2U Chat 隐私政策 Privacy Policy 2U Chat Pty Ltd 版本 Version v2.0（正式版 / Final）　|　生效日期 Effective 2026年9月1日 / 1 September 2026 目　录 第一章　导言　·　Chapter 1　Introduction 第二章　我们的角色与适用范围　·　Chapter 2　Our Role and Scope 第三章　我们收集的信息　·　Chapter 3　Information We Collect 第四章　信息的来源　·　Chapter 4　Sources of Information 第五章　我们如何使用信息及法律依据　·　Chapter 5　How We Use Information and the Legal Bases 第六章　人工智能处理与模型训练　·　Chapter 6　AI Processing and Model Training 第七章　My AI 记忆机制　·　Chapter 7　My AI Memory 第八章　信息的共享与披露　·　Chapter 8　Sharing and Disclosure 第九章　跨境传输与境内处理规则　·　Chapter 9　Cross-Border Transfers and Domestic Processing Rules 第十章　Cookie 与类似技术　·　Chapter 10　Cookies and Similar Technologies 第十一章　保存期限　·　Chapter 11　Retention Periods 第十二章　安全措施　·　Chapter 12　Security Measures 第十三章　您的权利与行使方式　·　Chapter 13　Your Rights and How to Exercise Them 第十四章　儿童与未成年人　·　Chapter 14　Children and Minors 第十五章　政策变更　·　Chapter 15　Changes to this Policy 第十六章　联系与投诉　·　Chapter 16　Contact and Complaints 附录一　地区特别说明　·　Appendix 1　Region-Specific Notes 附录二　第三方服务商类别清单　·　Appendix 2　Categories of Third-Party Service Providers 附录三　版本变更履历　·　Appendix 3　Revision History 第一章　导言 Chapter 1　Introduction 2U Chat Pty Ltd（下称"我们"）尊重并保护您的隐私。本《隐私政策》说明我们在您使用 2U Chat 应用、www.2u.chat、app.2u.chat、myai.ac 及相关服务（下称"本服务"）时，如何收集、使用、存储、共享与保护您的个人信息，以及您就此享有的权利。 2U Chat Pty Ltd ("we", "us") respects and protects your privacy. This Privacy Policy explains how we collect, use, store, share and protect your personal information when you use the 2U Chat application, www.2u.chat, app.2u.chat, myai.ac and related services (the Services), and what rights you have in relation to it. 请您在使用本服务前完整阅读本政策。我们已用加粗标注与您权益密切相关的条款。 Please read this Policy in full before using the Services. We have bolded the provisions most closely affecting your interests. 本政策与《用户服务协议》《社区规范与内容政策》《儿童安全标准》共同构成我们与您之间的完整约定。 This Policy, together with the Terms of Service, the Community Guidelines and Content Policy and the Child Safety Standards, constitutes the complete agreement between us and you. 第二章　我们的角色与适用范围 Chapter 2　Our Role and Scope 2.1　数据控制者 2.1　Data controller 就本服务处理的个人信息，2U Chat Pty Ltd（ACN 633 419 995 / ABN 32 633 419 995，地址 319 Hallam North Road, Lysterfield South, VIC 3765, Australia）为数据控制者（GDPR 项下的"控制者"、中国法项下的"个人信息处理者"）。 In respect of personal information processed through the Services, 2U Chat Pty Ltd (ACN 633 419 995 / ABN 32 633 419 995, of 319 Hallam North Road, Lysterfield South, VIC 3765, Australia) is the data controller (the "controller" for GDPR purposes and the "personal information handler" under Chinese law). 2.2　适用范围 2.2　Scope 本政策适用于我们通过本服务收集的个人信息。本政策不适用于： This Policy applies to personal information we collect through the Services. This Policy does not apply to: 第三方网站、应用或服务（即使可从本服务访问）； third-party websites, applications or services (even where accessible from the Services); 其他用户对您公开发布内容的使用； other users' use of content you have published publicly; 我们作为受托方为企业客户处理数据的场景（该等场景适用单独的数据处理协议）。 circumstances in which we process data as a processor for business customers (which are governed by separate data processing agreements). 第三章　我们收集的信息 Chapter 3　Information We Collect 3.1　您主动提供的信息 3.1　Information you provide 账号信息：手机号、邮箱、2U 号码、昵称、密码（以不可逆方式加密存储）、头像、性别、生日、所在地区。 Account information: mobile number, email address, 2U number, display name, password (stored using irreversible encryption), avatar, gender, date of birth and region. 身份认证信息：在法律要求或您使用特定功能时收集的实名信息、证件信息。 Identity verification information: real-name and identity document information collected where required by law or where you use particular features. 支付信息：交易记录、订单信息、钱包余额。完整的银行卡号与支付密码由持牌支付机构处理，我们不存储。 Payment information: transaction records, order information and wallet balances. Full card numbers and payment passwords are handled by licensed payment institutions and are not stored by us. 用户内容：您上传或发布的文字、图片、音频、视频、文件及作品。 User content: text, images, audio, video, files and works you upload or publish. 沟通信息：您与客服的往来记录、反馈、举报与申诉材料。 Communications: your correspondence with customer support, feedback, reports and appeal materials. 3.2　您使用服务时自动产生的信息 3.2　Information generated automatically when you use the Services 设备信息：设备型号、操作系统、唯一设备标识符、屏幕参数、语言与时区设置。 Device information: device model, operating system, unique device identifiers, screen parameters, language and time zone settings. 日志信息：IP 地址、访问时间、访问页面与功能、崩溃日志、性能数据。 Log information: IP address, access times, pages and features accessed, crash logs and performance data. 网络信息：网络类型、运营商信息。 Network information: network type and carrier information. 使用行为信息：功能使用频次、内容浏览与互动记录、会话时长。 Usage information: frequency of feature use, content viewing and interaction records, session duration. 