1. What personal information we collect
Account and sign-in: depending on the sign-in method you choose, we process your phone number, verification results, third-party account identifiers, and necessary sign-in security information, for registration, identity verification, and account protection. Profile details such as your nickname and avatar are used to display your account; please only provide information you are willing to have used for that purpose.
Membership and transactions: once membership purchase, trial, or campaign entry points are open, we process, for the features you choose, your Cami account identifier, registration time and existing-user eligibility, the plan and channel you select, quoted prices and order identifiers, the transaction and subscription identifiers returned by the payment channel, the amount charged and the currency, subscription and deduction status, the start and end times of your benefits, trial and campaign eligibility, records of gifts and invitation codes claimed, and records of cancellations, refunds, and dispute handling, in order to determine eligibility, create and verify orders, deliver or revoke benefits, prevent duplicate claims or charges, provide after-sales support, reconcile accounts, and fulfill applicable obligations. AI cost usage for free and standard members is measured by account and by category such as chats, voice, background activity, and miniapps, for quota control and usage display; it is not a payment account balance. Payment passwords, full bank card numbers, and channel verification codes are handled by the corresponding payment channel on its own pages; please do not submit them in Cami chats or feedback.
Chats and action assistance: we process the text you type, the images or files you choose to upload, the voice you submit and its transcription, and related chat records, in order to understand requests, generate replies, and complete the corresponding features. Plans, tasks, goals, reminders, progress, and review records are used to organize your matters, provide feedback, and support continued action.
Memory and communication preferences: we process the communication style you set, along with the goals, preferences, facts, and necessary context saved or extracted from your interactions, in order to avoid asking repeatedly, offer suggestions relevant to what you are working on, and give follow-up feedback. Original chats, extracted memories, and feature records may be stored separately and may need to be managed separately; see Section 7 for how to manage and delete them.
Miniapps and records: we process the journal entries, mood, meals, exercise, sleep, expenses, and other information you provide in the miniapps you use, for that miniapp’s record keeping, display, and calculations. Once the relevant AI reading or goal linking is enabled, related records or summaries are also processed according to the corresponding settings, for answers, progress checks, and reviews. Some records may contain sensitive personal information such as health, financial, and location data.
Voice and custom voices: when you use voice input, we process the recordings you submit and their transcriptions; when you use voice playback, we process the text to be synthesized. When you choose to create a custom voice, we process the voice samples or your written description of the voice according to the method you select, along with the generated voice identifier and the necessary synthesis results, in order to create and use that voice. Voice samples may involve sensitive personal information; please only submit recordings of your own voice.
Device, notifications, and diagnostics: we process the device model, system and app versions, network status, IP address, push identifiers, and necessary operational, error, and security logs, for message delivery, account security, troubleshooting, and service stability. When you report a problem, we process the description, contact details, and attachments you provide, in order to verify and respond.
Profile: the birthday, gender, occupation, bio, communication preferences, and MBTI type you choose to fill in, plus the height, weight, and safety information required by nutrition or exercise features, are used for profile display, how we address you, and the calculations and personalization of the corresponding features. Where information involves illness, special medication, pregnancy or breastfeeding, or similar circumstances, it is protected as sensitive personal information; such information is not used for unrelated purposes.
Location and places: after you use a feature that needs location and grant permission, we process the precise or approximate location, coordinates, and place names that feature needs, for weather or nearby-place lookups, place records, check-ins, and converting coordinates into readable place names. Places you save to your journal or other records are stored as part of those records; service requests and error logs may contain the coordinates of that lookup, so this should not be understood as location handling that leaves no record at all.
Usage statistics: we process page visits, taps, feature usage, action results, foreground usage periods, and time spent on pages associated with your account or installation identifier, as well as crash flags, error types, error fingerprints, versions, and necessary diagnostic information, in order to measure feature usage, detect faults, and improve the product. Product statistics use necessary identifiers, event types, and counts, and never use chat content, memory content, file contents, or payment credentials as the content of a statistics event. Statistics tied to your account or installation identifier may still be associated with you; de-identification or error fingerprinting is not the same as anonymization.
