隐私政策 / Privacy Policy
生效日期 / Effective Date: March 4, 2026
最近更新 / Last Updated: September 3, 2026
本政策适用于一兜英语（YiDouWords）iOS 应用，包括 AI 点数账户、App 内购买、Pro 订阅和内置 AI 服务。我们重视你的隐私，并按照适用法律 （包括 GDPR 与 CCPA/CPRA）及 Apple App Store 审核指南 5.1.1 的原则，说明我们如何处理数据。
This policy applies to the YiDouWords iOS app, including AI point accounts, in-app purchases, Pro subscriptions, and the built-in AI service. We describe our data practices in line with applicable laws (including GDPR and CCPA/CPRA) and Apple App Store Review Guideline 5.1.1.
目录 / Table of Contents
- 适用范围 / Scope
- 我们处理哪些数据 / What Data We Process
- AI 数据处理与用户授权 / AI Data Processing and Consent
- iCloud 同步说明 / iCloud Sync
- 用途与法律依据 / Purposes and Legal Bases
- 数据共享 / Data Sharing
- 保存期限 / Retention
- GDPR 权利 / GDPR Rights
- CCPA/CPRA 权利 / CCPA/CPRA Rights
- 儿童隐私 / Children
- 数据安全 / Security
- 政策更新 / Changes
- 联系我们 / Contact
1) 适用范围 / Scope
本政策适用于你在 YiDouWords 应用内的功能使用（如阅读、点词、词书/生词本管理、学习计划、自动续费订阅、iCloud 同步等）。
This policy applies to your use of YiDouWords features, including reading, word lookup, vocabulary management, study plans, auto-renewable subscriptions, and optional iCloud sync.
2) 我们处理哪些数据 / What Data We Process
本地与 iCloud 数据 / On-device and iCloud Data
- 网页收藏与浏览历史、生词本、阅读资料、学习计划、阅读进度和应用设置主要保存在设备本地。
- 启用 iCloud 同步时，相关学习数据存储在用户自己的 Apple iCloud 账户中。
AI 点数账户数据 / AI Account Data
- 用户 ID：通过 Apple 登录产生的稳定账户标识及应用生成的邀请 ID，用于跨设备识别同一账户。
- 购买历史：App Store 交易标识、产品 ID、购买、续订及退款状态，用于发放或追回点数和 Pro 权益。
- 设备 ID：应用生成的安装级风控标识及其哈希值，用于防欺诈、测试环境限额和账户安全；不读取 IDFA。
- AI 内容：用户主动提交或在启用相关功能后提交给 AI 的单词、选中的句子或段落、问题、附近文本上下文、词典释义，以及使用章节级或多角色朗读功能时所需的相关章节片段和 AI 回复。
- 使用数据：AI 请求的 token 用量、点数扣减、余额变更和错误状态，用于真实用量结算、幂等重试和客服排查。
AI Content: Depending on the feature you choose, AI content may include words, selected sentences or paragraphs, questions, nearby text context, dictionary meanings, relevant chapter excerpts needed for chapter-level or multi-voice features, and AI responses.
你在应用内主动打开的第三方网站或配置的第三方 AI、翻译、语音服务，会按照其自身隐私政策处理你提交的数据；自备 API 密钥保存在设备端，不会由我们的一兜 AI 点数服务代为使用。
Third-party websites you choose to open, and third-party AI, translation, or speech services you configure, process submitted data under their own privacy terms. API keys you provide are stored on your device and are not used by the YiDou built-in AI credit service.
AI 数据处理与用户授权 / AI Data Processing and Consent
内置 AI / Built-in AI
为提供 AI 释义、句子分析、翻译、阅读辅助、章节分析和多角色朗读等功能，一兜英语可能发送你提交的单词、选中的句子或段落、问题、附近文本上下文、词典释义，以及使用章节级功能时所需的相关章节片段。内置 AI 会将这些内容发送至一兜英语云服务，通过 Cloudflare 提供的网络、边缘运行和安全基础设施进行处理，并转发给 DeepSeek（深度求索） AI 模型生成结果。
To provide AI definitions, sentence analysis, translation, reading assistance, chapter analysis, and multi-voice features, YiDouWords may send words, selected sentences or paragraphs, questions, nearby text context, dictionary meanings, and relevant chapter excerpts required for chapter-level features. Built-in AI sends this content to the YiDouWords cloud service, which uses Cloudflare network, edge-computing, and security infrastructure, and forwards it to the DeepSeek AI model to generate the requested result.
