Privacy Policy隐私政策

When you use the basic bookkeeping features, the App processes and stores the following information locally on your device: 当您使用基础记账功能时，本应用会在您的设备本地处理和存储以下信息：

• Ledger, account, transaction, budget, category, and statistical bookkeeping data账本、账户、交易、预算、分类、统计结果等记账数据
• Notes, tags, currency, time, amount, and other information you enter您填写的备注、标签、币种、时间、金额等信息
• Transaction attachment images that you proactively add您主动添加的交易附件图片
• App preference settings such as language, currency, sync switches, and AI settings应用偏好设置，例如语言、货币、同步开关、AI 设置项等

We use this information to complete bookkeeping, querying, statistics, budget management, data display, saving your personalized settings, and supporting data recovery, import/export, and inter-page linkage. 处理目的包括：完成记账、查询、统计、预算管理和数据展示，保存您的个性化设置，并支持数据恢复、导入导出和跨页面联动。

Unless otherwise stated in this Policy, the above data is stored locally on your device by default. 除本政策另有说明外，上述数据默认保存在您的设备本地。

If you attach receipts, invoices, or other images to a transaction: 如果您在记账时添加票据、收据或其他图片附件：

• The original images are stored locally on your device原始图片会保存在您的设备本地
• The App may generate thumbnails or compressed image data for display and synchronization为便于展示和同步，本应用可能生成缩略图或压缩后的图片数据
• Local image files are stored using system-supported file protection capabilities本地图片文件会采用系统支持的文件保护能力进行存储

If you do not proactively add attachments, the App will not access or process related image content. 如果您未主动添加附件，本应用不会访问或处理您的相关图片内容。

If you enable iCloud sync, the App uses Apple CloudKit to synchronize certain data to your own iCloud account so that you can access it across devices. Typically synchronized content includes: 如果您主动开启 iCloud 云同步功能，本应用会通过 Apple CloudKit 将部分数据同步到您自己的 iCloud 账户，以支持多设备访问。同步内容通常包括：

• Structured bookkeeping data such as ledgers, accounts, transactions, budgets, and categories账本、账户、交易、预算、分类等结构化记账数据
• Attachment thumbnails or compressed attachment data needed for multi-device display为实现多设备展示所需的附件缩略图或压缩后的附件数据

Key characteristics of this feature are as follows: 相关特点如下：

• This feature is provided by Apple's iCloud / CloudKit services该功能由 Apple 的 iCloud/CloudKit 服务提供
• Synchronized data enters your own iCloud container同步数据进入的是您自己的 iCloud 容器
• We do not directly read your iCloud account password because you enable sync我们不会因为您开启 iCloud 同步而直接读取您的 iCloud 账户密码
• Apple processes synchronization data according to its own rulesApple 会按照其自身规则处理同步过程中的数据

If you turn off iCloud sync, new synchronization will stop. Data already stored in your iCloud usually needs to be managed or deleted by you using the methods provided by Apple. 如果您关闭 iCloud 同步，后续将不再继续同步；已经保存在您 iCloud 中的数据，通常需由您通过 Apple 提供的方式自行管理或删除。

If you proactively use the official AI Pro service for bill recognition, receipt parsing, or structured posting, we process information related to that request, including: 如果您主动使用“AI Pro 服务（官方）”进行账单识别、票据解析或结构化入账，我们会处理与该次请求相关的信息，包括：

• Bill text, OCR text, or speech-to-text content that you enter or upload您输入或上传的账单文本、OCR 文本、语音转写文本
• Bill images or compressed image data that you submit for recognition您主动提交用于识别的账单图片或压缩后的图片数据
• Prompt content, template information, and model routing parameters needed to complete the recognition为完成识别所需的提示词内容、模板信息、模型路由参数
• Client identifier client_id客户端标识 client_id
• Necessary fields related to quota, entitlements, risk control, and request source与额度、权益、风控、请求来源相关的必要字段

We process this information to provide AI bill recognition and structured output, determine available models and entitlement status, perform billing, rate limiting, abuse prevention and service security, and conduct necessary troubleshooting and service stability maintenance. 处理目的包括：提供 AI 账单识别与结构化返回结果，判断可用模型、额度和权益状态，进行计费、限流、反滥用和服务安全保障，以及进行必要的故障排查与服务稳定性维护。

In this mode, the typical data-processing chain is your device, our server-side interface, and third-party large-model or AI service providers integrated by us. 在该模式下，相关数据处理链路通常为：您的设备、我们的服务端接口，以及我们接入的第三方大模型或 AI 服务商。

