跑鸭·RunYay（跑鸭 AI）插件隐私政策（补充）
1. 适用范围与运营主体
本补充政策由成都好多鸭科技有限公司提供，适用于“跑鸭·RunYay”（跑鸭 AI）插件及跑鸭 MCP 连接中的跑步分析、备赛计划、训练调整与对话内统计报表。请同时阅读跑鸭 App 总隐私政策。本补充说明 AI 连接的额外处理活动，不代表同意总政策即可自动向任何 AI 服务提供全部数据。
2. 连接方式及数据流向
您使用跑鸭账号，在支持插件的 ChatGPT 或 Codex 等宿主中完成连接和授权后，宿主可按您的请求和实际授权范围调用跑鸭接口。跑鸭将相应结果返回宿主，宿主结合您的输入生成回答。查询日期、活动或课程标识，以及拟保存的课程名称、说明、日期、目标和训练步骤，会按具体请求发送到跑鸭。现有七个工具没有用于接收完整聊天历史或上传参考图片的专用参数，但您写入课程名称、说明或其他字段的文字仍可能随请求到达跑鸭。请不要在这些字段写入无关隐私信息。
3. 信息种类与用途
活动及来源信息：活动标识、名称、运动类型、开始时间、距离、时长、配速、数据来源平台及设备名称，用于定位记录、复盘及统计。运动与身体相关指标：心率、最大/静息心率、用户最大心率、最大摄氧量、热量、步数、步频、步幅、触地时间、功率、垂直振幅等，用于有相应数据支持的训练分析。分段及环境信息：训练阶段、圈段、分段距离/时长和指标、爬升/下降、温度与湿度。训练信息：课程标识、名称、日期、场地、完成标记、训练步骤、时间/距离及心率/配速目标，用于查询和您确认的增改删。来源与同步情况不同，字段可能缺失；现有摘要返回范围可能大于最终回答展示范围。
4. 健康与精确位置特别提示
当前跑步摘要和详情可向AI宿主返回活动起点精确经纬度、静息心率、用户最大心率、最大摄氧量及运动心率等字段，具体可用内容取决于数据来源。即使最终回答或报表不展示这些字段，也不代表宿主未收到。
这些信息可能涉及敏感个人信息：起点位置可能反映常活动区域；身体指标可能反映运动能力和身体状态。起点位置可用于您明确请求的位置相关解读；静息/最大心率可辅助理解训练强度，最大摄氧量可辅助观察长期变化。分析受数据缺失、设备口径及AI错误影响，不构成医疗诊断，也不意味着接口提供完整路线。
您勾选读取跑步权限后，所选AI宿主可能接收上述信息并在中国大陆以外处理。如果不希望宿主收到，请不要授予该读取权限，或在跑鸭AI连接管理中撤销。现有权限按工具管理，不承诺能分别关闭每个字段；撤销不会自动删除宿主已保存的数据。
5. 授权信息与访问日志
为建立、管理和验证连接，跑鸭处理与连接有关的账号关联、客户端及连接标识、连接名称、授权范围、来源、状态、创建时间、最近使用时间和认证凭据。为保障服务运行、安全审计、限流和故障排查，我们记录请求标识、工具名称、用户标识、客户端或连接标识、协议版本、结果状态、耗时和错误类型等访问及授权管理记录。
认证凭据仅用于连接建立和校验，请不要将密码、验证码或访问密钥提交到聊天、公开文件或分享内容中。相关记录按本政策第7节的保存规则处理。
7. 存储地点、跨境与保存期限
跑鸭的数据库、日志和备份存储于中国大陆。您使用的 AI 宿主可能在美国及其他国家或地区处理收到的数据；跑鸭在中国大陆存储数据，不表示宿主的数据处理也仅发生在中国大陆。涉及向境外提供个人信息时，我们将根据实际处理活动履行适用的告知、同意及其他法定义务。
我们仅在实现本政策所述目的所必需的期间内保存信息，并遵守以下规则：账户信息在账户注销后30天内删除；运动健康数据在账户注销时或按您的删除请求处理；访问及错误等日志保存不超过12个月。依法需要继续保存的信息，仅在相应法定目的和期间内保留。
连接凭据用于维持和验证授权。过期或撤销会停止其后续使用；凭据及授权记录的删除与连接失效属于不同处理。不同系统的数据清理及备份处理可能存在时间差；相关副本的保留和删除安排仍受上述保存期限及适用法律约束。AI宿主保存的信息和您自行复制的内容，应按其相应规则分别管理。
8. 模型训练、广告与画像
跑鸭不将 MCP 请求或运动数据用于模型训练、广告或画像。该说明针对跑鸭自身，不代表 OpenAI 或您选择的其他宿主、工具作出相同承诺。宿主的保存、模型改进和可用控制取决于其适用政策、账号类型及设置；请在连接前了解相关规则。
9. 您的控制与权利请求
您可以在跑鸭的 AI 工具连接或连接管理功能中查看连接、调整权限或撤销相应授权，也可以在 AI 宿主的设置中断开连接。撤销后，跑鸭会停止接受该已撤销连接的后续授权访问；撤销前已完成的处理和已返回的响应不会被自动收回。
停止连接不等于删除数据，也不会自动删除宿主聊天、报表及您另行复制保存的内容。您可以通过 App 功能或 contact@yayarun.cn 提出访问、更正、删除、获取副本、撤回同意或其他适用权利请求。为保护您的账号，我们可能要求必要的身份核验。我们将在15个工作日内回复，并按适用法律和本政策处理。
对于 AI 宿主保存的数据，请通过其设置或权利申请渠道管理；我们将按适用法律提供必要协助。本插件不要求访问本机文件系统，也不会自动生成图片或本地附件。
10. 安全、未成年人及政策更新
跑鸭 MCP 服务使用 HTTPS 传输，连接访问受账号认证与授权范围校验约束。请仅在跑鸭正式登录或授权页面输入登录凭据，不要在聊天中提供密码、验证码或访问密钥。发现账号或连接异常时，请及时撤销授权并联系我们。
本插件不面向不满14周岁的儿童。14至未满18周岁的用户，应在监护人指导并同意后使用；所在地法律或 AI 宿主要求更高最低年龄的，应满足较高要求。监护人如发现未成年人未经适当同意提供个人信息，可以联系我们处理。
