Privacy Policy

1. Introduction / 简介

Koala PhD ("we", "us", "our") is an AI-powered academic matching platform that helps students find PhD supervisors at Australian universities. This Privacy Policy explains how we collect, use, store, and protect your personal information.

Koala PhD（"我们"）是一个 AI 驱动的学术匹配平台，帮助学生找到澳洲大学的博士导师。本隐私政策说明我们如何收集、使用、存储和保护您的个人信息。

2. Data We Collect / 我们收集的数据

We collect the following categories of personal data:

• Account information / 账户信息: Email address, display name, profile photo (via Google OAuth or email registration).
• Academic background / 学术背景: Education history, GPA, research experience, publications, and other academic credentials you provide.
• Research interests / 研究兴趣: Research topics, preferred fields of study, target universities, and supervisor preferences.
• Conversation data / 对话数据: Messages exchanged with our AI advisor for the purpose of providing personalised guidance.
• Usage data / 使用数据: Pages visited, features used, and interaction patterns to improve our service.

3. Gmail Integration / Gmail 集成

Our application integrates with Google Gmail under strict, limited scope:

• Permission scope / 权限范围: We only request the gmail.send permission.
• User-initiated only / 仅用户触发: Emails are sent only when you explicitly confirm the content and recipient. We never send emails automatically or without your consent.
• No reading / 不读取邮件: We do not read, scan, index, or access any emails in your inbox.
• No modification / 不修改邮件: We do not modify, move, or delete any existing emails.
• No storage / 不存储邮件内容: We do not store the content of sent emails on our servers. Only metadata (send timestamp, recipient domain) is logged for delivery tracking.

You may revoke Gmail access at any time via your Google Account settings.

您可以随时通过 Google 账户设置撤销 Gmail 授权。

4. How We Use Your Data / 数据用途

• Providing personalised PhD supervisor matching / 提供个性化博士导师匹配
• Generating customised cold outreach emails / 生成定制套磁信
• Improving AI recommendations through anonymised analytics / 通过匿名分析改进 AI 推荐
• Sending service notifications (account, billing) / 发送服务通知
• Complying with legal obligations / 遵守法律义务

We do not sell your personal data to third parties. 我们不会将您的个人数据出售给第三方。

5. Data Storage & Security / 数据存储与安全

• Infrastructure / 基础设施: Data is stored in Supabase (PostgreSQL) hosted on AWS ap-northeast-1 (Tokyo region).
• Row-Level Security / 行级安全: All database tables are protected by Supabase RLS policies, ensuring users can only access their own data.
• Encryption / 加密: Data is encrypted at rest (AES-256) and in transit (TLS 1.2+).
• Authentication / 认证: Managed by Supabase Auth with secure JWT tokens.

6. Third-Party Services / 第三方服务

• Google OAuth: Authentication and gmail.send permission (see Section 3).
• Stripe: Payment processing. We do not store credit card numbers; all payment data is handled by Stripe in compliance with PCI DSS.
• Anthropic (Claude API): AI conversation processing. Conversations are sent to Anthropic for generating responses. See Anthropic's Privacy Policy.
• Vercel: Application hosting and deployment.

7. Data Retention & Deletion / 数据保留与删除

You may request deletion of your account and all associated data at any time by contacting us. Upon receiving a deletion request, we will:

• Delete your account and profile data within 30 days / 30 天内删除您的账户和个人资料
• Delete all conversation history / 删除所有对话记录
• Remove all academic data you provided / 删除您提供的所有学术资料
• Anonymise any analytics data / 匿名化所有分析数据

您可以随时联系我们请求删除账户和所有相关数据。

8. Your Rights / 您的权利

You have the right to:

• Access the personal data we hold about you / 访问我们持有的您的个人数据
• Request correction of inaccurate data / 请求更正不准确的数据
• Request deletion of your data / 请求删除您的数据
• Withdraw consent for data processing / 撤回数据处理同意
• Export your data in a portable format / 以可移植格式导出您的数据

9. Children / 未成年人

Koala PhD is designed for university-level students and researchers. We do not knowingly collect data from anyone under 16 years of age. If you believe a minor has provided us with personal data, please contact us immediately.

Koala PhD 面向大学级别的学生和研究人员。我们不会有意收集 16 岁以下人士的数据。如果您认为未成年人向我们提供了个人数据，请立即联系我们。

10. Changes to This Policy / 政策变更

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the service after changes constitutes acceptance.

我们可能会不时更新本隐私政策。重大变更将通过邮件或应用内通知告知您。变更后继续使用本服务即表示接受。

11. Contact Us / 联系我们

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
如果您对本隐私政策有疑问或希望行使数据权利，请联系我们：