3.3　敏感个人信息 3.3　Sensitive personal information 下列信息在适用法律下属于敏感个人信息或特殊类别数据，我们仅在取得您单独同意或存在其他合法依据时收集与处理： The following is sensitive personal information or special category data under applicable law, and we collect and process it only where we have obtained your separate consent or another lawful basis applies: 语音与声纹：您在语音通话、语音消息、声音克隆功能中提供的音频。声纹属于生物识别信息。 Voice and voiceprint: audio you provide through voice calls, voice messages and voice cloning features. A voiceprint is biometric information. 人脸与肖像：您上传的包含人脸的照片、用于数字形象或换脸功能的影像。 Face and likeness: photographs you upload containing faces, and imagery used for digital persona or face-swap features. 精确地理位置：仅在您开启相应功能并授权时收集。 Precise location: collected only where you enable the relevant feature and grant permission. 通讯录：仅在您明确同意并授权时读取，用于好友推荐；我们不会在未获授权时上传您的通讯录。 Contacts: read only with your express consent and permission, for friend suggestions; we do not upload your contacts without authorisation. 与 My AI 的私密对话：可能包含您的健康、情感、信仰、性取向等信息。我们将其作为敏感信息保护。 Private conversations with My AI: these may contain information about your health, emotions, beliefs or sexual orientation. We protect them as sensitive information. 实名与证件信息：仅在法律强制要求的场景收集。 Real-name and identity document information: collected only where mandated by law. 您有权拒绝提供敏感个人信息；拒绝将导致相应功能不可用，但不影响本服务其他功能的使用。 You may decline to provide sensitive personal information. Declining will make the relevant feature unavailable but will not affect your use of the other features of the Services. 3.4　我们不收集的信息 3.4　Information we do not collect 我们不主动收集您的种族、政治观点、宗教信仰、工会成员身份或基因数据。若该等信息偶然出现在您上传的内容中，我们仅按存储与传输的必要进行技术处理，不作分析或画像。 We do not actively collect information about your race, political opinions, religious beliefs, trade union membership or genetic data. Where such information happens to appear in content you upload, we process it technically only as necessary for storage and transmission, and do not analyse or profile on the basis of it. 第四章　信息的来源 Chapter 4　Sources of Information 您本人直接提供； provided directly by you; 您使用本服务时自动生成； generated automatically when you use the Services; 在您授权的前提下，来自第三方登录服务（如应用商店账号、社交账号）的基本信息； basic information from third-party sign-in services (such as app store or social accounts), where you have authorised this; 来自合作商户或推荐人的关联信息（仅限于建立商圈关系所必需）； linkage information from partner merchants or referrers (limited to what is necessary to establish a merchant network relationship); 来自公开渠道或依法从有权机关取得的信息。 information from public sources or lawfully obtained from competent authorities. 第五章　我们如何使用信息及法律依据 Chapter 5　How We Use Information and the Legal Bases 5.1　使用目的 5.1　Purposes 创建与管理账号、身份验证、老用户账号认领； creating and managing accounts, identity verification and legacy account claiming; 提供 My AI 对话、语音、翻译、创作、社交、商圈等核心功能； providing core features including My AI conversation, voice, translation, creation, social and merchant network functions; 处理支付、结算 A2U 与分成、开具凭证； processing payments, settling A2U and revenue shares, and issuing records; 内容审核、反欺诈、反滥用、账号安全与风险控制； content moderation, anti-fraud, anti-abuse, account security and risk control; 客服支持、故障排查、投诉与申诉处理； customer support, troubleshooting, and handling complaints and appeals; 服务改进、统计分析与产品研发（尽可能使用去标识化或聚合数据）； service improvement, statistical analysis and product development (using de-identified or aggregated data wherever possible); 在您同意的范围内进行个性化推荐与营销； personalised recommendation and marketing, to the extent you have consented; 履行法律义务、配合有权机关的合法要求、行使或维护法律主张。 discharging legal obligations, responding to lawful requests from competent authorities, and establishing or defending legal claims. 5.2　法律依据（适用于欧洲经济区、瑞士及英国用户） 5.2　Legal bases (for users in the European Economic Area, Switzerland and the United Kingdom) 履行合同所必需：提供您所请求的核心功能、处理支付。 Performance of a contract: providing the core features you have requested and processing payments. 您的同意：敏感数据处理、精确定位、通讯录读取、个性化营销、可选的模型训练。同意可随时撤回，撤回不影响撤回前处理的合法性。 Your consent: processing of sensitive data, precise location, reading contacts, personalised marketing, and optional model training. Consent may be withdrawn at any time; withdrawal does not affect the lawfulness of processing before withdrawal. 合法利益：保障服务与账号安全、防范欺诈与滥用、改进产品。我们已就此进行利益衡量评估，并将在您要求时提供摘要。 Legitimate interests: securing the Services and accounts, preventing fraud and abuse, and improving our products. We have carried out a balancing assessment and will provide a summary on request. 法律义务：税务、反洗钱、内容合规、儿童保护与应对有权机关要求。 Legal obligation: tax, anti-money laundering, content compliance, child protection and responding to competent authorities. 重大利益：在涉及生命健康的紧急情形下保护您或他人。 Vital interests: protecting you or another person in an emergency involving life or health. 5.3　自动化决策 5.3　Automated decision-making 我们在内容审核与风险控制中使用自动化手段。