2. Device permissions and Apple Health
We request system permissions when you actively use the relevant features, as each feature needs; the permissions actually available depend on your device, system, and app version.
- Camera: for taking pictures to send to the AI, taking a profile photo, and scanning QR codes or barcodes in miniapps, such as scanning a product to log it.
- Photo library access: for choosing the pictures you want to send, a profile photo, or miniapp attachments, such as selecting a meal photo for recognition. You can use the options provided by your system to grant limited photo access.
- Saving to the photo library: for saving share posters, generated images, or images exported by miniapps to your system photo library when you tap save. Images saved only on your device are not automatically uploaded by the save action.
- File picker: for accessing files you actively choose and submit; opening the file picker does not give us access to all files on your device.
- Microphone: for voice input, voice conversations, and custom voice recordings that you start. Speech recognition requires sending the relevant recordings to our speech recognition provider; custom voices are handled as described in Section 3.
- Location: for looking up the weather or nearby information for your current location when you ask, or recording places and checking in inside miniapps. Where your location must be sent to a map provider, it is handled as described in Section 4.
- Notifications: for sending the reminders you set, task and goal related notifications, and necessary service messages. System notification permission and the in-app personalized push settings can be adjusted separately.
- Screen Time / Family Controls: on supported platforms, for choosing and blocking distracting apps when you turn on focus mode yourself. This permission is used to enforce the focus rules you set.
- Siri: on supported platforms, for starting Cami actions through Siri or Shortcuts when you choose to, such as starting a conversation; actions involving third-party AI still require the corresponding authorization.
Declining an optional permission affects the corresponding feature but not features that do not need it. You can adjust or withdraw permissions in system settings; system permissions do not replace consent that must be obtained separately under the law, such as consent for third-party AI processing or for sensitive personal information.
After you actively connect Apple Health and grant permission, Cami reads the active energy, the sample start and end times, and the HealthKit sample identifiers within the dates you authorized. It does not read data types you have not authorized and does not write data to Apple Health. These fields are sent to Cami’s servers for energy verification in nutrition tracking, sample de-duplication, and overlap checks against manual exercise records logged for the same day, so that active energy is not counted twice. The daily summaries also feed the exercise expenditure line in your nutrition daily report.
The health day record stores the date, the daily total of active energy, the sync time, and necessary status; sample identifiers and detailed start and end times are not written into that day record. Apple Health daily summaries are kept for at most two calendar years, counted from the date each record corresponds to; re-syncing does not restart the clock. The retention period supports looking back at health records and comparing across years, and is not a promise to store data for a full two years. Retention arrangements are set out in Section 5. These summaries are not used for goal recommendations unrelated to nutrition and exercise records.
HealthKit data is not used for advertising, marketing, data mining unrelated to health management, or training general AI models, and is not provided to advertising or marketing SDKs. You can withdraw the system permission and request deletion of previously stored data through the relevant record management or a personal information request. Withdrawing permission stops future reading but does not automatically delete existing summaries; stopping syncing does not affect features that do not need Apple Health data.
Device permissions control access to device capabilities and cannot replace other consent to personal information processing that the law requires obtaining.
3. AI processing, memory, and sensitive information
To provide answers, memory, and the AI features you enable, we pass the content you submit and necessary related records to third-party AI providers for processing. What is sent is limited to the text, images, files, recordings, context, and records or summaries needed by the corresponding feature, and does not include sign-in credentials or payment information.
Before your personal information is sent to a third-party AI provider, we will separately inform you of the recipient, the purpose, and what will be sent, and obtain your explicit authorization. Consent to the general privacy policy, device permissions, membership payments, or past use of AI does not substitute for this authorization.
The authorization also covers automatic AI features you have already turned on, such as automatic goal suggestions and memory organizing; optional features that were off are not turned on automatically as a result of the third-party AI authorization. The third-party AI authorization does not include permission to use HealthKit data for advertising, data mining unrelated to health management, or training general models.
