1. 本政策适用范围

本政策适用于“攒记”（英文名称 SavingNotes）iOS 与 iPadOS App，说明 App 如何处理账单、攒钱目标、共享账本、快捷指令识别结果及相关设置。

2. App 处理的数据

根据你使用的功能，App 可能处理以下由你主动输入或生成的数据：

• 账单信息，例如金额、收入或支出类型、分类、商户或来源、日期及备注；
• 攒钱目标，例如目标名称、目标金额、当前已攒金额、计划天数和阶梯方案；
• 重复记录、提醒时间、币种、汇率和界面偏好等设置；
• 你主动发送给 App 的快捷指令 OCR 文本，以及由该文本识别出的账单信息；
• 共享账本名称、共享记录、共享目标及 CloudKit 提供的参与者显示信息。

App 不要求你创建独立账号，也不会索取 Apple 账户密码。

3. 本机与 iCloud 存储

数据首先由 App 保存在你的设备上。登录 iCloud 且服务可用时，账单、目标等数据 可通过 Apple CloudKit 保存至你的 iCloud 私有数据库，用于同一 iCloud 账户下的 设备同步。我们无法通过自建服务器读取你的私人 CloudKit 数据。

主题、语言、通知和部分偏好设置可能仅保存在当前设备，不一定随 iCloud 同步。 如果 iCloud 不可用，App 可能临时使用本地存储并向你显示提示。

4. 共享账本

共享账本使用 Apple CloudKit Sharing。只有当你主动创建或选择共享账本并发送邀请后， 接受邀请的参与者才能查看相应的共享记录和目标。具有写入权限的参与者可以添加或更新 共享内容，这些变化会同步给其他参与者。

请仅邀请你信任的人，并避免在商户、来源、目标名称或备注中填写不必要的敏感信息。 创建者可以停止共享，参与者可以退出共享。停止共享不会自动删除创建者保留的私人副本。

5. 快捷指令与文字识别

快捷记账可由 Apple“快捷指令”App 截图并提取文字，再把提取结果传给攒记。 攒记不会在后台自行查看你的屏幕。识别可能不完全准确；半自动模式会让你确认后保存， 全自动模式会直接保存识别结果。你应根据需要检查并修正记录。

6. 系统服务与第三方

App 使用以下 Apple 系统服务来提供功能：

• iCloud 与 CloudKit：私人数据同步和受邀账本共享；
• 快捷指令与系统 OCR：由用户主动触发的文字提取和数据传递；
• 本地通知：在设备上提供用户设置的记账提醒；
• 系统分享面板：发送由用户选择的共享邀请。

这些服务由 Apple 提供，并同时受 Apple 隐私政策 约束。App 当前不包含第三方广告或行为分析 SDK。

7. 数据用途与披露

数据仅用于提供记账、统计、目标管理、设备同步和用户主动选择的共享功能。 我们不会出售或出租你的数据，不会将账本数据用于广告画像，也不会进行跨 App 追踪。 除你主动邀请的共享成员及 Apple 为提供系统服务所进行的处理外，我们不会主动向其他人披露账本数据。

8. 保留、删除与控制

• 你可以在 App 中删除单条账单、目标或账本；
• 你可以停止共享或退出受邀账本；
• 你可以在“设置 → 数据管理”中清空所有数据；
• 删除操作在 iCloud 可用时会同步至 CloudKit 和同一账户的其他设备；
• 仅卸载 App 不一定删除保存在 iCloud 中的数据。若需完整清除，请先使用 App 内清空功能，并可在系统 iCloud 存储设置中管理相关数据。

攒记不创建独立用户账号，因此不存在由我们维护的账号记录或登录凭证。

9. 数据安全

我们采用 Apple 提供的应用沙箱、CloudKit 权限和系统共享机制保护数据。 但任何存储或传输方式都无法保证绝对安全。请保护好设备、系统账户和共享邀请链接。

10. 儿童隐私

攒记不是专门面向 13 周岁以下儿童设计的服务，也不会主动要求儿童提供姓名、邮箱或其他联系信息。

11. 政策更新

功能或法律要求发生变化时，我们可能更新本政策。重大变化会通过 App 更新说明、 App 内提示或本页面进行说明，页面顶部的生效日期也会同步更新。

12. 联系我们

如对本政策、数据处理或删除方式有疑问，请发送邮件至 lalalieo@outlook.com。

1. Scope

This policy applies to the SavingNotes iOS and iPadOS app. It explains how the app handles transactions, savings goals, shared ledgers, Shortcut recognition results, and related preferences.

