隐私政策

Gen · 附近的局 · 更新日期：2026 年 10 月 25 日 · 联系我们：support@genapp.ca

Gen 帮你找到身边的线下小局，一起去玩。这份政策说明我们收集什么、谁能看到、以及我们绝不会做什么。

我们收集什么

登录。你用 Google 账号、Apple 账号（iPhone）或手机号登录，登录由 Google 的 Firebase Authentication 处理。Firebase 保存你的登录记录：用 Google 或 Apple 登录时是账号的邮箱、名字和账号 ID；用手机号登录时是你的手机号和账号 ID，验证码短信由 Firebase 发送。我们的服务器保存这个账号 ID，用来把你的登录和 Gen 资料对应起来，不保存你的邮箱，我们也从来拿不到你的密码。

手机号验证。为了防止一个人注册多个账号，每个 Gen 账号都要验证一个手机号（用 Google 或 Apple 登录也一样），一个手机号只能有一个账号。验证码短信由 Firebase 发送，只能发到加拿大、美国、中国大陆、香港和台湾的号码。我们的服务器不保存你的手机号本身，只保存它经过加密密钥处理后的一串字符（单向哈希），只能用来认出同一个号码，不能还原出号码。别的用户看不到你的手机号。

资料。昵称、头像照片（或 emoji）、简介、兴趣标签、你说的语言、出生年月和性别。出生年月和性别不会显示给任何人：出生年月只用来确认你已满 18 岁、计算你的年龄，以及判断你能看到哪些局：局头可以给自己的局设年龄范围，喝酒的局只对 19 岁以上开放；性别只用于女生专属局。你的年龄（岁数）会显示在资料卡上。

你发起和参加的局。你发起的局的标题、类型、时间、集合地点、简介、费用、人数、年龄范围和语言；你申请、加入、签到、离开了哪些局。局的详细地址只有被同意加入的人能看到，其他人只看到大概的区域。

消息和动态。群聊和私信、动态的文字和照片、点赞、好友和好友申请、你送出和收到的 aura（✨）。消息存在我们的服务器上，这样才能发给对方，换手机也还在。好友发起或加入一个局时，我们会通知你（可以在「我 → 通知设置」里关掉）。

通讯录找朋友（可选）。只有当你在「好友」里点「从通讯录找朋友」并允许访问通讯录时，App 才会读取通讯录，而且只读手机号，不读名字。这些号码会一次性发给我们的服务器，和 Gen 账号的手机号哈希比对，找出已经在 Gen 上的人；比对完就丢掉，不会保存、不会写入日志，也不会给任何人看。你可以随时在手机系统设置里收回通讯录权限。

邀请码。每个账号有一个邀请码。朋友注册时填了你的邀请码，我们会记下「谁邀请了谁」，用来给双方发经验值（XP）。这个记录只有我们能看到；别人只看到你邀请过几个人。

参局记录。你到场过多少个局、局头标记你没到场的爽约记录（次数会显示在资料卡上，方便局头了解）、开始 15 分钟后才签到的迟到记录、局开始前你是否确认「还来」、收到的 aura（✨）、头衔、段位，以及连续打卡的周数（会显示在资料卡上）。局结束后，成员可以用几个标签评价局头（比如「准时」「会照顾新人」），这些标签的次数会显示在局头的资料卡上；评价是谁给的不会公开。同一个系列的固定局（「再组一次」），我们会记下谁是常客，常客加入时不用等局头审核。

找搭子。你发的找搭子（一句话、大概什么时候、可能的活动类型）会显示给附近的 Gen 用户，按你选的时间自动过期（最长 7 天）。谁举了手只有你能看到，其他人只看到举手人数。

常用地点。你在发起局时保存的地点（名字、地址和坐标）存在我们的服务器上，只有你能看到，可以随时删除。

推荐和提醒。注册后你可以选想玩的活动类型，我们保存这些选择。我们会用它们、你去过的局的类型，以及你最近几个局地点的大致中心（从你参加过的局算出来，不是你的实时位置），在附近开了你可能想去的局、或者一起玩过的人发起新局时提醒你；这类提醒每天最多一条，可以在「我 → 通知」里关掉。