Based on the current project configuration, such third-party model providers may include but are not limited to DeepSeek, Alibaba Tongyi Qianwen / DashScope, Tencent Hunyuan, Zhipu AI, and other compatible providers added in the future. 根据当前项目配置，第三方模型服务商可能包括但不限于：DeepSeek、阿里云通义千问 / DashScope、腾讯混元、智谱 AI，以及其他后续接入的兼容模型服务商。

To avoid unnecessary disclosure of sensitive information, please do not upload highly sensitive information unrelated to bookkeeping, such as full ID numbers, full bank card numbers, medical information, precise home addresses, or other content beyond what is necessary for bookkeeping. 为避免敏感信息不必要扩散，请勿上传与记账无关的高敏感信息，例如完整身份证号码、银行卡完整卡号、医疗信息、精确住址或其他超出记账目的所必需的信息。

If you choose the "Custom (OpenAI-Compatible)" mode: 如果您主动选择“自定义（OpenAI 兼容）”模式：

• The Base URL, model name, custom prompts, and similar settings you enter are stored locally on your device您填写的 Base URL、模型名称、自定义提示词等配置会保存在您的设备本地
• Your API key is stored only in the current device's system Keychain您填写的 API Key 仅保存在当前设备的系统钥匙串（Keychain）中
• The App does not upload that API key to our own servers本应用不会将该 API Key 上传到我们的自有服务器

Please note that when you actually submit a recognition request, related bill text, images, or prompts are sent directly to the third-party AI provider that you configure yourself. How that provider handles your data depends on its privacy policy, terms of service, and deployment region. We cannot control, guarantee, or replace that third party's data-processing behavior. 但请注意：当您实际发起识别请求时，相关账单文本、图片或提示词会直接发送到您自行配置的第三方 AI 服务商。该第三方如何处理您的数据，取决于您所选择的服务商及其隐私政策、服务条款和部署区域。我们无法控制、保证或替代您所选第三方服务商的数据处理行为。

Before using this mode, please carefully review the provider's compliance, security, and data-processing rules. 请您在使用该模式前，务必自行审查第三方服务商的合规性、安全性和数据处理规则。

If you use voice input or voice bookkeeping features, the App requests microphone and speech recognition permissions and uses Apple's speech capabilities to record and transcribe your speech. 如果您使用语音输入或语音记账相关能力，本应用会请求麦克风权限和语音识别权限，并通过 Apple 的语音能力完成录音与转写。

During this process, your audio may be captured by the system for speech recognition, transcription may happen on-device or through Apple's speech recognition services depending on system capabilities, language, and network conditions, and the App receives and processes the transcribed text result. 在该过程中：您的语音音频会被系统采集用于语音识别；转写可能由设备本地能力完成，也可能由 Apple 提供的语音识别服务完成，具体取决于系统能力、语言和网络环境；本应用接收并处理的是转写后的文字结果。

If you later use that transcribed text for AI recognition, it will further enter either the official AI service flow or the custom AI service flow based on the mode you choose. 如果您后续基于该转写文本继续使用 AI 识别，则该文本还会按照您所选择的 AI 模式，进一步进入“官方 AI 服务”或“自定义 AI 服务”的对应链路。

If you purchase, restore, or verify VIP or AI Pro entitlements, the App processes the following information related to orders and subscriptions: 如果您购买、恢复或校验会员权益、AI Pro 权益，本应用会处理以下与订单和订阅相关的信息：

• client_idclient_id
• Product identifier product_id商品标识 product_id
• Transaction identifier transaction_id交易标识 transaction_id
• Original transaction identifier original_transaction_id原始交易标识 original_transaction_id
• App bundle identifier app_bundle_id应用包名 app_bundle_id
• Transaction signature information returned by Apple or provided by the device, such as signed_transaction_info, where applicableApple 返回或设备携带的交易签名信息 signed_transaction_info（如适用）

We process this information to verify successful purchases or subscriptions, bind and synchronize entitlements, manage AI usage quotas, and handle restore purchases, exceptional order verification, and dispute investigation. 处理目的包括：校验您是否已成功购买或订阅，绑定和同步会员、AI Pro 权益，管理 AI 使用额度，以及处理恢复购买、异常订单核验和争议排查。

This information flows among your device, Apple StoreKit services, and our servers. We do not obtain your Apple ID password or payment card information. 上述信息会在您的设备、Apple StoreKit 服务和我们的服务端之间流转。我们不会获取您的 Apple ID 密码或支付卡信息。

