1. Scope and provider1. 适用范围与服务提供者
This policy describes how BeeOrbit processes information when you use the international BeeChat Android application, website, account services, messaging services, and support channels.本政策说明当你使用 BeeChat 国际版 Android 应用、网站、账号服务、通讯服务及支持渠道时，BeeOrbit 如何处理相关信息。
2. Information we process2. 我们处理的信息
Account and profile information账号与资料信息
Email address, username and display information, a date of birth processed to perform the 18+ eligibility check, the resulting age-gate timestamp and versioned policy-acceptance record, password verifier and salt, invitation records, account and session identifiers, account status, profile text, avatar reference, email-verification state, and account-security settings. The submitted birth date itself is not stored after the eligibility check.邮箱地址、用户名与展示资料、为完成 18+ 资格核验而处理的出生日期、由此产生的年龄门槛时间戳及带版本的规则同意记录、密码验证值及盐值、邀请记录、账号与会话标识、账号状态、个人资料文本、头像引用、邮箱验证状态及账号安全设置。提交的出生日期本身在资格核验后不会保存。
Device, authentication, and security information设备、认证与安全信息
Client-instance and device registrations, public cryptographic keys and prekeys, authentication sessions, security events, IP address, user agent, request timestamps, and abuse-prevention records. Private encryption keys are designed to remain on your devices.客户端实例与设备注册信息、加密公钥与预密钥、认证会话、安全事件、IP 地址、User-Agent、请求时间及防滥用记录。私有加密密钥按设计保留在你的设备中。
Connections and service activity社交关系与服务活动
Friend requests and relationships, blocked-contact settings, group and conversation membership, notification and read state, message delivery state, account preferences, and other actions needed to operate the service.好友申请与好友关系、拉黑设置、群组与会话成员关系、通知与已读状态、消息投递状态、账号偏好以及运行服务所需的其他操作记录。
Messages, media, and files消息、媒体与文件
Supported messages, chat media, attachments, and BeeDrive content are designed to be encrypted before upload. The service processes encrypted payloads and the routing metadata needed for delivery, including account and conversation identifiers, sequence numbers, timestamps, delivery state, file size, and encrypted or placeholder media metadata. Other participants may retain copies of content delivered to them.受支持的消息、聊天媒体、附件和 BeeDrive 内容按设计会在上传前加密。服务会处理加密载荷以及投递所需的路由元数据，包括账号与会话标识、序号、时间戳、投递状态、文件大小及加密或占位媒体元数据。其他参与者可能保留已投递给他们的内容副本。
Support, reports, enforcement, and appeals支持、举报、处置与申诉
If you contact support, report abuse, or appeal an action, we process the identifiers, category, description, review status, enforcement and appeal records, attachments, and other evidence you choose to provide. For end-to-end encrypted conversations, decrypted message text or media is not sent by default; it is included only when you affirmatively choose to attach it. Evidence metadata access and short-lived download-ticket issuance are audited.当你联系支持团队、举报滥用或申诉处置时，我们会处理相关标识、分类、说明、审核状态、处置与申诉记录、附件，以及你主动提供的其他证据。对于端到端加密会话，解密后的消息文本或媒体默认不会发送，只有在你明确选择附加时才会提交；证据元数据访问及短期下载凭证签发会被审计。
3. Android permissions3. Android 系统权限
- Internet: account, messaging, synchronization, media, email-security, and configuration services.网络：用于账号、消息、同步、媒体、邮箱安全及配置服务。
- Camera: scanning BeeChat friend QR codes. Camera access is requested at the point of use.相机：用于扫描 BeeChat 好友二维码，并在实际使用时申请。
- Notifications and vibration: user-controlled local message and service alerts.通知与振动：用于用户可控制的本地消息及服务提醒。
- Foreground service and remote-messaging service type: keeping the user-enabled real-time connection active on supported Android devices.前台服务及远程消息前台服务类型：在受支持的 Android 设备上维持由用户主动启用的实时连接。
