Huachi Privacy Policy

Effective date: September 1, 2026

Personal information processor: Hangzhou HuaChi Digital Technology Co., Ltd. (registered address: Room 403-2, Building 10, No. 999 Jingxing Road, Cangqian Subdistrict, Yuhang District, Hangzhou, Zhejiang Province, China; referred to as “Huachi,” “we,” “us,” or “our”)

Contact for the person responsible for personal information protection: support@huachi.tech

This English version is provided for convenience. If it conflicts with the Simplified Chinese version, the Simplified Chinese version prevails, except where applicable law requires otherwise.

Introduction

Huachi respects and protects your personal information. This Policy is prepared in accordance with the Personal Information Protection Law of the People’s Republic of China, the Cybersecurity Law of the People’s Republic of China, the Data Security Law of the People’s Republic of China, and other applicable laws and regulations. It explains how we collect, use, store, share, and protect personal information and how you may exercise your rights when using the Huachi service, currently consisting primarily of the Huachi iOS app and its supporting backend services.

1. Information We Collect and Why

We follow the principle of minimum necessity:

Information categoryCollection scenarioPurposeBasis and necessity
Design inputsDesign requirements, inspiration text, and feedback that you enterGenerate personalized design candidates and respond to your adjustmentsNecessary to provide the generation service
Uploaded images and materialsReference images, photos, and inspiration materials that you actively selectGenerate design candidates and product previews and manufacture a product after a formal orderNecessary for the feature you choose to use; actively uploaded by you
Design memoryDesign assets, style preferences, and task history that you actively saveProvide a continuous design experience across sessionsOptional; separately disclosed before activation and removable at any time
Order informationProducts, specifications, quantities, prices, design confirmation, and notes for a formal orderForm and perform the order and handle after-sales service and disputesNecessary to enter into and perform a contract
Recipient and contact informationRecipient name, telephone number, and address for a formal orderDelivery, receipt confirmation, and after-sales contactNecessary to perform the order; recipients of disclosure are prominently identified at checkout
Device and security logsApp version, operating-system version, request time, errors, and security-event recordsProtect service security and diagnose faultsNecessary for secure operation; not used for cross-app advertising tracking
System permissionsPhoto-library, camera, or notification permissions that you grantAccess only when required by the corresponding featureOptional; granted through the operating system and revocable at any time

Information we do not seek to collect: identity-document information, financial-account passwords, medical information, or other information unrelated to customized-product services. Do not include such information in uploaded materials.

2. Entrusted Processing and Information Sharing

2.1 Entrusted processing by AI and cloud providers. To generate designs and maintain the service, we provide AI-model or cloud-service providers with only the design inputs, uploaded materials, and technical parameters necessary for the requested feature. The paid pilot plans to use Alibaba Cloud and its DashScope model services. We do not proactively use your uploaded images or private design memory to train Huachi’s own models. We use service configuration, contractual restrictions, and access controls to limit a processor’s purposes and supervise retention, deletion, and subprocessors. Before formal release, we will verify the specific service versions and terms and keep this Policy or a service-provider list accurate.

2.2 Disclosure for order fulfillment. After you submit a formal order, we disclose information necessary to manufacture and deliver the product to the relevant manufacturer and logistics provider. This may include the production design file and the recipient’s name, telephone number, and delivery address. We apply the minimum-necessary principle and require those providers to use the information only for fulfillment. We otherwise do not provide your personal information to a third party, except:

2.3 We do not sell personal information.

3. Special Notice About Sensitive Personal Information

An uploaded image may contain a face, a child, a home environment, or another person’s personal information. Upload carefully and ensure that you have the right to provide it. If material constitutes sensitive personal information and processing is genuinely necessary, before processing we will explain the necessity and impact on personal rights and obtain separate consent as required by law. If necessity or authorization requirements cannot be satisfied, we will refuse to process the material or ask you to replace it.

4. Use Without an Account and Local Identifiers

You may use Huachi’s basic features without registering an account. Even when you are not signed in, we may use a local ID, device-level identifier, or session ID to retain design records associated with the current device and provide design memory and a continuous experience. These identifiers are not used for cross-app tracking and are not shared with third parties for advertising.

5. Storage, Retention, and Deletion

5.1 Storage location. Your personal information is stored on servers located in the People’s Republic of China.

5.2 Retention. We retain information only for the shortest period necessary to achieve the relevant purpose:

5.3 Deletion. You may clear design memory in the app or request deletion of personal information by emailing support@huachi.tech. We will complete the request within 15 working days after verifying your identity. Because of backups, security logs, and technical limitations, deletion may not immediately take effect in every system, but data remaining in a backup will not be used again before that backup expires.

6. Your Rights

Under the Personal Information Protection Law of the People’s Republic of China, you may:

To exercise these rights, contact support@huachi.tech. We will respond within 15 working days.

7. Protection of Minors

Huachi is not directed to children under 14 and does not knowingly collect their personal information. If we discover that we have collected personal information from a child under 14, we will delete it as soon as reasonably possible. A minor who is at least 14 must use the service with the consent and guidance of a guardian. A guardian who becomes aware that relevant information has been collected may contact support@huachi.tech.

8. Cross-Border Transfers

The paid pilot plans to use servers and AI services located in the People’s Republic of China. Before formal release, we will verify actual data flows involving cloud services, third-party SDKs, logging, and support tools. If personal information is transferred outside China, we will identify the overseas recipient, processing purpose and method, information categories, and means of exercising rights; obtain separate consent; and complete any applicable security assessment, certification, standard contract, or other required mechanism.

9. Information Security

We use reasonable safeguards, including encrypted transmission, access controls, data minimization, and audit trails. No internet environment is completely secure. If a personal-information security incident occurs, we will notify affected individuals and report to the competent authorities as required by law.

10. Updates to This Policy

We may update this Policy. We will provide advance and prominent in-app notice of material changes, including a material change to the processing purpose, method, information category, or recipient, and will obtain consent again when required.

11. Contact Us

For privacy questions, rights requests, or complaints, contact support@huachi.tech. You may also submit a complaint to a competent cyberspace or telecommunications authority.