If you proactively use import or export features: 如果您主动使用导入、导出功能：

• The App reads only the files that you proactively choose to import本应用会读取您主动选择的导入文件
• The App generates and exports files such as CSV or Excel on your device本应用会在您的设备上生成并导出 CSV、Excel 等格式文件
• Exported files may contain bookkeeping information such as transactions, notes, categories, amounts, accounts, and currencies导出的文件内容可能包含您的交易、备注、分类、金额、账户、币种等记账信息

These processes are usually completed locally on your device. You decide how exported files are stored, shared, or deleted. 此类处理通常在您的设备本地完成。导出后的文件将由您自行决定存储、分享或删除。

If you enable an app lock, gesture lock, or Face ID: 如果您主动开启应用锁、手势锁或 Face ID：

• Passwords or gesture patterns are not uploaded to our servers in plain text密码或手势不会以明文形式上传到我们的服务器
• Relevant verification data is stored in the local system Keychain in the form of hashes or key material相关校验信息会以哈希或密钥材料的形式保存在本地系统钥匙串中
• Face ID authentication is handled by Apple's biometric framework, and the App does not collect, store, or access your raw facial biometric dataFace ID 认证由 Apple 的生物识别框架完成，本应用不会采集、存储或接触您的面容原始生物特征数据

If you contact us by email or other means, we may process information that you proactively provide, such as your email address, issue description, and screenshots, logs, or order information that you voluntarily attach. 如果您通过邮件或其他方式联系我们，我们可能会处理您主动提供的信息，例如：邮箱地址、问题描述，以及您主动附带的截图、日志或订单信息。

We use such information to respond to inquiries, troubleshoot problems, handle complaints, suggestions, and after-sales support, and improve product experience and service quality. 处理目的包括：回复咨询与排查问题，处理投诉、建议和售后支持，以及改进产品体验和服务质量。

In the following scenarios, related data is processed through Apple-provided systems or cloud services: iCloud / CloudKit synchronization, StoreKit purchase / restore / order verification, Face ID authentication, and speech recognition capabilities. Apple's own privacy policies and terms govern how Apple processes such data. 在以下场景中，相关数据会由 Apple 提供的系统或云服务处理：iCloud/CloudKit 云同步、StoreKit 购买、恢复购买、订单校验、Face ID 身份认证以及语音识别能力。Apple 如何处理相关数据，适用其自身的隐私政策和服务条款。

When you proactively use the official AI bill recognition service, we may forward necessary request data to third-party model providers to complete the request. This usually includes bill text, OCR text, speech-to-text content, bill images or compressed images, and necessary prompts and model parameters. 当您主动使用官方 AI 账单识别服务时，为完成识别请求，我们可能将必要的请求数据转发给第三方模型服务商处理。这些信息通常包括：账单文本、OCR 文本、语音转写文本、账单图片或压缩后的图片数据，以及必要的提示词与模型参数。

We try to transmit data under the principle of minimum necessity, but AI services require the relevant content to be processed by the model before a result can be returned. 我们会尽量按照最小必要原则传输数据，但 AI 服务本身决定了相关内容需要被模型处理后才能返回结果。

When you use the "Custom (OpenAI-Compatible)" mode, related data is sent directly to the third-party service address you specify. In this scenario, you should independently confirm the provider entity, where the service is located, whether data may be transferred across borders, the provider's retention rules, and whether it may use the data for model training or other purposes. 当您使用“自定义（OpenAI 兼容）”模式时，相关数据会直接发往您指定的第三方服务地址。该场景下，您应自行确认：服务商主体、服务所在地区、数据是否会跨境传输、数据保留规则，以及服务商是否会将数据用于模型训练或其他用途。

Where required by laws and regulations, by lawful requests from judicial or administrative authorities, or when necessary to protect the personal or property safety and legitimate rights and interests of us, other users, or the public, we may provide necessary information in accordance with the law. 在法律法规要求、司法或行政机关依法要求，或为保护我们、其他用户或公众的人身财产安全、合法权益所必需时，我们可能依法提供必要信息。

Different categories of data are stored in different places depending on the feature scenario: 不同数据会根据功能场景存储于不同位置：

• Local bookkeeping data, app settings, and certain security information: stored locally on your device本地记账数据、应用配置、部分安全信息：存储于您的设备本地
• Sensitive local credentials such as API keys and password hashes: stored in the device system KeychainAPI Key、密码哈希等敏感本地凭据：存储于设备系统钥匙串
• iCloud sync data: stored in the CloudKit container associated with your Apple iCloud accountiCloud 同步数据：存储于您的 Apple iCloud 账户对应的 CloudKit 容器
• Official AI request data, entitlements, and quota information: may be stored in our server environment or the service environments of third-party model providers官方 AI 请求相关数据、权益和额度信息：可能存储于我们的服务端或第三方模型服务商的服务环境中
• Custom AI request data: stored in the service environment of the third-party provider you select自定义 AI 请求相关数据：存储于您所选第三方服务商的服务环境中