安全功能。你添加的紧急联系人称呼和手机号；你分享的行程链接（拿到链接的人在局结束后 12 小时内能看到这个局的名字、时间、地点，以及你是否已到达、已安全离开）；一键求助（SOS）会记录你的昵称和所在的局，让我们的安全团队跟进；你的举报和拉黑记录。

照片。头像和动态照片存在我们的服务器上，在 App 里显示。每张照片的地址是随机生成、猜不到的，但拿到地址的人可以打开。

内容审核。为了不让违法、危险或不当的内容出现在 Gen 上，你发布的局（标题、简介）、动态的文字和找搭子，会先经过自动审核：先用我们自己的敏感词过滤，再发给 Anthropic（美国）的 AI 模型判断是否违反社区规则；你上传的头像和动态照片会发给 Google Cloud Vision 的 SafeSearch 检测色情和暴力内容。发送的只有要审核的内容本身，不带你的名字、账号或联系方式。按这两家公司的商业条款，它们不会用这些内容训练模型。不确定的内容会交给我们的团队人工查看，审核记录（结果和原因）保存在我们的服务器上。

分享链接。你分享一个局的链接时，任何拿到链接的人（不需要登录）都能看到这个局的标题、活动、时间、大概区域、人数、费用、局头的昵称和头像 emoji，但看不到详细地址、成员名字或聊天。

小组件和实时活动（iPhone）。如果你添加了 Gen 的桌面小组件，或局快开始时出现签到的实时活动，你的下一个局（标题、时间、人数）、附近的局数和连续打卡周数会保存在你手机上，供小组件显示。这些数据只在你的手机上，退出登录时会清掉。

位置。如果你允许，手机的位置只在你的手机上使用：把地图移到你在的地方、显示距离。你的位置不会上传到我们的服务器，也不会被保存。发起局时搜索地点，你输入的文字和地图当前的中心位置会经我们的服务器发给 Google 的地点搜索服务（Places API），用来列出附近的地点；在地图上放图钉时，图钉的位置会发给 OpenStreetMap 的 Nominatim 服务，用来查找地址。

推送通知。如果你在手机或浏览器上允许通知，我们会保存这台设备的推送 token，用来给你发通知（比如有人申请加入、局头同意了、新消息、局开始前的提醒）。通知的标题和内容（可能包括消息的开头）会经过 Apple 和 Google 的推送服务（网页版还会经过你的浏览器厂商的推送服务）送到你的设备。退出登录或注销账号后，这台设备就不会再收到推送；你也可以随时在手机或浏览器设置里关掉通知。

使用数据。为了知道哪些功能有用、哪里需要改，我们记录你在 Gen 里做了什么：打开了哪个页面、登录、发起或申请了什么类型的局（类型、人数、费用方式）、发了几条消息（只记数量）、送火、分享、举报和一键求助。我们从不记录消息内容、搜索内容、你写的任何文字或其他人的信息。这些记录和一个随机的安装 ID 以及你的 Gen 账号 ID 关联（不是邮箱或名字），保存在我们多伦多的服务器上，最多保留 400 天，也会发给 PostHog 做统计分析。你可以随时在「我 → 分享使用数据」关掉，关掉后立即停止记录。

崩溃和错误报告。如果 App、网页版或服务器出错或崩溃，我们会收到一份错误报告：出错的位置、App 版本、设备型号和系统版本、当时在哪个页面，以及你的 Gen 账号 ID（不是邮箱或名字），用来找到并修好问题。报告不包括你点了或输入了什么文字、消息内容、密码或登录凭证。错误报告由 Sentry（美国）处理，保留时间以 Sentry 的设置为准（最长 90 天）。

我们不收集的。没有广告 SDK，不在其他 App 和网站上追踪你，不使用设备广告标识符，不录屏。除非你主动点「从通讯录找朋友」，我们不会读取你的通讯录（见上文）。