可能对您产生重大影响的决定（如永久封禁）不会仅依赖自动化处理作出，您有权要求人工复核，并按《用户服务协议》第 14.5 条提出申诉。 We use automated means in content moderation and risk control. Decisions capable of significantly affecting you (such as a permanent ban) are not made solely by automated processing. You may request human review and may appeal under clause 14.5 of the Terms of Service. 第六章　人工智能处理与模型训练 Chapter 6　AI Processing and Model Training 6.1　您正在与人工智能交互 6.1　You are interacting with artificial intelligence My AI 及本服务的相关功能由人工智能系统驱动。My AI 不是真实的人。我们会以明确方式进行标识，并对 AI 生成内容添加标识。 My AI and the related features of the Services are powered by artificial intelligence systems. My AI is not a real person. We label this clearly and apply labels to AI-generated content. 6.2　处理方式 6.2　How processing occurs 为生成回复，您的输入（可能包括文本、语音、图片）将被传输至我们或我们选定的模型服务商进行处理。我们通过合同要求相应服务商： To generate a response, your input (which may include text, voice and images) is transmitted to us or to a model service provider we have selected. We require each such provider by contract to: 仅为向您提供服务之目的处理数据； process the data solely for the purpose of providing the Services to you; 不得将您的内容用于训练其自有模型； not use your content to train its own models; 在处理完成后按约定期限删除数据； delete the data within the agreed period once processing is complete; 采取不低于本政策所述标准的安全措施。 apply security measures no lower than the standards described in this Policy. 6.3　模型训练 6.3　Model training 我们不会将您的私密内容（与 My AI 的对话、上传至私人空间的照片与语音、长期记忆内容）用于训练通用人工智能模型，除非您另行给予单独、明示的同意。 We do not use your private content (conversations with My AI, photographs and voice uploaded to your private space, and long-term memory content) to train general-purpose artificial intelligence models, unless you have separately given express consent. 该同意通过独立的开关或勾选项取得，不包含在本政策或《用户服务协议》的整体接受之中；未开启该开关的，即为不同意。 That consent is obtained through a separate toggle or checkbox and is not included in your overall acceptance of this Policy or the Terms of Service; if the toggle is not enabled, consent has not been given. 您同意后可随时在设置中关闭该开关以撤回同意；撤回后我们将停止将新数据用于训练。已纳入既有训练成果的部分因技术原因可能无法完全移除，我们将在撤回时向您说明。 Having consented, you may withdraw at any time by turning the toggle off in settings; we will then stop using new data for training. For technical reasons, data already incorporated into existing training results may not be fully removable, and we will explain this to you at the time of withdrawal. 6.4　人工审核 6.4　Human review 为保障安全与质量，极少量内容可能被授权人员进行人工审核，触发情形限于： To safeguard safety and quality, a very small volume of content may be reviewed by authorised personnel, limited to the following triggers: 自动系统标记的疑似违法或高风险内容； content flagged by automated systems as suspected unlawful or high risk; 您主动提交的举报或客服请求； a report or support request you have submitted; 法律要求或调查安全事件所必需。 where required by law or necessary to investigate a security incident. 人工审核在最小必要范围内进行，审核人员受保密义务约束，操作留有审计记录。 Human review is carried out to the minimum extent necessary, reviewers are bound by confidentiality obligations, and their actions are logged for audit. 6.5　单独同意的取得方式 6.5　How separate consent is obtained 依据中国《个人信息保护法》第 29 条与欧盟《通用数据保护条例》第 9 条，下列处理活动均需取得您的单独同意。我们通过独立的界面元素（开关、勾选框或确认按钮）逐项取得，并在其旁提供简明说明；您可随时在「设置—隐私」中逐项查看与撤回： Under Article 29 of China's Personal Information Protection Law and Article 9 of the EU General Data Protection Regulation, the following processing activities each require your separate consent. We obtain it item by item through discrete interface elements (a toggle, checkbox or confirmation button) with a plain-language explanation alongside; you may review and withdraw each of them at any time under "Settings — Privacy": 处理活动 取得方式 关闭后的影响 开启 My AI 长期记忆 首次进入 My AI 时的独立开关 My AI 不再保存跨会话的记忆，每次对话独立 将私密内容用于模型训练 设置中的独立开关，默认关闭 不影响任何功能的使用 声纹采集与声音克隆 使用该功能前的独立确认，含用途与保存期限说明 无法使用声音克隆功能 人脸与肖像用于数字形象生成 上传素材时的独立确认 无法使用数字形象与换脸功能 精确地理位置 系统权限弹窗 + 应用内独立开关 位置相关功能不可用，不影响其他功能 读取通讯录 独立同意弹窗，说明用途与不上传承诺 无法使用基于通讯录的好友推荐 个性化推荐与营销 设置中的独立开关 仍可使用服务，但推荐内容不再个性化 Processing activity How consent is obtained Effect of turning it off Enabling My AI long-term memory Discrete toggle on first entering My AI My AI no longer retains memory across sessions; each conversation is independent Using private content for model training Discrete toggle in settings, off by default No effect on the use of any feature Voiceprint collection and voice cloning Discrete confirmation before use, stating purpose and retention period Voice cloning unavailable Face and likeness for digital persona generation Discrete confirmation when uploading material Digital persona and face-swap features unavailable Precise location System permission prompt plus in-app toggle Location-based features unavailable; no effect on other features Reading contacts Discrete consent prompt explaining purpose and the no-upload undertaking Contacts-based friend suggestions unavailable Personalised recommendation and marketing Discrete toggle in settings Services remain usable, but recommendations are no longer personalised 第七章　My AI 记忆机制 Chapter 7　My AI Memory 为提供连贯的陪伴体验，My AI 会保存关于您的长期记忆。 