选择手机号登录或绑定时，我们处理你主动输入的中国大陆手机号（+86）、验证码及发送和校验记录，用于身份验证、账号绑定及注销验证；验证码请求的 IP 地址用于防滥用。短信通过腾讯云短信服务发送，接收号码和验证码消息用于完成发送。我们不会从手机系统自动读取你的手机号。你也可选择 Apple 或微信登录，无需先提供手机号；拒绝手机号绑定不影响已登录账号的成长记录功能。
Apple 登录与绑定
选择 Apple 登录或绑定时，我们验证 Apple 返回的账号标识、身份令牌及授权码，并处理你授权的姓名和邮箱；你可使用 Apple 隐藏邮箱，Apple 不提供头像。相关信息用于身份识别、绑定和账号同步。用于撤销授权的 Apple 凭证在服务端加密保存，不返回客户端；含 Apple 绑定的账号注销时须完成撤销授权，撤销失败不会显示注销成功。
提供方：深圳市腾讯计算机系统有限公司。用途：唤起微信授权并处理登录回跳，以及由你主动发起的海报或应用分享；当前应用使用不含支付的 SDK，不通过该 SDK 提供微信支付或收藏。你主动选择分享时，会将所选海报（可能包含你选择显示的宝宝昵称、成长记录及文案），或应用介绍、图标和下载链接交给微信，按你选择的好友或朋友圈范围处理；请在分享前确认内容和范围。依据腾讯的微信 Open SDK 个人信息处理规则，iOS SDK 会将用于适配登录的设备型号保存在本机，并可通过剪贴板读写应用与微信间传输的授权相关信息。应用仅在你同意协议后主动使用微信授权时、你主动发起分享时，或处理该次授权的有效回跳时注册 SDK。你可不选择微信登录，也可在微信的授权管理中撤回授权；撤回微信授权不等于注销本应用账号。腾讯规则见本政策末尾链接。
家长资料与账号绑定
你可设置头像、昵称及宝妈或宝爸角色，或选择依据宝宝昵称与角色生成默认昵称。这些资料用于识别当前家长账号，角色不是身份或性别认证。头像通过系统照片选择器获取，我们只接收你选择的图片，不读取整个相册；头像上传前会缩放、重新编码并去除照片元数据。手机号或 Apple 绑定需你主动发起并验证，只关联当前账号，不会合并已属于其他账号的登录方式；微信状态在账号页展示。资料和绑定信息保存在当前身高测量仪账号下，用于登录及同步。
山西深海科技有限公司 is responsible for personal information processing in the Height Meter app. This policy describes processing for accounts, child growth records, parent profiles, feedback, Bluetooth measurements and optional analytics in the current app. The support and privacy request email is haier@foxmail.com.
Child Growth Information and Purposes
For child profiles, we process the name or nickname, sex, date of birth, preterm status and any gestational age you provide. For measurements, we process height, weight, head circumference, date, source, notes and associated device information to save profiles and history and display growth curves and age- and sex-based references. This information is used for family records and reference, not medical diagnosis or advertising profiles.
Child Information Protection and Guardian Consent
Personal information about children under 14 and medical or health information are sensitive personal information. Profiles should be managed by parents, other guardians or authorized adult caregivers, with consent from a parent or other guardian before child information is provided. Processing is needed to save growth records and show age-appropriate references. Disclosure or misuse can affect the child's privacy; provide only necessary information. Guardians can manage profiles and records in the app or email support to request access, correction, deletion or withdrawal of consent. Do not create or upload a child's information without guardian consent.
Phone Numbers and SMS Verification
When you choose phone sign-in or binding, we process the mainland China (+86) phone number you enter, verification codes and delivery and verification records for authentication, binding and account deletion verification. The IP address of code requests is used to prevent abuse. Tencent Cloud SMS receives the destination number and code message to deliver the SMS. We do not automatically read your phone number from the phone system. Apple and WeChat sign-in do not require a phone number first; declining phone binding does not affect growth records in a signed-in account.
Sign in with Apple and Binding
When you choose Apple sign-in or binding, we verify the account identifier, identity token and authorization code returned by Apple and process the name and email you authorize. You may use Hide My Email; Apple does not provide an avatar. The information is used for authentication, binding and account sync. Apple credentials used to revoke authorization are encrypted on the server and are not returned to the client. An Apple-bound account requires successful revocation before deletion; a failed revocation is not reported as successful account deletion.
Native WeChat Sign-in and Account Identification
After you agree to the terms and actively choose WeChat sign-in, the app obtains a short-lived authorization code through WeChat. The server verifies the code and one-time authorization state and receives OpenID, UnionID and the avatar and nickname you authorize for authentication and profile display. Missing avatars or nicknames do not prevent sign-in. WeChat sign-in does not directly supply your phone number, password, contacts or chat history. A verified UnionID may identify the same Height Meter account; matching nicknames or email addresses do not merge accounts. WeChat access and refresh tokens are used only on the server to obtain the authorization result and are not persisted. The device may temporarily store a hash of the authorization state to validate the callback, but does not store the code or tokens.