You can decline the authorization, or review and withdraw it under “Settings → Permission management → Privacy permissions → Manage AI data authorization”. After you decline or withdraw, features that need third-party AI processing can no longer be used; you can still view existing content, manage goals and tasks manually, and use local focus features that do not rely on third-party AI. After withdrawal, no new sharing based on that authorization takes place; data already sent and requests already being processed cannot be recovered by withdrawing, and historical content is not automatically deleted. Deletion requests are handled under Sections 5 and 7.
We keep the version, decision, and time of authorizations associated with your account, in order to manage authorizations and record your choices. When a new AI recipient is added, or the scope of information or purposes is materially expanded, we will inform you separately and obtain your consent again where needed.
This policy does not treat “using AI features” as a blanket authorization to use your private chats, memories, and miniapp records for training general models. If we ever plan to carry out such training, we will separately explain the purpose, scope, and participants, and complete the corresponding notice and consent procedures required by law. The use restrictions in Section 2 continue to apply to HealthKit data.
Some content may contain sensitive personal information such as health, financial, and location data. Please only submit the information needed to complete the corresponding feature. This policy, accepting the master agreement, and device permissions do not authorize Cami to use such information for additional AI analysis, goal linking, or training general models; any optional data use in related features follows the on-page settings and the corresponding notices.
Voice samples and voice characteristics: the custom voice page asks you to confirm that you are only submitting your own voice, and explains before upload that samples are transferred to Alibaba Cloud to extract voice characteristics, generate the voice, and synthesize speech. A voice can be used for imitation; a leak or improper use could cause identity confusion, impersonation, and reputational harm. By default the original recordings are not kept for later rebuilding; if you separately choose to keep them, the purpose and cleanup rules are in Section 5. Do not upload anyone else’s voice.
Health and life records: whether ordinary meal, sleep, or mood records count as sensitive information depends on their content and context; where they involve illness, medical care, mental health, or an inferable health condition, they are protected as sensitive health information. The scope of processing after connecting Apple Health is described in Section 2. Using meal, sleep, mood, expense, or similar records for AI analysis or goal linking follows the settings in the corresponding miniapp. A leak could expose health status or private life.
Expense records and other sensitive records: amounts, income and expense items, and notes are used for bookkeeping and calculations; they may contain sensitive content such as financial accounts, identity details, and precise whereabouts, and a leak could expose your assets, activities, or identity. Please do not submit unnecessary information such as full bank card numbers, payment passwords, or verification codes for ordinary bookkeeping.
You can manage data use through memory management, the settings of the relevant miniapps, or the contact channels listed in this policy. Turning off an AI reading or linking feature is a different action from deleting the original records; the scope of processing after withdrawal and the deletion of saved content are handled under Section 7. Where the law provides that processing does not require consent, we process in accordance with the law.
Where necessary to comply with applicable legal obligations, or necessary in an emergency to protect a person’s life, health, or property, we may process relevant information within the scope the law allows without consent as a precondition. This does not include continuously obtaining precise location, reading contacts, or routine monitoring, nor routinely sharing mood, chat, and health records with family members or other third parties.
4. Third-party services and SDKs
Cami uses third-party capabilities such as cloud services, model services, authentication, and push notifications. Some providers process information at our direction, to deliver the features described in this policy; others decide the purposes and means of processing themselves. For recipients that decide the means of processing themselves, we disclose their name, contact details, purposes, methods, and categories of information, and obtain your consent separately where the law requires. Third parties’ own rules do not exempt us from the responsibilities we bear under the law. We require relevant recipients to protect the information they receive at a level no lower than this policy requires; for processing on our behalf, we agree on and limit the purposes, duration, processing methods, categories of information, and protective measures, and supervise their processing activities. Where processing does not meet the protection requirements, we will not start it, or will stop the relevant sharing.
The following parties receive necessary information for the corresponding features. Carrier authentication and phone system push notifications also involve the carrier or device platform you use; the feature pages and platform rules govern the details.
