隐私政策 · Privacy Policy

01 App 在设备上处理的信息

App 内置答案和解析内容，并在设备上完成随机选择与显示。为了维持免费次数、减少近期重复答案、记住引导页和语言选择，并在有限离线期间判断统一限免，App 使用所在平台的本地设置以及 App Group 共享容器保存以下有限状态：

• 已经成功领取的免费答案次数，最多计至 10 次；
• 最近最多 222 个答案的内部数字 ID，仅用于减少近期重复；App 不提供可浏览的答案历史列表；
• 是否选择“不再显示”引导页；
• 当前选择的内容语言（简体中文或英文）；
• 公开限免活动的 ID、UTC 起止时间、最近一次服务器时间锚点和本机获取时间；
• 最近一次已显示答案的有限快照，包括内部答案 ID、名句、署名和所选语言，用于 App Group 中的本地连续显示；在支持小组件的平台上，该快照也供小组件显示最近答案。

当前导航流程中的答案对象会在 App 运行期间保存在内存中，用于答案页和解析页之间返回。上述 App Group 快照是另外一份有限的本地显示数据，来自随 App 发布的静态内容，不包含你心里思考的问题、账号、联系方式或购买历史。App 不为这些状态建立账号，也不在限免配置请求中上传它们。App 未实现 iCloud 同步；设备备份与恢复是否包含本地 App 数据，由你的系统设置和 Apple 的服务规则决定。

02 你的问题与五秒触摸或鼠标按住

你只需在心里思考问题。App 没有文字输入、语音输入、相机拍摄或问题上传功能，因此不会获取、保存或传输你心中问题的内容。

在 iPhone 和 iPad 上，主页的指纹图案只是普通触摸交互的视觉提示，不是 Touch ID 或其他生物识别。App 只在当次交互中判断一根手指是否在圆形区域持续按住五秒，以及是否提前松开、移出、出现多指触摸或被系统打断。普通触摸位置仅用于即时判断，不写入存储，也不发送给运营方。

在 Mac 上，App 只在当次交互中判断鼠标左键是否在圆形区域持续按住五秒。提前松开、指针移出圆形区域、窗口失去焦点、视图被移除或 App 被系统中断时，本次计时会取消。鼠标位置仅用于即时判断，不写入存储，也不发送给运营方。

App 不读取指纹、面容、触摸压力、鼠标压力或其他生物特征，答案也不会因按压力度改变。

03 系统权限与设备资源

当前版本不请求相机、麦克风、照片、通讯录、定位、蓝牙、运动与健身、健康、跟踪、Face ID 或 Touch ID 权限。App 不包含账号登录、用户投稿、广告、第三方分析 SDK、自建社交网络或社区。首页、答案页与解析页可以调用 Apple 的系统分享界面，分享 App Store 链接或 App 在本机生成的答案图片；在 Mac 上，该操作使用系统分享选择器。App 不会因此取得你选择的接收人或目标 App 的账号资料。

App 运行时不调用人工智能模型或 AI API，也不会把你在心里思考的问题交给 AI 服务。答案和解析作为随 App 发布的静态内容在设备上读取；发布前的内容创作、翻译或编辑流程，与 App 运行期间的用户数据处理是两件不同的事。

04 App Store 购买

App 提供 10 次免费使用机会，并提供一项非消耗型 App 内购买，用于永久解锁无限提问。首页始终提供购买与恢复购买入口。如果公开上架限免正在生效，用户无需购买即可提问，已有免费次数会保留；永久解锁仍是自愿选择。商品查询、显示价格、购买、恢复购买、退款或撤销状态以及权益验证通过 Apple 的 StoreKit 和 App Store 服务处理。

Apple 负责 Apple 账户、付款方式和支付处理。App 与运营方不会收到你的银行卡号、完整支付凭据或 Apple 账户密码。App 会读取 Apple 提供的商品信息及经验证的购买权益／交易状态，以决定是否解锁；当前实现不会把交易记录发送到运营方服务器。Apple 可能依其政策向开发者提供收据、购买或退款信息以及汇总报告。删除 App 不会删除 Apple 保存的购买记录，重新安装后可以通过“恢复购买”重新检查权益。有关 Apple 如何处理相关信息，请参阅 “App Store 与隐私”和Apple 隐私政策。

05 运营方收集、共享与跟踪

根据 iOS/iPadOS 5.0 与最终 macOS 5.0 源码，运营方没有为 App 配置账号或业务数据后台，也不通过 App 收集姓名、邮箱、电话号码、通讯录、照片、录音、广告标识符或你思考的问题。App 会向下述公开服务请求统一限免配置；请求不会主动附加账号、免费余额、答案历史、问题内容、购买记录、语言偏好或自定义设备标识符。运营方不出售 App 用户个人数据，不进行跨 App／网站跟踪，也不将请求信息用于第三方广告或定向营销。

