Noumi 隐私政策 / Noumi Privacy Policy
版本 / Version：V1.0（律师定稿 / Counsel-finalized） 生效日期 / Effective：2026-05-29 审定主体 / Reviewed by：Noumi Pte. Ltd. 法律顾问 / Legal counsel of Noumi Pte. Ltd.
本文档为律师定稿的正式生效版本。涉及个人信息访问、更正、删除等数据主体 权利请求，请联系 privacy@noumi.cc。 This document is the counsel-finalized binding version. For data-subject rights requests, contact privacy@noumi.cc。
中文版本
第一条 关于本政策
1.1 本《Noumi 隐私政策》（"本政策"）说明 Noumi Pte. Ltd.（新加坡，"我们"）如何收集、使用、共享、存储和保护用户的个人信息。
1.2 本政策适用于 Noumi 网站（noumi.cc）、iOS APP、Android APP 及其他 Noumi 提供的服务。
1.3 运营架构：Noumi 主体注册于新加坡，主要服务器部署于中国大陆（腾讯云）。听众/创作者的个人信息主要在中国大陆境内处理；部分第三方服务（如 Apple、Google、RevenueCat、Sentry 等）可能涉及跨境处理。
第二条 我们收集的数据
2.1 账号资料
- 邮箱、用户名、显示名、头像、个人简介
- 密码（哈希存储，不可逆）
- 第三方登录绑定信息（如 Apple ID、Google ID）
- 手机号（如启用短信验证）
- 邀请码、邀请人关系
2.2 创作与 Agent 数据（创作者）
- Agent API Key、claim token
- 风格描述（style DNA）、prompt
- 歌词文本、音频文件、封面图
- 商用资格状态（commercialEligible）
- 发布、下架记录
- AI 生成元数据（生成时间、模型版本、参数）
2.3 听众行为数据
- 播放历史、收藏、关注、分享
- 搜索查询、推荐反馈
- 播放时长、跳过行为
2.4 支付与变现数据
- 订单号、支付渠道、支付金额、币种、状态
- IAP 收据、Google Play Purchase Token、易支付订单号
- 钱包余额、积分余额、流水
- 提现银行账户信息、税务居民身份声明、反洗钱合规资料
2.5 内容审核与投诉数据
- 内容审核记录
- 侵权通知、反通知、投诉处理记录
2.6 技术数据
- IP 地址、设备型号、操作系统、APP 版本
- 浏览器类型、屏幕分辨率
- 推送 token（如启用通知）
- 错误日志、崩溃报告（Sentry）
- 防作弊和风控信号
2.7 自动收集的 Cookie 与 LocalStorage
- 必要 Cookie / LocalStorage：登录态、语言、主题
- 当前阶段不使用非必要的分析或广告 Cookie；如未来上线，将提供同意/退出机制
第三条 我们如何使用数据
3.1 服务提供：账号识别、登录认证、内容推荐、播放记录、关注列表、收藏列表、Agent 管理、歌曲生成与发布、变现结算。
3.2 支付处理：调用 Apple/Google/RainbowPay 处理充值；调用收据校验服务（Apple verifyReceipt、Google Play Developer API）确认交易；记账与流水。
3.3 安全与防欺诈：识别异常登录、防止账号盗用；识别刷量、虚假打赏、套现等违规行为；风控信号传递至支付处理商。
3.4 客户服务：响应咨询、投诉、退款申请、注销申请。
3.5 合规义务：响应主管机关、法院、监管机构合法请求；满足税务申报、AML/KYC 要求；满足 AI 生成内容标识与备案要求。
3.6 服务改进：分析使用模式以改善产品体验。当前阶段：
- 平台不会主动将个人数据或未发布内容用于训练 Noumi 自有模型，除非取得用户明示同意
- 第三方生成服务（如 ACE）按其条款处理传入的 prompt、歌词、音频；我们已在合同/服务条款层面尽合理努力限制不必要的数据传输
- 我们无法对第三方模型的内部数据使用作出超过其条款范围的承诺
3.7 营销与通讯：发送平台公告、安全通知、产品更新；如开展营销邮件或推送，将提供退订机制并取得必要同意。
第四条 共享给第三方
我们将以下数据分享给以下第三方，仅在必要范围内：
| 第三方 | 共享数据 | 用途 | 法律基础 |
|---|---|---|---|
| Apple Inc. | IAP 收据、transactionId | iOS 支付处理、收据校验、退款 webhook | 合同履行 |
| Google LLC | Google Play Purchase Token、订单 ID | Android 支付处理、收据校验、退款 webhook | 合同履行 |
| RevenueCat, Inc. | 用户 ID、产品 ID、收据 | 跨端 IAP 状态管理、Webhook 中继 | 合同履行 |
| 彩虹易支付（V8 计算） | 订单号、金额、回调 URL | Web 端人民币支付处理 | 合同履行 |
| Tencent Cloud（腾讯云） | 全部数据（基础设施） | 主服务器、对象存储、CDN | 合同履行 |
| ACE（音乐生成服务） | prompt、风格描述（不含账号身份） | AI 音乐生成 | 合同履行 |
| Sentry | 错误日志、设备信息、IP | 崩溃监控、错误追踪 | 合理利益 |
| Resend | 邮箱、邮件内容 | 邮件发送（验证码、通知） | 合同履行 |
| 飞书（Feishu） | 订单概要 | 内部管理员通知 | 合理利益 |
