叫人 ("we", "us") is a kinship calculator for Chinese families, including Malaysian usage. We respect your privacy. This policy explains what data we collect and why.
Only if you use Family Cloud (a cloud backup, or a shared family tree you publish or join) do we collect something because you give it to us: the names and details in the family tree you back up or share. Everything else we store is pseudonymous usage data: a random ID, not your name. It is listed below.
Every event carries: the event name, a timestamp, your random user ID (see below), the page address and the referring page (both without the part after "?" or "#"), and your browser's user-agent string
Depending on the event, properties such as: interface language and dialect choices; your gender if you set it during onboarding; the relation chain you typed or picked (for example "father's elder brother") and its length; poster or family-tree chart (世系图) layout, mood, share method and export (share or print image, its size, whether the print band was on; never names or the chart's content) and whether the poster upgrade offer was shown; family-tree member counts (counts only, never names); UTM campaign parameters from the link you came from; on the Google Play screens of the app the product id, the amount displayed, the step you reached, and error text if a step fails (first 120 characters); which screen of the app you opened (for example the Family tab); and onboarding and screen dwell times
视事件而定，还包括：界面语言和方言选择；您在引导中设置的性别；您输入或选择的亲属关系链（例如「父亲的哥哥」）及其长度；海报或世系图的版式、风格、分享方式和导出（分享图或打印图、尺寸、是否带水印条；不含姓名和图的内容），以及是否显示了海报升级介绍；家谱成员数量（仅数量，不含姓名）；来源链接中的 UTM 推广参数；在应用的 Google Play 页面上的商品编号、显示的金额、到达的步骤，以及某一步失败时的错误文本（前 120 个字符）；您打开的应用页面（例如「家人」页）；以及引导和页面停留时间
A few of the events above (app open, first launch, a kinship lookup, opening a Google Play screen of the app) are also copied by our server to our own AnalyticsService, run by us, to count users and see which features are used. No third-party analytics provider receives them
Each copy carries: the event name, a timestamp, a one-way hash of your random ID (not the ID itself), your approximate country (taken from your connection, two letters; your IP address is not copied), the channel you came from (a fixed list such as google or whatsapp, otherwise "other"), and for lookups the relation-chain length and dialect, for Google Play screens the product id and the amount displayed. The relation chain itself, names and family-tree data are never copied
以上部分事件（应用启动、首次启动、称谓查询、打开应用的 Google Play 页面）还会由我们的服务器复制到我们自己运营的 AnalyticsService，用于统计用户数和功能使用情况，不会发送给任何第三方分析服务
每条复制包含：事件名称、时间、您随机 ID 的单向哈希（不是 ID 本身）、您的大致国家（根据连接得出，两位字母；不复制您的 IP 地址）、来源渠道（固定名单，如 google、whatsapp，其余记为 other）；称谓查询另含关系链长度和方言，Google Play 页面另含商品编号和显示的金额。关系链本身、姓名和家谱数据绝不会被复制
CollectedRandom User ID (UID) — 随机用户 ID
A random UUID generated locally and stored on your device in localStorage
The ID itself carries no name, phone number or identity. If you join a shared family tree as a member (see Family Cloud below), your membership is stored together with this ID
在您设备的 localStorage 生成并存储的随机 UUID，本身不含姓名、电话或身份信息；如您以成员身份加入共享家谱（见下文「家族云」），您的成员资格会与该 ID 一并保存
CollectedError Reports — 错误报告
When the app crashes we store the error message and stack trace, the page address (without the part after "?" or "#"), your random ID and your browser's user-agent string, to help us fix bugs
应用崩溃时，我们会存储错误信息和堆栈、页面网址（不含「?」或「#」之后的部分）、您的随机 ID 和浏览器 user-agent，用于修复错误
CollectedRequest details — 请求信息
With each usage event we store the page address and the referring page (both without the part after "?" or "#") and your browser's user-agent string
Our app database no longer stores an IP hash: that stopped on 2026-10-15, and values stored earlier are being removed. Every request reaches the app through Cloudflare, our network provider, which handles IP addresses and may set its own cookies. The app reads the visitor IP that Cloudflare passes in the CF-Connecting-IP header only in memory, to limit abuse, and does not store it
