NM CONSULTING PTE. LTD.
Privacy policy
Updated 24 September 2026 · Android & iOS
Who operates the app
GAIWAN (also known as 盖碗先生) is operated by NM CONSULTING PTE. LTD., Singapore (UEN 202224076M). This policy covers the GAIWAN Android and iOS apps and these information pages. It applies to testing and the free Singapore release, according to the availability of the service. Paid purchases are not enabled.
Accounts and sign-in
You can browse the catalogue without an account. An account enables cloud library and progress sync. When you choose to sign in, we process your email address, account identifier and authentication information to sign you in and protect your account. If you use a password, it is sent over HTTPS directly to Supabase Auth for verification. The app does not save your password; it saves the resulting session in device secure storage. Email-link and code sign-in also use Supabase Auth. Android also offers Sign in with Google: Google supplies your email address, account identifier, name and profile picture; Supabase validates your identity and stores these details in your authentication profile. We do not access your Gmail messages or contacts. The initial iOS version offers email sign-in. If Sign in with Apple is enabled in a later iOS version, Apple may share your name and email (including a private relay address); Supabase validates the sign-in token. We do not access other Apple account data.
Your library and viewing activity
When signed in, saved titles, episode identifiers, playback positions, completion status and update times are stored in our Singapore database so that your library and progress can sync across devices. Guest favorites, progress and language preferences are kept on the device. Catalogue searches are matched on the device; our app does not send search terms to its business API.
Network information and service providers
Supabase processes authentication, account records, library records and private media in our Singapore project. Cloudflare operates our API. These providers receive IP addresses, user-agent information, session identifiers and other request metadata. Their logs can include approximate city or country derived from an IP address, network fingerprints, request timing, response status and errors. They process this information to operate authentication and delivery, understand service performance, and detect abuse, and may retain authentication and operational logs. Approximate network location does not require the app to request device location permission. Selecting a Singapore database region does not mean every provider operation or network request stays in Singapore. Google Play and the Apple App Store separately process installation and distribution information under their own policies. These information pages use OpenAI Sites hosting, whose providers receive the network information needed to serve the pages.
Permissions, purchases and contact
The app needs internet access and uses background audio for listening. It does not request camera, microphone, contacts or location access. It does not offer user uploads, public comments or direct messages. We do not run in-app ads or sell your personal data. The current build includes a purchase SDK, but purchases are not configured and no paid orders are created. If you email support, we receive the information and attachments you choose to send. These information pages do not ask you to log in or submit a form.
How long we keep data
We keep active account and library records while your account exists so we can provide the service. Successful account deletion removes the authentication account, linked favorites, progress and access records from the active app database, and clears that account’s local library cache. Provider security logs, backups and support correspondence may persist separately for service operation, security investigations or legal obligations; account deletion does not promise immediate erasure of those copies. Contact us for a request concerning those records. Device backup or migration settings may also affect local data.
Your choices and requests
You can delete your account in the app or request deletion without reinstalling it using the account deletion page below. You can contact us to request access to or correction of your personal information, ask about retention, or raise a privacy concern. We may need to verify account ownership. Clearing local history alone does not remove cloud records. A parent or guardian concerned about a minor’s account may contact us for assistance.
Changes to this policy
We will update this page when our data practices change. New providers or paid features will require corresponding disclosures before they are enabled. The date above identifies this version.
隐私政策
运营主体：NM CONSULTING PTE. LTD.，新加坡（UEN 202224076M）。本政策适用于 GAIWAN（盖碗先生）安卓、iOS App 及本说明网站，涵盖测试及新加坡免费发行阶段。服务以实际开放范围为准，尚未启用付费购买。
登录和片库
你可以不登录浏览目录；账号用于云端收藏和进度同步。选择登录时，我们处理邮箱、账号标识和认证信息，用于登录及保护账号。密码通过 HTTPS 直接发送给 Supabase Auth 验证，App 不保存密码，仅在设备安全存储中保存登录会话。邮件链接和验证码登录也由 Supabase Auth 处理。安卓端可选择 Google 登录，Google 会提供邮箱、账号标识、姓名和头像，Supabase 验证身份后保存在认证账号中；我们不读取 Gmail 邮件或通讯录。iOS 首版使用邮箱登录；日后若启用 Apple 登录，Apple 可能提供姓名及邮箱（包括私密转发地址），由 Supabase 验证登录令牌，我们不读取其他 Apple 账号资料。登录后的收藏、集号、播放秒数、完成状态和更新时间保存在新加坡数据库，用于跨设备同步。访客片库和语言保存在本机；目录搜索在本机完成，不向业务接口发送搜索词。
服务商、权限和通信
新加坡 Supabase 项目处理认证、账号、片库及私有媒体，Cloudflare 提供接口。服务商会接收 IP 地址、用户代理信息、会话标识及其他请求元数据。日志可能包含根据 IP 推算的大致城市或国家、网络指纹、请求耗时、响应状态和错误信息，用于认证与传输、分析服务性能及防范滥用，并可能保留认证和运行日志。这类网络推算的大致位置不需要 App 申请设备定位权限。数据库选择新加坡不表示所有服务商处理活动都只在新加坡进行。Google Play 和 Apple App Store 分别按其政策处理安装和分发信息。本说明网站使用 OpenAI Sites 托管，托管服务商会接收提供页面所需的网络信息。
App 使用网络及后台音频，不申请相机、麦克风、通讯录或定位权限，不提供用户上传、公开评论或私信。我们不投放 App 内广告，也不出售个人数据。移动端包含购买 SDK，但未配置购买服务，不产生付费订单。联系支持时，我们会收到你主动发送的内容和附件。本说明网站不要求登录或填写表单。
保存和删除
账号存在期间保存其有效账号及片库记录，以提供服务。成功删除账号会从 App 活跃数据库移除认证账号、关联收藏、播放进度和访问权益，并清理本机该账号的片库缓存。服务商安全日志、备份和支持通信可能因服务运行、安全调查或法律义务另行保留；删除账号不代表这些副本立即全部清除。如需处理这些记录，请联系隐私邮箱。本机数据还可能受设备备份或迁移设置影响。
你的选择
你可以在 App 设置中删除账号，也可以通过下方说明在卸载 App 后提出删除请求。可联系我们申请访问、更正个人信息，咨询保存期限或反映隐私问题。我们可能核验账号归属，但不会索要密码或验证码。仅清除本机历史不会删除云端记录。家长或监护人如对未成年人账号有疑问，也可联系我们。数据处理方式变化时会更新本页，新服务商或付费功能启用前会更新相应披露。