Lossy Privacy Policy · Lossy 隱私權政策

Effective date / 生效日期: 2026-07-10

English

Lossy turns your machine-learning training runs into a small creature that hatches on your phone. We built it to need as little of your data as possible. This page explains, in plain language, everything Lossy collects, why, and how to erase it.

The short version

1. Training data (the core loop)

When you pair the app with the lossy Python SDK (pip install lossy), your training script sends run data to the Lossy server so your phone can show it:

Nothing is sent until you pair. Without a pairing token, the SDK is inert. We never see your training code, your model, or your dataset — only the metric points your script explicitly logs.

In transit: all traffic uses HTTPS (TLS).
At rest: data is stored in our database (Upstash Redis), which encrypts data at rest.
Retention: the full metric history of a finished or crashed run expires after 30 days; a small history-free summary is kept so your hatched pets remember where they came from.
Deletion: tap Unpair in Settings — this performs a full server-side wipe of everything associated with your device, including summaries, push tokens, and pairing tokens. Immediately, no grace period, no backups we quietly keep.

2. Device identifier and pairing token

The app generates a random device identifier (not your Apple ID, not your phone number, not tied to your identity in any way) and a random pairing token (lossy_…). These exist only so the server knows which runs belong on which phone. Both are erased by Unpair.

3. Notifications (optional)

If you turn on ambient features (push notifications and Live Activities), the app sends Apple Push Notification service (APNs) device tokens to our server so it can wake up your lock screen when an egg hatches or a run crashes. APNs tokens are rotating, Apple-issued identifiers — they can only be used to push to your device, and they are deleted when you unpair or turn ambient features off.

4. What we never collect

Optional aggregate analytics — off by default. Lossy has one first-party analytics feature, which you can turn on in My Data. When — and only when — you opt in, the app sends de-identified, aggregate signals: counts and category labels such as the primary language, a coarse duration bucket, a tool-call bucket, and whether a session completed. These ride under a random analytics id that is separate from your device identifier and can be rotated at any time. They never include your code, prompts, model outputs, file names, or project/repository names, and they are used only for anonymous, cross-user benchmarks (reported only for cohorts of many people, never individually). You can turn this off and delete everything you have contributed from My Data at any time.

5. Photo library

If you save a hatch card, Lossy asks for add-only photo access — it can put an image into your library but can never read, browse, or see your photos.

6. Children

Lossy is a developer tool and is not directed at children under 13.

7. Changes

If this policy changes, the new version ships with the app update that changes behavior, with the effective date above updated. We will never retroactively grant ourselves more access to your data.

8. Contact

Questions or deletion requests (Unpair already does it, but you can also ask a human): benson.net82@gmail.com

繁體中文

Lossy 把你的機器學習訓練跑成手機上會孵化的小生物。我們把它設計成盡可能 不需要你的資料。這頁用白話說明 Lossy 收集什麼、為什麼收集、以及如何刪除。

太長不看版

1. 訓練資料(核心功能)

當你將 app 與 lossy Python SDK(pip install lossy) 配對後,訓練腳本會把 run 資料送到 Lossy 伺服器,好讓手機顯示:

在你配對之前,不會有任何資料被送出——沒有 pairing token 時 SDK 完全不 運作。我們永遠看不到你的訓練程式碼、模型或資料集,只有你的腳本明確記錄的指標數值。

傳輸中:全程使用 HTTPS(TLS)加密。
儲存時:資料存放在我們的資料庫(Upstash Redis),該資料庫具備儲存加密 (encryption at rest)。
保留期限:已完成或已崩潰的 run,其完整指標歷史會在 30 天後過期刪除; 僅保留一份不含歷史的摘要,讓孵化出的寵物記得自己的出身。
刪除:在設定中按下解除配對(Unpair)——伺服器會完整清除 與你的裝置相關的所有資料,包括摘要、推播 token 與 pairing token。立即生效,沒有寬限期, 也沒有偷偷留存的備份。

2. 裝置識別碼與 pairing token

App 會產生一組隨機的裝置識別碼(不是你的 Apple ID、不是電話號碼,與你的 身分完全無關)以及一組隨機 pairing token(lossy_…)。它們的唯一用途是讓伺服器 知道哪些 run 屬於哪支手機。解除配對時兩者都會被刪除。

3. 通知(選用)

若你開啟環境功能(推播通知與 Live Activities / 即時動態),app 會將 Apple 推播服務(APNs)的裝置 token 送到伺服器,以便在蛋孵化或 run 崩潰時喚醒你的鎖定畫面。 APNs token 是 Apple 發行、會輪替的識別碼,只能用來對你的裝置推播;解除配對或關閉環境功能時 即會刪除。

4. 我們永遠不收集的東西

選用的聚合分析——預設關閉。Lossy 有一項自家分析功能,你可以在 My Data(我的資料)中開啟。只有在你主動開啟時,app 才會送出去識別化、 聚合的訊號:計數與分類標籤,例如主要語言、粗略的時長分桶、工具呼叫分桶,以及該次是否完成。 這些訊號使用一組與你的裝置識別碼分離、可隨時輪替的隨機分析 id,永遠不含你的程式碼、prompt、 模型輸出、檔名或 project/repo 名稱,且只用於匿名的跨使用者基準(僅在達到足夠人數的群體才會 彙整呈現,絕不針對個人)。你可以隨時在 My Data 關閉它,並刪除你已貢獻的所有訊號。

5. 照片圖庫

儲存孵化卡片時,Lossy 只要求「僅新增」的照片權限——它可以 把圖片存進你的圖庫,但永遠無法讀取、瀏覽或看見你的照片。

6. 兒童

Lossy 是開發者工具,不以 13 歲以下兒童為對象。

7. 政策變更

若本政策有變更,新版本會隨改變行為的 app 更新一併發布,並更新上方生效日期。 我們絕不會回溯性地給自己更多存取你資料的權限。

8. 聯絡方式

任何問題或刪除請求(解除配對本身就會完成刪除,但你也可以找真人): benson.net82@gmail.com