隐私政策Privacy Policy
最后更新:2026 年 6 月 14 日Last updated: June 14, 2026
HomeWok(家味,下称"我们")是一款帮助北美华人家庭做正宗中餐的 iOS 应用。我们相信隐私应当从架构里长出来,而不是事后补一份政策。本政策说明我们收集哪些信息、如何使用,以及你拥有哪些选择。
1. 我们收集的信息
你主动提供的
- 账号信息:通过 Apple、Google 或邮箱登录时的邮箱地址(以及你选择共享的名字)。
- 家庭画像:家庭成员、人数、口味偏好(如"不吃辣")、过敏信息、份量反馈——用于把份量和采购量算到刚好。
- 你的内容:你生成或保存的菜谱、膳食计划、购物清单、做菜历史。
- 拍食材照片:你拍摄或选择的食材照片,仅用于一次性识别(见第 3 条),识别后立即丢弃,从不存储。包装文字的初步抽取在你的设备本地完成。
- 等候名单邮箱:若你在 homewok.app 提交邮箱加入等候名单,我们仅保存该邮箱(及提交时的界面语言、来源),用于在 App 上线时通知你,绝不外发或用于无关营销。你可随时来信 privacy@homewok.app 要求删除。
自动产生的
- 使用日志:为了控制成本与防滥用,我们记录 AI 调用的元数据(如调用时间、类型、用量),不含照片内容。
- 设备与技术信息:访问本网站或 App 时常规产生的基本技术信息(如设备类型、大致地区)。
2. 我们如何使用这些信息
- 生成中餐菜谱、按家庭画像缩放份量、识别食材、规划膳食、生成并合并购物清单。
- 维护你的账号、菜谱库与跨设备同步。
- 估算成本、防止滥用、排查故障、改进产品。
我们不会出售你的个人信息,也不会用于与做饭无关的广告画像。
3. AI 处理与第三方
HomeWok 的生成与识别由大型语言模型(LLM)完成。为此,你输入的文字(如你的需求、食材清单)与拍食材照片会被发送到我们的服务端,再转发给模型服务商处理。AI 密钥只保存在受保护的服务端,从不进入你的手机。我们依赖以下服务商:
- Supabase——数据库、账号鉴权、服务端函数与存储托管。
- 模型服务商(默认经 OpenRouter 路由,可能包括 OpenAI、Google、Anthropic 等)——处理生成与识别请求。拍食材照片在识别时发送给多模态模型,处理后即弃。
- Apple / Google——用于登录(Sign in with Apple / Google)。
- Vercel——托管本网站与家人共享购物清单的静态页面。
这些服务商按各自的隐私条款处理数据。我们仅传输完成上述功能所必需的信息。
4. 数据如何被保护
- 行级隔离(RLS):数据库对每个家庭做行级安全隔离,加上列级权限,确保你只能访问你家的数据。
- 密钥服务端化:所有 AI 调用都在服务端进行,密钥不下发到客户端。
- 传输加密:数据在传输过程中通过 TLS 加密。
5. 家人共享购物清单
当你选择共享购物清单时,会生成一条带随机令牌的链接。任何拿到该链接的人都能查看并勾选这份清单,无需登录或安装 App。链接本身即凭证,请只发给你信任的家人。你可以随时在 App 内停止共享,使旧链接失效。
6. 数据保留与删除
- 拍食材照片:不保留,识别后即弃。
- 账号与内容:在你的账号存续期间保留,以提供服务。
- 删除账号:你可以在 App 内一键删除账号,我们会删除你的账号及相关数据。
7. 儿童隐私
HomeWok 不面向 13 岁以下儿童,也不会在知情的情况下收集其个人信息。
8. 跨境处理
我们的服务商可能在美国等地处理与存储数据。使用 HomeWok 即表示你理解你的信息可能在你所在地区以外被处理。
9. 你的选择
- 查看与更新家庭画像、菜谱库等信息。
- 随时删除账号与全部数据。
- 就你的个人数据向我们提出访问、更正或删除请求。
10. 政策更新
我们可能不时更新本政策,更新时会修改顶部的"最后更新"日期。重大变更我们会在 App 或网站内提示。
11. 联系我们
对隐私有任何疑问,请联系 privacy@homewok.app。
HomeWok ("we," "us") is an iOS app that helps families abroad cook authentic Chinese food at home. We believe privacy should grow out of the architecture, not be bolted on as an afterthought. This policy explains what we collect, how we use it, and the choices you have.