阿里云计算有限公司 (Alibaba Cloud): provides AI, voice, file storage, and message push services. Per feature, it processes the necessary text and context, images or files, recordings or voice samples, and device, network, and push identifiers with necessary logs, in order to complete the features you use, store uploaded content, and deliver messages. Contact: Alibaba Cloud support and service tickets, or the service hotline 400-80-13260; privacy policy: https://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud202107091605_49213.html.
杭州深度求索人工智能基础技术研究有限公司 (DeepSeek) and its affiliates that lawfully participate in providing the related services: provide AI content processing services, processing the text, context, image or file content, and necessary invocation information needed to complete the corresponding features. Contact and privacy policy: https://cdn.deepseek.com/policies/zh-CN/deepseek-privacy-policy.html.
北京火山引擎科技有限公司 (Volcengine) and its related service affiliates: provide AI and voice services, processing necessary text, context, images, recordings, and necessary invocation logs. Business inquiries: service@volcengine.com; privacy and security statement: https://www.volcengine.com/trust/privacy.
深圳市和讯华谷信息技术有限公司: provides one-tap sign-in, verification SMS, and the notification service for older app versions. When you choose the corresponding features, it processes the necessary phone number or verification results, device and network information, carrier information, applicable device and push identifiers, and necessary logs. You can choose other available sign-in methods instead. Contact: support@jiguang.cn, compliance@jiguang.cn; privacy policy: https://www.jiguang.cn/license/privacy.
Map and place services: when the corresponding features are actually configured and enabled, the Amap Open Platform or Tianditu is used to convert coordinates you provide or that are obtained with your authorization into place names, and to display maps. Map display requests also cause the provider to receive the requesting IP address, map region or tile requests, and necessary network request information. We do not include your Cami account, chats, goals, or memories in reverse geocoding requests.
The Amap Open Platform is provided by 北京高德图强科技有限公司; the corresponding requests process latitude-longitude and coordinate system information for reverse geocoding. Customer service: gd.service@autonavi.com; personal information protection officer: Personal_Information_Officer@autonavi.com; the processing rules are in the Amap Open Platform Privacy Policy (https://lbs.amap.com/pages/privacy/).
Tianditu is China’s national public service platform for geographic information, built and run by the National Geomatics Center of China. The corresponding service processes map requests, and reverse geocoding additionally processes latitude and longitude, in order to display maps and return place names. You can read the service description on the Tianditu website (https://www.tianditu.gov.cn/) or learn more through the contact channels on the National Geomatics Center of China website (https://ngcc.cn/). Map services that are not yet configured or enabled do not receive your information merely because they are listed in this policy. Where separate consent is required by law, your separate consent is obtained before information is provided to the corresponding provider.
Product usage statistics: we process the necessary usage statistics listed in Section 1, in order to understand how features are used, improve the experience, and troubleshoot problems. If personal information is to be handed to a new external analytics service, we will first disclose the recipient, the scope of what is sent, and the purpose, and complete the applicable notice and consent procedures. Product statistics are not used for cross-company targeted advertising or ad attribution.
Apple, WeChat, and carrier authentication: when you actively choose the corresponding sign-in method, the authorization identifier, necessary account information, and authentication results are processed. System push notifications also involve the corresponding platform processing push tokens and necessary message content.
Membership payment channels: once the membership purchase entry point is open, iOS in-app purchases are completed through Apple App Store StoreKit. Apple processes the purchase and payment information and provides Cami with the products, transactions, subscription status, and signed credentials needed to verify subscriptions and refunds; for Apple contact and privacy rules, see the Apple Privacy Policy (https://www.apple.com.cn/legal/privacy/). When Android users actively choose WeChat Pay or Alipay, we submit to the chosen channel the merchant order number, products, amounts, and other information needed to place the order, and receive the transaction results needed to verify charges, renewals, cancellations, and refunds. WeChat Pay is provided by 财付通支付科技有限公司 (Tenpay), contactable at 95017; its rules are in the Tenpay Privacy Policy (https://pay.wechatpay.cn/xdc/weardeviceagreementweb/html/agreement/tenpay_user_privacy). Alipay payments are provided by 支付宝（中国）网络技术有限公司 (Alipay), contactable at 95188; the related agreements and privacy rules are in Alipay’s agreements and privacy policy (https://render.alipay.com/p/c/17qjvbnlkcw0). Payment accounts, bank cards, or verification information collected by the channels themselves are governed by their rules; Cami does not receive full payment passwords, verification codes, or bank card numbers from payment results. Channels that are not open are not activated, and no orders arise, merely because of this policy; before actually enabling a channel, we will verify the integrating entity, the fields, and the channel agreements, and update the third-party sharing list.
