Safety and privacy安全与隐私
Safety and privacy by design从设计上保证安全和隐私
Six things built into the prototype. The Dak AI companion page has the full detail, including which outside service receives what and how long data is kept.
原型里已经做进去的六件事。达克 AI 伙伴页有完整说明,包括每个外部服务收到什么、资料保存多久。
Parental consent first先有家长同意
Until a parent or guardian agrees on the consent page, Dak gets no kindergarten notes and no conversation is saved. Each consent is recorded with the version of the consent text and the time. Parents can withdraw at any time, and saved conversations are then deleted.
家长或监护人在同意页同意之前,达克拿不到幼儿园的记录,对话也不保存。每一次同意都会记录同意书的版本和时间。家长可以随时撤回,已保存的对话随即删除。
Without consent, what a child says still passes through the speech and conversation services so that Dak can answer, so parents who do not agree are asked not to let the child use Dak.
没有同意时,孩子说的话仍要经过语音识别和对话服务,达克才能回答,所以同意页请不同意的家长不要让孩子使用达克。
While the prototype is being tested, server logs can contain conversation text, including from before consent, for up to 7 days; after withdrawal, copies in backups and logs are removed within 14 and 7 days.
原型测试期间,服务器日志里可能有对话文字(包括同意之前的),最多保留 7 天;撤回后,备份和日志里的副本分别在 14 天和 7 天内清除。
Fixed replies in an emergency紧急情况:固定回答
If a child's words match our emergency keyword lists for self-harm, abuse or strangers (in Mandarin, English and Malay), the AI model is skipped. Dak gives a fixed reply, written in advance, that sends the child to a parent or teacher now. Other worrying messages are answered by the conversation model under written child-safety rules.
孩子的话命中自伤、受虐待或陌生人的紧急关键词表(华语、英语、马来语各一套)时,不经过 AI 模型。达克说一句事先写好的固定回答,让孩子马上去找爸爸妈妈或老师。其他让人担心的话,由对话模型按照书面的儿童安全规则回答。
A 46-case red-team test46 条红队测试
46 messages a child might say, in three languages, run through the real conversation pipeline after every change to Dak's instructions, conversation model or speech recognition. Our rule is that no case may fail. Most recent full run, 21 October 2026: 43 passed, 3 judged weak, 0 failed.
46 条模拟孩子可能说的话,三种语言都有。每次改动达克的指令、对话模型或语音识别之后,都走真实的对话流程跑一遍,规则是不允许有任何一条不通过。最近一次全量测试(2026 年 10 月 21 日):43 条通过,3 条评为“偏弱”,0 条不通过。
No open-ended tools没有开放式工具
Dak cannot search the web, read the news, check the weather or play music, and has no way to buy anything. Asked about something it cannot know, such as today's news, it says it doesn't know instead of making it up.
达克不能上网搜索、念新闻、查天气或放音乐,也没有任何买东西的途径。问到它不可能知道的事,比如今天的新闻,它会说不知道,不会编。
The voice service gets Dak's words only语音服务只收到达克的话
The voice service receives only Dak's own short reply sentences, never a recording of the child. A reply may include the child's nickname or repeat something the child said. The recording of what the child says goes only to speech recognition (Groq, in the United States), and our server does not keep it.
语音合成服务只收到达克自己的简短回答句子,从来收不到孩子的录音。回答里可能叫出孩子的昵称,或者重复孩子说过的话。孩子说话的录音只发去做语音识别(美国的 Groq),我们的服务器不保存。
The AI voice is disclosed说明声音是 AI 合成的
Dak's voice is made by a computer, not a real person. In the prototype the parent page says so, and in its first conversation Dak tells the child it is a talking toy duck whose voice is made by a computer. Before the pilot, the packaging will say so too.
达克的声音是电脑合成的,不是真人。在原型里,家长页已经写明;达克第一次聊天时也会告诉孩子,自己是会说话的玩具鸭,声音是电脑做出来的。试点之前,包装上也会写明。