WeChat Open SDK
Provider: 深圳市腾讯计算机系统有限公司. Purpose: launch WeChat authorization and handle sign-in callbacks, and share posters or the app when you actively request it. The app uses the SDK without payment and does not offer WeChat payment or favorites through it. When you choose to share, the selected poster (which may include a child's nickname you choose to display, growth records and your caption), or the app introduction, icon and download link, is sent to WeChat for handling within the friends or Moments sharing scope you select. Please confirm the content and sharing scope before sharing. Under Tencent's WeChat Open SDK processing rules, the iOS SDK stores the device model locally for sign-in compatibility and may read and write authorization-related information exchanged with WeChat through the clipboard. The app registers the SDK only when you actively use WeChat authorization after agreeing to the terms, when you actively initiate sharing, or when handling a valid callback from that authorization. You may choose another sign-in method or revoke authorization in WeChat's authorization management. Revoking WeChat authorization does not delete this app's account. Tencent's rules are linked at the end of this policy.
Parent Profiles and Account Binding
You can set an avatar, nickname and Mom or Dad role, or choose a default nickname based on a child's nickname and your role. These details identify the current parent account; a role is not verification of identity or sex. Avatars use the system photo picker. We receive only the image you choose, not your entire library; avatars are resized, re-encoded and stripped of photo metadata before upload. Phone or Apple binding requires your explicit action and verification and links only to the current account, without merging an identity owned by another account. The account page displays WeChat status. Profile and binding information is stored under the current Height Meter account for sign-in and sync.
Feedback and Photo Selection
For feedback, we process your description, selected screenshots (up to 3), optional contact details, account association, app version, build number and platform for support staff to review, investigate and reply. Screenshots use the system photo picker; only selected images are received and re-encoded as JPEG before upload, not your entire library. You can submit text feedback without an image or contact details. Avoid unnecessary sensitive child information in feedback or screenshots.
Bluetooth Devices and Permission
Bluetooth permission is used to discover and connect to compatible height meters and receive readings. Discovery processes device names, Bluetooth identifiers, signal strength and service information locally. Connection and saved measurements process brand, model, serial number or Bluetooth identifier, protocol version, binding and sync status, and raw measurement data. Identifiers of connected compatible devices are saved locally for reconnection; device bindings and saved measurements sync with the account. The app does not use Bluetooth for location tracking. You can disable Bluetooth permission in iOS Settings and still manually record and view growth data in a signed-in account.
Optional Usage Logs and Analytics
After you confirm this notice, we record session readiness, app opening, home viewing and successful profile creation or measurement saving as action types linked to your current account identifier. Event identifiers, times, pages, platform, distribution environment, app version, build and consent version support activity, retention, feature-use statistics and integration troubleshooting. Analytics events do not copy child names, birth dates, sex, height, weight, head circumference, notes or other business content, and are not used for advertising or cross-app tracking. No new analytics events are created before confirmation or if you continue without analytics. You can turn this off in Settings > Help improve the product and still use sign-in, profiles and measurements. A bounded local queue supports retries; events older than 30 days are no longer sent, and up to 500 expired diagnostic events may remain locally. Turning analytics off clears the current account's pending and expired local logs. Raw server analytics logs currently have no fixed automatic deletion period; successful account deletion removes that account's raw analytics events and receipts. Email support to request access to or deletion of existing logs; backups and legally retained information are handled under applicable requirements.
Storage and Security
Accounts, growth records, profiles, device bindings and feedback are stored on the server for account sync and support. The device stores sign-in state, preferences such as language and appearance, and Bluetooth reconnection identifiers. Service APIs use HTTPS, sign-in credentials are stored in the system Keychain, and business APIs restrict access by account. Information is kept within the scope and period needed for these services; information required by law is handled under the applicable requirements. Signing out is not deletion of server data.
Access, Correction, Withdrawal and Deletion
You can view and correct parent details and manage or delete child profiles and measurements in the app. Bluetooth permission can be disabled in iOS Settings, and Apple or WeChat authorization can be managed with those providers; revocation is not account deletion in this app. To permanently delete your account, open Me > Account & Sync > Delete Account. Bound phones require SMS verification; other accounts use a valid signed-in session and confirmation. Apple-bound accounts require revocation first. On successful deletion, the account is disabled; phone, Apple/WeChat identifiers, nickname and avatar link are cleared; parent profile and uploaded avatar, child profiles, measurements, device bindings and associated authorization credentials are cleaned up; feedback text and contact details are cleared. Email support to request access or a copy, withdraw consent to child information processing, or check handling of feedback attachments, backups and legally retained records. Signing out alone does not perform this cleanup.