The web server (IIS) that hosts this site keeps access logs that may record IP addresses and requested URLs, for security and troubleshooting, for a limited time
每个使用事件会附带页面网址、来源页面（均不含「?」或「#」之后的部分）和浏览器 user-agent。我们的应用数据库已不再存储 IP 哈希：该做法已于 2026-10-15 停止，此前存储的值正在删除。所有请求都经由我们的网络服务商 Cloudflare 到达应用，Cloudflare 会处理 IP 地址，并可能设置自己的 cookies。应用只在内存中读取 Cloudflare 通过 CF-Connecting-IP 头传来的访客 IP，用于防止滥用，不存储它
托管本站的网页服务器（IIS）会保留访问日志，可能记录 IP 地址和请求的网址，用于安全与故障排查，保留一段有限时间
CollectedGoogle Play records — Google Play 记录
When you get something in the Android app through Google Play we store your random UID, the product id and the Google Play purchase token, so it can be restored on a new phone
Bank card details never reach us (Google Play handles them)
"Delete all my data" keeps these records: Google Play verifies them, and they are how you get the item back (see "Your Rights")
Once a day we ask Google Play which of these records are no longer valid ("voided"); such a record is marked, not deleted, and it stops unlocking anything on every device
您在 Android 应用里通过 Google Play 获得内容时，我们存储随机 UID、商品编号和 Google Play 凭证（purchase token），以便换手机后恢复；银行卡信息由 Google Play 处理，我们接触不到。「删除我的全部数据」会保留这些记录：它们由 Google Play 验证，是您取回该内容的凭据（见「您的权利」）。我们每天向 Google Play 查询哪些记录已失效（作废）；这样的记录会被标记（不删除），在所有设备上不再解锁任何功能
OptionalFamily Cloud (not available yet) — 家族云（尚未推出）
Family Cloud is an optional service for a signed-in runupbiz account: cloud backup of your family tree and one shared tree for your family. It is not available yet; this card says what it will store once it is. Nothing is uploaded unless you turn it on and agree to the notice shown in the app
What is uploaded: your family tree (names, relationships, dates, notes and the photos you added; the tea ceremony list only if you tick it), and, if you publish a shared tree, that tree without photos for the family you invite
Where and how: on our own server in Malaysia (the database holds the details of each backup, such as its date, size and number of people; the backup files themselves are encrypted). The backups are encrypted at rest on our server with keys we hold (AES-256-GCM), so we can technically access them to run the service. The shared tree is stored on our server without this separate encryption: it is protected by account access only (your sign-in, and the invite code and devices of the family you let in). We do not read either, sell them or use them for ads. This is not end-to-end encryption
Who sees it: only you (through your account), and the family you invite to your shared tree while you keep it published
How long: while Family Cloud is active on your account. When it ends, your backups and shared tree are kept read-only for 90 days so you can download them, then they are deleted. If we cannot confirm that Family Cloud is still active and you have made no backup for 12 months, we check with Google Play again and then delete them. "Delete my cloud data" in the Family Cloud screen deletes them at once; the shared tree alone goes with Family › Family Cloud › Delete shared tree (this also works after Family Cloud ends)
Reminders (Android app, optional): "Remind me before my backups are deleted" in the Family Cloud screen is off unless you turn it on. Then the app schedules notifications on your phone itself (local notifications), 30 days and 5 days before your backups would be deleted; nothing about them is sent to our server or to anyone else. Turning the switch off, signing out or deleting your data cancels them
Your relatives' data: most of this is information about other people; please make sure your family is fine with you keeping it here
Members (no account needed): when you join a shared family tree with an invite code, we store your device's random ID and the display name you choose (with your role and the join date) so the tree's owner can see who has access and remove it. Your display name is erased when you leave or are removed; the random install ID is kept for up to 90 days so a removed device cannot rejoin with an old code, then deleted. Everything goes at once when the owner deletes the tree or when you use "Delete all my data". On your own device the app keeps the last copy of the shared tree it showed you (no photos; with your edits not sent yet), so you can still save it to your phone if the tree is removed; leaving the tree or "Delete all my data" removes that copy
