Mental Fridge is operated from Hong Kong and handles your personal data in accordance with the six Data Protection Principles (DPP 1–6) of the Personal Data (Privacy) Ordinance (Cap. 486). This page states, principle by principle, what that means in practice.
精神雪櫃於香港營運，依照香港《個人資料（私隱）條例》（Cap. 486）六項保障原則（DPP 1-6）處理您的個人資料。本頁逐項說明實際做法。
DPP 1 · Purpose and Manner of Collection · 收集目的及方式
- We collect only what the app needs to work for you: your account details, what you put in your fridge, and what you write in your journal · 我們只收集應用程式運作所需的資料：帳戶資料、雪櫃內容、您寫下的日記。
- The data is used for one purpose — letting you record and review your own mental health over time · 資料只用於一個目的：讓您記錄並回顧自己的精神健康狀態。
- Nothing is collected covertly. Every field is one you filled in yourself, inside the app · 沒有任何資料是暗中收集的。每一欄都是您在應用程式內自行填寫。
DPP 2 · Accuracy and Retention · 資料準確及保留
- You can review your entries in the app and contact us to request correction of inaccurate personal data · 您可在應用程式內查閱記錄，亦可聯絡我們要求更正不準確的個人資料。
- When you delete your account, all personal data is permanently deleted within 30 days · 刪除帳戶後，全部個人資料於 30 日內永久刪除。
- We do not keep data longer than needed to provide the service to you · 我們不會保留超出提供服務所需期間的資料。
DPP 3 · Use of Personal Data · 個人資料使用
- Your journal, mood and food entries are never shown to any other person · 您的日記、情緒及食糧記錄絕不會展示予任何其他人。
- We do not sell, rent or share your personal data for marketing · 我們不會為行銷目的出售、出租或分享您的個人資料。
- Service providers · 服務供應商: our infrastructure and AI providers (Supabase, Vercel, and the Anthropic Claude API) process data on our instruction only, are contractually barred from using it for their own purposes or for model training, and never receive your name, email or account ID alongside what you write. See the Privacy Policy for the full list · 我們的基礎設施及 AI 供應商（Supabase、Vercel、Anthropic Claude API）僅按我們的指示處理資料，並受合約禁止用作自身用途或模型訓練，亦不會收到與內容一併傳送的姓名、電郵或帳戶 ID。完整清單見私隱政策。首次把文字傳送至 Anthropic 前，應用程式會顯眼說明並取得您的主動同意；您可在帳戶頁隨時撤回。 。
DPP 4 · Security · 資料保安
- Where your data is held · 資料存放地點: on Supabase infrastructure in the Tokyo, Japan region(ap-northeast-1). Personal data therefore leaves Hong Kong; we state this openly so you can make an informed choice · 存放於 Supabase 位於日本東京區（ap-northeast-1）的基礎設施。個人資料因此會離開香港，我們主動說明，讓您在知情下作決定。
- All traffic is encrypted in transit (TLS); data is encrypted at rest by Supabase · 所有傳輸經 TLS 加密；靜態資料由 Supabase 加密儲存。
- Database row-level security is enforced on every table holding personal content, so a request can only ever read the rows belonging to the account that made it · 所有存放個人內容的資料表均強制啟用 row-level security，一個請求永遠只讀得到發出該請求的帳戶所擁有的資料。
- Uploaded photos live in a storage bucket with the same per-account restriction · 上載的相片存於同樣設有按帳戶分隔限制的儲存空間。
- Voice Burn never opens your microphone or creates a recording; only how long you hold the button is stored · Voice Burn 完全不會開啟麥克風或產生錄音；系統只保存您按住按鈕的時間。
DPP 5 · Openness · 資訊透明
- Our Privacy Policy and Terms of Service are public, in plain language, and dated · 我們的私隱政策及服務條款公開可查，用字淺白並註明日期。
- Material changes and the last updated date are shown on this public page · 重大變動及最後更新日期會在本公開頁面顯示。
DPP 6 · Access and Correction · 查閱及更正
- You may request a copy of all personal data we hold about you · 您可要求索取我們持有關於您的全部個人資料副本。
- Account deletion is available in the app. To request a copy of your data, email hello@mentalfridge.com · 應用程式內設有帳戶刪除功能；如需索取資料副本，請電郵至 hello@mentalfridge.com。
- Data access requests are answered within 40 days, as the Ordinance requires · 資料查閱要求將按條例規定於 40 日內回覆。
Data Breach Response · 資料外洩應對
If a breach affecting personal data is discovered, we will contain and assess it promptly. We will normally publish an in-app and website notice, and send a Web Push alert where enabled, within 72 hours. We will notify the Privacy Commissioner for Personal Data where appropriate.
如發現涉及個人資料的外洩事故，我們會盡快控制及評估事件，一般會在 72 小時內於應用程式及網站公告，並在用戶已開啟 Web Push 時發出提示；我們亦會在適當情況下向個人資料私隱專員公署通報。
For privacy enquiries or a data access request, please contact hello@mentalfridge.com
私隱查詢或資料查閱要求，請聯絡 hello@mentalfridge.com
Questions? Contact · 如有問題，請聯絡 hello@mentalfridge.com