Controlling language: English. The Chinese text is a convenience translation only. 英文版本为准，中文仅供辅助理解。
This policy explains how Shiny Marketing handles personal information under the Privacy Act 1988 (Cth) and Australian Privacy Principles where they apply.
Privacy contact: info@shinymarketing.com.au; postal address: Australia Square, 264 George St, Sydney NSW 2000. We will make this policy available free of charge through the app and a stable public web URL.隐私联系邮箱：info@shinymarketing.com.au；邮寄地址：Australia Square, 264 George St, Sydney NSW 2000。本政策将在 App 及稳定公开网页免费提供。
SureIn is not designed to collect medical history, diagnoses, skin conditions, treatment records or other health information. Do not submit such information unless a specific feature asks for it. If a future feature requires sensitive information, we will assess necessity, provide a separate notice, obtain current and specific consent where required, restrict access and set a dedicated retention period.SureIn 并非用于收集病史、诊断、皮肤问题、治疗记录等健康信息。除非特定功能明确要求，请勿提交。未来如需敏感信息，我们将评估必要性、单独告知、在需要时取得当前且具体的同意、限制访问并设定专门保存期。
We provide just-in-time notices for data that may be unexpected, including precise location, photos, notifications and any sensitive information. You can change device permissions at any time, but some features may stop working. Withdrawing consent does not affect prior lawful handling.对精确位置、照片、通知及任何敏感信息等可能出乎预期的数据，我们提供即时告知。您可随时修改设备权限，但部分功能可能不可用；撤回同意不影响此前合法处理。
We may disclose information to the Business you choose, hosting and database providers, authentication, analytics, crash reporting, messaging, content moderation, customer support, payment providers (if enabled), professional advisers, corporate transaction counterparties and authorities where authorised or required. Providers may use information only for contracted purposes and must apply appropriate safeguards.我们可向您选择的商家、托管/数据库、认证、分析、崩溃报告、消息、审核、客服、支付（如启用）、专业顾问、公司交易相对方及依法主管机关披露。服务商仅可为约定目的使用并采取适当保护。
Current provider register: OpenAI and Anthropic (AI-assisted features); Google / Firebase (hosting, database, authentication and analytics). We do not sell personal information.当前服务商清单：OpenAI 与 Anthropic（AI 辅助功能）；Google / Firebase（托管、数据库、身份验证及分析）。我们不出售个人信息。
Personal information may be stored or accessed in the United States and other locations where our service providers — OpenAI, Anthropic and Google (Firebase) — and their backups and support functions operate. Where APP 8 applies, we take reasonable steps before disclosure to ensure overseas recipients handle information consistently with the APPs, subject to statutory exceptions.个人信息可能在美国，以及我们的服务提供商（OpenAI、Anthropic 及 Google（Firebase））及其备份与支持职能所在的其他地点存储或访问。APP 8 适用时，我们将在披露前采取合理措施确保境外接收方按 APP 要求处理，但法定例外除外。
We retain information only for as long as reasonably needed for the stated purposes, legal obligations, security and disputes, then securely destroy or de-identify it. Operational targets: deletion requests completed within 30 days after verification; deleted content removed from live systems promptly; backups overwritten on the normal cycle, targeted within 90 days; security and agreement evidence retained up to 7 years where reasonably needed; tax/payment records retained for the legally required period. These targets must be validated against the actual system and retention schedule before launch.仅在实现所述目的、法律义务、安全及争议所需期间保存，之后安全销毁或去标识。运营目标：身份验证后30天内完成删除；实时系统内容及时移除；备份按正常周期覆盖，目标90天内；合理需要时安全及协议证据最长保存7年；税务/支付记录依法保存。上线前须依据实际系统及保存表验证。
We use reasonable technical and organisational safeguards, including access controls, least privilege, encryption where appropriate, logging, vendor review, secure development and incident response. No system is completely secure. Where the Notifiable Data Breaches scheme applies, we will assess suspected eligible breaches and notify affected individuals and the OAIC when required.我们采取合理技术及组织措施，包括访问控制、最小权限、适当加密、日志、供应商审查、安全开发及事件响应。任何系统均非绝对安全。NDB 机制适用时，将评估疑似合资格泄露并依法通知受影响个人及 OAIC。
Request access or correction through account settings or info@shinymarketing.com.au. We will verify identity and generally respond within 30 days. If access or correction is refused, we will give written reasons and available complaint steps where required. You may manage location, notifications and marketing choices in device/app settings.可通过账号设置或info@shinymarketing.com.au请求访问或更正。我们会验证身份并通常在30天内答复。如拒绝，将在需要时书面说明理由及投诉渠道。位置、通知及营销选择可在设备/App 设置管理。
Send a complaint with your contact details and sufficient description to info@shinymarketing.com.au. We will acknowledge it within 7 days, investigate fairly, may request further information, and aim to provide an outcome within 30 days. If delayed, we will explain why and provide a revised date. If dissatisfied, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.请向info@shinymarketing.com.au提交联系方式及充分说明。我们将在7天内确认，公平调查，必要时索取资料，并力争30天内给出结果；延迟时说明原因及新日期。如不满意，可联系 OAIC（oaic.gov.au）。
SureIn is not directed to children under 13. If we learn that information was collected from a child without appropriate authorisation, we will take reasonable steps to delete it. Material policy changes will be highlighted; new consent will be sought where required.SureIn 不面向13岁以下儿童。如发现未经适当授权收集儿童信息，将采取合理步骤删除。重大变更将突出说明；需要时重新取得同意。