当前 App 仅使用 Apple 系统框架，没有第三方分析或广告 SDK。Apple 作为平台与交易服务提供方，依据其自己的条款和隐私政策处理与 App Store、设备分析和购买有关的信息。如果未来加入新的 SDK、服务或数据用途，本政策和 App Store 隐私信息会在相应处理开始前更新。

06 隐私网页、限免配置与托管基础设施

本政策网页和 App 读取的公开限免 JSON 作为 mishuzhang.uk 服务域名下的独立公开路由，由 OpenAI Sites 托管并通过 Cloudflare 网络提供。iOS、iPadOS 与 macOS 5.0 会在启动或回到前台时请求 https://answers-api.mishuzhang.uk/answers/launch-promotion.json，以确认全体用户共同的活动起止时间；配置本身不含账号、个人资料或设备专属内容。App 对该请求使用临时网络会话，不保存响应 Cookie，并禁用客户端 URL 缓存；经验证的限免配置最多在本地复用 24 小时。运营方未在页面或配置中加入分析工具、广告、表单、外部字体、第三方分析脚本或跟踪 Cookie。

为建立 HTTPS 连接、交付页面或配置、维护服务安全并抵御自动化滥用，托管与网络基础设施会处理必要的网络请求信息，例如 IP 地址、由 IP 推断的粗略位置、请求时间、请求路径、浏览器或设备请求头以及安全事件信息，并可能在网页访问时注入 Cloudflare 的必要安全脚本或设置必要安全 Cookie（例如 __cf_bm）。App 的限免请求不会持久保存该 Cookie。这些基础设施数据由相应服务提供方依其条款及实际运行规则处理；运营方不将其用于广告或跨站画像，也不对服务提供方未公开或无法核实的日志保存期限作出承诺。

07 保存、删除与隐私选择

• 本地状态：免费次数、用于减少重复的最近答案 ID、引导页偏好、内容语言、限免配置缓存和有限的最近答案快照会保留在设备或 App Group 中，直到 App 或系统覆盖这些设置，或相应本地数据被清除。最近答案去重记录自动限制为 222 个内部 ID；App 不提供可浏览的答案历史列表。经验证的限免缓存最多复用 24 小时。
• 当前答案与快照：当前导航中的答案对象只在 App 运行内存中用于当前流程；为本地连续显示而保存的有限快照可以在 App 退出后继续存在。两者都不作为账号资料上传。
• iPhone 和 iPad 上的删除：删除 App 通常会移除其 App 容器数据；使用“卸载 App”而不是“删除 App”，或从系统备份恢复，可能保留或恢复部分本地数据。
• Mac 上的删除：仅把 App 本体移到废纸篓不一定会立即删除其沙盒容器、偏好设置或 App Group 数据，系统备份也可能保留或恢复这些内容。如需确认或协助清除，可通过本政策所列邮箱联系运营方；运营方不会在未确认路径和影响前提供破坏性删除指令。
• 购买权益：由 Apple 按其政策保存和管理。删除 App 不会删除 App Store 购买记录；重新安装后可通过 Apple 的恢复购买流程检查权益。
• 运营方记录：当前没有账号或个人资料后台，因此没有可在运营方账号系统中删除的个人档案。若你提出查阅或删除请求，运营方会先确认是否实际持有能够与你关联的数据。
• 网络交付记录：运营方没有为网页或限免配置建立自有分析数据库。托管或安全基础设施如保留运行日志，其处理与保存依相应服务提供方的条款和实际运行规则；本政策不虚构未知期限。

当前 App 不要求你同意运营方收集用户资料，因此没有 App 内撤回此类同意的开关。你可通过停止使用 App 或清除相应本地数据停止本地处理；Apple 服务相关选择应在设备设置或 Apple 提供的渠道中管理。

08 儿童、数据安全与跨境处理

App 不要求年龄、姓名或联系方式，也不面向儿童收集个人资料。运营方通过数据最小化、本地处理和不建立用户账号来降低风险，但任何设备或网络环境都无法承诺绝对安全。Apple 服务以及隐私网页和限免配置的托管与网络基础设施可能依各自政策在不同地区处理必要服务信息。本段适用于 iPhone、iPad 与 Mac，App 不因设备平台改变上述用途。

09 政策更新

功能、支持的平台、依赖、数据处理方式或托管安排发生变化时，本政策会相应更新，并在页面标注新的生效日期。重大变化会通过适当渠道提示。对未来版本的描述只有在相应构建完成核实后才会作为现行政策发布。

