Privacy Policy
生效日期：2026-10-30 · 中文 / English
Effective date: 2026-10-30 · Chinese / English
版本 / Version: 2026-10-30-published-dd78f5d72e75
品牌与联系
mifanai 使用 mifanlab 品牌。客服、隐私、退款、内容举报和申诉均可联系 [email protected]。
Brand and contact
mifanai uses the mifanlab brand. Contact [email protected] for support, privacy, refunds, content reports, and appeals.
适用范围与联系
本说明适用于 mifanai.app 的账户、创作工作室和素材管理服务。隐私问题、数据副本、更正或删除请求，请发送至 [email protected]。我们会核对账户归属，并在收到请求后 30 天内答复；需要延期时会说明原因和预计时间。
Scope and contact
This policy covers accounts, the creative studio, and asset management at mifanai.app. Contact [email protected] with privacy questions or requests to access, correct, export, or delete your data. We verify account ownership and respond within 30 days of receiving a request. If an extension is needed, we explain the reason and expected timeframe.
主动分享与公开展示
上传和生成的图片、视频、音频默认私有。仅当你主动分享并单独确认公开范围时，我们才受理公开申请；人工审核通过后，将所选作品、展示标题、昵称、生成时保存的提示词、列出的引用素材及文件名发布到 /home 和作品详情，未登录访客也可查看。引用素材可能包含他人的个人信息或文件内嵌元数据，请确保有权公开并在确认前检查。账户邮箱、积分记录及无关资产不会随作品公开。你可以在资产的分享入口取消分享；删除作品或任一引用素材也会停止公开读取。已经被他人保存的副本或第三方缓存无法收回。我们记录授权时间、规则版本及当时的公开范围用于证明授权和处理争议，必要记录在撤回后可继续保留。具体范围、内容责任与举报方式见分享规则；隐私请求请联系 [email protected]。
Voluntary sharing and public display
Uploaded and generated images, videos, and audio are private by default. Only after you voluntarily share and separately confirm the public scope do we accept a publication request; after manual approval we publish the selected work, public title, display name, saved generation prompt, listed references, and filenames on /home and the detail page, including for visitors who are not signed in. References may contain others' personal information or embedded metadata; verify your right to disclose them and inspect them before confirming. Account email, credit records, and unrelated assets are excluded. Stop sharing in the asset's Share dialog to withdraw publication; deleting the work or a reference also stops public access. Copies already saved by others and third-party caches cannot be recalled. We record the consent time, rule version, and agreed public scope to document permission and resolve disputes; necessary records may remain after withdrawal. See Sharing rules for scope, responsibilities, and reporting. Contact [email protected] for privacy requests.
Google 登录与账户信息
使用 Google 登录时，我们接收 Google 账户标识、邮箱、姓名、头像和邮箱验证状态，用于创建账户、验证身份和显示个人资料。我们保存账户关联信息及登录所需的授权令牌；令牌在数据库中加密保存。我们不读取 Gmail 邮件、联系人或 Google Drive 文件，也不索取你的 Google 密码。你可以在 Google 账户的第三方连接设置中撤销授权，并联系我们删除 mifanai 账户数据。
Google sign-in and account information
Google sign-in provides your Google account identifier, email address, name, profile picture, and email verification status. We use these to create your account, authenticate you, and display your profile. We store the account association and authorization tokens needed for sign-in; tokens are encrypted in the database. We do not read Gmail messages, contacts, or Google Drive files, and we do not receive your Google password. You can revoke access in your Google account's third-party connections settings and contact us to request deletion of your mifanai account data.
