隐私说明
我们只收集提供服务所需的数据，不出售你的数据，也不用于广告。Takeable 不是 NYU 的官方服务，你在这里的数据不会发给 NYU。
1. 不登录也能用的部分
浏览课程、筛选、购物车、生成课表、AI 助手都不需要账号。这时你的设置、购物车、课表和最近 10 段聊天记录只保存在你自己的浏览器里（localStorage）。你上传的成绩单或 Degree Progress Report、从 Albert 粘贴的内容，在你的设备上读取，只把课程代码和还需要修的要求保存在这个浏览器里，不会上传到服务器。
2. 注册账号后我们保存的数据
- 账号：邮箱、邮箱是否已确认及确认时间、密码的哈希值（用 scrypt 加密，我们看不到你的密码；用邮件链接登录的账号可以没有密码）、注册时间、你同意的条款版本和时间。
- 邮件链接：登录、重设密码和确认邮箱的链接，服务器只保存其哈希值，用过或过期后失效（登录 15 分钟，重设密码 1 小时，确认邮箱 24 小时）。
- 购物车和保存的课表，用于在不同设备之间同步。
- 聊天记录：你和 AI 助手之间的文字、回答里提到的课程，以及你附带的文件名和大小（不保存文件内容）。每个账号最多保留最近 50 段对话。
- 登录 cookie（tk_sess）：保持登录，有效期 30 天，退出登录即删除。
- 提醒：如果你设置选课时间提醒或开启空位提醒，我们保存选课时间、学期、你选的方案、时区和语言、关注的班级，以及一个随机的退订令牌，只用来按时发邮件到你已确认的邮箱。每封提醒都有退订链接；发送记录最长保留 120 天，用来避免重复发送。
3. 使用 AI 助手时
- 你的问题、你附带的文件（图片、PDF、Word 等）的内容，以及回答所需的选课信息（例如你的时区、可上课时段、购物车里的课、你填写的专业和已修课程），会通过接口发送给 AI 服务商 DeepSeek 生成回答。请不要在聊天里发送与选课无关的敏感个人信息。
- 上传的文件在服务器上保存 24 小时，供对话读取，之后自动删除。用于识别上传者的 cookie（tk_vid）有效期 30 天，不包含个人信息。
- 你确认分享的课程大纲，其成绩构成会公开给其他同学，不显示你的身份（只存一个无法反推身份的哈希值），详见《使用条款》第 5 条。
4. 访问统计和反馈
- 我们按天统计访问次数、访客数，以及注册、AI 对话、上传、加购物车、生成课表、规划步骤等功能的使用次数（规划步骤按界面语言分开，每个浏览器每步只计一次），只保存数字。区分访客时用的是“网络地址 + 浏览器”加当天随机密钥的哈希值，第二天就无法再对应。
- 为防止滥用，服务器会在内存中短暂记录网络地址，用于频率限制。服务器的访问日志会记录网络地址、访问时间和访问的页面，用于安全和排查问题，14 天后自动删除。
- 你通过“反馈”发来的内容和你自愿留下的联系方式会被保存，只用于回复和改进产品。
- 查询 Rate My Professors 教授评分时，我们只发送教授的名字，不发送你的任何信息。
5. 数据保存在哪里、谁能看到
数据保存在腾讯云新加坡服务器上，只有 Takeable 的运营者可以访问，用于提供和维护服务。
- 邮件：登录链接、重设密码和确认邮箱的邮件，以及你开启的提醒，通过腾讯云邮件推送（中国广州）发送。腾讯云会处理你的邮箱地址和邮件内容，并按其政策保留发送记录。
- 备份：账号数据每天加密备份一次，只保留一段时间：服务器上 14 天，运营者的电脑上最多 45 天，所以备份不只存放在腾讯云上。
除了上面第 3 条所说的 AI 服务商、这里所说的邮件服务商、第 6 条里你在找课友中同意交换邮箱的同学，以及法律要求的情形，我们不会把你的数据提供给第三方。
6. 找课友（需要你单独同意）
找课友默认关闭，与注册账号和《使用条款》分开：只有登录后在找课友页面单独阅读并同意，才会开启。
- 分享给谁、分享什么：只有同样开启了找课友、且同一学期购物车里有同一门课的同学，能看到你填写的昵称和你们共同的课程；看不到你的邮箱，也看不到你的其他课程。没有开启的同学看不到任何人，也不会被任何人看到。
- 邮箱：只有在你们一方发出请求、另一方同意之后，双方才能看到彼此的账号邮箱。
- 我们保存：你是否开启、同意的版本和时间、你的昵称；每个请求的双方、学期、共同课程、发出和处理的时间及状态；你屏蔽的同学；举报内容。匹配使用的是你账号里保存的购物车。
- 如何撤回：随时可以在找课友页面关闭。关闭后你会立即从所有列表中消失，未处理的请求会被取消，对方的课友列表不再显示你的邮箱，你的昵称记录会被删除。已经交换过的邮箱可能已被对方记下，我们无法撤回。
- 保存期限：请求在处理（同意、拒绝或取消）90 天后删除，所属学期结束后也会删除。屏蔽记录在账号存在期间保留，以便持续保护你；举报和其他反馈一样，由运营者查看和处理。
- 这些信息不用于广告，也不会提供给 NYU 或任何其他人。同意内容更新时会请你重新同意；在你重新同意之前，你不会出现在任何人的列表里。
7. 你可以做什么
- 在 AI 助手的“历史对话”里随时删除单段对话或全部对话。
- 随时在找课友页面关闭找课友（见第 6 条）。
- 退出登录后，这台设备上的购物车和聊天记录会被清除，账号里的数据仍然保留。
- 在账号面板里随时删除账号：账号、购物车、课表、聊天记录、找课友记录、提醒和这个浏览器上传的文件会立即删除；已删除的数据在备份中到期后消失（最长 45 天）。你确认分享的课程大纲成绩构成不含你的身份，会继续保留。
- 如需导出账号数据，请通过页面底部的“反馈”联系我们，我们会在 7 天内处理。
8. 这份说明的更新
说明更新时会更改版本号；重要变化会在网站上提示，必要时请你重新确认。
Privacy notice (English)
We collect only what the service needs, never sell your data and never use it for ads. Takeable is not an NYU service, and nothing here is sent to NYU.