10 联系我们

如对本政策、设备上的本地状态、Mac 数据清除方式、隐私选择或数据请求有疑问，请通过下列公开渠道联系我们。

运营方／数据控制者：这个答案很哲（Answers）独立开发者
隐私与支持联系邮箱：hongrubaobao@gmail.com

01 Information processed on your device

The App bundles its answer and interpretation content and selects and displays answers on the device. To maintain the free-use allowance, reduce recently repeated answers, remember onboarding and language choices, and evaluate the shared promotion during a limited offline period, the App stores the following limited state in the platform’s local app settings and the App Group shared container:

• the number of free answers successfully claimed, up to 10;
• the internal numeric IDs of up to 222 recent answers, used only to reduce recent repetition; the App does not provide a browsable answer-history list;
• whether you selected “Don’t show this again” for onboarding;
• the selected content language, Simplified Chinese or English;
• the public promotion ID, UTC start and end times, latest server-time anchor, and local fetch time; and
• a limited snapshot of the most recently displayed answer, including its internal answer ID, quotation, attribution, and selected language, for local continuity through the App Group. On platforms that support the widget, the widget also uses this snapshot to display the recent answer.

The answer object used in the current navigation flow is held in app memory while the App runs so that you can move between the answer and interpretation screens. The App Group snapshot is a separate, limited item of local display data derived from static content bundled with the App. It does not contain the question in your mind, an account, contact details, or purchase history. The App does not create an account for these states or upload them in the promotion-configuration request. The App does not implement iCloud sync. Whether device backup and restoration include local app data is governed by your system settings and Apple’s services.

02 Your question and the five-second touch or mouse hold

You think about your question privately. The App has no text entry, voice input, camera capture, or question-upload feature, so it does not receive, store, or transmit the content of the question in your mind.

On iPhone and iPad, the fingerprint image on the home screen is only a visual prompt for an ordinary touch interaction. It is not Touch ID or any other biometric identification. During that interaction, the App only determines whether one finger remains inside the circular target for five seconds and whether the touch ends early, moves outside, becomes multi-touch, or is interrupted by the system. The ordinary touch location is used transiently for that decision; it is not written to storage or sent to the operator.

On Mac, the App only determines during the current interaction whether the primary mouse button remains pressed inside the circular target for five seconds. The timer is cancelled if the button is released early, the pointer moves outside the target, the window loses focus, the view is removed, or the App is interrupted by the system. The mouse location is used transiently for that decision; it is not written to storage or sent to the operator.

The App does not read fingerprints, faces, touch pressure, mouse pressure, or other biometric characteristics, and pressure does not change the answer.

03 System permissions and device resources

The current version does not request access to the camera, microphone, photos, contacts, location, Bluetooth, motion and fitness, health data, tracking, Face ID, or Touch ID. The App has no account login, user submissions, ads, third-party analytics SDK, or operator-run social network or community. The home, answer, and interpretation screens can open Apple’s system sharing interface to share an App Store link or an answer image generated on the device. On Mac, this uses the system sharing picker. The App does not thereby receive the account details of the recipient or destination app you select.

The App does not call an artificial-intelligence model or AI API at runtime, and it does not send the question in your mind to an AI service. Answers and interpretations are bundled static content read on the device. Any pre-release content-authoring, translation, or editing workflow is distinct from processing App-user data at runtime.

04 App Store purchases

The App provides 10 free uses and offers one non-consumable in-app purchase that permanently unlocks unlimited questions. The home screen always provides access to purchase and restore-purchase controls. When the public launch promotion is active, users can ask questions without making a purchase and their free-use allowance is preserved; the permanent unlock remains optional. Product lookup, displayed price, purchase, restoration, refund or revocation status, and entitlement verification are handled through Apple’s StoreKit and App Store services.

Apple handles your Apple Account, payment method, and payment processing. Neither the App nor the operator receives your card number, full payment credentials, or Apple Account password. The App reads product information and verified purchase entitlement or transaction status supplied by Apple to decide whether to unlock the feature. The current implementation does not send transaction records to an operator server. Apple may provide developers with receipt, purchase, refund, or aggregated reporting information under its policies. Deleting the App does not delete purchase records retained by Apple; after reinstalling, the Restore Purchases control can check the entitlement again. For Apple’s handling of this information, see App Store & Privacy and Apple’s Privacy Policy.

05 Operator collection, sharing, and tracking

Based on the iOS/iPadOS 5.0 source and the final macOS 5.0 source, the operator has not configured an account or business-data backend for the App and does not use the App to collect names, email addresses, phone numbers, contacts, photos, recordings, advertising identifiers, or the question you think about. The App requests the shared public promotion configuration described below. The request does not intentionally append an account, free balance, answer history, question content, purchase history, language preference, or custom device identifier. The operator does not sell App users’ personal data, track users across apps or websites, or use request information for third-party advertising or targeted marketing.