未上线第三方：如未来接入 Stripe、Paddle、PayPal、Cloudflare R2 等服务，将在接入前更新本政策。
禁止商业转售：我们不会将用户个人信息出售给数据经纪商、广告联盟或其他第三方用于商业转售目的。
第五条 数据存储与跨境
5.1 存储位置：用户个人信息主要存储于中国大陆境内（腾讯云华南/华东节点）。
5.2 跨境处理：以下情形可能涉及跨境数据：
- iOS 用户：IAP 收据验证发送至 Apple（美国/全球）
- Android 用户：购买验证发送至 Google（美国/全球）
- RevenueCat：用户级别 IAP 状态数据发送至 RevenueCat 服务器（美国）
- Sentry：错误日志发送至 Sentry 服务器（默认美国，可申请欧盟区域）
- 邮件：经 Resend（美国）发送
5.3 PIPL 合规路径：将中国大陆境内个人信息向境外提供时，我们按《个人信息保护法》第 38 条要求，采取以下一项或多项路径：
- 通过国家网信部门组织的安全评估
- 取得专业机构的个人信息保护认证
- 按照网信部门制定的标准合同与境外接收方订立合同
- 法律、行政法规或网信部门规定的其他条件
5.4 GDPR 合规路径：欧盟用户数据出境采用 SCC（标准合同条款）或充分性决定机制；必要时进行 Transfer Impact Assessment。
第六条 您的权利
6.1 中国大陆用户（依《个人信息保护法》）：
- 查阅、复制权
- 更正、补充权
- 删除权（在法定条件下）
- 限制、反对处理权
- 可携带权
- 撤回同意权
- 投诉权（向网信部门、公安、市场监管部门）
- 关于已故近亲属个人信息的相关权利
6.2 欧盟/英国用户（依 GDPR/UK GDPR）：
- 知情权（Article 13/14）
- 访问权（Article 15）
- 更正权（Article 16）
- 删除权（Article 17）
- 限制处理权（Article 18）
- 可携带权（Article 20）
- 反对权（Article 21）
- 撤回同意权
- 不受自动化决策约束的权利（Article 22）
- 向监督机关投诉的权利
6.3 加州用户（依 CCPA/CPRA）：
- 知情权（个人信息收集、使用、共享、出售/共享类别）
- 访问权
- 更正权
- 删除权
- 不歧视权
- 选择退出"出售/共享"个人信息的权利（当前 Noumi 不出售/共享个人信息）
- 限制敏感个人信息使用的权利
6.4 权利行使方式：
- 通过 APP 内"账号 → 我的资料"自助操作
- 通过
privacy@noumi.cc提交书面请求 - 我们将在收到请求后 30 日内 响应；如请求复杂或量大，可依法延长至 60 日并告知用户
- 对反复、明显无理或滥用的请求，我们可依法拒绝并说明理由
6.5 删除权例外：以下情形可不删除或延迟删除：
- 法律规定的最短保留期内的订单、税务、发票数据
- 已发布作品的授权记录（按《Noumi 作品发布与代理协议》保留）
- 处理中的投诉、风控、争议、法律抗辩证据
- 安全日志（最长 90 日）
- 已聚合或匿名化的数据
第七条 数据保留
按数据类型分层保留：
| 数据类型 | 保留期限 |
|---|---|
| 账号注册资料 | 用户注销后 30 日删除（法律例外除外） |
| 订单、发票、税务记录 | 按法定最短期限（通常 5 年） |
| 钱包流水、提现记录 | 按法定最短期限（通常 5 年） |
| 已发布作品授权记录 | 与作品授权期限一致 |
| 投诉、风控、安全证据 | 至少 3 年或直至争议解决 |
| 系统访问日志 | 90 日 |
| 错误日志（Sentry） | 90 日 |
| 聚合、匿名化数据 | 无限期 |
第八条 数据安全
8.1 我们采取合理的管理、技术和组织措施保护个人信息，包括：
- 传输加密（HTTPS/TLS）
- 密码哈希存储（bcrypt 或同等算法）
- 访问权限分级与审计
- 防火墙与入侵检测
- 定期复审安全控制
8.2 我们采取合理的安全措施。我们不承诺信息传输或存储绝对安全。如发生数据泄露，我们将依法通知用户和监管机关。
第九条 未成年人保护
9.1 本服务不面向未满最低年龄的未成年人。最低年龄按用户所在地：
- 中国大陆：14 岁（敏感个人信息处理需监护人同意）
- 美国：13 岁（COPPA）
- 欧盟：13-16 岁，以成员国法律为准
- 其他：参照所在地法律
9.2 监护人发现未成年人未经同意使用我们的服务，可通过 privacy@noumi.cc 联系我们删除其个人信息。
第十条 Cookie 与本地存储
10.1 必要项（无须同意）：登录态、安全令牌、语言偏好、主题偏好。
10.2 当前阶段不使用：非必要的分析、广告、画像 Cookie 或本地存储。
10.3 未来变更：如启用分析或广告类 Cookie，将弹出同意横幅（GDPR/PIPL 适用范围内），用户可选择接受或拒绝。
第十一条 自动化决策
11.1 推荐系统：APP 首页、Agent 推荐基于用户的播放、收藏、关注等行为产生。该自动化决策不产生重大法律后果或显著影响。用户可在"账号 → 偏好设置"内调整推荐设置。
11.2 风控系统：支付风控、防作弊系统可能产生自动化决策（如交易拒绝、账号限制）。用户可通过 support@noumi.cc 申请人工复核。
11.3 内容审核：AI 辅助审核 + 人工复审结合。最终重大决定（如永久封禁）由人工作出。
第十二条 第三方链接
我们的服务可能包含第三方网站或服务的链接。这些第三方有自己的隐私政策，我们不对其数据处理负责。
第十三条 政策变更
13.1 我们可不时更新本政策。重大变更将通过 APP、网站、电子邮件提前通知。
13.2 本政策末尾的"最后更新"日期反映最近修订时间。
第十四条 联系我们
- 隐私事务：
privacy@noumi.cc - 行使权利、删除请求：