The shared tree: the owner chooses for each member whether they may edit or only view, and can remove a member or delete the whole tree at any time; removal and deletion take effect at once. The invite code is stored only in scrambled form (a one-way hash), works for 7 days and 20 joins, and stops when the owner makes a new one. If the owner's Family Cloud ends, members can still read the tree but nobody can change it, and the app shows members the date it will be deleted (90 days after the end); "Delete my cloud data" also deletes the shared tree and its member list
Your account: Family Cloud data belongs to your runupbiz account and is listed in the Family Cloud screen; we store only the opaque account number, never your email. Our own usage events for Family Cloud (names starting with cloud_ or collab_) carry no names and no counts of people
成员（无需账号）：您凭邀请码加入共享家谱时，我们会保存您设备的随机 ID 和您自选的显示名称（以及角色和加入日期），让家谱主人看到谁能访问，也能把成员移出。您退出或被移除时，显示名称立即删除；设备随机 ID 最多保留 90 天，防止被移除的设备用旧邀请码重新加入，之后删除。主人删除家谱或您使用「删除我的全部数据」时，全部立即删除。在您自己的设备上，app 会保留它最近一份显示给您的共享家谱（不含照片；包括您还没发送的修改），这样家谱被删除后您仍可把它保存到手机；退出共享家谱或「删除我的全部数据」会删除这份副本
Where the app offers it, you may sign in with a shared runupbiz account so that what you got in the Android app also works on your other devices. It is optional: the calculator and your family tree never need it
Your email, password and sign-in sessions are kept by the shared runupbiz account service, not by JiaoRen. JiaoRen stores only an opaque account number for each linked device (with that device's random ID, whether it is the website or the Android app, and the date), and uses it only to show on the device what that account holds. JiaoRen shows your email in the Me tab while you are signed in, but never stores it or sends it anywhere
Sign out (Me › Account) unlinks this device: the link is marked as ended, and its account number and the device's random ID are kept until you delete your data. "Delete all my data" removes this device's links; the export lists them by type and date, without the account number. Links that ended more than 12 months ago are deleted automatically. For each Google Play record that is shared, we also keep which account it is shared through (a one-way hash of the purchase token and the account number) with that record
The account itself (email, password) is deleted on the shared account page: runupbiz.com/workspace. Deleting it does not end the links in JiaoRen by itself: sign out on each device, or use "Delete all my data"
退出登录（我 › 账号）会断开这台设备：连接被标为已结束，账号编号和这台设备的随机 ID 会保留到您删除数据为止。「删除我的全部数据」会删除这台设备的连接；导出只列出类型和日期，不含账号编号。结束超过 12 个月的连接会自动删除。对每一条被共享的 Google Play 记录，我们还会随该记录保存它通过哪个账号共享（凭证的单向哈希和账号编号）
Not collected Phone number, NRIC/IC; no account is ever required (the optional shared account is described above) · 电话号码、身份证号；从不要求账号（可选的共享账号见上文）
Not collected by us GPS / precise location (the app never asks for location permission). Google's ads may derive an approximate location from your IP address, see "Advertising (Google)" below
Not collected Contacts, photos, microphone access
Not collected Bank card details (handled entirely by Google Play) · 银行卡信息（完全由 Google Play 处理）
Not collected by us Advertising identifiers: our server never receives your advertising ID. Google's ads SDK does, see "Advertising (Google)" below
Our own events Our own usage events stay on our own server. The third-party code in the app is Google's ads described below. The fonts ship inside the app, so no request goes to Google Fonts. Cloudflare is infrastructure in front of the site, not code inside the app. · 我们自己的使用事件只存在自有服务器；应用内的第三方代码仅为下文所述的 Google 广告。字体随应用一起提供，不会向 Google Fonts 发出任何请求。Cloudflare 是站点前端的基础设施，不是应用内的代码。
Third partyAdvertising (Google) — 广告（Google）
叫人 may show ads served by Google (Google AdMob in the Android app, Google AdSense on the website).
