服务主体与联系方式 Controller and contact
本服务由海口心彩科技有限公司运营。有关隐私、授权撤回、账号删除或数据安全的问题，请发送邮件至 developer@acelinktennis.com。
AceLink Tennis is operated by Haikou Xincai Technology Co., Ltd. For privacy, consent withdrawal, account deletion, or data-security questions, contact developer@acelinktennis.com.
我们处理什么数据 What we collect
艾赛网球（AceLink Tennis）是一项把网球训练视频整理为动作报告和训练档案的服务。我们会处理你注册时提供的邮箱、昵称和邀请码；你选择上传的视频、动作类型、水平、拍摄角度、教练备注，以及由视频处理产生的报告、质量检查和训练记录。
We process the email, display name, and invitation code you use to register, plus the tennis videos and training details you choose to upload and the reports, quality checks, and practice records produced for your account.
注册时，我们还会保存你主动同意本政策和服务条款的状态、版本、时间及客户端来源，用于证明授权范围。密码仅以加盐哈希保存，不保存明文。
At registration, we also retain the consent status, policy versions, time, and client source needed to document your agreement. Passwords are stored only as salted hashes, never as plaintext.
我们如何使用数据 How we use it
- 提供视频上传、关键帧处理、动作报告和长期训练档案。
- 保障账户安全、防止滥用，并维护服务的可用性。
- 只有在获得球员或监护人明确授权，且经过教练标注与真实姿态验证后，才将去标识化片段用于评分校准。
- 只有在上传者另行主动勾选 AI 二次复核授权时，才将 3–4 张未附账号标识的关键帧和必要动作指标发送给 OpenAI；关键帧可能包含球员脸部与身体外观，不勾选不影响报告和人工复核。
- We use data to provide the service, keep accounts secure, prevent misuse, and improve score calibration only when an authorized, de-identified clip passes the stated review gates.
- Only when the uploader separately opts in do we send 3–4 keyframes without attached account identifiers and necessary motion evidence to OpenAI. Frames may show the player's face and body. Declining does not affect the report or human review.
视频与模型校准 Video and calibration
默认情况下，上传的视频只用于生成该球员的报告和训练档案。勾选“允许匿名片段用于校准评分”不会改变当前报告，也不会自动进入模型阈值。只有取得授权、教练完成标注并且真实姿态指标通过验证的片段，才可能进入去标识化校准池。
By default, a video is used only for that player’s report and archive. Optional calibration consent does not change the current report or automatically enter a model. A clip can enter a de-identified calibration pool only after consent, coach labeling, and verified pose evidence.
AI 二次复核与评分校准是两项独立授权。AI 二次复核不发送姓名、邮箱、完整视频或媒体访问地址，结果只标记为“AI 二次复核”，不会自动写成“教练已确认”。当前校准阶段仍保留人工并行复核、冲突转人工和随机抽检。
AI second review and score calibration are separate choices. The second-review request excludes names, email addresses, full videos, and media-access URLs. Its result is labeled as AI review and never as coach confirmation; human-parallel review and escalation remain active during calibration.
存储、共享与保留 Storage, sharing, and retention
我们使用受访问控制的云端基础设施提供账号、视频处理、报告和备份服务。我们不会出售训练视频，也不用于跨应用广告追踪。只有履行服务所必需的云服务提供方、你主动授权的教练，以及法律要求的接收方可以在必要范围内访问相关数据，并须遵守与本政策相当的数据保护要求。
普通训练视频和报告原则上随账号档案保留；未授权进入 Beta 数据集的普通媒体在存储保护需要时可能提前清理。已授权且处于 active 状态的 Beta 原片不会被自动清理，会保留至账号删除或授权撤回。账号删除会立即移除在线账号、会话、媒体和报告；只读备份中的副本不再用于日常服务，并在最长 35 天的备份轮换期内过期。依法必须保留的去标识化结算记录除外。
We use access-controlled cloud providers for accounts, media processing, reports, and backups. We do not sell training videos or use them for cross-app advertising. Ordinary media may be pruned earlier when storage protection requires it. An active, consented Beta original is protected from automatic cleanup until account deletion or consent withdrawal. Deletion removes active account data immediately; inaccessible backup copies expire within the 35-day backup rotation, except de-identified records that must be retained by law.
启用可选 AI 二次复核时，OpenAI 作为技术处理方接收未附账号标识的关键帧和动作证据；关键帧画面本身仍可能识别球员外观。AceLink 请求关闭 API 应用状态存储；按照 OpenAI 当前 API 数据控制规则，API 数据默认不用于训练，但滥用监控日志通常可能保留最多 30 天，法律或安全需要时可能更久。撤回授权会停止后续关键帧发送，但不改变处理方依法或按安全规则必须完成的既有日志保留。
When optional AI second review is enabled, OpenAI processes keyframes without attached account identifiers and the related motion evidence; the images themselves may still identify the player's appearance. AceLink disables API application-state storage. Under OpenAI's current API data controls, API data is not used for training by default, while abuse-monitoring logs may generally be retained for up to 30 days and longer where legally or operationally required. Withdrawal stops future transfers but does not override retention already required for provider security or law.
安全与跨境处理 Security and processing locations
视频播放链接采用权限校验和短期签名，传输使用 HTTPS。服务基础设施或技术供应商可能位于用户所在地区之外；我们仅为提供服务而进行必要处理，并通过访问控制、最小权限和合同义务保护数据。
Video access uses authorization checks and short-lived signed links, and network transfer uses HTTPS. Service infrastructure may process data outside the user’s region only as needed to provide the service, subject to access controls and provider obligations.
未成年人 Children and teens
若视频中的球员未达到其所在地要求的独立同意年龄，请由家长或法定监护人注册、授权上传和决定是否参与匿名校准。教练或球馆代传时，必须先取得球员或监护人的明确许可。
If a player is below the age of independent consent where they live, a parent or legal guardian must authorize registration, upload, and any optional calibration use.
你的控制权 Your choices
登录后可在“我的 - 账号与数据”中查看本政策、服务条款并永久删除账户。删除不可撤销。网页端删除入口和处理范围见账号删除说明；逐项数据、系统权限及第三方组件见信息与权限清单。
After signing in, open My → Account & data to permanently delete the account. The same web-accessible path and deletion scope are documented on the account deletion page.
艾赛网球（AceLink Tennis）的动作报告用于训练参考，不构成医疗、康复或伤病诊断建议。