本补充自官网公布之日起生效。我们可能因法律要求或服务变化更新本政策，并在页面列明更新日期。涉及处理目的、范围、方式或接收方的重大变化时，将通过适当方式提前告知，并在需要时取得相应同意。
RunYay (RunYay AI) Plugin Privacy Supplement
1. Scope and operator
This supplement is provided by 成都好多鸭科技有限公司 (Chengdu Hodoya Technology Co., Ltd.) for RunYay (RunYay AI) and its RunYay MCP connection: run analysis, race planning, workout adjustment and in-conversation running tables. Read it together with the RunYay App Privacy Policy. Accepting the App policy does not automatically authorize disclosure of all data to any AI service.
2. Connection and data flow
After you sign in to RunYay and authorize a connection in a supported host such as ChatGPT or Codex, that host may call RunYay tools within the actual granted scope for your request. RunYay returns results to the host, which uses them with your input to produce an answer. Tool requests may send query dates, activity or workout identifiers, and workout names, descriptions, dates, targets and steps to RunYay. The seven current tools have no dedicated parameter for receiving an entire chat history or uploading reference images. Text included in workout fields may nevertheless be sent to RunYay; avoid unrelated private information.
3. Data categories and purposes
Activity and source data include identifiers, names, activity types, start times, distance, duration, pace, source platforms and device names, used to find, analyze and summarize records. Exercise and body-related metrics may include heart rate, maximum/resting heart rate, user maximum heart rate, VO2 max, calories, steps, cadence, stride length, contact time, power and vertical oscillation, for analysis supported by available data. Segment and environment data may include stages, laps, segment distance/duration and metrics, elevation changes, temperature and humidity. Workout data include identifiers, names, dates, locations, completion markers, steps, time/distance and heart-rate/pace targets for queries and confirmed changes. Coverage varies by source; a tool response may contain more fields than the final answer shows.
4. Health and precise-location notice
Run summaries and details can return precise starting coordinates, resting heart rate, user maximum heart rate, VO2 max and exercise heart rate to the selected AI host when available from the data source. A field may reach the host even if the final answer or table omits it.