谁能看到什么

拉黑某人后，你们看不到对方的局和动态，不能互发消息、加好友或加入对方的局。

谁帮我们处理数据

我们的服务器和数据库运行在 Fly.io，位于加拿大多伦多。登录和推送通知由 Google Firebase 处理，iPhone 上的推送还会经过 Apple 的推送服务。地图来自 OpenFreeMap（OpenStreetMap 数据），地点搜索使用 Google Places（经我们的服务器，Google 收不到你的 IP 地址），图钉的地址使用 OpenStreetMap 的 Nominatim；这些服务会收到你查看的地图区域或搜索内容，地图和 Nominatim 还会收到你的 IP 地址。内容审核使用 Anthropic（美国，文字）和 Google Cloud Vision（照片）。使用数据由 PostHog（美国）做统计分析，错误报告由 Sentry（美国）处理。你选择导航时，会打开 Google 地图或 Apple 地图并带上局的位置。部分服务商可能在加拿大以外（比如美国）存储或处理数据。我们不出售个人数据，不和广告商分享，也不把你的数据用于广告。

保存多久、怎么删除

你的数据会一直保存，直到你删除它或注销账号。你参加过的已结束的局会留在你的记录里。你可以随时删除动态。在「我 → 注销账号」注销后，我们会立即删除你的资料、照片、动态、你发出的消息和私信、好友、aura、紧急联系人，以及你在 Firebase 的登录记录；你发起的还没结束的局会被取消，并通知已加入的人。为了防止有人注销后马上重新注册来清掉爽约记录，注销后你手机号的加密哈希会再保留 30 天，这期间这个号码不能注册新账号，30 天后自动删除；因违反社区规则被封禁的账号，手机号哈希会一直保留，这个号码不能再注册。服务器磁盘每天自动备份，备份保留 5 天，之后备份里也不再有被删除的数据。注销时你可以选填离开的原因和意见；我们只保存原因、意见、你用了多少天和去过几个局，不保存你的名字、账号或任何能联系到你的信息。

你的权利

你可以随时在 App 里查看和修改自己的资料。想要获取我们保存的关于你的数据、更正或删除，发邮件到 support@genapp.ca，我们会在 30 天内回复。Gen 遵守加拿大的《个人信息保护和电子文件法》（PIPEDA）。如果你对我们的处理不满意，可以向加拿大隐私专员办公室（Office of the Privacy Commissioner of Canada）投诉。

年龄

Gen 只面向已满 18 岁的人，不面向未成年人。局头可以给自己的局设年龄范围，不在范围内的人看不到这个局。喝酒的局只对 19 岁以上的人开放。如果我们发现账号属于未满 18 岁的人，会删除这个账号。

变更

如果这份政策有重要变更，我们会在这里更新日期，并在 App 里告诉你。

本政策有中文和英文两个版本，内容相同；如有不一致，以英文版为准。

Privacy Policy

Gen · Last updated: October 25, 2026 · Contact: support@genapp.ca

Gen helps you find small in-person meetups (“linkups”) near you and go together. This policy says what we collect, who can see it, and what we never do with it.

What we collect

Sign-in. You sign in with Google, Apple (on iPhone) or your phone number, handled by Google’s Firebase Authentication. Firebase keeps your sign-in record: for Google or Apple, your account’s email address, name and account ID; for a phone number, the number and an account ID, and Firebase sends the verification text. Our server stores that account ID to connect your sign-in to your Gen profile. It does not store your email address, and we never see your password.

Phone verification. To stop one person from making several accounts, every Gen account verifies a phone number, including accounts that sign in with Google or Apple, and each number can have only one account. Firebase sends the verification text, and only to numbers in Canada, the United States, mainland China, Hong Kong and Taiwan. Our server does not store your number itself, only a one-way keyed hash of it, which can recognise the same number again but can’t be turned back into it. Other people never see your number.

Optional verified badge. Outside mainland China you can ask for a verified badge by emailing us a photo of your passport or driver’s licence and a selfie holding it. A member of our team compares the two by eye, then marks your account as verified and deletes the email and photos. The app never uploads these photos itself, and our server stores only the yes/no result. Verification is optional; you can join and host without it.

