中文
本政策适用于 Chat Diary（日记）3.0 及相关服务，说明记录日常、账号同步、AI 辅助和购买会员时的信息处理方式。发布者为 FUJUAN；隐私与支持邮箱见页末。
1. 保存在设备上的内容
文字记录与日记保存在本机。照片、视频、媒体元数据、输入草稿与应用偏好也保存在设备上。当前版本不会把照片或视频附件文件上传到我们的云同步或 AI 服务；导出的文字可能包含附件文件名。您自行导出或分享后产生的副本由您选择的接收方处理。
2. 账号与云同步
Supabase 提供身份验证、数据库与服务端函数。账号资料可能包括用户名、可选的找回邮箱、显示名称和账号标识符。使用登录后的云同步时，文字记录、日记、周报、天气快照及账号关联信息会在服务端处理和保存。已有访客记录的导入需要在应用内单独确认。普通本地记录不要求注册账号。
3. AI 辅助与您的授权
只有在您主动使用 AI 辅助、日记生成或周报，并明确同意 AI 数据分享后，相关文字才会经 Supabase 函数发送给 DeepSeek。发送范围按任务而定，可能包括相关对话、记录、日记正文、日期和附件文件名。普通本地记录不会自动发起 AI 请求；照片和视频文件不会发送给 AI。访客使用 AI 辅助会建立匿名服务会话和账号标识符。
您可以拒绝 AI 授权，继续使用普通记录；也可以在应用设置中撤回授权，停止后续 AI 请求，直至重新同意。撤回不能追回已发送的信息。AI 输出可能不准确，不构成医疗、法律、财务或心理健康建议。第三方处理适用其服务与隐私条款；我们不承诺第三方零保留、不用于训练或所有 AI 处理均在本机完成。请仅提交您愿意用于该请求的内容。
4. 可选的系统权限
拍摄或添加媒体时使用相机和照片权限。语音输入使用麦克风及系统语音识别，并要求相应设备与语言支持设备端识别。使用天气功能时会请求定位，通过 Apple WeatherKit 与地理编码获取天气和地点信息；云同步的天气快照可能包含城市等粗略位置，不保存原始定位坐标。您可以在 iOS 设置中撤回权限，相关功能可能因此不可用。
5. 购买与服务运行信息
Apple 通过 App Store 处理付款。我们的购买验证服务处理签名交易信息与账号标识符，以验证会员、恢复购买、处理退款或权益撤销；我们不接收银行卡信息。使用次数、身份验证事件、必要请求元数据与错误日志用于额度限制、安全及故障排查。删除账号不会自动取消 Apple 订阅，请在系统的订阅管理中处理。
6. 日记隐私锁
您可设置独立的六位应用密码，并在设备支持时使用系统身份验证。加盐的密码校验值保存在仅限本设备的钥匙串中，密码与校验值不上传服务器。应用不接收 Face ID 或 Touch ID 生物特征模板。隐私锁限制应用访问并隐藏后台预览，不代表日记文件或云同步采用端到端加密，也不会删除已导出的副本。
7. 查看、导出与删除
您可以查看、编辑记录和日记，导出选定内容、退出登录，或在“设置 → 删除账号”中发起账号删除。账号删除会移除关联的账号资料、云端记录、日记、周报、天气快照、额度及会员权益记录，法律或安全要求保留的信息除外；应用也会按确认流程清理该账号的本地记录、媒体和草稿。外部导出副本不会自动删除。无法使用应用内删除功能时，可通过页末邮箱联系我们；核实请求时请勿发送密码或不必要的日记内容。
8. 保存期限与安全
本地内容保留至您删除或应用删除流程清除。云端信息在提供账号、同步和相关服务所需期间保留，受您的删除请求及必要法律、安全义务约束。我们使用平台安全能力及合理技术措施保护数据，但无法保证任何传输或存储绝对安全。对于需依法保留、备份或服务商日志中的信息，其处理受相应义务和服务商规则约束。
9. 信息共享与跨地区处理
我们不出售日记内容，也不将其用于广告跟踪。服务商接收提供上述功能所需的信息；法律要求或保护服务安全时可能依法披露必要信息。处理地点取决于服务商及服务配置，可能位于您所在国家或地区以外。第三方保留和处理条款同样适用；删除 Chat Diary 中的数据不等于自动删除服务商安全日志或您在应用外分享的副本。
10. 儿童与政策更新
Chat Diary 并非专为儿童设计。若您认为儿童在未经适当许可的情况下提供了信息，请联系我们。我们可能随功能或要求变化更新本政策，重大变化将在应用内或本页说明，并更新生效日期。
11. 联系与支持
隐私问题、应用支持、账号或数据删除请求，请联系 zhoule630091655@gmail.com。
English
Publisher: FUJUAN. Effective October 31, 2026.