To provide a coherent companion experience, My AI retains long-term memory about you. 开启方式：长期记忆功能通过独立开关开启，不随本政策的整体接受而自动启用。开启前我们会以简明文字说明记忆的内容范围、保存期限与关闭方式。 How it is enabled: long-term memory is enabled through a discrete toggle and is not switched on automatically by your overall acceptance of this Policy. Before enabling, we explain in plain language what is remembered, for how long, and how to turn it off. 记忆内容：来自您与 My AI 的对话，可能包含您的偏好、经历、关系与情感状态。该等信息可能构成敏感个人信息，我们按敏感信息的标准予以保护。 What is remembered: material from your conversations with My AI, which may include your preferences, experiences, relationships and emotional state. Such information may constitute sensitive personal information and we protect it to the sensitive information standard. 生命周期：记忆按"培育—提醒—清理"三阶段管理。长期不活跃的记忆将在提示后按规则清理，具体保留时长与您的会员等级相关，并在产品内公示。 Life cycle: memory is managed in three phases — cultivation, reminder and clearance. Memory that has been inactive for a long period is cleared under the applicable rules after a prompt; the specific retention period varies with your membership tier and is published in-product. 您的控制权：您可随时查看、编辑或删除单条记忆，或一次性清空全部记忆。清空后 My AI 将不再引用相关信息。 Your control: you may view, edit or delete individual memories at any time, or clear all memory at once. Once cleared, My AI will no longer draw on that information. 技术实现：记忆以向量化形式存储用于检索。向量化处理由符合第九章规则的服务商完成。 How it works: memory is stored in vectorised form for retrieval. Vectorisation is performed by providers meeting the requirements of Chapter 9. 第八章　信息的共享与披露 Chapter 8　Sharing and Disclosure 我们不出售您的个人信息。我们仅在下列情形共享您的信息： We do not sell your personal information. We share your information only in the following circumstances: 8.1　服务商 8.1　Service providers 我们委托第三方服务商提供云计算与存储、人工智能模型、语音合成与识别、实时音视频、内容审核、支付、消息推送、数据分析等能力。服务商类别见附录二。我们与每一服务商签署数据处理协议，限定其处理目的与范围，并要求其承担保密与安全义务。 We engage third-party service providers for cloud computing and storage, artificial intelligence models, speech synthesis and recognition, real-time audio and video, content moderation, payments, push messaging and data analytics. The categories of provider are set out in Appendix 2. We enter into a data processing agreement with each provider, limiting the purpose and scope of processing and imposing confidentiality and security obligations. 8.2　其他用户 8.2　Other users 您主动公开发布的内容、公开的个人资料以及您在社交与商圈互动中主动展示的信息，将对相应范围的用户可见。请审慎发布个人信息。 Content you publish publicly, your public profile, and information you choose to display in social and merchant network interactions will be visible to the corresponding audience. Please exercise care when publishing personal information. 8.3　商户与合作方 8.3　Merchants and partners 在您参与商圈交易或使用商户服务时，我们将向相关商户提供完成交易所必需的最小信息。 Where you transact in the merchant network or use merchant services, we provide the relevant merchant with the minimum information necessary to complete the transaction. 8.4　法律要求与安全 8.4　Legal requirements and safety 在下列情形我们可能披露信息： We may disclose information where: 依据法律法规、法院命令或有权机关的合法要求； required by law, court order or lawful request of a competent authority; 为保护本平台或他人的合法权益、财产或安全； necessary to protect the lawful rights, property or safety of the platform or others; 为侦测、防止或处理欺诈、安全风险或技术问题； necessary to detect, prevent or address fraud, security risks or technical problems; 为保护未成年人免受性剥削与性虐待，并向有权机关或指定机构报告。 necessary to protect minors from sexual exploitation and abuse, and to report to competent authorities or designated bodies. 在法律允许的范围内，我们将在披露前通知您。 So far as the law permits, we will notify you before disclosing. 8.5　业务变更 8.5　Business changes 如发生合并、收购、重组或资产转让，您的信息可能作为交易资产转移。我们将提前告知，接收方将继续受本政策约束；如接收方拟变更处理目的，将重新征得您的同意。 In the event of a merger, acquisition, restructure or asset transfer, your information may be transferred as an asset of the transaction. We will give advance notice, and the recipient will continue to be bound by this Policy; if the recipient intends to change the purposes of processing, fresh consent will be sought. 第九章　跨境传输与境内处理规则 Chapter 9　Cross-Border Transfers and Domestic Processing Rules 9.1　总体说明 9.1　General 我们在澳大利亚、新加坡、日本及美国等地的数据中心存储与处理数据。您的信息可能被传输至您所在国家或地区以外的地方。 We store and process data in data centres in Australia, Singapore, Japan and the United States. Your information may be transferred outside your country or region. 