The current Android manifest does not request location, microphone, phone, SMS, call-log, calendar, or address-book permissions.当前 Android 清单未申请定位、麦克风、电话、短信、通话记录、日历或系统通讯录权限。
4. How information is used4. 信息用途
- Create accounts, authenticate users, verify email access, and secure sessions.创建账号、验证用户身份、确认邮箱访问权并保护会话。
- Provide friends, groups, messaging, media, BeeDrive, notification, backup, and account-management functions.提供好友、群组、消息、媒体、BeeDrive、通知、备份及账号管理功能。
- Deliver and synchronize encrypted messages and supported account state.投递并同步加密消息及受支持的账号状态。
- Detect abuse, enforce our rules, protect service integrity, and investigate security incidents.识别滥用行为、执行平台规则、维护服务完整性并调查安全事件。
- Respond to support, safety, privacy, and account-deletion requests.响应支持、安全、隐私及账号注销申请。
- Meet applicable legal obligations.履行适用的法律义务。
5. Encryption and local storage5. 加密与本地存储
BeeChat uses Signal-style cryptographic components and device-side keys for supported conversations. The server stores encrypted envelopes and delivery metadata and is not designed to hold users’ private messaging keys. On the device, authentication tokens use secure storage. BeeChat also uses local databases and caches for conversations, messages, settings, pending operations, and media. Sensitive local content fields and cache bytes are protected with device-derived encryption; this is not whole-device or whole-database encryption, so structural metadata such as routing, time, and size may remain visible to the operating system or device owner.BeeChat 对受支持的会话使用 Signal 风格的加密组件和设备端密钥。服务器保存加密信封与投递元数据，按设计不持有用户的私密通讯密钥。设备上的认证令牌使用安全存储；BeeChat 还通过本地数据库和缓存保存会话、消息、设置、待发送操作及媒体。敏感的本地内容字段与缓存字节使用设备派生密钥保护，但这不等同于整机或整库加密，因此路由、时间、大小等结构元数据仍可能对操作系统或设备所有者可见。
6. Service providers and sharing6. 服务提供商与信息共享
BeeChat currently uses Tencent-hosted VPS and PostgreSQL infrastructure for the business API and account data, private Cloudflare R2 buckets for encrypted chat media, BeeDrive files, and voluntarily submitted moderation evidence, and Resend for transactional security email. Moderation evidence may contain plaintext chosen by the reporter and is segregated from public access. These providers process data on our instructions to provide their services. We do not sell personal information and the current application does not include advertising, behavioral analytics, crash-reporting, or remote-push SDKs. We may disclose limited information when legally required or when necessary to protect users, investigate abuse, or secure the service.BeeChat 当前使用腾讯云 VPS 与 PostgreSQL 运行主要业务 API 并保存账号数据，使用相互隔离的 Cloudflare R2 私有存储桶保存加密聊天媒体、蜂盘文件及用户自愿提交的治理证据，并使用 Resend 发送事务性安全邮件。治理证据可能包含举报人选择提供的明文，且不会公开访问。这些服务提供商会依照我们的指示处理提供服务所需的数据。我们不出售个人信息，当前应用未集成广告、行为分析、崩溃上报或远程推送 SDK。在法律要求，或为保护用户、调查滥用及维护服务安全确有必要时，我们可能披露有限信息。
7. Retention7. 信息保留
Account and security records are retained while an account is active and for the periods needed to operate and secure the service. Current default server policy keeps undelivered encrypted messages for up to 7 days, delivered-message cache for a 1-day grace period, and incremental synchronization data for no more than 30 days. Chat media follows a default 7-day delivery window plus a 1-day delivered grace period. Unattached moderation uploads expire after 24 hours. Attached report evidence is not automatically deleted while a case is pending and is normally retained for at least 180 days after the final decision or latest appeal decision; case, enforcement, appeal, evidence-access, and moderation-audit records are normally deleted two years after final closure. We may preserve specific records longer under a documented legal hold, valid legal requirement, or continuing safety investigation, and then delete them when that need ends. Local copies and backups remain on users’ devices until users remove them.