This policy describes how Chat Diary handles information when you record your day, use an account, request AI assistance, or purchase VIP access.
What stays on your device
Notes and diary entries are saved locally. Photo and video attachments, their metadata, input drafts, and app preferences are stored on the device. The current version does not upload photo or video attachment files to our cloud sync or AI service. Exported text can include attachment filenames.
Accounts and sync
Supabase provides authentication, database storage, and server functions. Account information may include a username, an optional recovery email, a display name, and an account identifier. When you use cloud sync, text records, diary entries, weather snapshots, and the information needed to associate them with your account are processed on our servers. Existing local content is subject to the in-app import confirmation. Local recording is available without an account.
AI assistance
After you explicitly allow AI data sharing in the app, when you request an AI reply, diary, or weekly review, the text and context needed for that request are sent through our Supabase function to DeepSeek. Ordinary local recording does not automatically start an AI request. You can withdraw permission in Settings; this stops future AI requests until you grant permission again, but does not recall data already sent. Guest AI assistance creates an anonymous service session and account identifier. The data sent depends on the task and can include the relevant conversation, records, diary text, dates, and attachment filenames. AI output may be inaccurate. It is not medical, legal, financial, or psychological advice.
Third-party services process requests under their own privacy terms. We do not promise that AI processing is entirely on-device, end-to-end encrypted, or subject to a retention policy that we have not verified. Avoid entering information you do not want processed by these services.
Optional device permissions
Camera and photo access are used when you add media. Microphone and speech recognition access support voice input on devices and languages that support on-device recognition. Location is requested when you choose to add weather; Apple WeatherKit and reverse geocoding provide local weather and place information. You can change these permissions in iOS Settings. Weather snapshots may be synced when signed in.
Purchases and service operation
Apple handles payment through the App Store. Our purchase verification service processes signed transaction information and account identifiers to determine VIP status, restore purchases, and handle refunds or revocations. We do not receive your payment card details. Usage counters, authentication events, request metadata, and necessary error logs support quotas, security, and troubleshooting.
Privacy lock
You may set a separate six-digit app passcode and use device authentication where available. A salted passcode verifier is stored in the device-only Keychain; the passcode and verifier are not sent to our servers. The lock restricts access to the app and hides background previews. It does not add end-to-end encryption to diary files or revoke copies you have exported. Device authentication is handled by the system; the app does not receive biometric templates.
Your choices and deletion
You can review and edit your records, export selected records and diaries, sign out, and request account deletion in Settings → Delete Account. Account deletion removes the associated account and cloud records, diaries, weather snapshots, usage and entitlement records, except information that must be retained for legal or security reasons. Deletion also clears the app's local records and media according to the in-app confirmation. Exported files and copies outside the app are not automatically removed.
Security and retention
We use platform security and reasonable technical measures to protect information. No storage or transmission method is absolutely secure. Local content remains until removed by you or the app's deletion flow. Cloud information is retained to provide the requested account and sync services, subject to deletion requests and necessary legal or security obligations.
Sharing and international processing
We do not sell diary content or use it for advertising tracking. Service providers receive information needed to deliver the functions described above. We may disclose information when required by law or to protect service security. Processing locations depend on the provider and service configuration and may differ from your country or region. Provider retention and processing terms also apply; deleting data from Chat Diary does not automatically erase provider security logs or copies you shared outside the app.
Children and policy changes
Chat Diary is not specifically directed to children. If you believe a child has provided information without appropriate permission, contact us. This policy may be updated as functionality or requirements change; material changes will be reflected in the app or on this page.
Contact
For privacy questions, app support, or account and data deletion requests, contact zhoule630091655@gmail.com.