The current App uses only Apple system frameworks and contains no third-party analytics or advertising SDK. Apple, as the platform and transaction service provider, handles information related to the App Store, device analytics, and purchases under its own terms and privacy notices. If a future version adds an SDK, service, or new data use, this policy and the App Store privacy information will be updated before that processing begins.

06 Privacy webpage, promotion configuration, and hosting infrastructure

This policy and the public promotion JSON read by the App are published as independent public routes under the mishuzhang.uk service domain, hosted on OpenAI Sites and delivered through Cloudflare’s network. iOS, iPadOS, and macOS 5.0 request https://answers-api.mishuzhang.uk/answers/launch-promotion.json when the App launches or returns to the foreground to confirm the shared campaign start and end times. The configuration contains no account, profile, or device-specific content. The App uses an ephemeral network session for this request, does not store response cookies, and disables the client URL cache. A verified promotion configuration may be reused locally for no more than 24 hours. The operator has not configured analytics, advertising, forms, external fonts, third-party analytics scripts, or tracking cookies in the page or configuration.

To establish HTTPS connections, deliver the page or configuration, maintain service security, and mitigate automated abuse, the hosting and network infrastructure processes necessary request information such as an IP address, coarse location inferred from the IP address, request time, requested path, browser or device headers, and security-event information. For webpage visits, it may inject a necessary Cloudflare security script or set a necessary security cookie such as __cf_bm. The App’s promotion request does not persist that cookie. The relevant service providers process this infrastructure data under their terms and actual operating practices. The operator does not use it for advertising or cross-site profiling and does not make an unverified promise about a provider’s undisclosed log-retention period.

07 Retention, deletion, and privacy choices

• Local state: Free-use count, recent answer IDs used to reduce repetition, onboarding preference, content language, the promotion cache, and the limited recent-answer snapshot remain on the device or in the App Group until the App or system overwrites them or the relevant local data is cleared. The de-duplication record is limited to 222 internal IDs; the App does not provide a browsable answer-history list. A verified promotion cache is reused for no more than 24 hours.
• Current answer and snapshot: The answer object in the current navigation flow is held only in app memory. The limited snapshot used for local continuity may remain after the App exits. Neither is uploaded as an account record.
• Deletion on iPhone and iPad: Deleting the App normally removes its app-container data. Using Offload App instead of Delete App, or restoring from a system backup, may preserve or restore some local data.
• Deletion on Mac: Moving only the App bundle to the Trash does not necessarily remove its sandbox container, preferences, or App Group data immediately. System backups may also preserve or restore those items. To confirm or obtain help with removal, contact the operator at the address in this policy. The operator will not provide destructive deletion instructions without first confirming the paths and effects.
• Purchase entitlement: Apple retains and manages it under Apple’s policies. Deleting the App does not delete App Store purchase history. After reinstalling, Apple’s restore-purchase flow can check the entitlement.
• Operator records: There is currently no account or personal-profile backend, so there is no personal profile stored in an operator account system to delete. If you make an access or deletion request, the operator will first determine whether it actually holds any information that can be linked to you.
• Network delivery records: The operator does not maintain a proprietary analytics database for the page or promotion configuration. If hosting or security infrastructure retains operational logs, their processing and retention follow the relevant provider’s terms and actual operating practices; this policy does not invent an unknown period.

The current App does not ask you to consent to operator collection of profile data, so it has no in-app control for withdrawing such consent. You may stop local processing by stopping use of the App or clearing the relevant local data. Choices relating to Apple services should be managed through device settings or the channels Apple provides.

08 Children, security, and international processing

The App does not ask for age, name, or contact information and is not designed to collect children’s profile data. The operator reduces risk through data minimization, on-device processing, and the absence of user accounts, but no device or network environment can be guaranteed absolutely secure. Apple services and the hosting and network infrastructure for the privacy page and promotion configuration may process necessary service information in different regions under their respective policies. This section applies to iPhone, iPad, and Mac; the App does not change these purposes based on the device platform.

09 Policy changes

This policy will be updated when features, supported platforms, dependencies, data practices, or hosting arrangements change, and the page will show a new effective date. Material changes will be communicated through an appropriate channel. A description of a future version will become the current published policy only after the corresponding build has been completed and verified.

10 Contact us

If you have a question about this policy, local state on your device, removal of Mac app data, your privacy choices, or a data request, contact us through the public channel below.

Operator / data controller: Independent developer of “This Answer Is Philosophical” (Answers)
Privacy and support contact email: hongrubaobao@gmail.com