KOA 隐私策略

概览

简短版：我们收集的数据极少，且大部分由你主动选择提供。你的聊天内容端到端加密，我们无法阅读。我们不使用任何追踪器或广告 SDK。

1. 我们是谁

KOA 让你爱的虚拟角色拥有真正的家，由独立开发者运营。核心功能完全在你的设备上运行，云端仅提供激活验证和可选的数据同步等辅助服务。

如有隐私相关问题，请联系：support@koasystem.com

2. 我们收集什么

我们遵循最小数据原则——能不收集就不收集，必须存储时优先使用哈希而非明文。

2.1 激活信息（购买即产生）

激活码序列号
设备指纹的哈希值（不是设备的具体信息）
激活时间

用途：验证激活码合法性、管理设备数量。

2.2 邮箱（完全可选）

仅在你主动绑定邮箱时收集
我们只存储邮箱的 SHA-256 哈希值，不存储明文
明文邮箱仅在发送验证码时短暂存在于服务器内存中，发送完毕立即丢弃

用途：账号安全（双因素验证）、找回激活码、设备管理。

2.3 同步数据（完全可选）

仅在你主动开启云同步功能时上传
所有数据端到端加密——加密密钥由你的激活码在本地派生，从未离开你的设备
服务端只存储密文，我们无法解密、阅读或访问你的数据内容

用途：在多台设备间同步你的聊天记录、角色设定等数据。

2.4 IP 地址

仅在触发验证码发送等限速场景时，临时记录 IP 的哈希值
不与你的身份关联，短时效窗口后自动清理

用途：防止滥用（限制发送频率）。

2.5 诊断数据（主动提交）

仅在你通过启动器手动提交诊断包时收集
包含系统日志和环境信息，不包含聊天内容或个人信息

用途：帮助定位和修复 Bug。

2.6 我们不收集的

真实姓名、电话号码、物理地址——不收集

聊天内容明文——不收集（端到端加密，我们只有密文）

使用行为分析——不收集（没有埋点、没有 Analytics）

第三方追踪器——不使用（没有 Google Analytics、没有广告 SDK）

3. 第三方 AI 服务（重要）

KOA 本身不运行 AI 模型。你需要自行配置第三方 AI 服务商的 API（如 OpenRouter、OpenAI 等），聊天内容通过你配置的 API 端点直接发送给该服务商。

这是你与该 AI 服务商之间的直接关系——KOA 不中转、不存储、不审查这些请求的内容。请自行了解你所选 AI 服务商的隐私政策。

4. 数据存储

数据类型	存储位置
激活 / 账号信息	海外服务器
同步数据密文	海外服务器
验证码邮件	第三方邮件服务
诊断数据	海外服务器

所有服务商均提供符合行业标准的数据保护措施及 GDPR 数据处理协议。

5. 数据保留

数据	保留时长
激活记录	激活码有效期内
同步数据	你主动删除或注销时清除
邮箱哈希	你解绑或注销时清除
验证码	10 分钟后过期并清理
IP 限速记录	窗口期后自动清理
诊断数据	90 天后清理

6. 你的权利

无论你身处何地，你对自己的数据拥有以下权利：

查看——在设置页随时查看你的账号信息、绑定状态和已激活设备
删除——注销云端账号，清除所有关联的云端数据
导出——通过本地备份功能导出你的全部数据
撤回——关闭同步即停止数据上传，解绑邮箱即停止邮箱处理
联系我们——如需行使其它数据权利，请发送邮件至 support@koasystem.com

7. 数据安全

我们采取合理的技术和组织措施保护你的数据安全，包括但不限于：端到端加密、哈希存储（不存明文）、访问限速、参数化数据库查询等。

8. 未成年人

KOA 仅面向 18 岁及以上的用户。未成年人请勿使用本产品。

9. 变更通知

如本隐私策略发生变更，我们将通过官网公告和产品内更新日志通知你。重大变更时，我们还会向已绑定邮箱的用户发送通知。

建议定期查看本页面获取最新信息。

10. 联系我们

如有任何隐私相关的问题或请求，请联系：

support@koasystem.com

Overview

TL;DR: We collect minimal data, and most of it is provided voluntarily by you. Your chat data is end-to-end encrypted — we cannot read it. We do not use any trackers or advertising SDKs.