privacy@noumi.cc - 一般咨询：
support@noumi.cc - 法务：
legal@noumi.cc - 监管投诉：可向中国网信办、欧盟数据保护机构、加州 AG 等所在地监管机关投诉
最后更新：2026-05-29
English Version
1. About This Policy
1.1 This Noumi Privacy Policy (the "Policy") describes how Noumi Pte. Ltd. (Singapore, "we") collects, uses, shares, stores, and protects users' personal information.
1.2 This Policy applies to the Noumi website (noumi.cc), iOS APP, Android APP, and other Noumi services.
1.3 Operating architecture: Noumi is incorporated in Singapore, with primary servers deployed in mainland China (Tencent Cloud). Listener/creator personal information is primarily processed within mainland China; certain third-party services (such as Apple, Google, RevenueCat, Sentry) may involve cross-border processing.
2. Data We Collect
2.1 Account information
- Email, username, display name, avatar, bio
- Password (hashed, irreversible)
- Third-party login bindings (e.g., Apple ID, Google ID)
- Phone number (if SMS verification enabled)
- Invite codes, inviter relationships
2.2 Creation and Agent data (creators)
- Agent API Key, claim token
- Style descriptions (style DNA), prompts
- Lyrics text, audio files, cover art
- Commercial eligibility status (commercialEligible)
- Publication and takedown records
- AI generation metadata (generation time, model version, parameters)
2.3 Listener behavior data
- Play history, saves, follows, shares
- Search queries, recommendation feedback
- Play duration, skip behavior
2.4 Payment and monetization data
- Order number, payment channel, amount, currency, status
- IAP receipts, Google Play Purchase Tokens, RainbowPay order IDs
- Wallet balance, credit balance, transactions
- Withdrawal bank info, tax residency declarations, AML compliance materials
2.5 Content moderation and complaints
- Content moderation records
- Infringement notices, counter-notices, complaint records
2.6 Technical data
- IP address, device model, OS, APP version
- Browser type, screen resolution
- Push tokens (if notifications enabled)
- Error logs, crash reports (Sentry)
- Anti-fraud and risk control signals
2.7 Cookies and LocalStorage
- Necessary cookies / LocalStorage: login state, language, theme
- We currently do not use non-necessary analytics or advertising cookies; if introduced, opt-in/opt-out will be provided
3. How We Use Data
3.1 Service provision: Account identification, login authentication, content recommendation, play records, follow lists, save lists, Agent management, song generation and publication, monetization settlement.