9.2　中国大陆用户的境内处理规则 9.2　Domestic processing rule for mainland China users 对于中国大陆用户，下列私密内容仅在中国境内由境内服务商处理，不向境外传输： For users in mainland China, the following private content is processed only within mainland China by domestic service providers and is not transferred offshore: 您与 My AI 的对话内容与长期记忆； your conversations with My AI and your long-term memory; 您上传的照片、影像与文件； photographs, imagery and files you upload; 您的语音与声纹数据。 your voice and voiceprint data. 该规则以技术手段强制执行。相应境内能力不可用时，服务将直接返回错误提示，而不会转由境外服务商处理。 This rule is enforced technically. Where the corresponding domestic capability is unavailable, the service returns an error rather than routing the request to an offshore provider. 9.3　欧洲经济区、瑞士及英国用户 9.3　Users in the European Economic Area, Switzerland and the United Kingdom 向第三国传输个人数据时，我们采用下列一项或多项保障措施： When transferring personal data to a third country, we rely on one or more of the following safeguards: 欧盟委员会的充分性认定； an adequacy decision of the European Commission; 欧盟标准合同条款（SCCs）及英国国际数据传输附录； EU Standard Contractual Clauses and the UK International Data Transfer Addendum; 传输影响评估与必要的补充措施（加密、假名化、访问控制）。 a transfer impact assessment and any necessary supplementary measures (encryption, pseudonymisation, access controls). 您可通过第十六章的联系方式索取相关保障措施的副本。 You may request a copy of the relevant safeguards using the contact details in Chapter 16. 9.4　其他用户 9.4　Other users 我们将依据您所在地法律采取相应的传输合规措施，并要求接收方提供不低于本政策的保护水平。 We will apply transfer compliance measures appropriate to the law of your jurisdiction and require recipients to provide protection no lower than that described in this Policy. 第十章　Cookie 与类似技术 Chapter 10　Cookies and Similar Technologies 我们在网页端使用 Cookie、本地存储与类似技术，在移动端使用软件开发工具包（SDK）与设备标识符，用于： On the web we use cookies, local storage and similar technologies; on mobile we use software development kits (SDKs) and device identifiers, for the following purposes: 必要：维持登录状态、保障安全、实现基本功能（无法关闭）； Necessary: maintaining your session, securing the Services and delivering core functionality (cannot be disabled); 功能：记住您的偏好设置； Functional: remembering your preferences; 分析：统计使用情况以改进产品； Analytics: measuring usage in order to improve the product; 营销：在您同意时用于个性化推荐与广告衡量。 Marketing: personalised recommendation and advertising measurement, where you have consented. 您可通过浏览器设置、应用内隐私设置或首次访问时的偏好管理面板管理非必要类别。在欧洲经济区与英国，非必要类别在取得您同意前不会启用。 You can manage the non-essential categories through your browser settings, the in-app privacy settings, or the preference panel presented on first visit. In the European Economic Area and the United Kingdom, non-essential categories are not enabled before your consent is obtained. 第十一章　保存期限 Chapter 11　Retention Periods 我们仅在实现处理目的所必需的期限内保存您的个人信息，具体如下： We retain your personal information only for as long as necessary to achieve the purposes of processing, as follows: 账号信息：账号存续期间；账号注销后30日内从生产系统删除或匿名化，法律要求保留的除外。 Account information: for the life of the account; deleted from or anonymised in production systems within 30 days of account closure, except where retention is required by law. 用户内容与聊天记录：您删除后立即从可访问范围移除，并在30日内从生产系统与热备份中清除。 User content and chat records: removed from your accessible scope immediately on deletion, and purged from production systems and hot backups within 30 days. My AI 长期记忆：按第七章的生命周期规则管理。 My AI long-term memory: managed under the life cycle rules in Chapter 7. 交易与账务记录：依据税务与会计法规保存7年。 Transaction and accounting records: retained for 7 years under tax and accounting legislation. 日志与安全记录：一般保存6个月至12个月；涉及安全事件的可延长至事件处理完毕。 Logs and security records: generally retained for 6 to 12 months; where a security incident is involved, until the incident is resolved. 实名与身份认证信息：依法律规定的期限保存。 Real-name and identity verification information: retained for the period prescribed by law. 保存期届满后，我们将删除或以不可逆方式匿名化处理。 On expiry of the retention period we delete the information or anonymise it irreversibly. 11.1　关于备份数据 11.1　Backup data 为满足灾难恢复的需要，我们保有与生产系统隔离的冷备份。您删除数据或注销账号后： For disaster recovery purposes we maintain cold backups isolated from production systems. After you delete data or close your account: 相关数据将立即从生产系统与您的可访问范围移除； the data is removed from production systems and from your accessible scope immediately; 冷备份中的对应数据将在90日的备份轮转周期内被覆盖清除； the corresponding data in cold backups is overwritten and purged within the 90-day backup rotation cycle; 在该期间内，冷备份处于严格隔离状态，仅用于灾难恢复，不用于任何业务处理、分析、推荐或模型训练，且访问需经审批并留有审计记录； during that period the cold backups are strictly isolated and used only for disaster recovery — not for any business processing, analytics, recommendation or model training — and access requires approval and is logged for audit; 如因灾难恢复而必须从备份还原数据，我们将在还原后重新执行您的删除请求。 if data must be restored from backup for disaster recovery, we will re-apply your deletion request after restoration. 