条款、年龄与购买确认
我们保存用户对条款、隐私政策、AUP 和退款政策的主动确认，包括账号关联、政策版本和文档摘要、确认时间、界面语言、来源、年龄段及必要的监护人同意声明。购买采用按钮授权：在按钮旁明确告知后，点击订阅即表示同意条款及授权相应付款与续费，无需另行勾选。购买记录还保存选定套餐、总额、币种、计费周期、积分规则、告知文案与版本、按钮授权方式、自动续费授权和付款资格声明，并关联对应订单请求编号及服务器接收时间。账户服务确认框不预选，仅在注册或首次账户设置时确认一次；政策版本变化不再要求重复确认，原始确认记录及其政策版本保持不变。年龄确认只收集是否满 16 岁、是否已成年及监护人同意声明，不要求出生日期或身份证件，也不表示我们已经独立核验年龄或监护人身份。记录用于履行服务、核查授权和处理争议；不用于广告。该类授权记录目前没有统一按天自动清除，删除请求按本政策的记录保留规则逐项处理。本地审阅阶段的记录不会视为正式发布后的同意。
Policy, age, and purchase confirmations
We retain active confirmations of the Terms, Privacy Policy, AUP, and Refund Policy, including an account reference, policy version and document digests, time, interface language, source, age band, and required guardian-consent declaration. Purchases use button authorization: after clear notices beside the button, clicking subscribe accepts the terms and authorizes the relevant payment and renewal without a separate checkbox. Purchase records also retain the selected plan, total, currency, billing cycle, credit rules, notice text and version, button-authorization method, recurring authorization, and payment-eligibility declaration, linked to the order request identifier and server receipt time. Account-service confirmation boxes are not preselected and are completed once during registration or initial account setup. Policy-version changes do not require repeated confirmation; the original receipt and its policy version remain unchanged. Age confirmation collects only a declaration of being at least 16, adult status, and guardian consent where needed, not birth dates or identity documents; it does not mean age or guardian identity has been independently verified. Records support service provision, authorization checks, and disputes, not advertising. There is currently no uniform automatic expiry in days; deletion requests follow this policy’s record-retention assessment. Local review records are not treated as consent to a later published version.
你提供的内容
我们处理你保存的昵称和头像、上传素材、项目名称、提示词、创作设置和生成记录，以提供对应功能。账户资料和项目记录保存于数据库，已上传或归档的媒体保存在私有对象存储中。部分工作区草稿和画布保存在当前浏览器，清理浏览器数据可能移除这些本地内容。请勿上传你无权提供的个人资料或机密信息。
Content you provide
We process the nickname and avatar you save, uploaded assets, project names, prompts, creative settings, and generation records to provide the corresponding features. Account and project records are stored in a database; uploaded or archived media is stored in private object storage. Some workspace drafts and canvases are stored in your current browser and may be removed when you clear browser data. Do not upload personal or confidential information you are not authorized to provide.
模型请求与第三方服务
仅当模型生成功能已开放且你提交任务时，相关提示词、创作设置和你选取的参考素材会发送给处理该任务的模型服务商。不同模型可能通过不同服务商处理，服务商的保存和使用规则可能不同。Google 登录信息不会作为模型提示词发送，也不会用于训练通用 AI 或机器学习模型。Hostinger 提供网站服务器及企业邮箱，Cloudflare R2 提供私有媒体和备份存储；当前应用配置的媒体存储桶查询结果为 APAC（亚太地区），未据此确定具体国家或机房，其他存储桶不由此推定。模型接入包括火山引擎（Volcengine）、MiniMax、EvoLink、WaveSpeed 和 you.bot；仅向执行具体任务的已启用渠道传输相关输入，聚合渠道可能转交对应上游模型供应商处理。新增或变更接收方前会更新本说明。网站服务器、邮件、存储和模型服务可能在你所在国家或地区之外处理数据；本说明不承诺固定国家、单一地区存储或未经核实的跨境合规认证。
Model requests and service providers
When generation is available and you submit a task, the relevant prompt, settings, and selected reference assets are sent to the model provider processing that task. Different models may use different providers with different retention and use policies. Google sign-in information is not sent as model input and is not used to train generalized AI or machine-learning models. Hostinger provides website hosting and business email; Cloudflare R2 provides private media and backup storage. The media bucket currently configured for this application reports APAC (Asia-Pacific); this does not identify a specific country or data center or establish the location of other buckets. Model integrations include Volcengine, MiniMax, EvoLink, WaveSpeed, and you.bot. Relevant inputs are sent only to the enabled channel handling a task; aggregation channels may forward them to the corresponding upstream model provider. We update this disclosure before adding or changing recipients. Hosting, email, storage, and model services may process data outside your country or region. We do not promise a fixed country, single-region residency, or unverified international-transfer certification.