Without an account
Browsing, filters, the cart, timetables and the assistant need no account; your settings, cart, timetables and your 10 most recent chats stay in your own browser (localStorage). A transcript, Degree Progress Report or Albert paste is read on your device; only course codes and the requirements you still need are kept, in that browser, and nothing is uploaded.
With an account we keep
Your email and whether and when it was confirmed; a hash of your password (scrypt; we cannot see the password; an account that signs in by email link may have none); when you signed up and which version of the terms you agreed to; only a hash of each link we email for signing in, resetting a password or confirming an address, which dies once used or expired (15 minutes, 1 hour and 24 hours); if you set an enrollment reminder or turn on a seat alert, your enrollment time, the term, the plan you chose, your time zone and language, the classes you watch and a random unsubscribe token, only to email your confirmed address at those times (every such email has an unsubscribe link, and a log of what was sent is kept for up to 120 days to avoid sending twice); your cart and saved timetables, to sync them across devices; your chats with the assistant (the text, the courses its answers name, and the names and sizes of files you attached, not their contents), at most your 50 most recent conversations; and a sign-in cookie (tk_sess, 30 days, removed when you sign out).
When you use the assistant
Your question, the contents of files you attach (pictures, PDF, Word) and the course details the answer needs (such as your time zone, class hours, cart, major and completed courses) are sent through an API to the AI provider DeepSeek to write the answer. Please don't send sensitive personal information unrelated to course planning. Uploaded files stay on the server for 24 hours for the chat, then are deleted; the cookie that ties them to you (tk_vid, 30 days) holds no personal information. A syllabus you confirm sharing has its grading breakdown shown to other students without your identity (only a hash that cannot be traced back is kept); see section 5 of the terms.
Usage counts and feedback
We count, per day, visits, visitors and how often features are used (sign-ups, assistant, uploads, cart, timetables, and the steps of the planning flow, by interface language and once per browser), as numbers only. Visitors are told apart by a hash of address and browser with a key that changes every day, so they cannot be followed from one day to the next. Addresses are held briefly in memory for rate limits; the web server's access log records the address, time and page of each request for security and troubleshooting, and is deleted after 14 days. Feedback you send, and any contact you choose to leave, is kept to reply and to improve Takeable. Rate My Professors lookups send only instructors' names.
Where it is kept, who can see it
On Tencent Cloud servers in Singapore, reachable only by Takeable's operators to run the service. Sign-in links, password resets, address confirmations and any reminders you turn on are sent through Tencent Cloud's email service (Guangzhou, China), which handles your email address and the message and keeps delivery records under its own policy. Account data is backed up daily, encrypted, and the backups are kept for a limited time: 14 days on the server and up to 45 days on the operator's computer, so they are not on Tencent Cloud only. Apart from the AI provider and the mail provider above, classmates you agree to swap emails with in Find classmates (below), or where the law requires it, we do not hand your data to anyone.
Find classmates (a separate consent)
Find classmates is off by default and separate from signing up and the terms: it turns on only when you read and agree to it on its own page, signed in.
- Shared with whom, and what: only classmates who also turned it on and have the same course in the same term's cart see the nickname you choose and the courses you share; not your email and not your other courses. Students who did not turn it on see no one and are seen by no one.
- Email: your account email is shown to a classmate only after one of you sends a request and the other accepts.
- What we keep: whether it is on, the version and time of your consent, your nickname; each request's two students, term, shared courses, times and status; whom you blocked; reports. Matching uses the cart saved to your account.
- Withdrawing: turn it off at any time on its page. You disappear from every list at once, pending requests are cancelled, your email no longer shows in anyone's list, and your nickname record is deleted. An email already exchanged may have been noted by the other student and cannot be recalled.
- Retention: requests are deleted 90 days after they are decided (accepted, declined or cancelled), or when their term ends. Blocks are kept while the account exists, so they keep protecting you; reports are read by the operator like other feedback.
- None of it is used for ads or given to NYU or anyone else. When the consent text changes you are asked again, and until you agree you appear in no one's list.
Your choices
Delete one conversation or all of them at any time under the assistant's history. Turn Find classmates off at any time on its page. Signing out clears this device's cart and chats; your account keeps them. Delete your account at any time in the account panel: the account, cart, timetables, chats, Find classmates records, reminders and files uploaded from this browser go at once, and leave the backups as those expire (at most 45 days). A grading breakdown you confirmed sharing carries no identity and stays. To export your data, write to us through Feedback at the bottom of the page; we handle it within 7 days.
Updates
A new version of this notice gets a new version number; important changes are announced on the site, and you may be asked to agree again.