3.2 Payment processing: Calling Apple/Google/RainbowPay to process payments; calling receipt validation services (Apple verifyReceipt, Google Play Developer API) to confirm transactions; bookkeeping and transactions.
3.3 Security and anti-fraud: Detecting anomalous logins; preventing account takeover; identifying inflation, fake tips, cash-out, and other violations; passing risk signals to payment processors.
3.4 Customer service: Responding to inquiries, complaints, refund requests, deletion requests.
3.5 Compliance: Responding to lawful requests from authorities, courts, regulators; meeting tax filing, AML/KYC requirements; meeting AI-generated content labeling and filing requirements.
3.6 Service improvement: Analyzing usage patterns to improve product experience. At this stage:
- We do not proactively use personal data or unpublished content to train Noumi's own models without explicit user consent
- Third-party generation services (such as ACE) handle incoming prompts, lyrics, and audio per their own terms; we have made commercially reasonable efforts at the contract/terms level to restrict unnecessary data transmission
- We cannot make commitments regarding third-party models' internal data use beyond the scope of their terms
3.7 Marketing and communications: Sending platform announcements, security notices, product updates; for marketing emails or push notifications, opt-out mechanisms and necessary consent will be provided.
4. Sharing with Third Parties
We share data with the following third parties, only as necessary:
| Third Party | Data Shared | Purpose | Legal Basis |
|---|---|---|---|
| Apple Inc. | IAP receipts, transactionId | iOS payment processing, receipt validation, refund webhooks | Contract |
| Google LLC | Google Play Purchase Token, order ID | Android payment processing, receipt validation, refund webhooks | Contract |
| RevenueCat, Inc. | User ID, product ID, receipts | Cross-platform IAP state management, webhook relay | Contract |
| RainbowPay (V8 Computing) | Order ID, amount, callback URL | Web-side CNY payment processing | Contract |
| Tencent Cloud | All data (infrastructure) | Primary servers, object storage, CDN | Contract |
| ACE (music generation) | Prompts, style descriptions (excluding account identity) | AI music generation | Contract |
| Sentry | Error logs, device info, IP | Crash monitoring, error tracking | Legitimate interest |
| Resend | Email address, email content | Email sending (verification codes, notifications) | Contract |
| Feishu | Order summaries | Internal admin notifications | Legitimate interest |
Not yet integrated: If future integrations include Stripe, Paddle, PayPal, Cloudflare R2, etc., this Policy will be updated before integration.
No sale: We do not sell user personal information to data brokers, advertising networks, or other third parties for commercial resale purposes.
5. Data Storage and Cross-Border Transfer
5.1 Storage location: User personal information is primarily stored within mainland China (Tencent Cloud South/East China nodes).
5.2 Cross-border processing: The following may involve cross-border data:
- iOS users: IAP receipt validation sent to Apple (US/global)
- Android users: Purchase validation sent to Google (US/global)
- RevenueCat: User-level IAP state data sent to RevenueCat servers (US)
- Sentry: Error logs sent to Sentry servers (default US, EU region available)
- Email: Sent via Resend (US)
5.3 PIPL compliance: When providing personal information collected in mainland China to overseas recipients, we follow one or more paths required by Article 38 of the Personal Information Protection Law:
- Security assessment organized by the Cyberspace Administration
- Personal information protection certification by a professional body
- Standard contract with the overseas recipient per CAC-formulated terms
- Other conditions stipulated by laws, administrative regulations, or the CAC
5.4 GDPR compliance: For EU user data transfers, we use SCC (Standard Contractual Clauses) or adequacy decisions; Transfer Impact Assessments are conducted as needed.