The Alibaba Cloud OSS object storage used by Cami is located in the Beijing region within mainland China. Other model, voice, authentication, and push services process the corresponding business data according to their actual production configurations; each feature only calls the services it needs. When a provider, production region, processing relationship, or purpose changes, we will update this disclosure and complete the corresponding procedures required by law.
We do not sell your personal information, and we do not share it with third parties for ad targeting. Where the law requires it, where emergency protective measures are taken according to law, or in other lawful processing circumstances, information is provided only within the necessary scope. Where public disclosure or a business transfer is involved, we disclose the recipient and related rules according to law and complete the applicable consent procedures.
5. Information retention and deletion
Personal information may be stored on your device, on Cami’s servers, and in the systems of relevant providers. The retention rules are described by category below; when the retention period ends, the purpose has been achieved, or deletion is required by law, the information is deleted or anonymized. Information that must be retained by law is managed separately from other data and is not used for unrelated purposes.
Account information: kept for sign-in and account management while the service relationship lasts; after account deletion, handled under the cleanup rules in this section. Chats, goals, memories, and miniapp records: kept for continued use, looking back, and access across devices, until you delete the content, delete your account, or the feature’s retention purpose ends. Original chats, extracted memories, and feature records may be stored independently and need to be managed separately; deleting a chat does not automatically delete all records derived from it.
Membership, orders, and payment records: trial and campaign eligibility, invitation code use, and the membership benefits ledger are used while the account relationship lasts to prevent duplicate claims, verify benefits, and handle disputes; orders, subscriptions, charges, refunds, reconciliation, and necessary customer service records are kept while the transaction relationship lasts and through after-sales handling. After account deletion, transaction, financial, or dispute records that must be retained by law are kept with restricted purposes for the applicable statutory period and as needed for dispute handling; the period is determined by when the order or dispute completes and by the legal requirements applicable to the relevant records, after which they are deleted or anonymized. Cami does not immediately erase payment facts that still need verification on the grounds of account deletion, and does not use retained records for new marketing purposes.
Usage statistics, diagnostics, and service logs: kept only within the scope and period needed for feature statistics, troubleshooting, service security, and fulfilling applicable obligations; deleted or anonymized once the purpose is fulfilled or identifiable records are no longer needed. Statistics and diagnostics associated with you fall within the scope of access and deletion requests you can make; statistics that have been anonymized and can no longer be linked to you may continue to be used for product improvement. Analysis records still stored are not considered deleted merely because an account has been deactivated.
Authorization records and personal information requests: necessary versions, decisions, times, and acceptance records are kept in order to manage your authorization choices, carry out withdrawals, accept requests, and evidence the handling process; they are deleted or anonymized when the processing purpose ends and there is no legal requirement to retain them. Feedback descriptions, attachments, and contact details are kept only to verify the problem, reply, and handle necessary disputes, and are cleaned up once that purpose is complete.
Speech recognition and third-party model requests: the scope of what is sent follows Sections 3 and 4; the provider’s temporary storage during processing, service logs, and deletion arrangements follow the corresponding business service agreements and applicable rules. We do not equate real-time processing with no retention by any participant, and do not promise that third parties immediately delete all copies when a request ends. You can request access to or deletion of information about you through the channels in Section 7; we will take measures according to the processing relationship and explain any situations where retention is legally required or immediate deletion is temporarily not possible.
