信息来源与用途
我们处理你提交的登录标识、昵称、头像、简介、活动、图片、聊天、报名、核销、举报和支持记录，也从你选择的 Google、Apple 或微信登录及支付服务方接收必要的身份和交易状态。出生日期用于由服务端执行的 18 岁年龄检查。
设备、IP、会话、安全日志及故障信息用于运行和保护服务。附近活动使用你授权的位置或主动选择的区域；可以拒绝设备定位，改为选择区域。地图请求可能向地图提供方暴露 IP 和所查看的地图区域。
数据用于交付功能、同步内容、处理付款退款、核销授权、安全审核、调查滥用、客服及法律义务。我们不出售个人信息。
Sources and purposes
We process submitted login identifiers, profile information, activities, media, messages, bookings, redemptions, reports and support records, plus necessary identity and transaction status from chosen Google, Apple or WeChat sign-in and payment providers. Date of birth supports server-side age checks.
Device, IP, session, security and diagnostic data operate and protect the service. Nearby features use authorised location or a selected area; device location is optional. Map requests can disclose IP and the viewed area to the map provider.
Information delivers features, synchronises content, supports payments, refunds, staff permissions, moderation, abuse investigations, support and legal duties. We do not sell personal information.
支付与身份验证
Stripe 处理真实付款及 Stripe Connect 身份与银行卡设置。Kimoo 保存必要的订单金额、币种、票种、支付标识、收款资格、退款、争议和核销记录；完整银行卡号和验证流程中的证件资料应直接提交 Stripe，而非聊天或客服邮箱。
指定核销员邮箱用于匹配对应登录账号和活动权限。受邀人接受后仅获得对应活动授权；组织者应有权提交该邮箱，不得借邀请获取对方密码或不相关资料。核销人员仅应访问履职所需的票务信息。
Payments and verification
Stripe processes live payments and Connect identity and bank setup. Kimoo stores necessary order amounts, currencies, tickets, provider references, payout eligibility, refunds, disputes and redemption records. Full card and verification documents should be submitted directly to Stripe, never in chat or support email.
Staff invitation emails match the signed-in account to activity-specific permissions after acceptance. Inviters must be entitled to supply the email and must not seek passwords or unrelated information. Staff should access only ticket information needed for their role.
服务提供方与跨境处理
目前基础设施使用 AWS（澳大利亚悉尼区域的服务）及 Cloudflare；Google、Apple 与微信（腾讯）提供所选登录能力，Stripe 提供支付与收款，OpenAI 用于已启用的内容安全审核。公开文本或图片的必要部分可能发送至内容审核服务。
你主动选择微信登录或关联账号时，微信 SDK 和授权服务会处理必要的应用及授权信息，Kimoo 接收应用内的微信账号标识、你授权的昵称和头像；微信登录不会向 Kimoo 提供已验证邮箱。选择微信分享时，你选定的公开内容标题、简介和链接会交给微信，由你选择发送对象并确认。Kimoo 不会因此读取你的微信通讯录或聊天记录。
语音、AI 助手、同频内容或生成服务在启用并使用时，可能使用智谱／BigModel、DeepSeek 或其他在相应功能中说明的提供方。处理范围包括你主动提供的请求、语音或所选内容；请勿在 AI 请求中提供银行卡、证件或无关他人信息。未使用的可选功能不需要你提供相应内容。
地图涉及 OpenStreetMap 或产品所显示的地图服务；设备系统的相机、麦克风、定位及通知权限可在设备中管理。具体可用功能依客户端和启用状态而异。
供应商及其分包商可能在澳大利亚、美国、中国和其他运营地区处理数据。我们按目的限制访问并采用适用的合同和安全控制；这不是要求用户一概放弃跨境保护。隐私问题可联系下方邮箱查询相关提供方或处理地区。
Providers and overseas processing
Infrastructure uses AWS services in Sydney, Australia, and Cloudflare; Google, Apple and WeChat (Tencent) provide selected sign-in, Stripe payments and payouts, and OpenAI enabled content-safety checks. Necessary public text or images may be sent for moderation.