1. Who We Are

KOA brings the character you love to life, operated by an independent developer. Core features run entirely on your device; cloud services only provide activation verification and optional data sync.

For privacy inquiries, contact: support@koasystem.com

2. What We Collect

We follow a data minimization principle — if we don't need it, we don't collect it. When storage is necessary, we prefer hashes over plaintext.

2.1 Activation Data (generated upon purchase)

Activation code serial number
Device fingerprint hash (not your device's specific information)
Activation timestamp

Purpose: Verify activation code validity and manage device limits.

2.2 Email (fully optional)

Collected only when you voluntarily bind an email address
We only store the SHA-256 hash of your email, not the plaintext
The plaintext email exists briefly in server memory only while sending a verification code, then is immediately discarded

Purpose: Account security (two-factor authentication), activation code recovery, device management.

2.3 Sync Data (fully optional)

Uploaded only when you explicitly enable cloud sync
All data is end-to-end encrypted — the encryption key is derived from your activation code locally and never leaves your device
The server only stores ciphertext. We cannot decrypt, read, or access your data.

Purpose: Sync your chat history, character settings, and other data across devices.

2.4 IP Address

A hash of your IP is temporarily recorded only during rate-limited operations (e.g., sending verification codes)
Not associated with your identity; automatically cleared after a short time window

Purpose: Abuse prevention (rate limiting).

2.5 Diagnostic Data (voluntarily submitted)

Collected only when you manually submit a diagnostic report through the launcher
Contains system logs and environment info; does not include chat content or personal information

Purpose: Help identify and fix bugs.

2.6 What We Do NOT Collect

Real names, phone numbers, physical addresses — not collected

Plaintext chat content — not collected (end-to-end encrypted; we only have ciphertext)

Usage analytics — not collected (no telemetry, no analytics)

Third-party trackers — not used (no Google Analytics, no ad SDKs)

3. Third-Party AI Services (Important)

KOA does not run AI models. You configure your own third-party AI provider's API (such as OpenRouter, OpenAI, etc.), and chat content is sent directly to that provider through the API endpoint you configured.

This is a direct relationship between you and that AI provider — KOA does not relay, store, or inspect the content of those requests. Please review the privacy policy of your chosen AI provider.

4. Data Storage

Data Type	Storage
Activation / account info	Overseas servers
Sync data ciphertext	Overseas servers
Verification emails	Third-party email service
Diagnostic data	Overseas servers

All providers maintain industry-standard data protection measures and GDPR Data Processing Agreements.

5. Data Retention

Data	Retention Period
Activation records	Duration of activation code validity
Sync data	Until you delete or deactivate your account
Email hash	Until you unbind or deactivate your account
Verification codes	Expire and are cleaned after 10 minutes
IP rate-limit records	Automatically cleared after the rate window
Diagnostic data	Cleaned after 90 days

6. Your Rights

Regardless of where you are located, you have the following rights over your data:

Access — View your account information, binding status, and activated devices in the settings page
Deletion — Deactivate your cloud account and erase all associated cloud data
Portability — Export all your data using the local backup feature
Withdrawal — Disable sync to stop uploading; unbind email to stop email processing
Contact us — For any other data rights requests, email support@koasystem.com

7. Data Security

We implement reasonable technical and organizational measures to protect your data, including but not limited to: end-to-end encryption, hash-based storage (no plaintext), rate limiting, and parameterized database queries.

8. Children

KOA is intended for users aged 18 and above only. Minors should not use this product.

9. Changes to This Policy

If this privacy policy is updated, we will notify you through our website and in-app changelogs. For significant changes, we will also send a notification to users with bound email addresses.

We recommend checking this page periodically for the latest information.

10. Contact Us

For any privacy-related questions or requests, please contact:

support@koasystem.com