Original custom voice recordings: by default not kept for later rebuilding, and moved into cleanup once creation processing completes or fails; if you separately choose to keep them, they are kept in order to rebuild the voice, until you delete that voice or retention is no longer needed.
Generated voices: kept for speech synthesis while in use; voices pending activation are scheduled for cleanup after they expire in 30 days; a replaced voice is kept for 30 days to support historical audio and then scheduled for cleanup. After you delete a voice, we deactivate the corresponding configuration and schedule cleanup of the associated cloud voice and recordings.
Apple Health daily summaries: kept for at most two calendar years, counted in calendar dates on China Standard Time from the date of the corresponding health record; once expired, they are no longer used for lookups, syncing, or analysis, and expired daily summaries are deleted. Re-syncing does not extend the period. You can request deletion earlier.
After you delete your account, we deactivate the account, revoke sign-in sessions, stop push notifications for that account, and process related memories and data. Remaining account data enters subsequent cleanup. When you tap delete account, copies stored in various places do not all disappear at the same moment. Once deletion is complete, the account cannot be restored.
For information that must be retained by law, or data such as backups that is temporarily difficult to delete immediately for technical reasons, we continue to store it only within the scope the law allows, take necessary security measures, stop processing it for other purposes, and complete deletion once the corresponding conditions are met. You can contact us to ask about deletion requests and how your data is being handled.
Storage regions and cross-border transfers: Cami’s self-controlled servers and the Alibaba Cloud OSS object storage are currently located in Beijing, within the People’s Republic of China. The actual processing regions of other model, voice, authentication, and push services are determined by their production configurations and service arrangements. Platform sign-in or system push capabilities provided by Apple, WeChat, carriers, and device makers process necessary information according to the platform you choose and its rules. Cami does not currently provide personal information on its own to overseas recipients that have not been disclosed to you. If personal information is later transferred abroad, we will, before it happens, list the overseas recipient’s name, contact details, processing purposes and methods, categories of information, retention rules, and how to exercise your rights against them, and complete the applicable cross-border transfer conditions and separate consent procedures.
6. Information security
We take measures such as transport protection, access control, and necessary de-identification, and restrict information access to what is needed to perform work duties. No internet service can guarantee absolute security; if a personal information security incident occurs, we will take remedial measures according to law, fulfill our reporting obligations, and notify affected users as required.
Please keep your device and credentials safe, share exported data and chat screenshots carefully, and adjust lock screen notification previews as needed.
7. How you manage your personal information
You have the right to access, copy, correct, supplement, or delete personal information, withdraw consent-based authorizations, request account deletion, and ask us to explain the relevant processing rules, in accordance with the law.
Profile and records: you can edit your profile and manage chats and feature records on the corresponding pages. To delete extracted memories or adjust how memory is used, use the memory management entry; to manage a miniapp’s AI reading or goal linking, go into that miniapp’s settings. If the pages cannot complete your request, you can contact us.
Third-party AI authorization: view the disclosure and withdraw the authorization under “Settings → Permission management”; the effects and limits are described in Section 3. If withdrawal cannot be completed in the current version, you can raise it through the personal information request entry or the email at the end of this policy. System microphone, photo library, location, and Apple Health permissions are managed separately in system settings.
Personalized messaging: you can decline personalized recommendations based on your personal characteristics and proactive messages, and still use features that do not rely on that processing. The switch is under “Settings → Push reminders → Personalized recommendations and proactive messages”. After you turn it off, proactive suggestions, check-ins, and report pushes based on personal characteristics stop, as do similar messages already queued but not yet sent. Conversations you start, task reminders you have already set, agreed follow-ups, stage confirmations, action and progress feedback, and necessary account notifications are still handled under their own rules. Turning this off does not recall messages already delivered and does not cancel necessary account notifications.
Export and account deletion: you can start a data export or account deletion in the app under “Settings → Account and security”. The scope of an export follows the page description and the export results; to protect account security, you may need to verify your identity again. Personal information you are legally entitled to obtain that is not included in the self-service export can be requested by email. Exports do not include passwords, tokens, or other authentication credentials.
