
On first launch we show a privacy and third-party AI notice; you must agree before continuing. You can always log meals manually without uploading photos.
Free users have a limited monthly AI allowance; subscribers get a higher daily allowance. You may also buy consumable AI credit packs (shared by scans and insights; never expire). Subscriptions and credit packs use Apple In-App Purchase.
Buying credits requires Sign in with Apple so balance can follow your Apple identity across devices. Diary, free AI quotas, and Pro remain usable without signing in. You can sign out or delete your account in Settings (deleting clears unused credits; on-device diary stays).
Privacy questions: support@ulooo.com