Profile. Nickname, profile photo (or emoji), bio, interest tags, the languages you speak, your birth year and month, and your gender. Your birth month and gender are never shown to anyone. We use your birth month only to confirm you are 18 or older, to work out your age, and to decide which linkups you can see: hosts can set an age range for their own linkups, and drinking linkups are 19+; we use your gender only for women-only linkups. Your age in years is shown on your profile.

linkups you host and join. For linkups you create: title, category, time, meeting place, description, price, group size, age range and languages. Which linkups you request, join, check in to or leave. The exact address of a linkup is shown only to people accepted into it; everyone else sees an approximate area.

Messages and posts. Group chats and direct messages, 动态 posts and their photos, likes, friends and friend requests, and the aura (✨) you give and receive. Messages are stored on our server so they reach the other people and are there on a new phone. When a friend starts or joins a linkup, we tell you (you can turn this off in 我 → Notification settings).

Finding friends from contacts (optional). The app reads your contacts only if you tap “Find friends from contacts” under Friends and allow access, and it reads phone numbers only, not names. Those numbers are sent once to our server, compared against the hashed numbers of Gen accounts to find people who are already on Gen, and then discarded: they are not stored, not written to logs, and never shown to anyone. You can withdraw contacts access at any time in your phone’s settings.

Invite codes. Every account has an invite code. When a friend signs up with your code, we record who invited whom so both of you can be given XP. Only we can see that record; other people only see how many friends you have invited.

Attendance record. How many linkups you have attended, no-shows recorded when a host marks you as not arriving (the count is shown on your profile, to help hosts), late check-ins (more than 15 minutes after the start), whether you confirmed you’re still coming before a linkup, your aura (✨) count, title, tier, and how many weeks in a row you have been out (shown on your profile). After a linkup, members can review the host with a few tags (like “on time” or “looks after newcomers”); how often each tag was given shows on the host’s profile, but not who gave it. For a linkup that repeats (再组一次), we note who the regulars are, and regulars can join without waiting for the host to approve.

找搭子 (finding company). An ask you post (one line, roughly when, and possibly an activity) is shown to Gen users nearby and expires on its own based on the time you picked (at most 7 days). Only you can see who raised a hand; everyone else sees only how many did.

Saved places. Places you save while creating a linkup (name, address and coordinates) are stored on our server, visible only to you, and can be deleted at any time.

Suggestions and alerts. After signing up you can pick the activities you want to do, and we save those choices. We use them, the kinds of linkups you have been to, and the rough middle of where your last few linkups were (worked out from linkups you joined, not your live location) to tell you when a linkup you might like opens nearby, or when someone you have been out with hosts a new one. You get at most one of these a day, and you can turn them off in 我 → 通知.

Safety features. The name and phone number of an emergency contact, if you add one. Trip-share links you create: anyone with the link can see the linkup’s name, time and place and whether you have arrived or left safely, until 12 hours after it ends. SOS alerts, which record your nickname and the linkup you are at so our safety team can follow up. Reports and blocks you make.

Photos. Profile and 动态 photos are stored on our server and shown in the app. Each photo has a random, unguessable address, but anyone who has the address can open it.

Content review. To keep illegal, dangerous and inappropriate content off Gen, the linkups you post (title and description), the text of your 动态 and your 找搭子 asks are checked automatically: first by our own word filter, then by an AI model from Anthropic (United States), which judges whether they break the community rules. Profile and 动态 photos you upload are checked by Google Cloud Vision SafeSearch for sexual and violent content. Only the content being checked is sent, never your name, account or contact details, and under these companies’ commercial terms they don’t use it to train their models. Anything unclear goes to our team for a human look, and the review outcome and reason are kept on our server.

Shared links. When you share a link to a linkup, anyone with the link (no sign-in needed) can see its title, activity, time, approximate area, head count, cost, and the host’s nickname and emoji, but not the exact address, members’ names or the chat.

Widget and Live Activities (iPhone). If you add Gen’s home-screen widget, or a check-in Live Activity appears as a linkup is about to start, your next linkup (title, time, head count), how many linkups are open nearby and your streak are saved on your phone for the widget to show. This stays on your phone and is cleared when you log out.

