知己有约 · MeetThen
隐私政策
更新日期：2026 年 11 月 4 日。
「知己有约」只做一件事：你有空的时候，让知道的人来约你。它尽可能少地知道你，并且不记住过去。
运营者与联系
运营者为本 App 在 App Store 上署名的开发者；公司成立后，由北京牛牛进步科技有限公司运营。个人信息事宜请联系：。
我们处理什么、为什么、保存多久
- 手机号：用于登录。服务器只保存以密钥计算的散列（HMAC），不保存号码本身。验证码由阿里云短信发送，阿里云会收到号码和验证码。验证码记录 5 分钟后失效；发送记录 24 小时后删除。保存至注销。
- Apple 账号：若选择「通过 Apple 登录」，我们只取 Apple 的匿名标识，不索取姓名和邮箱，保存其密钥散列；另保存 Apple 发给我们的授权令牌，仅用于注销时向 Apple 撤销授权。保存至注销。
- 昵称、语言、好友备注：你自己填写或选择。备注只有你自己能看到。保存至修改或注销。
- 好友关系、个人邀请链接、待确认的好友请求：好友关系在双方确认后保存，任一方解除或屏蔽即删除；请求在确认、忽略或屏蔽后删除。
- 开放的时间及其备注、可见范围、链接，邀请、相约及双方留言：这是 App 的功能本身。在相应时间结束后从服务器删除（通常几秒至一分钟内），不归档、不统计。
- 网页访客：没有 App 的人在链接页上填写的称呼，与那段时间一同删除。
- App 内的提示（如「一个邀请有了结果」）：被关闭或 3 天后删除。
- 推送令牌与通知语言：用于在有人约你时通知你。推送只说明事件类型（如「收到一个邀请。」），不含人名、时间或任何内容。退出登录或注销即删除。
- 登录会话：保存会话令牌的散列，每人只保留最近 10 次登录。
- IP 地址：为防止滥用（如反复发送验证码、猜测链接），短暂保存 IP 地址的密钥散列，1 小时内删除。不保存 IP 地址本身。
- 购买：一次付清后，记录该账号已付清，以及苹果交易编号的密钥散列（防止一次购买解锁多个账号）；不记录金额和日期。退款过的交易编号散列在注销后仍保留，以免同一购买被重复使用。
- 屏蔽与举报：屏蔽某人时，同时记录「谁举报了谁、何时」，不含任何对话内容，供人工处理，30 天后删除。
我们不做什么
- 不记录历史：相约过了，那次相约在服务器上不留痕迹；没有「上次相约」、相约次数或任何统计。
- 不追踪：没有广告、没有第三方分析工具；不收集广告标识或设备序列号，不读取通讯录或位置。
- 不出售你的数据，也不把它提供给下文所列以外的任何人。
第三方与境外处理
阿里云（中国大陆）：发送验证码短信，收到手机号和验证码。Apple Inc.（美国）：通过 Apple 登录、推送通知、App 内购买，分别收到登录凭证、推送令牌与事件类型、购买信息，适用 Apple 的隐私政策。我们的服务器位于中国香港；对中国内地用户而言，数据将传至境外处理。你使用本 App，即表示同意上述处理与传输；你可随时注销以撤回同意。
备份
备份只含账号、好友关系、备注与购买状态，不含任何时间、邀请、相约或留言；经加密保存，服务器上保留 14 天，异地副本保留 60 天。
你的权利
- 查阅：App 内即可看到我们保存的全部与你有关的内容。
- 更正：昵称、备注、时间可在 App 内随时修改。
- 删除：可删除任何时间、解除任何好友；「设置」中可注销账号，所有数据立即删除，无法恢复；若曾通过 Apple 登录，我们同时向 Apple 撤销授权。
- 复制、解释、撤回同意或其他请求：发邮件至上述地址，我们在 15 个工作日内答复。
未成年人
本 App 不面向 14 周岁以下的人。
Privacy Policy
Updated 4 November 2026.
MeetThen does one thing: when you have time, the people who should know can ask for it. It knows as little about you as it can, and it does not remember the past.
Who we are
The operator is the developer named for this app on the App Store; once incorporated, Beijing Niuniu Jinbu Technology Co., Ltd. Contact for anything about your data: .
What we process, why, and for how long
- Mobile number, to sign you in. The server keeps only a keyed hash (HMAC), never the number. Aliyun sends the code and so receives the number and the code. A code lapses after 5 minutes; the record that one was sent goes after 24 hours. Kept until you delete your account.
- Apple account, if you choose Sign in with Apple. We take only Apple's anonymous identifier — no name, no email — and keep a keyed hash of it, plus the grant token Apple gives us, used only to revoke the grant when you delete your account. Kept until then.
- Nickname, language and remarks, written or chosen by you. A remark is seen by you alone. Kept until changed or until you delete your account.
- Friendships, your personal invite link, and pending friend requests. A friendship is kept once both confirm and goes when either ends or blocks it; a request goes once confirmed, ignored or blocked.
- Open times with their notes, who may see them and their links; invitations, meetings and both sides' messages: the app itself. Each is deleted from the server once its time has ended (usually within seconds to a minute); nothing is archived or counted.
- Web guests: the name someone without the app types on a link page goes with that time.
- In-app notices (such as “An invitation has an answer.”): gone when dismissed or after 3 days.
- Push token and its language, so you hear when someone asks. A push states only the kind of event (“You have an invitation.”), never a name, time or content. Gone when you sign out or delete your account.
- Sessions: a hash of each sign-in token; only your 10 most recent sign-ins are kept.
- IP address: to stop abuse (repeated code requests, guessing links) a keyed hash of it is kept for under an hour. The address itself is never stored.
- Purchase: after the one-time purchase, that this account has it, and a keyed hash of Apple's transaction number (so one purchase unlocks one account); no amount or date. A refunded transaction's hash is kept after account deletion so the same purchase cannot be reused.
- Blocking and reporting: blocking someone also records who reported whom and when — nothing of what was said — for a person to look at; gone after 30 days.
What we do not do
- No history: once a meeting is over, nothing of it stays on the server; no “last met”, no counts, no statistics.
- No tracking: no ads, no third-party analytics, no advertising identifier or serial number, no access to contacts or location.
- No selling of your data, and no sharing with anyone beyond those listed below.
Third parties and processing abroad
Aliyun (mainland China) sends the sign-in code and receives the number and code. Apple Inc. (United States) provides Sign in with Apple, push notifications and in-app purchase, and receives the sign-in credential, the push token and event kind, and purchase details, under Apple's own privacy policy. Our server is in Hong Kong; for users in mainland China this means processing outside the mainland. By using the app you agree to this processing and transfer; deleting your account withdraws that agreement.
Backups
Backups hold only accounts, friendships, remarks and purchase state — no times, invitations, meetings or messages. They are encrypted, kept 14 days on the server and 60 days off-site.
Your rights
- See: everything we keep about you is visible in the app.
- Correct: your nickname, remarks and times can be changed in the app at any time.
- Delete: any time or friendship can be removed; Settings › Delete account deletes everything at once and cannot be undone, and revokes the Apple grant if you used it.
- Copies, explanations, withdrawing consent or anything else: write to the address above; we answer within 15 working days.
Children
The app is not for people under 14.
有约，欣然赴约；无约，安然独处。