2. 本机记录与 iCloud
你输入的物品名称、购价、日期、出售金额、分类、备注，以及资产、负债、待办和对话等记录，存放在设备上的 App 数据库中。iCloud 可用时，App 使用 Apple CloudKit 将支持的记录同步到你 Apple 账户的私有数据库，方便在你的设备间使用。
iCloud 由 Apple 运营，受你的 Apple 账户与 iCloud 设置影响。卸载 App 不保证已同步的 iCloud 数据被删除。删除某条记录可在同步成功后传播到其他设备；处理隐私请求时，我们会说明开发者可访问或无法访问的数据范围。
3. 可选的云端 AI 助手
当你主动发送 AI 请求时，App 会将当前提示、部分近期对话和相关账本摘要经 Cloudflare 中转发送到火山引擎的豆包模型服务。摘要可能包含物品与账户名称、金额、币种、资产及负债信息、待办内容等，以生成与你的记录有关的回答。
这些内容离开设备并由云端服务处理。手动维护物品账本不需要调用 AI。云端服务可能在中国境内或其他服务区域处理请求；网络基础设施可能在其他地区传输请求。你应在发送前确认愿意分享这些内容。
AI 回答及草稿可能出错；请在保存记录或作出决定前核对。开发者的中转实现没有写入对话内容到自建数据库的逻辑，但服务商及网络平台可能按其政策与配置保留服务、安全或错误日志。我们不对第三方处理作出“零保留”或“端到端加密”的承诺。
4. 语音与设备权限
只有在你使用语音功能时，App 才请求麦克风访问。你可以拒绝权限并继续用文字或手动记录。录音期间，音频通过 Cloudflare 中转发送到火山引擎语音识别服务，识别后的文字可用于你的对话。
App 不为语音识别建立持久音频文件库。音频在云端处理，第三方的服务与安全日志受其政策及部署配置约束。你可以随时在 iOS 设置中关闭麦克风权限。
启用 Face ID 或 Touch ID 保护时，身份校验由系统完成；App 不取得你的指纹或面部生物特征模板。
5. 订阅与支持
购买和恢复 KeepCost Pro 由 Apple StoreKit 处理。App 读取订阅产品和交易权限状态来开启 Pro 功能，不接收你的完整银行卡信息。如果你发送支持邮件，开发者会收到你提供的邮箱地址、邮件内容以及自愿附带的诊断信息，用于处理请求。
请勿在支持邮件中发送密码、完整支付信息或无关的敏感财务资料。只提供定位问题所需的信息；如需删除支持邮件中的个人信息，可以通过同一邮箱提出请求。
6. 本网站、日志与跟踪
本官网由 Cloudflare Pages 托管。网站没有部署广告、第三方分析脚本或分析 Cookie；语言由链接参数与浏览器语言确定，不写入 Cookie。示例计算器只在浏览器内运算，不上传或保存输入。
访问网站或云端服务时，Cloudflare 及服务商可能处理 IP 地址、请求时间、设备或浏览器信息等必要的网络元数据。中转可能记录连接状态和错误。我们不使用这些信息进行广告跟踪，也不售卖你的账本信息。
7. 保存、删除与您的选择
本机与 iCloud 记录由你管理，保留到你删除或相应存储被清除。你可编辑或删除记录，导出物品 CSV，选择不用 AI，撤销麦克风权限，并通过 Apple 管理订阅。取消订阅本身不会删除记录，也不会撤回此前发送到第三方的请求。
第三方处理的留存由提供商政策和实际服务配置决定；如果你有访问、纠正或删除请求，请联系开发者，我们会核实并协助处理我们可控制的信息。支持邮件按处理请求所需的时间保存，你可请求删除。
1. Scope and contact
This policy describes information handling in the KeepCost (物日记) app and this website. You do not need a developer account to maintain a manual ledger. Privacy contact: shenghao.pm@gmail.com.
2. Device records and iCloud
Item names, purchase prices, dates, sale proceeds, categories and notes, as well as assets, debts, tasks and conversations you enter, are stored in the app database on your device. When iCloud is available, supported records sync through Apple CloudKit to your Apple account’s private database for use across your devices.
Apple operates iCloud, which depends on your Apple account and iCloud settings. Uninstalling the app does not guarantee removal of synced iCloud records. Deleting a record can propagate to other devices after a successful sync. When handling privacy requests, we explain which data the developer can or cannot access.
3. Optional cloud AI assistant
When you send an AI request, the app sends your prompt, some recent conversation history and relevant ledger summaries through a Cloudflare relay to the Doubao model service from Volcano Engine. Summaries may include item and account names, amounts, currencies, asset and debt information, and task content, to provide a response relevant to your records.
This content leaves your device and is processed in the cloud. Maintaining a manual item ledger does not require an AI request. Cloud services may process requests in China or other service regions, and network infrastructure may carry requests through other regions. Decide whether you are comfortable sharing this content before sending it.
AI responses and drafts can be incorrect; review them before saving records or making decisions. The developer’s relay implementation does not write conversation content to a developer-operated database. Service providers and network platforms may retain service, security or error logs according to their policies and configuration. We do not promise zero retention or end-to-end encryption for third-party processing.
4. Voice and device permissions
The app requests microphone access when you use voice features. You may decline and continue with text or manual entry. While recording, audio is sent through a Cloudflare relay to Volcano Engine’s speech recognition service. The resulting transcript can be used in your conversation.
The app does not build a persistent library of audio files for speech recognition. Audio is processed in the cloud; third-party service and security logs are subject to provider policies and deployment configuration. You can revoke microphone permission in iOS Settings.
When Face ID or Touch ID protection is enabled, authentication is handled by the operating system. The app does not receive your fingerprint or facial biometric template.
5. Purchases and support
Apple StoreKit handles purchases and restoration of KeepCost Pro. The app reads subscription products and transaction entitlement status to enable Pro features. It does not receive your full payment card details. If you email support, the developer receives the email address, message and diagnostic information you choose to provide, to address your request.
Do not send passwords, full payment information or unrelated sensitive financial details in support emails. Share only what is needed to understand the issue. You can request deletion of personal information in support emails through the same contact address.
6. Website, logs and tracking
Cloudflare Pages hosts this website. The website has no advertising, third-party analytics scripts or analytics cookies. Language is selected using URL parameters and browser language without writing cookies. The example calculator runs in your browser; its inputs are not saved or sent.
Cloudflare and service providers may process necessary network metadata such as IP addresses, request times, and device or browser information when you visit the website or use cloud services. The relay may log connection status and errors. We do not use this information for advertising tracking or sell your ledger information.
7. Retention, deletion and choices
You manage device and iCloud records, which remain until you delete them or the relevant storage is cleared. You can edit or delete records, export your items as CSV, choose not to use AI, revoke microphone permission, and manage subscriptions through Apple. Cancelling a subscription does not itself delete records or retract requests already sent to third parties.
Retention by third parties depends on provider policies and actual service configuration. Contact the developer with access, correction or deletion requests; we will review your request and help with information under our control. Support emails are retained as needed to address the request, and you can request deletion.
