人情账本 隐私政策
海外华人的礼金账本：谁送过多少、下次该回多少，10 秒查到，全家共享。账本里记的是你和亲友之间的往来，这是你的私人数据，App 的设计目标是让它只在你和你邀请的家人手里。
- 没有账号。不需要注册，也不需要登录。
- 没有广告、没有统计、不追踪。App 内没有任何广告或统计 SDK，也不采集设备指纹。
- 不出售数据，除下文列出的服务商外不与任何人共享，且只为完成功能所必需。
1. App 处理哪些信息，去了哪里
所有内容都只在你的手机上
你的进度、设置、历史记录以及在 App 里创建的任何内容，都只保存在你的设备上，存放在 App 自己的存储空间里。App 没有自己的服务器，也不会把这些数据发到任何地方。
删除 App 即删除全部数据。如果你开了 iPhone 备份（iCloud 云备份或电脑备份），App 的数据会和其他 App 一样，以你的 Apple ID 存入备份。
iCloud 同步
如果为本 App 开启了 iCloud，数据会存在你自己的 iCloud 账户（Apple 的 CloudKit）里，以便在你的其他设备上出现。它受你的 Apple ID 和 Apple 隐私政策保护。我们没有服务器，无法访问也读不到你的 iCloud 数据。
你随时可以在 iPhone 设置里关掉本 App 的 iCloud，之后数据只留在各自的设备上。
与家人共享
如果你邀请家人共享一本账，共享由 Apple 的 iCloud 共享完成。被邀请的人可以查看和编辑那本账里的记录，你随时可以在 App 里移除他们或停止共享。我们不参与共享，也收不到数据。
汇率
为了换算币种，App 会从 open.er-api.com 下载一张公开汇率表。请求里不含账号、标识符或账本数据，对方只看到一次普通的网页请求。汇率缓存在设备上，离线也能用。
购买
App 内购买由 Apple 通过 App Store 处理。我们收不到你的姓名、邮箱、卡号或地址，Apple 只告诉 App 这笔购买是否有效。你解锁了什么，记录在你的手机和 Apple ID 的购买历史里，换设备可以恢复。
邮件反馈
如果你在 App 里报告问题，它会打开你的邮件 App，预填一封可能包含 App 版本、设备型号和 iOS 版本的邮件，方便我们复现问题。发送前你能看到完整内容并可以修改。我们只用它来回复你和修复问题。
2. 儿童
人情账本 是给家庭成年人使用的工具，不面向儿童，我们不会有意收集 13 岁以下儿童的信息。
3. 可能请求的系统权限
| 权限 | 用途 | 拒绝后 |
|---|---|---|
| 面容 ID | 锁住账本。 | 账本不加锁直接打开。 |
| 通知 | 生日和事件提醒。 | 没有提醒，其他功能正常。 |
这些权限随时可以在 iPhone「设置」里更改。
4. 你的选择和权利
- 删除 App 即删除它存在手机上的全部内容。
- 同步到 iCloud 的数据属于你的 Apple ID，可以在 App 里删除，也可以在 iPhone 设置 → Apple ID → iCloud → 管理储存空间里删除。
- 法律赋予你的访问、更正、导出或删除个人数据的权利（例如 GDPR、CCPA），都可以通过邮件行使。由于我们几乎不持有任何个人数据，多数请求的答复会是"没有可返回的数据"。
5. 联系我们
电子邮件：d60liu@gmail.com d60lab，斐济 苏瓦。我们会在 30 天内答复，通常快得多。
6. 政策变更
政策有变化时我们会更新本页并修改上面的生效日期。重大变化会在 App 内提示。
人情账本 Privacy Policy
A gift-money ledger for overseas Chinese families — who gave what, in any currency, shared with family through iCloud. What you record is private information about you and the people in your life; the app is built so it stays with you and the family you invite.
- No accounts. You never sign up or sign in.
- No ads, no analytics, no tracking. The app contains no advertising or analytics SDKs and does not fingerprint your device.
- We never sell data, and we share it with no one except the providers named below, only to do what the feature needs.
1. What the app handles, and where it goes
Everything stays on your device
Your progress, settings, history and anything you create in the app are stored only on your device, in the app’s own storage. The app has no server of its own and does not send this data anywhere.
Deleting the app deletes all of it. If you use iPhone backups (iCloud Backup or a computer), the app’s data is included in that backup under your Apple ID, like any other app.
iCloud sync
If iCloud is enabled for the app, your data is stored in your own iCloud account (Apple’s CloudKit) so that it appears on your other devices. It is protected by your Apple ID and Apple’s privacy policy. We operate no server, have no access to your iCloud data, and cannot read it.
You can turn iCloud off for the app at any time in iPhone Settings; the data then stays only on each device.
Sharing with family
If you invite family members to a shared ledger, the sharing is done by Apple’s iCloud sharing. The people you invite can see and edit the records in that ledger; you can remove them, or stop sharing, at any time from inside the app. We are not a party to the share and never receive the data.
Exchange rates
To convert between currencies, the app downloads a public exchange-rate table from open.er-api.com. The request contains no account, identifier or ledger data; the provider sees only an ordinary web request. Rates are cached on the device so the app works offline.
Purchases
In-app purchases are processed by Apple through the App Store. We receive no name, email, card number or address; Apple only tells the app whether the purchase is valid. The record of what you unlocked is kept on your device and in your Apple ID’s purchase history, so it can be restored on your other devices.
Feedback by email
If you report a problem from inside the app, it opens your Mail app with a pre-filled message that may include the app version, your device model and iOS version to help us reproduce the issue. You see the whole message before sending and can edit it. We use it only to answer you and fix the problem.
2. Children
人情账本 is a family tool used by adults. It is not directed at children and we do not knowingly collect information from anyone under 13.
3. Permissions you may be asked for
| Permission | Why | If you decline |
|---|---|---|
| Face ID | To lock the ledger. | The ledger opens without a lock. |
| Notifications | Birthday and event reminders. | No reminders; everything else works. |
You can change any of these at any time in the iPhone Settings app.
4. Your choices and rights
- Deleting the app deletes everything it stored on your device.
- Data synced to iCloud is under your Apple ID; you can delete it from the app or from iPhone Settings → Apple ID → iCloud → Manage Storage.
- Where the law gives you rights to access, correct, export or delete personal data (for example under GDPR, the CCPA, or Fiji’s Personal Information Protection framework), you can exercise them by email. Because we hold essentially no personal data, most requests are answered by confirming that there is nothing to return.
5. Contact
Email: d60liu@gmail.com · d60lab, Suva, Fiji. We answer within 30 days, usually much sooner.
6. Changes
If this policy changes we will update this page and the effective date above. A material change is also announced inside the app.