使用目的与访问
我们用这些信息提供登录、素材与项目管理、任务处理、积分记录、客服和安全排查。需要时，获授权的管理员可以为客服、运营或安全目的访问相关记录。我们不出售个人信息，不用 Google 用户数据投放个性化广告，也不使用 Google 用户数据训练通用模型。我们对 Google API 接收的信息的使用和向其他应用的传输遵守 Google API Services User Data Policy，包括 Limited Use 要求。
Purposes and access
We use this information for sign-in, asset and project management, task processing, credit records, support, and security troubleshooting. Authorized administrators may access relevant records when needed for support, operations, or security. We do not sell personal information, use Google user data for personalized advertising, or use Google user data to train generalized models. Our use of information received from Google APIs, and transfer of that information to other applications, adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Cookies、本地存储与技术日志
网站使用必要的登录和语言 Cookies，并使用 localStorage、sessionStorage 和 IndexedDB 保存界面偏好、草稿和工作区状态。登录会话有效期为七天，活跃使用可能更新会话。服务器会处理 IP 地址、浏览器信息、请求时间和错误日志，用于认证、限流、故障排查与安全防护。注册时，我们另保存由网络服务商根据 IP 推断的国家／地区及可用省市，用于后台注册来源分析；这只是大致网络归属地，可能受代理或 VPN 影响，不采集 GPS 精确位置。可选统计与广告衡量另行征求同意。
Cookies, browser storage, and technical logs
We use essential authentication and language cookies, along with localStorage, sessionStorage, and IndexedDB for preferences, drafts, and workspace state. Login sessions last seven days and may be refreshed during active use. The server processes IP addresses, browser information, request times, and error logs for authentication, rate limiting, troubleshooting, and security. At registration, we also save the country or region and available province and city inferred from the IP address by our network provider for registration-source analysis in our management console. This is an approximate network location that may reflect a proxy or VPN; we do not collect precise GPS coordinates. Optional analytics and ad measurement require separate choices.
可选访问统计
启用统计并单独同意后，Google Analytics 使用分析 Cookie 统计公开访问、工具上传与生成、推广来源及设备信息。来源只保存经筛选的 UTM 推广标签与工具页路径，在浏览器最长保存 30 天，并在结账时与订单请求关联保存。不会为统计采集搜索词、广告点击标识、完整查询参数、邮箱、照片、提示词或银行卡信息。服务端核验后的购买及退款可发送金额、币种、商品类别和去标识交易编号给 Google；付款、账户、工作室及画布仍不采集浏览事件。仅当你仍同意、登录并返回支持统计的公开页或账单页时，才发送最近 90 天可核验的交易事件；关闭浏览器不代表已上报，统计不覆盖所有交易。撤回后停止发送，清除本浏览器分析 Cookie 与推广标签，并在登录状态下撤销账户中已有的来源归因；此前发送给 Google 的数据不会自动删除。订单、退款和积分业务记录不受影响。为防止多个设备重复回传，我们随订单保留去标识事件编号的发送领取记录；它不证明 Google 已收到事件。来源归因随订单记录保留，撤回或申请删除时清除其推广标签。不启用广告个性化或 Google Signals。你可以随时更改统计偏好；其他浏览器需分别设置。Google Search Console 的本站曝光和点击不是全网关键词总量。
Optional visit analytics
When analytics is enabled and you separately consent, Google Analytics uses analytics cookies for public visits, tool uploads and generations, campaign sources and device information. Only filtered UTM campaign labels and tool-page paths are stored, for up to 30 days in this browser, and associated with the checkout request. Analytics does not collect search terms, advertising click identifiers, complete URL queries, email, photos, prompts or card details. Server-verified purchases and refunds may send the amount, currency, product category and a pseudonymous transaction identifier to Google. Payment, account, studio and canvas routes still send no page views. Eligible verified transaction events from the preceding 90 days are sent only while you remain opted in, signed in, and return to a supported public or billing page; closing the browser does not confirm delivery and analytics does not cover every transaction. Withdrawal stops sending, clears this browser's analytics cookies and campaign labels, and revokes existing account attribution when signed in. It does not automatically delete data previously sent to Google. Operational order, refund and credit records are unaffected. To prevent repeated dispatch across devices, we retain a dispatch claim for each pseudonymous event identifier alongside order records; this does not prove Google received the event. Attribution is retained alongside order records; its campaign labels are cleared on withdrawal or an applicable deletion request. Advertising personalization and Google Signals remain disabled. You may change Analytics preferences at any time; other browsers require a separate choice. Search Console impressions and clicks for this site are not total keyword search volume.