第十二章　安全措施 Chapter 12　Security Measures 我们采取符合行业标准的技术与管理措施保护您的信息，包括： We apply technical and organisational measures consistent with industry standards to protect your information, including: 传输层加密（TLS）与敏感字段的存储加密； transport layer encryption (TLS) and encryption at rest for sensitive fields; 基于最小权限原则的访问控制、默认拒绝的数据库行级安全策略； least-privilege access controls and deny-by-default row level security policies in the database; 密钥与凭证的隔离管理，生产环境凭证不进入开发工具链； isolated management of keys and credentials, with production credentials kept out of the development toolchain; 定期安全审计、漏洞扫描与权限复核； regular security audits, vulnerability scanning and access reviews; 员工保密协议与数据安全培训； staff confidentiality undertakings and data security training; 数据备份与灾难恢复机制。 data backup and disaster recovery arrangements. 但请您理解，互联网环境并非绝对安全。我们无法保证信息的绝对安全。请妥善保管账号凭证，避免在公开场合分享敏感信息。 However, please understand that no internet environment is absolutely secure. We cannot guarantee absolute security. Please safeguard your account credentials and avoid sharing sensitive information in public settings. 发生可能造成严重损害的数据泄露事件时，我们将依据适用法律（包括澳大利亚"应通报的数据泄露"制度、GDPR 第 33/34 条）在法定时限内向监管机构报告，并在必要时通知受影响用户。 Where a data breach occurs that is likely to cause serious harm, we will report to the regulator within the statutory timeframe under applicable law (including the Australian Notifiable Data Breaches scheme and Articles 33 and 34 of the GDPR) and, where necessary, notify affected users. 第十三章　您的权利与行使方式 Chapter 13　Your Rights and How to Exercise Them 13.1　您享有的权利 13.1　Your rights 在适用法律范围内，您有权： To the extent provided by applicable law, you have the right to: 查阅您的个人信息及处理情况； access your personal information and information about how it is processed; 更正不准确或不完整的信息； rectify inaccurate or incomplete information; 删除您的个人信息（在符合法定条件时）； erase your personal information (where the statutory conditions are met); 限制特定处理活动； restrict particular processing activities; 反对基于合法利益的处理及直接营销； object to processing based on legitimate interests and to direct marketing; 可携：以结构化、通用、机器可读的格式获取您提供的信息，或请求传输至其他控制者； portability: obtain the information you have provided in a structured, commonly used, machine-readable format, or have it transmitted to another controller; 撤回同意：随时撤回您已给予的同意； withdraw consent at any time; 要求人工干预：就自动化决策要求人工复核与说明； obtain human intervention: request human review of, and an explanation for, an automated decision; 注销账号：终止服务并删除数据； close your account: end the Services and have your data deleted; 就已故用户：近亲属可依法就相关信息行使查阅、复制、更正、删除等权利。 in respect of a deceased user: close relatives may exercise rights of access, copying, rectification and erasure as provided by law. 13.2　行使方式 13.2　How to exercise them 多数权利可直接在应用内"设置—隐私"中行使，包括查阅与导出数据、管理记忆、管理授权、注销账号。您也可通过第十六章的联系方式提出请求。 Most rights can be exercised directly under "Settings — Privacy" in the app, including accessing and exporting your data, managing memory, managing permissions and closing your account. You may also make a request using the contact details in Chapter 16. 我们将在收到请求后 30日内答复（复杂请求可延长30日并说明理由）。为保护您的权益，我们可能需要先验证您的身份。 We will respond within 30 days of receiving your request (which may be extended by 30 days for complex requests, with reasons given). To protect your interests, we may first need to verify your identity. 我们原则上免费处理您的请求；对明显无依据或过度重复的请求，我们可能收取合理费用或拒绝，并说明理由。 We handle requests free of charge as a rule; for manifestly unfounded or excessively repetitive requests we may charge a reasonable fee or decline, giving reasons. 13.3　拒绝的情形 13.3　Where we may decline 在下列情形我们可能无法完全满足您的请求： We may be unable to give full effect to your request where: 与我们履行法定义务直接相关； it relates directly to our discharge of a legal obligation; 与国家安全、公共安全、刑事侦查直接相关； it relates directly to national security, public safety or criminal investigation; 有充分证据表明您存在恶意或滥用权利； there is sufficient evidence of bad faith or abuse of rights on your part; 满足请求将严重损害他人合法权益。 meeting the request would seriously prejudice the lawful rights of others. 第十四章　儿童与未成年人 Chapter 14　Children and Minors 本服务面向成年人。我们不会在明知的情况下，在未取得监护人有效同意时收集低于所在司法辖区法定数字同意年龄的儿童的个人信息。 The Services are directed at adults. We do not knowingly collect the personal information of a child below the digital age of consent in their jurisdiction without valid guardian consent. 