If you use Apple-provided iCloud, speech recognition, or other cloud services, third-party model providers in the official AI service flow, or third-party AI providers that you configure yourself, related data may be transferred outside your country or region. We try to process such data under the principle of minimum necessity. For server deployment locations, transfer paths, and localization arrangements of third-party providers, please refer to the relevant third-party disclosures. 如果您使用以下功能，相关数据存在传输至您所在国家或地区之外的可能：Apple 提供的 iCloud、语音识别或其他云服务；您使用的官方 AI 服务链路中的第三方模型服务商；您自行配置的第三方 AI 服务商。我们会尽量按照最小必要原则处理相关数据。对于第三方服务商的服务器部署地点、跨境路径和本地化安排，请以相应第三方的说明为准。

We retain related information for the shortest period necessary to achieve the stated purposes, unless laws and regulations require otherwise. In general: 我们按照实现处理目的所必需的最短期限保存相关信息，法律法规另有要求的除外。一般而言：

• Local bookkeeping data: retained until you proactively delete it, clear app data, or uninstall the App本地记账数据：保存至您主动删除、清空应用内数据或卸载应用时为止
• iCloud sync data: retained until you delete the corresponding data within the Apple ecosystem or disable the related sync capabilityiCloud 同步数据：保存至您在 Apple 生态内删除相应数据或关闭相关同步能力时为止
• Official AI recognition request content: generally retained only for the period necessary to complete recognition, quota accounting, service security, and required troubleshooting官方 AI 识别请求内容：通常仅在完成识别、额度核算、服务安全和必要故障排查所需期限内保留
• Entitlement, order, quota, and risk-control records: retained during the entitlement validity period and for a reasonable period needed for dispute handling, audit, and compliance权益、订单、额度和风控记录：在权益有效期内及处理争议、审计、合规所需的合理期限内保留
• Customer service communication records: retained until a reasonable period after the issue is resolved, or deleted when the legally required retention period expires客服沟通记录：保存至问题处理完成后的合理期限内，或法律法规要求的期限届满时删除

You can directly view, modify, and supplement your ledgers, transactions, categories, budgets, and related settings within the App. 您可以直接在本应用内查看、修改、补充您的账本、交易、分类、预算和相关设置。

You may delete related data using the App's delete, clear, reset, or sync-disable functions. Please note that local data usually cannot be recovered after deletion, deletion may sync to other devices if iCloud sync is enabled, and for data already sent to third-party AI providers, you may need to apply for deletion through the channels provided by those providers. 您可以通过本应用内的删除、清空、重置、关闭同步等功能删除相关数据。请注意：删除本地数据后通常无法恢复；如已开启 iCloud 同步，删除操作可能同步影响其他设备上的同一数据；对于已经发送至第三方 AI 服务商的数据，您还可能需要按照第三方服务商提供的渠道另行申请删除。

You may withdraw permissions for the camera, photo library, microphone, speech recognition, Face ID, and similar capabilities in iOS Settings. After withdrawal, the corresponding features may no longer function. 您可以在 iOS 系统设置中撤回相机、相册、麦克风、语音识别、Face ID 等权限授权。撤回后，相应功能可能无法继续使用。

If you purchase an auto-renewing subscription, you may cancel renewal, review billing information, or restore purchases through your Apple ID subscription management interface. 如果您购买了自动续费订阅，您可以通过 Apple ID 的订阅管理界面取消续订、查看账单或恢复购买。

You may control data flow by choosing not to enable iCloud sync, not to use the official AI recognition feature, not to use the custom AI feature, or by deleting your custom API configuration or locally exported files. 您可以通过以下方式控制数据流向：不开启 iCloud 云同步、不使用官方 AI 识别功能、不使用自定义 AI 功能，或删除自定义 API 配置或本地导出文件。

If you wish to request access, copying, correction, deletion, withdrawal of consent, complaints, or reports related to personal information processing, you may contact us using the details at the end of this page. We will respond and handle your request within a reasonable period. 如您希望行使查阅、复制、更正、删除、撤回同意、注销相关处理方式或提出投诉、举报，可通过文末联系方式联系我们。我们将在合理期限内回复并处理。