If ads are shown, Google collects and processes on its own systems: your device's advertising ID, approximate location derived from your IP address, device information (model, operating system, app or browser version) and ad interactions (views, taps), to show, measure and limit ads and to prevent fraud. If ads are shown, we will ask Google for non-personalised ads only.
If ads are shown, where the law requires it (the EEA, the UK and Switzerland), we will ask for your consent through Google's consent message before requesting any ad. You can also reset or delete your advertising ID in Android Settings → Google → Ads (wording varies by phone).
叫人可能显示由 Google 提供的广告（Android App 内为 Google AdMob，网站为 Google AdSense）。
如显示广告，Google 会在其自身系统中收集并处理：设备的广告 ID、根据 IP 地址推断的大致位置、设备信息（型号、操作系统、App 或浏览器版本）以及广告互动（展示、点击），用于展示、衡量和限制广告及防止欺诈。如显示广告，我们将仅向 Google 请求非个性化广告。
如显示广告，在法律要求的地区（欧洲经济区、英国、瑞士），我们将先通过 Google 的同意请求征得您的同意，再请求任何广告。您也可以在 Android 设置 → Google → 广告 中重置或删除广告 ID（各手机名称略有不同）。Google 如何使用这些数据：见上方链接。
3 · How We Use Data · 数据用途
Understand which kinship relations are most looked up (to improve content)
Measure app completion rate and share rate (product decisions)
Debug errors (bug fixes)
We do not sell or rent your data, and we do not share our event data with anyone
我们不出售或出租您的数据，也不与任何人共享我们的事件数据
4 · Data Storage · 数据存储
All event data is stored on our own server at https://runupbiz.com/JiaoRen/
Server is located in Southeast Asia
We keep this data until you delete it in the app (see "Your Rights"), or until we no longer need it for the purposes above
Local preferences, history, your family tree and your tea ceremony plan (who attends, the serving order, the gift list) are stored on your device in localStorage and stay there (the tea plan and gift list leave it only inside a backup file you export with "Include the tea ceremony and gift list" ticked, or in a gift list file (CSV) or text you export or share yourself); the family tree is uploaded only if you back it up or publish a shared tree with Family Cloud. Photos you add to people in the family tree stay on your device: in the web version in the browser's IndexedDB database; in the Android app, for now, in the app's own web storage (localStorage), not IndexedDB. They leave the device only inside a backup file, the file from "Export my data", an image you export yourself, or, if you use Family Cloud and turn it on, its encrypted cloud backup (which includes the photos; see the Family Cloud card). Before a Family Cloud restore replaces the family on this device, the app keeps a local safety copy of the whole family it replaces (names, relationships, dates, notes and photos) in this browser's or app's IndexedDB for 7 days so the restore can be undone; it never leaves the device and "Delete all my data" removes it.
The etiquette guide's choice of your family's dialect group and region is stored only on your device and is never sent.
The 族谱 (family lineage) page keeps everything on your device unless you publish a shared tree with Family Cloud (that uploads the family tree, never photos): the page itself sends nobody's names, dates, places, notes or photos anywhere. We only count that the page was opened and that people were added, merged, compared or deleted, which file type was exported and whether an import worked (an event name, never a detail: no names, no counts). 族谱 (family tree) import and export, including GEDCOM files, run entirely on your device: the file goes only where you save or share it. When you export, you choose whether living people are hidden; by default they are written as “Living” with no dates, places or notes, and people under 18 always are unless you include them. The printable 族谱 book is made on your device from the same page: living people's names are printed (you can choose to print them by name only, without dates, places, notes, biography or migration), people marked private are printed only as “Private”, people under 18 are printed by name only unless you untick that (if you also print living people by name only, the stricter of the two switches applies), and photos are never printed; its export events record only the layout and size, never names.