可选 Meta 广告衡量
仅在此功能启用、你允许统计并另外勾选 Meta 广告衡量后，我们才保存 Meta 浏览器标识（_fbp）、有效广告点击标识（_fbc，由 fbclid 生成）以及浏览器 User-Agent，并将其与结账时的推广来源关联。此选择不由原有 Google Analytics 同意自动授予，最长有效 30 天。Meta Pixel 在允许的公开页面运行，其网络请求也会让 Meta 接收到 IP 地址、浏览器信息和该公开页面地址；私人页面及含未经筛选查询参数的页面不主动加载或发送 Pixel 事件。服务端 CAPI 可在你关闭页面后发送首笔已核验购买的时间、金额、币种、商品、推广标签及去标识事件编号，使用结账时同意保存的浏览器/点击标识进行匹配。不发送照片、提示词、邮箱、电话号码、银行卡信息或原始账户编号，也不主动向 CAPI 提交 IP 地址。两种渠道使用相同事件编号去重，回传仅在核验购买后的 24 小时内尝试，不补传旧订单、不发送自动续费或把退款作为新购买。匹配信息在撤回时清除，超过 30 天后由维护任务清理；没有运行维护任务时清理可能延后。你可取消勾选并保存统计偏好，或拒绝统计：本浏览器立即停止并清除相关 Cookie，登录联网后撤销账户中已有的 Meta 授权及待发事件，离线撤回会在恢复连接后重试。已经发出或撤回前正在发送的事件无法由此收回，之前发送给 Meta 的数据不会自动删除。其他浏览器的本地选择需分别更改，订单与积分记录不受影响。
Optional Meta ad measurement
Only when this feature is enabled, you allow analytics and additionally select Meta ad measurement do we save a Meta browser identifier (_fbp), a valid ad click identifier (_fbc derived from fbclid), and the browser User-Agent with checkout campaign attribution. Existing Google Analytics consent does not grant this permission; the choice lasts up to 30 days. Meta Pixel runs on permitted public pages; its network requests also disclose the IP address, browser information and that public page URL to Meta. We do not actively load or send Pixel events on private routes or pages with unapproved query parameters. Server-side CAPI can send the first verified purchase's time, amount, currency, product, campaign labels and pseudonymous event ID after you close the page, matched using browser/click identifiers saved with checkout consent. We do not send photos, prompts, email, phone numbers, card details or raw account IDs, and do not explicitly submit IP addresses to CAPI. Both paths use the same event ID for deduplication and attempt delivery only within 24 hours of purchase verification. Old orders and automatic renewals are excluded; refunds are not sent as new purchases. Matching data is cleared on withdrawal and cleaned by maintenance after 30 days; cleanup may be delayed while maintenance is stopped. Uncheck the option and save analytics preferences, or decline analytics, to stop this browser and clear its Meta cookies immediately. Once signed in and online, withdrawal revokes existing account Meta authorizations and pending events; offline withdrawal is retried after reconnection. Events already sent or in flight before withdrawal cannot be recalled this way, and data previously sent to Meta is not automatically deleted. Local choices in other browsers must be changed separately. Order and credit records are unaffected.