账号与安全记录会在账号有效期间，以及运行和保护服务所需的期限内保留。当前服务端默认策略会将未投递加密消息保留最多 7 天，已投递消息缓存保留 1 天宽限期，增量同步数据最长保留 30 天；聊天媒体默认采用 7 天投递窗口及 1 天已投递宽限期。未关联举报的治理上传会在 24 小时后过期；案件未决期间不会自动删除已关联证据，并通常会在最终决定或最近一次申诉决定后至少再保存 180 天；案件、处置、申诉、证据访问及治理审计记录通常在最终结案两年后删除。对于已有记录的法律保全、有效法律要求或持续安全调查，我们可能延长特定记录的保存期限，并在相关需要结束后删除。用户设备上的本地副本与备份会一直保留，直至用户自行删除。
8. Account and data deletion8. 账号和数据删除
You can request deletion in BeeChat under account security settings or through the public account deletion page. After required identity verification, active sessions are revoked; email, password records, profile fields, avatar, active device and authentication material, friend relationships, and pending friend requests are removed or invalidated. The account becomes permanently unavailable for login.你可以在 BeeChat 的账号安全设置中，或通过公开的账号注销页面提交申请。完成必要身份验证后，现有会话将被撤销；邮箱、密码记录、个人资料字段、头像、有效设备与认证材料、好友关系及待处理好友申请会被删除或失效，账号将永久无法登录。
To preserve other users’ conversation history, prevent username impersonation, maintain conversation integrity, and document safety decisions, BeeChat currently retains the internal user ID, username, normalized username, conversation membership references, encrypted historical message records, and applicable report, enforcement, appeal, evidence-access, and audit records until they expire under Section 7 or a documented legal hold. These records are marked as belonging to a deleted account and cannot be used to restore the account. Content already delivered to other users and their device backups is not deleted from those users’ devices.为保留其他用户的会话历史、防止用户名冒用、维护会话完整性并记录安全处置，BeeChat 当前会保留内部用户 ID、用户名、标准化用户名、会话成员引用、加密的历史消息记录，以及适用的举报、处置、申诉、证据访问与审计记录，直至其依照第 7 节期限或已有记录的法律保全到期。这些记录会被标记为已注销账号所有，且不能用于恢复账号。已经投递给其他用户的内容，以及其他用户设备上的备份，不会从对方设备中删除。
9. Your choices9. 你的选择
You may update profile information, manage notification and discovery settings, block contacts, manage devices, export or delete local data, request account deletion, and contact us with privacy questions. See the Data Safety disclosure for a code-based summary.你可以更新个人资料、管理通知与好友发现设置、拉黑联系人、管理设备、导出或删除本地数据、申请账号注销，并就隐私问题联系我们。基于当前代码的数据类别摘要请参阅数据安全说明。
10. Children and safety10. 儿童与安全
BeeChat is an adults-only service and requires users to be at least 18. Child sexual abuse and exploitation are strictly prohibited. See our Child Safety Standards and Community Guidelines.BeeChat 是仅限成年人的服务，要求用户年满 18 周岁。我们严格禁止儿童性虐待与剥削。请参阅儿童安全标准及社区规范。
11. Changes11. 政策变更
We may update this policy when BeeChat, its permissions, providers, or data practices change. Material changes will be reflected by an updated effective date and, where appropriate, an in-app notice.当 BeeChat 的功能、权限、服务提供商或数据实践发生变化时，我们可能更新本政策。重大变更将通过更新生效日期，并在适当情况下通过应用内通知予以说明。
12. Contact12. 联系我们
For privacy questions or requests, email support@beeorbit.net. For security, abuse, or child-safety reports, email security@beeorbit.net. Never email a password, private key, recovery secret, or unredacted government ID.如有隐私问题或请求，请发送邮件至 support@beeorbit.net；如需报告安全、滥用或儿童安全问题，请联系 security@beeorbit.net。请勿通过邮件发送密码、私钥、恢复密钥或未经遮挡的政府身份证件。