You use your rights yourself, in the app: open the Me tab → Diagnostics. No request to us is needed and you never have to send us your ID
See and take your data (access, data portability): "Export my data" saves one JSON file with this device's data (family tree, settings, history) and what our server holds for your random ID: usage events (name, properties, time), error messages, interest-test entries, a summary of a family tree you published, and your Google Play records. The file does not contain emails or technical error details (stack traces, page addresses, browser user-agent): the random ID is the only key to this export, so these are left out because they cannot be tied to you safely. The file does not contain the random ID itself
Correct your data: edit your family tree, settings and gender in the app; a shared family tree follows your changes (a published tree is kept in sync; changes made by your family are shown to you before they reach your phone). Usage events and error reports record what happened and are not edited; you can delete them
Delete your data: "Delete all my data" deletes, at once, this device's data (including files you exported from this app that still sit in its cache) and, on our server, the usage events, error reports and interest-test entries stored under your random ID and the family tree you published. If you are offline, this device is cleared at once and the app deletes the server part the next time it reaches our server. The app then starts again with a new random ID. An event sent just before a delete may still arrive afterwards, and the app records that a delete or export happened without any ID; such records can no longer be tied to you and each is removed after 180 days
Kept after a delete: your Google Play records (random ID, product id, Google Play purchase token). Google Play verifies them, and they let you get the item back on a new phone. On this device, items Google has not confirmed yet are kept until Google confirms them. Not removed by this delete: the counts already copied to our AnalyticsService (they carry only a one-way hash of your ID), the Google Play records, and the web server's access logs (kept for a limited time). Data Google collects for ads is held by Google, see "Advertising (Google)"
To clear only this phone: uninstall the app (or clear its storage in Android Settings)
Purchases, if any, are handled by Google Play; refunds follow Google Play's policy. For anything the app cannot do, email support@runupbiz.com
您可以在应用里自己行使这些权利：打开「我」→「诊断数据」。无需向我们提出请求，也不必把 ID 发给我们
查阅和取走数据（查阅权、数据可携权）：「导出我的数据」会保存一个 JSON 文件，包含本机数据（家谱、设置、记录），以及我们服务器上与您随机 ID 相关的数据：使用事件（名称、属性、时间）、错误信息、兴趣测试记录、您发布的家谱摘要和 Google Play 记录。文件不包含邮箱地址和技术性错误细节（堆栈、页面网址、浏览器 user-agent）：随机 ID 是取得这份导出的唯一凭据，这些内容无法安全地与您对应，因此不放入；文件也不包含随机 ID 本身
删除数据：「删除我的全部数据」会立即删除本机数据（包括您从本应用导出过的文件、仍在应用缓存里的），以及我们服务器上您随机 ID 名下的使用事件、错误报告、兴趣测试记录和您发布的家谱。如果当时离线，本机数据会立即清除，服务器部分会在应用下次连上我们的服务器时删除。之后应用会用新的随机 ID 重新开始。删除前刚发出的事件可能在删除后才到达，应用也会不带任何 ID 地记录发生过一次删除或导出；这些记录已无法与您对应，各自在 180 天后删除
删除后保留：您的 Google Play 记录（随机 ID、商品编号、Google Play 凭证），它们由 Google Play 验证，用于在新手机上取回该内容。本机上尚未被 Google 确认的内容会保留到 Google 确认为止。删除不到的：已复制到我们 AnalyticsService 的统计（只带有您 ID 的单向哈希）、Google Play 记录，以及网页服务器的访问日志（保留一段有限时间）。Google 为广告收集的数据由 Google 持有，见「广告（Google）」
只清除这台手机的数据：卸载应用（或在 Android 设置里清除它的存储）
购买（如有）由 Google Play 处理，退款按 Google Play 的政策办理。应用里做不到的其他事情，请发邮件至 support@runupbiz.com
6 · Applicable Law · 适用法律
Malaysia: Personal Data Protection Act 2010 (PDPA). You can access, correct and delete your personal data yourself in the app (see "Your Rights"). To withdraw your consent to further processing, delete your data in the app and stop using it, or email support@runupbiz.com; we answer within the time the Act allows (21 days for an access or correction request).
Users in the European Economic Area, the UK and Switzerland: GDPR / UK GDPR. You have the right of access, rectification, erasure, restriction, data portability and objection, and the right to complain to your data protection authority. Our legal bases: legitimate interests for usage events, error reports and abuse limits (to run and improve the app); performance of a contract for the Google Play records and Family Cloud; your consent for ads where the law requires it.
