1. Information kept on your device

Drink records, daily goals, reminders, cup names, cup capacity, display units, and locally saved cup images are stored on your device by default. Optional Sign in with Apple does not automatically upload this local hydration data.

2. Optional photo and AI generation

Only after you choose a cup photo and explicitly agree, the photo is sent through the MyCup API to Volcengine Ark in the Beijing region to create a personalized cup image.

The MyCup server processes the original photo in memory and does not write it to persistent server storage. After the request completes or fails, MyCup does not continue storing the original photo.

The generated cup image is temporarily stored so the app can download it. It is retained for about one hour, and automated cleanup runs every five minutes. The app then keeps the downloaded image locally until you replace or delete it.

Do not upload faces, identity documents, bank cards, private screenshots, home addresses, photos of children, or other sensitive information.

3. AI training and third-party processing

MyCup does not use uploaded photos or generated images to train a MyCup-owned model. Volcengine Ark's published service terms state that submitted content and service output are not used to train, retrain, or improve foundation models unless the customer actively accepts a separate data-authorization agreement or participates in a collaboration reward program. The developer is verifying the production account's specific authorization status. Until account-level written evidence is archived, MyCup does not make an unconditional claim that Volcengine never retains or uses input or output for model improvement.

4. Anonymous quota and technical logs

To enforce daily generation limits and prevent abuse, MyCup processes an anonymous installation credential and network address. The server stores only a one-way hash of the anonymous credential for up to 180 days. Daily usage records and keyed IP hashes are retained for seven days.

Nginx access logs may contain the raw IP address, request time, route, status code, and basic technical information for security and troubleshooting. These logs are retained for no more than seven days. They do not record photo contents, raw anonymous credentials, or API keys.

5. Optional account and deletion

The current App Store build does not open new account creation. If you previously signed in on an earlier test build, you can still sign out or delete the online account inside the app.

Account login description (applies once re-enabled): If you choose Sign in with Apple, MyCup processes the Apple account identifier and the name you choose to provide to create and restore the online account. MyCup does not request or store your Apple email address. For new sign-ins, MyCup encrypts and stores an Apple refresh token only so it can revoke Sign in with Apple authorization when you delete the account.

You can delete the online account inside the app. Deletion revokes that authorization and removes the server account, login identities, generation records, quota records, related subscription records, account-linked generated images, and the encrypted token. Local drink records, goals, reminders, and cup images remain on the device until you delete them separately.

6. Contact

For privacy questions, server-side deletion requests, or account issues, email support@mycup.online.

1. 保存在设备上的信息

饮水记录、每日目标、提醒、水杯名称、容量、显示单位和本地水杯图片默认保存在你的设备上。选择使用 Apple 登录不会自动上传这些本地饮水数据。

2. 可选照片与 AI 生成

只有在你主动选择水杯照片并明确同意后，照片才会经由 MyCup API 发送至火山引擎 Ark（北京区域），用于生成专属水杯图片。

MyCup 服务器只在内存中处理原始照片，不会将原图写入持久化服务器存储。请求完成或失败后，MyCup 不继续保存原始照片。

生成后的水杯图片会临时保存在服务器，供 App 下载，约保留 1 小时，系统每 5 分钟自动清理。App 下载后会在设备本地保存，直到你更换或删除。

请不要上传人脸、身份证件、银行卡、隐私截图、家庭地址、儿童照片或其他敏感信息。

3. AI 训练与第三方处理

MyCup 不使用上传照片或生成图片训练 MyCup 自有模型。火山方舟公开服务条款说明，客户提交的内容和服务输出不会用于训练、重新训练或改进基础模型；客户主动同意单独的数据授权协议或参加协作奖励计划时除外。开发者正在核验生产账号具体的授权状态。在保存账号级书面证据前，MyCup 不作“火山引擎绝不保留输入/输出或将其用于模型改进”的无条件承诺。

4. 匿名额度和技术日志

为了执行每日生成额度并防止滥用，MyCup 会处理匿名安装凭证和网络地址。服务器只保存匿名凭证的不可逆哈希，最长保留 180 天；每日额度记录和经过密钥哈希处理的 IP 标识保留 7 天。

nginx 访问日志可能包含原始 IP 地址、请求时间、接口路径、状态码和基础技术信息，用于安全防护和故障排查，最多保留 7 天。日志不记录照片内容、匿名凭证原文或 API 密钥。

5. 可选账号和删除

当前商店构建不向新用户开放账号登录入口。如果你使用更早的测试版本并已经登录过，仍可以在 App 内退出或删除在线账号。

账号登录功能描述（重新开放后适用）：如果你选择使用 Apple 登录，MyCup 会处理 Apple 账号标识以及你选择提供的姓名，用于建立和恢复在线账号。MyCup 不请求或保存你的 Apple 邮箱地址。对于新的登录，MyCup 会加密保存 Apple refresh token，唯一用途是在你删除账号时撤销“通过 Apple 登录”授权。

你可以在 App 内删除在线账号；删除会撤销该授权，并清除服务器账号、登录身份、生成记录、额度记录、相关订阅记录、账号关联的生成图片及加密令牌。设备上的饮水记录、目标、提醒和本地水杯图片会继续保留，直到你分别删除。

6. 联系我们

隐私问题、服务器侧删除请求或账号问题，可发送邮件至 support@mycup.online。