1. Information we collect
Information you provide
- Account information: your email address (and any name you choose to share) when you sign in with Apple, Google, or email.
- Household profile: household members, headcount, taste preferences (e.g. "no chili"), allergens, and portion feedback — used to scale portions and shopping quantities just right.
- Your content: recipes you generate or save, meal plans, shopping lists, and cooking history.
- Ingredient photos: photos you take or select are used only for a single recognition pass (see Section 3) and are discarded immediately afterward — never stored. Initial extraction of text on packaging happens locally on your device.
- Waitlist email: if you submit your email to join the waitlist on homewok.app, we store only that email (and the interface language and source at submission) to notify you when the app launches — never shared or used for unrelated marketing. You can request deletion anytime at privacy@homewok.app.
Information generated automatically
- Usage logs: to manage cost and prevent abuse, we record metadata about AI calls (such as time, type, and usage) — not photo content.
- Device and technical information: basic technical information generated when you use the app or visit this site (such as device type and approximate region).
2. How we use this information
- To generate Chinese recipes, scale portions to your household, recognize ingredients, plan meals, and build and merge shopping lists.
- To maintain your account, cookbook, and cross-device sync.
- To estimate cost, prevent abuse, troubleshoot, and improve the product.
We do not sell your personal information, and we do not use it for advertising profiles unrelated to cooking.
3. AI processing and third parties
HomeWok's generation and recognition are powered by large language models (LLMs). To make this work, the text you enter (such as your request or an ingredient list) and ingredient photos are sent to our server and then forwarded to model providers for processing. AI keys are stored only on the protected server and never touch your phone. We rely on the following providers:
- Supabase — database, authentication, server-side functions, and storage hosting.
- Model providers (routed by default through OpenRouter, which may include OpenAI, Google, Anthropic and others) — to process generation and recognition requests. Ingredient photos are sent to a multimodal model for recognition and discarded afterward.
- Apple / Google — for Sign in with Apple / Google.
- Vercel — hosts this website and the family shared-shopping-list page.
These providers handle data under their own privacy terms. We transmit only what is necessary to perform the functions above.
4. How your data is protected
- Row-level isolation (RLS): the database applies row-level security per household, plus column-level permissions, so you can only access your family's data.
- Server-side keys: all AI calls happen on the server; keys are never shipped to the client.
- Encryption in transit: data is encrypted with TLS while in transit.
5. Family shared shopping lists
When you choose to share a shopping list, a link containing a random token is generated. Anyone with that link can view and check off the list without signing in or installing the app. The link itself is the credential, so share it only with family you trust. You can stop sharing at any time from within the app, which invalidates the old link.
6. Data retention and deletion
- Ingredient photos: not retained — discarded after recognition.
- Account and content: retained for as long as your account exists, to provide the service.
- Account deletion: you can delete your account with one tap in the app, and we will remove your account and associated data.
7. Children's privacy
HomeWok is not directed to children under 13, and we do not knowingly collect their personal information.
8. International processing
Our providers may process and store data in the United States and elsewhere. By using HomeWok, you understand that your information may be processed outside your region.
9. Your choices
- View and update your household profile, cookbook, and other information.
- Delete your account and all data at any time.
- Contact us to access, correct, or delete your personal data.
10. Changes to this policy
We may update this policy from time to time and will revise the "Last updated" date at the top. For significant changes, we will provide notice in the app or on the site.
11. Contact us
For any privacy questions, contact privacy@homewok.app.