Data controller: 叫人 (JiaoRen), support@runupbiz.com. If further controller details are added, they will appear on this page.
欧洲经济区、英国和瑞士的用户：适用 GDPR / UK GDPR。您享有查阅、更正、删除、限制处理、数据可携和反对的权利，并可向当地数据保护机构投诉。我们的法律依据：使用事件、错误报告和防滥用基于正当利益（运营和改进应用）；Google Play 记录和「家族云」基于履行合同；在法律要求的地区，广告基于您的同意。
This app does not knowingly collect data from children under 13. If you believe a child has submitted data, contact us at support@runupbiz.com.
本应用不面向 13 岁以下儿童收集数据。如发现相关情况，请联系我们。
8 · Changes · 政策更新
We may update this policy. The date at the top of this page shows when it was last revised. Continued use of the app after changes constitutes acceptance.
Ringkasan dasar privasi ini dalam Bahasa Melayu. Versi Bahasa Inggeris di atas ialah versi penuh.
Apa yang kami kumpul: peristiwa penggunaan (contohnya membuka aplikasi, mencari panggilan) yang dikaitkan dengan ID rawak di peranti anda, bukan nama anda; laporan ralat; rekod Google Play; dan, hanya jika anda menggunakan Awan Keluarga (sandaran awan, atau salasilah bersama yang anda terbitkan atau sertai), nama dan butiran dalam salasilah keluarga anda.
Apa yang tidak kami kumpul: nombor telefon, nombor kad pengenalan, lokasi GPS, kenalan atau butiran kad bank. Akaun tidak pernah diwajibkan.
Akaun runupbiz dikongsi (pilihan): jika aplikasi menawarkannya, anda boleh log masuk supaya apa yang anda peroleh dalam aplikasi Android juga berfungsi pada peranti lain anda. E-mel dan kata laluan anda disimpan oleh perkhidmatan akaun runupbiz, bukan oleh JiaoRen; JiaoRen hanya menyimpan nombor akaun legap bagi setiap peranti yang dipautkan. Log keluar menyahpaut peranti ini (pautan ditanda tamat; nombor akaun dan ID rawak peranti disimpan sehingga anda memadam data anda); "Padam semua data saya" memadam pautan peranti ini; pautan yang tamat lebih 12 bulan lalu dipadam secara automatik. Akaun itu sendiri dipadam di halaman akaun runupbiz, tetapi itu tidak menamatkan pautan dalam JiaoRen: log keluar pada setiap peranti atau gunakan "Padam semua data saya".
Salasilah keturunan (族谱): semua kandungan halaman ini disimpan pada peranti anda, kecuali jika anda menerbitkan salasilah bersama melalui Awan Keluarga (salasilah itu dimuat naik, tanpa foto); halaman ini sendiri tidak menghantar nama, tarikh, tempat, catatan atau foto sesiapa ke mana-mana. Kami hanya mengira bahawa halaman dibuka dan orang ditambah, digabungkan, dibandingkan atau dipadam (nama peristiwa sahaja, tiada butiran). Carta salasilah (世系图) yang anda cetak atau kongsi dibuat pada peranti ini; gambar kongsi tidak menunjukkan tahun lahir orang yang masih hidup, dan tahun lahir orang bawah 18 tahun tidak dipaparkan kecuali anda memilihnya untuk carta itu. Peristiwa eksport hanya merekod susun atur dan saiz, bukan nama. Import dan eksport salasilah (termasuk fail GEDCOM) berlaku sepenuhnya pada peranti anda: fail hanya pergi ke tempat yang anda simpan atau kongsi; peristiwanya hanya merekod jenis fail dan sama ada import berjaya, tanpa nama atau bilangan. Semasa eksport anda memilih sama ada orang yang masih hidup disembunyikan; secara lalai mereka ditulis “Living” tanpa tarikh, tempat atau catatan, dan orang bawah 18 tahun sentiasa disembunyikan kecuali anda memilih untuk memasukkannya. Buku salasilah yang boleh dicetak dibuat pada peranti anda daripada halaman yang sama: nama orang yang masih hidup dicetak (anda boleh memilih nama