When you choose WeChat sign-in or account linking, the WeChat SDK and authorization service process necessary app and authorization information. Kimoo receives an app-scoped account identifier and the name and avatar you authorize; WeChat does not supply a verified email. When you choose WeChat sharing, the selected public title, description and link are passed to WeChat for you to select a recipient and confirm. Kimoo does not thereby access your WeChat contacts or chat history.
When enabled and used, voice, AI assistant, discovery or generation features may use Zhipu/BigModel, DeepSeek or another provider identified for that feature. Processing can include submitted requests, audio or selected content. Do not submit card details, identity documents or unrelated third-party information to AI tools. Optional features do not require that content if unused.
Maps involve OpenStreetMap or the map provider shown in the product. Manage camera, microphone, location and notification permissions on your device. Availability depends on the client and enabled features.
Providers and subprocessors may process information in Australia, the United States, China and other operating locations. We limit access by purpose and use applicable contractual and security controls; users are not asked to give a blanket waiver of overseas protections. Contact us about relevant providers or locations.
公开范围与访问
公开头像、昵称、简介、活动及你主动发布的内容可被其他人浏览或分享。请勿将精确住址、证件、他人隐私或秘密写入公开内容。资料修改会同步到使用最新资料的页面，已被他人保存的副本不一定能撤回。
群聊按成员权限开放，私聊按相应关系规则开放；平台不宣称端到端加密。获授权人员仅在安全、客服、举报、退款、争议或法律需要的范围内访问相关记录。不得将聊天正文、验证码、密码、完整银行卡或证件资料纳入一般产品分析事件。
Visibility and access
Public avatars, names, bios, activities and submitted public content can be viewed or shared. Do not publish home addresses, identity documents, others’ private information or secrets. Updates appear on views using current profile data, but copies saved by others may not be retractable.
Group and private conversations follow membership and relationship permissions. Kimoo does not claim end-to-end encryption. Authorised personnel access relevant records only as needed for safety, support, reports, refunds, disputes or law. General analytics must exclude message bodies, codes, passwords and full card or identity details.
保留、删除与安全
我们按功能、安全和法律需要保存信息，使用访问控制、传输保护及审计措施。任何网络服务都无法承诺绝对安全；发现适用法律要求通报的数据泄露时，我们将按要求通知有关用户及监管机构。
可以在设置中修改资料或申请删除账号。删除申请有 7 天撤销期；之后符合条件的数据删除或匿名化。未结订单、退款、争议、税务或安全记录仅按必要范围和期间继续保留。备份可能在其轮换周期后清除，不承诺即时删除所有副本。
不提供某些必要信息会使对应功能无法使用。你可停止使用可选功能或撤回设备权限；这不追溯撤销之前合法处理，也不自动消除订单责任。
Retention, deletion and security
Information is retained as needed for functionality, safety and law, with access controls, transport protection and audit measures. No online service can guarantee absolute security; eligible breaches will be notified to affected people and regulators as legally required.
Update details or request deletion in Settings. A seven-day cancellation period precedes deletion or anonymisation of eligible data. Unsettled orders, refunds, disputes, tax and security records are retained only as necessary. Backups may clear through rotation rather than instantly.
Without required information, the relevant feature may be unavailable. Stop optional features or revoke device permissions at any time; this does not undo prior lawful processing or order obligations.
查询、纠正与投诉
联系 admin@starcore.com.au 可申请访问、更正、删除或提出隐私投诉。我们可能采用与风险相称的身份核验，并在合理时间内回复；不要发送密码、验证码或完整银行卡。
如不满意处理结果，可联系澳大利亚信息专员办公室 OAIC 或其他适用监管机构。本政策有重大变化时会合理通知，需要另行同意的处理会另行征求。
Access, correction and complaints
Contact admin@starcore.com.au for access, correction, deletion or privacy complaints. We may verify identity proportionately and respond within a reasonable time. Never send passwords, verification codes or full card details.
If dissatisfied, contact the Office of the Australian Information Commissioner or another applicable regulator. Material policy changes are reasonably notified; processing that requires separate agreement will seek it separately.