Privacy policy authorization: expand the full policy under “Settings → Permission management → Privacy permissions” and tap “Withdraw privacy policy”. After you confirm, you are signed out, the corresponding services stop on the current device, and the consent record on that device is cleared. You can read the policy again and actively agree before signing in again. This action does not delete your account, does not automatically delete historical data, and does not revoke sign-ins on other devices or account-level AI authorization. To stop third-party AI processing for your account on all devices, choose “Manage AI data authorization” in this module to withdraw it; to delete data, make a request as described in this section.
Withdrawal and deletion: you can withdraw device permissions in system settings, or raise other withdrawal requests through the relevant feature entries and by email. Withdrawal does not affect the validity of processing already carried out lawfully and does not automatically delete existing content; if you also request deletion, please state so explicitly. We will stop further processing based on the withdrawn consent and explain the effect on related features. Uninstalling the app does not automatically delete your account or server-side data.
Personal information requests can be submitted after signing in through the app under “Settings → Help and feedback → Personal information requests”, where you receive a case number, or through the backup email haohao@ixingtech.com. We will verify your identity to the necessary extent and respond with the handling result within 15 working days of receiving the request; for complex requests, we will explain the reasons, progress, and expected timing within that period, and where the law prescribes a shorter period, that period applies. The response deadline for handling a request is not the same as the deadline for the data to be deleted from all media. Where a request cannot be satisfied, we explain the basis and the available appeal channels; please do not send passwords or verification codes.
After a person passes away, their close relatives may, for their own lawful and legitimate interests, request access, copying, correction, or deletion of the deceased person’s personal information in accordance with the law, unless the deceased arranged otherwise. We verify the applicant’s identity, the family relationship, the fact of death, and the necessity of the request, and handle it while protecting the rights and interests of the other people involved; this right is not interpreted as automatic inheritance of the account or unconditional access to all private conversations.
8. Protection of minors
Cami is intended for users aged 14 and above, and the service is not provided to minors under 14. Users aged 14 or above but under 18 should read this policy with a parent or other guardian, and use the service with their consent and guidance.
Personal information of minors under 14 is sensitive personal information. If we find such information has been collected by mistake, we will stop the related services and non-essential processing, delete it according to law, or take other appropriate protective measures, except where retention is required by law. Guardians can raise verification, deletion, or other protection requests through the email at the end of this policy. We will not bypass the minimum age requirement of this service on the grounds that a guardian has consented.
9. Sharing with others and third-party content
When you actively share content, send exported files, or access third-party services, please pay attention to who will receive them, the scope of sharing, and the personal information involved. Cami is responsible for the information processing it carries out itself under this policy; services independently provided by third parties are governed by their own personal information rules.
10. Policy updates and contacting us
We publish the policy version, update date, and how it takes effect; the actual publication date is shown on the website and in the app at official release. Where major changes involve the categories of information, processing purposes or methods, recipients, or your main rights, we will show a summary and the full text through prominent prompts in the app before they take effect; where the law requires obtaining consent again, the corresponding processing starts only after you actively confirm, and default checkboxes or continued use do not substitute for the necessary consent. Declining an optional new purpose does not expand the original authorization or take away features that do not rely on that purpose.
Personal information handler: 爱星智联科技有限公司.
Domicile and valid mailing address: 北京市通州区江米店街 2 号院 5 号楼 33 层 3318 (Room 3318, Floor 33, Building 5, Courtyard 2, Jiangmidian Street, Tongzhou District, Beijing). App filing number: 京ICP备2026059385号-2A. haohao@ixingtech.com is the official contact email for Cami’s personal information protection work; the in-app entry is “Settings → Help and feedback → Personal information requests”. Cami customer service staff or the technical team handle acceptance and processing depending on the request category. The policy entry on the website is https://realcami.cn/privacy.
Please describe your request, the account information that helps us verify you, and how you would like a reply; we will handle it under Section 7. For voice impersonation complaints, protection of minors, or requests about a deceased person’s information, please describe the corresponding details so we can verify within the necessary scope.