sahaja, tanpa tarikh, tempat, catatan, riwayat hidup atau penghijrahan), orang bertanda peribadi dicetak sebagai “Peribadi” sahaja, orang bawah 18 tahun dicetak dengan nama sahaja melainkan anda nyahtanda (jika anda juga memilih orang yang masih hidup dengan nama sahaja, pilihan yang lebih ketat digunakan), dan foto tidak pernah dicetak; peristiwa eksportnya hanya merekod susun atur dan saiz, bukan nama. Foto yang anda tambah pada orang dalam salasilah disimpan pada peranti anda sahaja: dalam versi web di pangkalan data IndexedDB pelayar; dalam aplikasi Android, buat masa ini, dalam storan web aplikasi itu sendiri (localStorage), bukan IndexedDB. Foto hanya keluar dari peranti dalam fail sandaran, fail "Eksport data saya" atau imej yang anda eksport sendiri, atau, jika anda menggunakan Awan Keluarga dan menghidupkannya, dalam sandaran awannya yang disulitkan (termasuk foto). Sebelum pemulihan Awan Keluarga menggantikan keluarga pada peranti ini, aplikasi menyimpan salinan keselamatan (safety copy) tempatan bagi seluruh keluarga yang digantikan (nama, hubungan, tarikh, catatan dan foto) dalam IndexedDB pelayar atau aplikasi selama 7 hari supaya pemulihan boleh dibuat asal; ia tidak pernah keluar dari peranti dan "Padam semua data saya" memadamnya.
Awan Keluarga (belum tersedia): perkhidmatan pilihan untuk akaun runupbiz yang log masuk: sandaran awan salasilah anda dan satu salasilah bersama untuk keluarga. Tiada apa-apa dimuat naik kecuali anda menghidupkannya dan bersetuju dengan notis dalam aplikasi. Salasilah anda (nama, hubungan, tarikh, catatan dan foto; senarai upacara teh hanya jika anda menandakannya) disimpan di pelayan kami di Malaysia; sandaran disulitkan (AES-256-GCM) dengan kunci yang kami pegang, jadi ini bukan penyulitan hujung ke hujung; salasilah bersama disimpan tanpa penyulitan berasingan, dilindungi oleh kawalan akses sahaja (log masuk anda, serta kod jemputan dan peranti keluarga yang anda benarkan masuk); kami tidak membacanya, menjualnya atau menggunakannya untuk iklan. Jika Awan Keluarga tamat, sandaran dan salasilah bersama disimpan dalam mod baca sahaja selama 90 hari supaya anda boleh memuat turunnya, kemudian dipadam; jika kami tidak dapat mengesahkan Awan Keluarga masih aktif dan anda tidak membuat sandaran selama 12 bulan, kami menyemak semula dengan Google Play dan kemudian memadamnya; "Padam data awan saya" memadamnya serta-merta. Peringatan (aplikasi Android, pilihan): "Ingatkan saya sebelum sandaran saya dipadam" dimatikan kecuali anda menghidupkannya; jika dihidupkan, aplikasi menjadualkan pemberitahuan pada telefon anda sendiri (pemberitahuan setempat) 30 hari dan 5 hari sebelum sandaran dipadam, dan tiada apa-apa tentangnya dihantar ke pelayan kami. Kebanyakan maklumat ini adalah tentang orang lain: pastikan keluarga anda bersetuju. Ahli (tanpa akaun): apabila anda menyertai salasilah bersama dengan kod jemputan, kami menyimpan ID rawak peranti anda dan nama paparan yang anda pilih (serta peranan dan tarikh menyertai) supaya pemilik salasilah boleh melihat siapa yang mempunyai akses dan membuangnya. Nama paparan anda dipadam apabila anda keluar atau dibuang; ID rawak peranti disimpan sehingga 90 hari supaya peranti yang dibuang tidak boleh menyertai semula dengan kod lama, kemudian dipadam. Semuanya dipadam serta-merta apabila pemilik memadam salasilah atau apabila anda