保存、删除与备份
账户资料在账户存续期间保存；项目、画布、提示词、创作记录和已归档媒体在提供相应功能期间保存，直到你删除支持删除的内容或通过客服提出删除请求。未确认上传的数据库记录 15 分钟后到期，由清理任务处理；到期不等于文件已即时物理删除。你可以在产品中删除素材；删除后素材会从账户视图隐藏，后台任务随后清理对应存储对象，失败时会重试。账户删除或完整数据导出目前通过客服申请。已删除内容可能暂时保留于轮换备份中；备份按实际运行的轮换策略清理，不将备份份数作为固定保存天数。分享授权、自动检查记录、人工审核结论和操作审计用于处理举报、申诉及证明授权，撤回分享不会自动清除这些记录；当前未设置统一的按天自动过期。支付订单、退款和积分流水用于履约、对账、争议及依法保存，当前也未设置按天自动清除。客服记录保存在企业邮箱中，不会因删除作品而同时删除。对这些记录的删除请求将逐项核查；仍需保留的，将告知保留类别、理由及适用的删除条件。
Retention, deletion, and backups
Account data is retained while the account exists. Projects, canvases, prompts, generation history, and archived media are retained to provide those functions until you delete supported content or request deletion through support. Unconfirmed upload records expire after 15 minutes and are handled by background cleanup; expiry does not mean immediate physical deletion. You can delete assets in the product; they are hidden from your account view and background cleanup subsequently removes stored objects, retrying failures. Account deletion and complete data export currently require a support request. Deleted content may temporarily remain in rotating backups; backups follow the active rotation schedule; a backup count is not a fixed retention period. Sharing consent, moderation decisions, and administrative audit records support reports, appeals, and proof of consent; withdrawing a share does not automatically remove them. There is currently no uniform automatic expiry in days for these records. Orders, refunds, and credit ledgers support fulfillment, reconciliation, disputes, and legally required retention and likewise have no automatic deletion schedule in days. Support messages remain in the business mailbox when a work is deleted. Deletion requests are assessed by record category; where retention is necessary, we explain the category, reason, and applicable deletion conditions.
支付与邮件功能
在线付款开放后，由 Waffo Pancake 处理支付信息。mifanai 保存订单标识、交易状态、金额、订阅周期、退款记录和积分流水，不保存完整银行卡号或安全码。付款可能需要将订单、金额和对账标识发送给 Waffo Pancake。邮件注册、验证或找回密码是否可用以登录界面为准；启用时 Hostinger 企业邮箱服务处理收件地址、邮件主题、正文及投递所需信息；客服往来也由该邮箱服务处理。不会仅因订阅或注册而自动同意营销邮件。
Payment and email features
When online payments are available, Waffo Pancake processes payment information. mifanai stores order identifiers, transaction status, amounts, subscription periods, refund records, and credit ledger entries, not full card numbers or security codes. Orders, amounts, and reconciliation identifiers may be sent to Waffo Pancake to process payments. Email registration, verification, and recovery availability is shown in the sign-in interface; when enabled, Hostinger business email processes recipient addresses, message subjects, bodies, and delivery information. Support correspondence is also handled by that email service. Signing up or subscribing does not automatically opt you into marketing email.
未成年人
服务仅面向 16 岁及以上用户；未达到所在地成年年龄者须获得监护人知情同意和监督，购买前还须取得对费用及续费的同意。我们不以未满 16 岁儿童为服务对象。如果你认为儿童未经许可提交了个人信息，请联系 [email protected]；我们会核实并处理删除请求。
Young users
The service is for users aged 16 and above. Those below the age of majority where they live need a guardian’s informed consent and supervision, including consent to charges and renewal before purchasing. We do not target children under 16. Contact [email protected] if you believe a child submitted personal information without permission; we will investigate and handle deletion requests.