Location. If you allow it, your phone’s location is used on your phone only, to centre the map where you are and show distances. It is not sent to our server or stored. When you search for a place while creating a linkup, what you type and the centre of the map are sent through our server to Google’s place search (Places API) to list places nearby. When you drop a pin, its position is sent to OpenStreetMap’s Nominatim service to look up the address.

Push notifications. If you allow notifications on your phone or in your browser, we store that device’s push token to send you notifications (someone asks to join, a host accepts you, new messages, reminders before a linkup). A notification’s title and text, which can include the start of a message, pass through Apple’s and Google’s push services (and, on the web, your browser maker’s push service) to reach your device. When you log out or delete your account, that device stops getting pushes, and you can turn notifications off in your phone or browser settings at any time.

Usage data. To learn which features help and what to fix, we record what you do in Gen: which screens you open, signing in, the kinds of linkups you create or ask to join (category, group size, how it’s paid), how many messages you send (a count only), aura given, shares, reports and SOS. We never record message text, searches, anything you write, or anything about other people. These records are tied to a random install ID and your Gen account ID (not your email or name), kept on our Toronto server for up to 400 days, and sent to PostHog for analysis. You can switch this off at any time in 我 → 分享使用数据, and recording stops immediately.

Crash and error reports. If the app, website or server hits an error or crashes, we get a report: where it broke, the app version, your device model and OS version, which screen you were on, and your Gen account ID (not your email or name), so we can find and fix it. Reports don’t include what you tapped or typed, message text, passwords or sign-in credentials. Error reports are handled by Sentry (United States) and kept for up to 90 days.

What we don’t collect. No advertising SDKs, no tracking across other apps or websites, no advertising identifiers, and no screen recording. We never read your contacts unless you tap “Find friends from contacts” (see above).

Who can see what

When you block someone, neither of you sees the other’s linkups or 动态, and you can’t message, friend or join each other.

Who processes it

Our server and database run on Fly.io in Toronto, Canada. Sign-in and push notifications are handled by Google Firebase; on iPhone, pushes also go through Apple’s push service. Maps come from OpenFreeMap (OpenStreetMap data) and place search uses Google Places (through our server, so Google doesn’t receive your IP address), and pin addresses use OpenStreetMap’s Nominatim. These services receive the map area or search you request, and the maps and Nominatim also receive your IP address. Content review uses Anthropic (United States, for text) and Google Cloud Vision (for photos). Usage data is analysed by PostHog (United States) and error reports are handled by Sentry (United States). When you ask for directions, Google Maps or Apple Maps opens with the linkup’s location. Some of these providers store or process data outside Canada, including in the United States. We do not sell personal data, share it with advertisers, or use it for advertising.

How long we keep it, and deleting it

We keep your data until you delete it or your account. Ended linkups you took part in stay in your history. You can delete a 动态 at any time. Deleting your account (我 → 注销账号) immediately removes your profile, photos, posts, the messages you sent and your direct messages, friends, aura, emergency contact and your sign-in record at Firebase; linkups you host that haven’t ended are cancelled and their members are told. So that nobody can wipe a no-show record by deleting and signing up again, the keyed hash of your phone number is kept for 30 days after you delete your account, during which that number can’t sign up again; then it is deleted. If an account is banned for breaking the community rules, its number’s hash is kept and that number can’t sign up again. Our server’s disk is backed up daily and backups are kept for 5 days, after which deleted data is gone from them too. When you delete your account you can optionally tell us why and leave a comment; we keep only the reason, the comment, how many days you used Gen and how many linkups you went to, never your name, account or anything that could reach you.

Your rights

You can see and change your profile in the app at any time. To get a copy of the data we hold about you, or to correct or delete it, email support@genapp.ca; we reply within 30 days. Gen follows Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). If you are not satisfied with how we handle your data, you can complain to the Office of the Privacy Commissioner of Canada.

Age

Gen is only for people 18 or older. It is not for children. Hosts can set an age range for their own linkups; people outside it don’t see that linkup. Drinking linkups are only for people 19 or older. If we learn an account belongs to someone under 18, we delete it.

Changes

If this policy changes materially, we will update the date here and tell you in the app.

This policy is published in Chinese and English with the same content; if they differ, the English version applies.