各法域的年龄门槛存在差异，我们在注册环节按用户所在地动态适配拦截规则： Age thresholds differ between jurisdictions, and we apply blocking rules dynamically at registration according to the user's location: 司法辖区 门槛年龄 依据与说明 中国大陆 不满 14 周岁 《个人信息保护法》第 31 条：不满十四周岁未成年人的个人信息属敏感个人信息，须取得监护人同意并制定专门处理规则 欧洲经济区 13 至 16 周岁（各成员国不同） GDPR 第 8 条允许成员国在 13 至 16 岁之间自行设定；我们按用户所在成员国的规定适配 英国 13 周岁 英国 GDPR 第 8 条；另适用 ICO《儿童适龄设计准则》 美国 13 周岁 COPPA 澳大利亚 《1988 年隐私法》未设固定年龄；另须核对社交媒体最低年龄规定及儿童在线隐私准则的适用性与生效时间 其他地区 以当地法律规定为准 无明确规定的，采用 16 周岁作为保守门槛 Jurisdiction Threshold age Basis and notes Mainland China Under 14 Article 31 PIPL: the personal information of minors under 14 is sensitive personal information, requiring guardian consent and dedicated processing rules European Economic Area 13 to 16 (varies by Member State) Article 8 GDPR permits Member States to set the age between 13 and 16; we apply the threshold of the user's Member State United Kingdom 13 Article 8 UK GDPR; the ICO Age Appropriate Design Code also applies United States 13 COPPA Australia The Privacy Act 1988 sets no fixed age; the social media minimum age provisions and the applicability and commencement of the Children's Online Privacy Code must be checked Elsewhere As prescribed by local law Where no threshold is prescribed, we apply 16 as a conservative default 未成年人在监护人同意下使用本服务的，我们将： Where a minor uses the Services with guardian consent, we will: 限制部分功能与内容； restrict certain features and content; 关闭基于行为的个性化推荐与定向广告； disable behaviour-based personalised recommendation and targeted advertising; 加强内容过滤与安全提示； strengthen content filtering and safety prompts; 依《儿童安全标准》采取额外保护措施。 apply the additional protections set out in the Child Safety Standards. 如我们发现在未取得监护人有效同意的情况下收集了儿童的个人信息，将尽快删除。监护人如发现相关情形，请通过child-safety@2u.chat联系我们，我们将优先处理。 If we find that we have collected a child's personal information without valid guardian consent, we will delete it as soon as possible. Guardians who become aware of such a situation should contact us at child-safety@2u.chat and we will treat the matter as a priority. 第十五章　政策变更 Chapter 15　Changes to this Policy 我们可能不时更新本政策。更新后的版本将在本平台公示并标注生效日期。 We may update this Policy from time to time. The updated version will be published on the platform with its effective date stated. 涉及处理目的、处理方式、信息类别或您权利的重大变更，我们将在生效前不少于 30 日以显著方式单独提示；法律要求重新取得同意的，我们将重新征求您的同意。 For material changes affecting the purposes or means of processing, the categories of information, or your rights, we will give separate, prominent notice not less than 30 days before the change takes effect; where the law requires fresh consent, we will seek it again. 我们保留本政策的历史版本，您可通过官网查阅。 We retain earlier versions of this Policy, which you may access via our website. 第十六章　联系与投诉 Chapter 16　Contact and Complaints 隐私事务联系邮箱：privacy@2u.chat Privacy enquiries: privacy@2u.chat 法律事务与通知送达：legal@2u.chat Legal matters and service of notices: legal@2u.chat 儿童安全举报：child-safety@2u.chat Child safety reports: child-safety@2u.chat 数据保护负责人 / 隐私官：隐私事务负责人（Privacy Officer），可通过 privacy@2u.chat 联系 Data protection officer / privacy officer: the Privacy Officer, contactable at privacy@2u.chat 通讯地址：319 Hallam North Road, Lysterfield South, VIC 3765, Australia Postal address: 319 Hallam North Road, Lysterfield South, VIC 3765, Australia 欧盟单一联系点（DSA Single Point of Contact）：legal@2u.chat EU Single Point of Contact (Digital Services Act): legal@2u.chat 我们将在收到您的咨询或投诉后 30日内答复。 We will respond to your enquiry or complaint within 30 days. 如您对我们的答复不满意，您有权向监管机构投诉： If you are dissatisfied with our response, you may complain to a supervisory authority: 澳大利亚：澳大利亚信息专员办公室（OAIC），www.oaic.gov.au Australia: Office of the Australian Information Commissioner (OAIC), www.oaic.gov.au 欧洲经济区：您常住地、工作地或涉嫌侵权发生地的数据保护监管机构 European Economic Area: the data protection authority of your habitual residence, place of work or the place of the alleged infringement 英国：信息专员办公室（ICO），ico.org.uk United Kingdom: Information Commissioner's Office (ICO), ico.org.uk 中国大陆：履行个人信息保护职责的有关部门 Mainland China: the departments performing personal information protection duties 附录一　地区特别说明 Appendix 1　Region-Specific Notes A.　澳大利亚 A.　Australia 我们依据《1988 年隐私法》及澳大利亚隐私原则（APPs）处理个人信息。您有权在不便的情况下匿名或使用化名与我们互动，但该等情形下我们可能无法提供需要身份识别的功能。 We handle personal information in accordance with the Privacy Act 1988 and the Australian Privacy Principles (APPs). You have the right to deal with us anonymously or by pseudonym where practicable, although in those circumstances we may be unable to provide features that require identification. B.　欧洲经济区、瑞士与英国 B.　European Economic Area, Switzerland and the United Kingdom 本政策第 5.2 条列明处理的法律依据。您享有 GDPR 第 15 至 22 条规定的全部权利，并有权向监管机构投诉。 Clause 5.2 of this Policy sets out the legal bases for processing. You have all of the rights under Articles 15 to 22 of the GDPR and the right to complain to a supervisory authority. C.　中国大陆 C.　Mainland China 我们依据《个人信息保护法》《网络安全法》《数据安全法》处理您的个人信息。处理敏感个人信息前将取得您的单独同意并告知必要性与影响。本政策第 9.2 条规定的境内处理规则对您适用。 