自定义或第三方 AI / Custom or Third-party AI
当你选择 DeepSeek、OpenAI、Anthropic 或其他可配置 AI 提供商时，应用会将完成所请求功能所需的上述内容直接发送至你所选择的提供商或你配置的 HTTPS 接口。发送前，应用会显示当前接收方；该提供商也会依据其隐私政策和服务条款处理数据。
If you select DeepSeek, OpenAI, Anthropic, or another configurable AI provider, the app sends the content described above, as needed for the requested feature, directly to the selected provider or the HTTPS endpoint you configured. Before transmission, the app identifies the current recipient. That provider also processes data under its privacy policy and terms of service.
授权、拒绝与撤回 / Permission, Refusal, and Withdrawal
在首次向某个 AI 提供商发送内容前，应用会说明将发送的数据、接收方和用途，并要求你明确同意。你可以选择“不同意”；拒绝后不会发送 AI 内容。你可以随时前往设置 → AI 辅助 → AI 数据与隐私撤回对当前提供商的同意。撤回后，自动 AI 查词和自动 AI 句子分析会关闭，除非你再次明确同意，否则不会再向该提供商发送内容。撤回不影响撤回前基于同意进行的处理。
Before content is first sent to an AI provider, the app explains what data will be sent, identifies the recipient and purpose, and asks for your explicit permission. You may choose “Don't Allow,” in which case no AI content is transmitted. You may withdraw permission at any time under Settings → AI Assistance → AI Data & Privacy. Withdrawal turns off automatic AI word and sentence analysis, and no further content is sent to that provider unless you explicitly consent again. Withdrawal does not affect processing lawfully performed before withdrawal.
AI 内容仅用于提供你请求的功能、计算实际用量、保证请求可靠性以及处理安全或客服问题，不用于广告、数据经纪或跨应用追踪。请勿在 AI 输入中提交敏感个人信息或无权分享的内容。
AI content is used only to provide the feature you request, measure actual usage, maintain request reliability, and address security or support issues. It is not used for advertising, data brokerage, or cross-app tracking. Do not submit sensitive personal information or content you are not authorized to share.
3) iCloud 同步说明 / iCloud Sync
- iCloud 同步为可选功能，用户可手动上传或下载。
- 同步数据存储在你自己的 Apple iCloud 账户中。
- 开发者不通过自有服务器读取你的 iCloud 同步内容。
- 上传会以本机覆盖 iCloud；下载会以 iCloud 覆盖本机，应用会在操作前提示。
iCloud 服务由 Apple 提供并受 Apple 条款约束。有关 Apple iCloud 数据处理，请参阅 Apple 的隐私文件。
iCloud sync is optional and may be uploaded or downloaded manually. Synced data is stored in your own Apple iCloud account. The developer does not use its own servers to read your iCloud sync content. Upload replaces the iCloud copy with the on-device copy, while download replaces the on-device copy with the iCloud copy; the app displays a warning before either action. iCloud is provided by Apple and governed by Apple's terms and privacy documentation.
4) 用途与法律依据 / Purposes and Legal Bases
- App 功能：登录认证、跨设备账户识别、AI 请求、真实用量结算、点数与 Pro 权益管理、邀请奖励和购买恢复。
- 安全与防欺诈：限制 TestFlight 滥用、识别异常账号或设备、处理退款追回和保护账户。
- 服务可靠性：短期保存请求结果用于幂等重试、断流结算、故障排查和避免重复扣点。
- 用户支持：处理用户主动提交的客服邮件及账户问题。
我们不会将上述数据用于第三方广告、开发者广告、数据经纪或跨应用追踪。
We use this data only for app functionality, authentication, purchase verification, usage-based point settlement, fraud prevention, service reliability, refunds, and customer support. We do not use it for advertising or tracking.
GDPR 法律依据（如适用）：履行合同（Art. 6(1)(b)）、合法利益（安全与防欺诈，Art. 6(1)(f)）及用户同意（Art. 6(1)(a)）。
Where GDPR applies, our legal bases include performance of a contract (Art. 6(1)(b)), legitimate interests in security and fraud prevention (Art. 6(1)(f)), and consent for sending content to AI providers (Art. 6(1)(a)).