These may be sensitive personal information. Starting locations can reveal regular activity areas; body metrics can reflect fitness or physical condition. Starting locations can support explicitly requested location context; resting/maximum heart rate can inform training intensity and VO2 max can support trend analysis. Missing data, device definitions and AI errors limit interpretation. This is not a diagnosis or provision of a full route.
Granting run-read access can send these fields to the selected host for processing outside mainland China. Do not grant that scope, or revoke it in RunYay AI connection management, if you do not want the host to receive them. Current controls are tool-level, not individual-field switches. Revocation does not automatically erase host-held data.
5. Authorization records and access logs
To establish, manage and verify connections, RunYay processes account associations, client and connection identifiers, connection names, granted scopes, source, status, creation and last-use times, and authentication credentials. For service operation, security auditing, rate limiting and troubleshooting, access and authorization records may include request IDs, tool names, user identifiers, client or connection identifiers, protocol versions, results, durations and error types.
Credentials are used for connection establishment and verification. Do not submit passwords, verification codes or access keys in chat, public files or shared content. These records are subject to the retention rules in section 7.
7. Storage, international processing and retention
RunYay databases, logs and backups are stored in mainland China. Your AI host may process received data in the United States and other countries or regions; RunYay storage in China does not confine host processing to China. Where personal information is provided internationally, we will fulfill applicable notice, consent and other legal obligations for the actual processing activity.
We retain information only as necessary for the purposes described here, subject to these rules: account information is deleted within 30 days after account closure; exercise and health data are handled for deletion on closure or in response to your deletion request; access, error and other logs are retained for no longer than 12 months. Information that must be retained by law is kept only for the relevant legal purpose and period.
Connection credentials maintain and verify authorization. Expiration or revocation stops their subsequent use; deletion of credentials and authorization records is separate from invalidating a connection. Cleanup across systems and backups may occur at different times. Retention and deletion of those copies remain subject to the periods above and applicable legal requirements. Host-held information and content you copy elsewhere must be managed separately under their respective rules.
8. Model training, advertising and profiling
RunYay does not use MCP requests or exercise data for model training, advertising or profiling. This statement concerns RunYay itself; it is not a promise on behalf of OpenAI or another host or tool. Host retention, model-improvement practices and controls depend on applicable policies, account type and settings. Review those before connecting.
9. Controls and rights requests
In RunYay AI connection management, you can inspect connections, adjust scopes or revoke authorization. You can also disconnect in the AI host’s settings. After revocation, RunYay stops accepting subsequent authorized access through that revoked connection. Processing completed and responses returned before revocation are not automatically recalled.
Disconnection is not deletion and does not automatically erase host chats, tables or content you copied elsewhere. Use App features or contact@yayarun.cn to request access, correction, deletion, copies, withdrawal of consent or other applicable rights. Necessary identity verification may be requested to protect your account. We will reply within 15 working days and handle requests under applicable law and this policy.
Manage host-held data through the host’s settings or rights channels. We will provide assistance as required by applicable law. The plugin does not require a local filesystem or automatically generate images or local attachments.
10. Security, minors and updates
The RunYay MCP service uses HTTPS transport. Account authentication and scope checks govern connection access. Enter credentials only on official RunYay sign-in or authorization pages, not in chat. Revoke authorization and contact us if you notice suspicious account or connection activity.
The plugin is not directed to children under 14. Users aged 14–17 require guardian consent and guidance; higher minimum ages required by local law or the AI host apply. A guardian who discovers that a minor provided information without appropriate consent may contact us.
This supplement takes effect upon publication on the official website. We may update it for legal requirements or service changes and will display the update date. Material changes to processing purposes, scope, methods or recipients will be communicated appropriately in advance, with consent obtained where required.
11. Contact and relationship to the App policy
Operator: 成都好多鸭科技有限公司 (Chengdu Hodoya Technology Co., Ltd.). Email: contact@yayarun.cn. Support: https://yayarun.cn/contact.html. RunYay App Privacy Policy: https://yayarun.cn/privacy-policy.
This supplement and the App Privacy Policy jointly apply to AI connection processing. The specific explanations here do not reduce rights provided by the App policy or mandatory applicable law.