We process your personal information in accordance with the Personal Information Protection Law, the Cybersecurity Law and the Data Security Law. Before processing sensitive personal information we obtain your separate consent and inform you of the necessity and the effect on you. The domestic processing rule in clause 9.2 applies to you. D.　美国加利福尼亚州 D.　California, United States 加州居民享有知情、删除、更正、选择退出信息"出售"或"共享"以及不因行使权利而受歧视的权利。我们不出售个人信息，也不为跨情境行为广告目的共享个人信息。 California residents have rights to know, delete, correct, opt out of the "sale" or "sharing" of information, and not to be discriminated against for exercising those rights. We do not sell personal information, and we do not share personal information for cross-context behavioural advertising. 附录二　第三方服务商类别清单 Appendix 2　Categories of Third-Party Service Providers 下表列示我们所使用的服务商类别、处理目的，以及该类别是否可处理中国大陆用户的私密内容。具体服务商名单可能变动，最新清单可通过第十六章的联系方式索取。 The table below sets out the categories of provider we use, the purposes of processing, and whether the category may process the private content of mainland China users. The specific list of providers may change; the current list may be requested using the contact details in Chapter 16. 服务商类别 处理目的 可否处理中国大陆私密内容 资质与部署要求 云计算与存储 应用托管、数据库、对象存储、内容分发 仅限境内节点 境内运营资质，数据不出境 大语言模型与生成式 AI 对话生成、文本理解、图像与视频生成 仅限境内主体 已完成生成式 AI 服务备案与算法备案 语音技术 语音识别、语音合成、实时语音对话、声音克隆 仅限境内主体 境内节点；声纹作为生物识别信息单独管控 实时音视频 音视频通话与直播传输 仅限境内节点 境内运营资质 内容审核 文本、图像、音视频的合规检测 仅限境内主体 境内运营资质 支付 支付通道、订阅计费、发票与对账 仅限持牌境内机构 支付业务许可证 消息推送与通信 推送通知、短信、邮件 仅限境内主体 境内运营资质 数据分析与崩溃监控 产品使用统计、稳定性监测 仅去标识化数据 不含私密内容 客户支持 工单系统与客服平台 仅限境内节点 境内部署 Provider category Purpose of processing May process mainland China private content Qualification and deployment requirements Cloud computing and storage Application hosting, database, object storage, content delivery Domestic nodes only Domestic operating qualification; data does not leave the country Large language models and generative AI Conversation generation, text understanding, image and video generation Domestic entities only Generative AI service filing and algorithm filing completed Voice technology Speech recognition, speech synthesis, real-time voice conversation, voice cloning Domestic entities only Domestic nodes; voiceprints controlled separately as biometric information Real-time audio and video Audio/video calling and live stream transmission Domestic nodes only Domestic operating qualification Content moderation Compliance detection for text, images, audio and video Domestic entities only Domestic operating qualification Payments Payment channels, subscription billing, invoicing and reconciliation Licensed domestic institutions only Payment business licence Push messaging and communications Push notifications, SMS, email Domestic entities only Domestic operating qualification Analytics and crash monitoring Product usage statistics, stability monitoring De-identified data only No private content Customer support Ticketing systems and support platforms Domestic nodes only Domestic deployment 境内处理规则以技术手段强制执行：处理中国大陆用户私密内容的请求被硬性路由至境内服务商；境内能力不可用时直接返回错误，不会转由境外服务商处理。 The domestic processing rule is enforced technically: requests involving the private content of mainland China users are hard-routed to domestic providers; where the domestic capability is unavailable, an error is returned rather than the request being routed to an offshore provider. 附录三　版本变更履历 Appendix 3　Revision History 版本 生效日期 主要修订内容 批准人 v1.0 未公开发布 首次发布。 2U Chat Pty Ltd 董事会 v2.0 2026年9月1日 新增敏感个人信息单独同意的取得方式与逐项清单；新增 My AI 长期记忆的独立开启机制；明确模型训练同意通过独立开关取得且默认关闭；新增冷备份隔离与清除周期说明；未成年人年龄门槛改为按司法辖区分列；第三方服务商清单改为表格并标注境内处理资质要求；联系方式标准化并指定 DSA 单一联系点。 2U Chat Pty Ltd 董事会 Version Effective date Principal changes Approved by v1.0 Not publicly released First issue. Board of 2U Chat Pty Ltd v2.0 1 September 2026 Added the method for obtaining separate consent to sensitive personal information processing, with an item-by-item schedule; added discrete opt-in for My AI long-term memory; specified that model training consent is obtained via a discrete toggle that is off by default; added cold backup isolation and purge cycle disclosure; replaced the single minor age threshold with a jurisdiction-by-jurisdiction schedule; converted the service provider list into a table with domestic processing qualification requirements; standardised contact addresses and designated the DSA single point of contact. Board of 2U Chat Pty Ltd 每次修订后，本表应同步更新。涉及处理目的、处理方式、信息类别或用户权利的重大变更，须在生效前不少于 30 日于 www.2u.chat 公示并单独提示。历史版本可通过官网查阅。 The table above is to be updated on each revision. Material changes affecting the purposes or means of processing, the categories of information, or user rights must be published at www.2u.chat with separate notice not less than 30 days before they take effect. Earlier versions are available via our website.