6) 保存期限 / Retention
- 本地数据：保留在设备中，直到用户删除应用或清除数据。
- iCloud 数据：保留在用户的 iCloud 账户中，直到用户删除对应数据。
- AI 请求与回复：为幂等重试和异常恢复短期保存，通常不超过 15 分钟，随后由自动清理任务删除。
- 账户、余额、交易、退款和点数流水：为提供持续账户权益、防止重复发放及履行财务和争议处理义务而保存；用户可在 App 内申请永久删除 AI 账户，但 Apple 订阅需在系统订阅管理中另行取消。
- 风控记录：在防欺诈与安全所需的合理期限内保存，并限制访问。
删除 AI 账户会永久删除或匿名化可删除的账户资料；剩余充值点数不可恢复。法律、财务、反欺诈或争议处理要求保留的最少交易记录可能继续保存。
- On-device data remains on the device until you delete it, clear app data, or delete the app.
- iCloud data remains in your iCloud account until you delete the corresponding data.
- Built-in AI requests and responses are retained briefly for idempotent retry and failure recovery, normally no longer than 15 minutes, and are then removed by an automated cleanup process.
- Account, balance, transaction, refund, and credit-ledger records are retained as needed to provide continuing account entitlements, prevent duplicate issuance, and meet financial or dispute-handling obligations.
- Third-party AI providers may apply their own retention periods as described in their privacy policies, especially when you select or configure those providers yourself.
- Fraud-prevention records are retained for a reasonable period necessary for security and access is restricted.
Deleting an AI account permanently deletes or anonymizes account data that can be deleted. Remaining purchased credits cannot be restored. Minimal transaction records required by law, finance, fraud prevention, or dispute handling may be retained. Apple subscriptions must be cancelled separately in system subscription settings.
7) GDPR 权利 / GDPR Rights
如你位于欧洲经济区（EEA）或英国，你可能享有以下权利：
- 访问、更正、删除个人数据
- 限制或反对处理
- 数据可携权
- 撤回同意（不影响撤回前处理）
- 向监管机构投诉
行使权利请联系：wanghaolinhk@gmail.com。
If you are in the EEA or United Kingdom, you may have rights to access, correct, or delete personal data; restrict or object to processing; receive portable data; withdraw consent without affecting prior lawful processing; and lodge a complaint with a supervisory authority. Contact wanghaolinhk@gmail.com to exercise these rights.
8) CCPA/CPRA 权利 / CCPA/CPRA Rights
如你是加州居民，你可能享有以下权利：
- 知情权（Right to Know）
- 删除权（Right to Delete）
- 更正权（Right to Correct）
- 非歧视权（Right to Non-Discrimination）
- 拒绝出售/共享权（Right to Opt-out of Sale/Sharing）
我们不出售或共享个人信息用于跨情境行为广告。我们也不以此差别对待用户。
If you are a California resident, you may have rights to know, delete, or correct personal information, to opt out of sale or sharing, and to receive non-discriminatory treatment. We do not sell or share personal information for cross-context behavioral advertising.
9) 儿童隐私 / Children
本应用不面向 13 岁以下儿童定向提供服务。若你认为未成年人未经监护人同意提交了个人信息，请联系我们删除。
The app is not directed to children under 13. If you believe a minor submitted personal information without a parent or guardian's permission, contact us to request deletion.
10) 数据安全 / Security
我们采取合理措施保护数据安全（包括依赖 iOS 和 iCloud 的平台安全机制）。但任何系统都无法保证绝对安全。
We use reasonable technical and organizational safeguards, including iOS and iCloud platform security and HTTPS encryption for network transmission. No system can guarantee absolute security.
11) 政策更新 / Changes
我们可能根据功能或法律变化更新本政策。更新后会在本页面更新“最近更新日期”。
We may update this policy when features, providers, or legal requirements change. We will update the “Last Updated” date on this page when changes are published. If a change materially affects AI data sharing, the app may ask for consent again.
12) 联系我们 / Contact
如你对本政策或数据处理有疑问，请联系：
Email: wanghaolinhk@gmail.com
For questions about this policy, data processing, or privacy requests, contact:
Email: wanghaolinhk@gmail.com
说明：本隐私政策模板旨在支持产品合规实践，不构成法律意见。如需针对特定司法辖区的正式法律意见，请咨询持牌律师。
Note: This privacy policy supports product compliance practices and is not legal advice. Consult qualified counsel for advice specific to your jurisdiction.