Categories of Personal Information We Collect (Overseas)
Overseas review draft. Before release, verify against real features, real SDKs, real model providers, real permission requests and real backend tables; add retention periods, processor contacts and legal review. This list is a GDPR-style record of processing categories.
| Scenario | Purpose | How collected | Categories | Legal basis (indicative) |
|---|---|---|---|---|
| Account (email / Apple / Google) | Register, sign in, recover, security | You provide; system | Email, account identifier, session, IP, security logs | Contract; legitimate interests (security) |
| Device & account security | Anomaly detection, sign-out-all, anti-fraud | System | Device model, OS/app version, identifiers, network, IP, login/operation logs | Legitimate interests; legal obligation |
| Now records, life-stream, Echo | Record, review, AI organisation, reduce re-explaining | You provide; you confirm save | Text, title, time, your tags, your corrections, AI summary, source refs, save scope, deletion watermark | Contract; consent (long-term understanding) |
| Voice input & transcription | Input, transcription, rhythm, confirmed save | You record; system | Audio file, transcript, duration, status, confirmed text/summary | Contract; consent |
| Voice rhythm & emotion candidates | Context, rhythm, re-confirm, safety; not diagnosis/scoring/ads/TA | First explicit confirmation; on-device model; you can switch off | Pace, pauses, energy, pitch trend, event-level emotion candidates, confidence, window, model/version, source refs, authorisation, corrections, deletion watermark | Explicit consent (Art. 9-adjacent) |
| Images/video/files/import | Multimodal understanding, facts, safety | You upload / authorise | Media, filename/type/size, upload time, status, recognition summary, confirmed content | Contract; consent |
| Talk-It-Through, Deliver-to-TA | Sayable sentence, preview, invitation, shared space | You provide; you confirm delivery | Your input, draft, confirmed version, relationship id, invite/delivery/withdrawal state; no open/read/online status | Contract |
| Long-term understanding & AI memory | Viewable/correctable/deletable understanding fragments | You enable; you confirm; system within authorisation | Switch, fragments, source refs, version, corrections, deletion record, Capsule assembly log | Consent |
| Training & improvement choice | Record separate consent/withdrawal; default not used for base-model training | You separately confirm/withdraw | Consent state/version/time, withdrawal time, scope, receipt id | Consent |
| Export/delete/correct/account deletion | Process sovereignty requests with receipts | You submit; system status | Request type/scope/time, task status, export-package status, deletion watermark, failure reason, receipt id, audit log | Contract; legal obligation |
| Payments (post-launch only) | Purchase, renewal, refund, entitlement | You provide; store returns; system | Order id, store channel, amount, status, refund state, entitlement, receipt header, email, time | Contract (not present at launch) |
| Feedback/complaint/appeal | Handle feedback, complaints, appeals, safety escalation | You provide; system records | Description, contact, account id, attachments, entry, time, ticket id, outcome, communication log | Contract; legal obligation (DSA) |
| Notifications | Safety, receipts, complaint progress, necessary notices | You provide / system | Email, device push token, in-app notice id, status | Consent / legitimate interests |
| Operations & security | Safety, stability, fault-finding, legal duties | System | Hardware/OS/app version, identifiers, IP, network, crash/performance, operation/service logs, security events | Legitimate interests; legal obligation |
Note: not every category is collected on every use. We apply data minimisation; denying non-essential categories or permissions never blocks recording, deletion, export, exit, complaint or crisis support.