2. Data Processed by the App

Depending on the features you use, the app may process data you enter or generate:

• Transaction details, including amount, income or expense type, category, merchant or source, date, and notes;
• Savings goals, including goal name, target amount, saved amount, plan duration, and comparison tiers;
• Recurring records and preferences such as reminders, currency, exchange rates, and appearance;
• Shortcut OCR text you intentionally send to the app and transaction details recognized from that text;
• Shared ledger names, shared records, shared goals, and participant display information provided by CloudKit.

The app does not require a separate account and never asks for your Apple Account password.

3. On-Device and iCloud Storage

Data is first stored by the app on your device. When you are signed in to iCloud and the service is available, records and goals may be stored in your private iCloud database through Apple CloudKit so they can sync across devices using the same iCloud account. We cannot access your private CloudKit data through a proprietary server.

Appearance, language, notifications, and certain preferences may remain device-specific. If iCloud is unavailable, the app may temporarily use local storage and display a notice.

4. Shared Ledgers

Shared ledgers use Apple CloudKit Sharing. Participants can view a shared ledger only after you intentionally create or select it, send an invitation, and they accept it. Participants with write access can add or update shared content, and those changes can sync to the other participants.

Invite only people you trust and avoid entering unnecessary sensitive information in merchant, source, goal name, or note fields. Owners can stop sharing and participants can leave a share. Stopping a share does not automatically delete the owner's private copy.

5. Shortcuts and Text Recognition

Quick recording can use Apple's Shortcuts app to take a screenshot, extract text, and send that extracted text to SavingNotes. SavingNotes does not independently view your screen in the background. Recognition may be inaccurate. Semi-automatic mode asks you to confirm before saving; fully automatic mode saves the recognized result directly. Review and correct records when appropriate.

6. System Services and Third Parties

The app uses these Apple system services:

• iCloud and CloudKit for private synchronization and invitation-only ledger sharing;
• Shortcuts and system OCR for user-initiated text extraction and transfer;
• Local notifications for reminders configured on the device;
• The system share sheet for invitations selected by the user.

These services are provided by Apple and are also governed by Apple's Privacy Policy. The app currently contains no third-party advertising or behavioral analytics SDKs.

7. Use and Disclosure

Data is used only to provide record keeping, statistics, goal management, device sync, and sharing you explicitly choose. We do not sell or rent your data, use ledger data for advertising profiles, or track you across apps. Apart from participants you invite and Apple's processing required to provide system services, we do not intentionally disclose your ledger data to others.

8. Retention, Deletion, and Your Controls

• You can delete individual transactions, goals, or ledgers in the app;
• You can stop sharing or leave an invited ledger;
• You can erase all data under Settings → Data Management;
• When iCloud is available, deletions sync to CloudKit and your other devices using the same account;
• Uninstalling the app alone may not delete data stored in iCloud. To remove it, use the in-app erase option first and manage related data in iCloud storage settings when necessary.

SavingNotes creates no independent user account, so we retain no proprietary account record or login credentials.

9. Security

We rely on Apple's app sandbox, CloudKit permissions, and system sharing mechanisms. No method of storage or transmission is completely secure. Protect your device, system account, and invitation links.

10. Children's Privacy

SavingNotes is not specifically directed to children under 13 and does not intentionally ask children to provide names, email addresses, or other contact information.

11. Policy Updates

We may update this policy when features or legal requirements change. Material changes may be communicated through release notes, an in-app notice, or this page. The effective date above will be updated accordingly.

12. Contact

For questions about this policy, data handling, or deletion, email lalalieo@outlook.com.