举报、审核与客服记录
联系支持、申请退款或举报时，我们处理你提供的邮箱、作品或任务编号、问题说明及必要证据，用于核实归属、处理争议和安全排查。当自动审核总开关开启，且任务命中设置的检测比例时，图像和视频任务的文字提示词会发送至 Waffo Prompt Sift 进行安全检查；关闭或未抽中不代表内容已经通过检测。该接口不发送你的账户邮箱、姓名、Google 登录资料或引用媒体，只发送提示词文本及检查参数。请避免在提示词中写入不必要的个人信息。返回的检查结论、命中类别、服务回执和规则版本用于拦截、复核及故障排查，检查不可用时暂停相关任务。当前自动检测总开关关闭，私人生成依赖模型服务商已有的安全控制；不同渠道覆盖范围可能不同，尚未完整核实，我们不宣称所有输入和结果均已接受检测。开启自动检测后，覆盖范围无法确认或需复核时，获授权的审核员可访问相关提示词、输入引用素材及待交付结果。生成结果不另向新的图像检测服务发送。文字和音频任务未接入这套 Prompt Sift 流程。公开作品和画布分享先审后发；授权审核员可查看申请公开的标题、昵称、提示词、画布文字及关联图片、视频、音频，并处理定期复查、举报与申诉。我们保留提交指纹、状态、检查类别、规则版本、理由、审核员标识和时间用于复核；改变公开内容须重新审核，举报后可撤销通过。正常通过自动检查的私人任务无需全量人工审批。客服和审核记录按本政策所述保存、删除规则处理；不要在工单中发送无关的敏感资料。
Reports, moderation, and support records
When you contact support, request a refund, or report content, we process the email, work or task identifiers, explanation, and necessary evidence you provide to verify ownership, resolve disputes, and investigate safety issues. When the automatic-detection switch is on and a task is selected at the configured sampling rate, its image or video text prompt is sent to Waffo Prompt Sift for safety checks. Being disabled or unselected does not mean the content passed a safety check. This integration sends prompt text and checking parameters, not account email, name, Google sign-in data, or reference media. Avoid unnecessary personal data in prompts. Check decisions, matched categories, service receipts, and rule versions support blocking, review, and troubleshooting; affected tasks pause when checking is unavailable. The automatic-detection switch is currently off. Private generation relies on existing model-provider safety controls; coverage varies by channel and has not been fully verified. We do not claim that every input or result is checked. When automatic detection is enabled, authorized reviewers may access relevant prompts, input references, and pending outputs when coverage is unverified or human review is needed. Outputs are not sent to an additional image-detection service. Text and audio tasks are outside this Prompt Sift flow. Public works and canvas shares require approval before publication; authorized reviewers can inspect submitted titles, display names, prompts, canvas text, and associated images, videos, and audio, and handle periodic re-reviews, reports, and appeals. We retain submission fingerprints, status, check categories, rule versions, reasons, reviewer identifiers, and timestamps. Public content changes require new review, and approval may be revoked after reports. Private tasks that pass automatic checks do not require universal human approval. Support and moderation records follow the retention and deletion rules in this policy. Do not include unrelated sensitive information in support requests.
权利、保存期限与政策更新
你可请求访问、更正、导出或删除个人资料，并可撤回公开分享或 Google 授权；撤回不追溯影响此前的处理。如对处理结果有异议，可向同一邮箱申诉，或向有管辖权的数据保护机构投诉。我们按提供你请求的服务、取得的相应同意，以及适用的法定义务处理信息；公开分享可单独撤回，撤回后的内容不再公开读取。我们不会声称具备未经核实的认证、跨境协议或安全保障。实质变化将通过站内通知或账户邮箱告知，并更新日期。
Rights, retention periods, and updates
You may request access, correction, export, or deletion and withdraw public sharing or Google authorization; withdrawal does not retroactively change prior processing. You may appeal our response to the same email or complain to a competent data protection authority. Processing supports the service you request, relevant consent you give, and applicable legal obligations. Public sharing can be withdrawn separately, stopping future public reads. We do not claim unverified certifications, international-transfer agreements, or safeguards. Material changes will be communicated in-product or by account email, with an updated date.