menggunakan "Padam semua data saya". Pada peranti anda sendiri, aplikasi menyimpan salinan terakhir salasilah bersama yang ditunjukkan kepada anda (tanpa foto; termasuk perubahan anda yang belum dihantar) supaya anda masih boleh menyimpannya ke telefon jika salasilah itu dipadam; keluar daripada salasilah atau "Padam semua data saya" memadam salinan itu. Pemilik boleh memadam salasilah bersama sahaja di Keluarga › Awan Keluarga › Padam salasilah bersama (juga boleh selepas Awan Keluarga tamat). Pemilik memilih sama ada setiap ahli boleh menyunting atau hanya melihat, dan boleh membuang ahli atau memadam salasilah bersama pada bila-bila masa, berkuat kuasa serta-merta. Kod jemputan hanya disimpan dalam bentuk yang tidak boleh dipulihkan (cincang sehala), sah selama 7 hari dan sehingga 20 penyertaan, dan tamat apabila pemilik membuat kod baharu. Jika Awan Keluarga pemilik tamat, ahli masih boleh membaca salasilah tetapi tiada sesiapa boleh mengubahnya, dan aplikasi menunjukkan kepada ahli tarikh ia akan dipadam (90 hari selepas tamat); "Padam data awan saya" juga memadam salasilah bersama dan senarai ahlinya.
Panduan adab: Pilihan kumpulan dialek dan tempat tinggal keluarga anda dalam panduan adab disimpan pada peranti anda sahaja dan tidak dihantar.
Iklan: 叫人 mungkin memaparkan iklan Google. Jika iklan dipaparkan, Google mengumpul ID pengiklanan, lokasi anggaran dan maklumat peranti.
Fon: fon disertakan dalam aplikasi; tiada permintaan dihantar ke Google Fonts.
Undang-undang: Akta Perlindungan Data Peribadi 2010 (PDPA) Malaysia. Pengguna di Kawasan Ekonomi Eropah, UK dan Switzerland juga mempunyai hak di bawah GDPR (akses, pembetulan, pemadaman, sekatan, kebolehpindahan, bantahan dan aduan kepada pihak berkuasa perlindungan data).
Pengawal data: 叫人 (JiaoRen), support@runupbiz.com. Jika butiran pengawal ditambah, ia akan dipaparkan di halaman ini.
Hak anda, dalam aplikasi: buka tab Saya → Diagnostik. Anda tidak perlu menghantar permintaan atau ID anda kepada kami.
Akses dan eksport: "Eksport data saya" menyimpan satu fail JSON dengan data peranti ini dan data pelayan kami bagi ID rawak anda. Fail itu tidak mengandungi e-mel, butiran teknikal ralat atau ID rawak itu sendiri.
Pembetulan: ubah salasilah keluarga, tetapan dan jantina dalam aplikasi; salasilah bersama mengikut perubahan anda (perubahan daripada keluarga ditunjukkan kepada anda dahulu sebelum sampai ke telefon anda).
Pemadaman: "Padam semua data saya" memadam data peranti ini (termasuk fail yang anda eksport dan masih ada dalam cache aplikasi) serta peristiwa penggunaan, laporan ralat, entri ujian minat dan salasilah yang anda terbitkan di pelayan kami. Rekod Google Play disimpan (disahkan oleh Google Play). Item yang belum disahkan oleh Google disimpan sehingga Google mengesahkannya. Tidak dipadam: salinan yang sudah dikira dalam AnalyticsService kami (hanya hash ID anda), rekod Google Play, serta log akses pelayan web. Peristiwa yang dihantar sejurus sebelum pemadaman mungkin tiba selepasnya, dan aplikasi merekodkan bahawa pemadaman atau eksport berlaku tanpa sebarang ID; rekod ini tidak lagi boleh dikaitkan dengan anda dan dibuang selepas 180 hari.
Google Play: pembelian (jika ada) dikendalikan oleh Google Play; bayaran balik mengikut dasar Google Play. Untuk perkara lain yang tidak boleh dibuat dalam aplikasi, e-mel support@runupbiz.com.