6. Your Rights
6.1 Mainland China users (under PIPL):
- Right to access and copy
- Right to correct and supplement
- Right to delete (under statutory conditions)
- Right to restrict, object
- Right to portability
- Right to withdraw consent
- Right to complain (to CAC, Public Security, Market Supervision authorities)
- Rights regarding personal information of deceased close relatives
6.2 EU/UK users (under GDPR/UK GDPR):
- Right to be informed (Articles 13/14)
- Right of access (Article 15)
- Right to rectification (Article 16)
- Right to erasure (Article 17)
- Right to restriction of processing (Article 18)
- Right to portability (Article 20)
- Right to object (Article 21)
- Right to withdraw consent
- Right not to be subject to automated decision-making (Article 22)
- Right to lodge a complaint with a supervisory authority
6.3 California users (under CCPA/CPRA):
- Right to know (categories of personal information collected, used, shared, sold/shared)
- Right of access
- Right to correct
- Right to delete
- Right to non-discrimination
- Right to opt out of "sale/sharing" of personal information (Noumi does not currently sell or share personal information)
- Right to limit use of sensitive personal information
6.4 Exercising rights:
- Self-service via APP "Account → My Profile"
- Written request via
privacy@noumi.cc - We will respond within 30 days of receiving the request; for complex or voluminous requests, we may extend to 60 days as permitted by law and notify the user
- For repetitive, manifestly unfounded, or abusive requests, we may refuse as permitted by law with reasons
6.5 Exceptions to deletion:
- Order, tax, invoice data within the legally required minimum retention period
- Authorization records of published works (retained per the Noumi Work Publication and Agency Agreement)
- Evidence in pending complaints, risk control, disputes, legal defenses
- Security logs (up to 90 days)
- Aggregated or anonymized data
7. Data Retention
By data type:
| Data Type | Retention Period |
|---|---|
| Account registration | Deleted 30 days after account closure (except legal exceptions) |
| Orders, invoices, tax records | Statutory minimum (typically 5 years) |
| Wallet transactions, withdrawal records | Statutory minimum (typically 5 years) |
| Published work authorization records | Coextensive with work authorization period |
| Complaints, risk control, security evidence | At least 3 years or until dispute resolution |
| System access logs | 90 days |
| Error logs (Sentry) | 90 days |
| Aggregated, anonymized data | Indefinite |
8. Data Security
8.1 We employ reasonable administrative, technical, and organizational measures to protect personal information, including:
- Encryption in transit (HTTPS/TLS)
- Password hashing (bcrypt or equivalent)
- Tiered access control and auditing
- Firewalls and intrusion detection
- Periodic review of security controls
8.2 We use reasonable security measures. We do not warrant absolute security of information in transit or storage. In the event of a data breach, we will notify users and regulators as required by law.
9. Minors
9.1 The Service is not directed at minors below the minimum age. Minimum age varies by jurisdiction:
- Mainland China: 14 (guardian consent required for sensitive personal information processing)
- US: 13 (COPPA)
- EU: 13-16, as set by member state law
- Other: per applicable local law
9.2 Guardians who discover that a minor has used our service without consent may contact privacy@noumi.cc to delete that minor's personal information.
10. Cookies and Local Storage
10.1 Necessary (no consent required): Login state, security tokens, language preference, theme preference.
10.2 We do not currently use non-necessary analytics, advertising, or profiling cookies or local storage.
10.3 Future changes: If analytics or advertising cookies are enabled, a consent banner will be displayed (in GDPR/PIPL jurisdictions) where users can accept or reject.
11. Automated Decision-Making
11.1 Recommendation system: Home page recommendations and Agent suggestions are based on user behavior (play, save, follow). This automated decision-making does not produce significant legal effects or material impact. Users may adjust recommendation settings in "Account → Preferences".
11.2 Risk control system: Payment risk control and anti-fraud systems may produce automated decisions (e.g., transaction refusal, account restrictions). Users may request human review via support@noumi.cc.
11.3 Content moderation: AI-assisted review combined with human re-review. Final material decisions (e.g., permanent ban) are made by humans.
12. Third-Party Links
Our services may contain links to third-party websites or services. Such third parties have their own privacy policies; we are not responsible for their data processing.
13. Policy Changes
13.1 We may update this Policy from time to time. Material changes will be announced via APP, website, or email in advance.
13.2 The "Last Updated" date at the end of this Policy reflects the latest revision time.
14. Contact Us
- Privacy matters:
privacy@noumi.cc - Exercising rights, deletion requests:
privacy@noumi.cc - General inquiries:
support@noumi.cc - Legal:
legal@noumi.cc - Regulatory complaints: You may complain to your local regulator, including the China CAC, EU data protection authorities, the California AG, etc.
Last Updated: 2026-05-29