寄忆 · 隐私政策

寄忆是一款本地优先的时光信件应用。我们相信，写给未来的文字只属于你本人。本政策说明我们在数据方面的立场——简单、直接、可验证。 Jiyi is a local-first time-letter app. We believe the words you write to the future belong to you alone. This policy states our position on data — simple, direct, verifiable.

一、我们不收集任何数据1. We Collect Nothing

寄忆不收集、不存储、不传输任何用户数据。App 内不集成任何第三方统计分析 SDK、广告 SDK、崩溃监控 SDK，不进行任何形式的数据上报。 Jiyi collects, stores, or transmits no user data. The app includes no third-party analytics, advertising, or crash-monitoring SDKs, and performs no data reporting of any kind.

二、数据仅存于你的设备2. Data Stays on Your Device

你写下的每一封信、所有内容与元数据，仅存储于你设备本机的应用沙盒内，使用 SwiftData 本地数据库管理。App 不联网、无服务器、无账号、无需登录。卸载 App 后，所有数据随之清除。 Every letter you write — its content and metadata — is stored only in this app's local sandbox on your device, managed by a local SwiftData database. The app connects to no network, has no server, no accounts, and requires no login. Uninstalling the app erases all data.

三、加密信件流转3. Encrypted Letter Transfer

你可选择将信件加密导出为 .jiyi 文件，通过微信、AirDrop 等你常用的方式发送给朋友。文件使用 AES-256-GCM 算法加密，密钥由你设置的密码经 PBKDF2-HMAC-SHA256（10 万次迭代） 派生。加密与解密全程在设备本机完成，App 不参与文件的传输过程，也不经手密码。 You may export a letter as an encrypted .jiyi file and send it via any messenger you use (WeChat, AirDrop, etc.). The file is encrypted with AES-256-GCM; the key is derived from your password via PBKDF2-HMAC-SHA256 (100,000 iterations). Encryption and decryption happen entirely on your device. The app does not participate in transferring the file and never sees your password.

四、保险文档导出4. Backup Document Export

你可将已解密的信件导出为明文 .jiyi 文件，保存到"文件" App 或其他你指定的位置。导出后的文件由你本人管理，存储位置和安全性由你决定，App 不再追踪。 You may export a decrypted letter as a plaintext .jiyi file to the Files app or any location you choose. The exported file is yours to manage — its storage and security are under your control, and the app no longer tracks it.

五、系统权限5. System Permissions

寄忆仅申请以下系统权限，且均为本地使用，不涉及任何数据上传： Jiyi requests only the following system permissions, all used locally with no data upload:

· 通知：用于信件到送达日期时本地提醒你拆信。通知在设备本机调度，不经过推送服务器。 · Notifications: Used to locally remind you to open a letter when its delivery time arrives. Scheduled on-device, never routed through a push server.

六、儿童隐私6. Children's Privacy

寄忆不针对 13 岁以下儿童，也无任何收集儿童数据的行为。所有年龄均可安全使用。 Jiyi is not directed at children under 13 and collects no data from anyone, including children. Safe for all ages.

七、政策变更7. Changes to This Policy

若未来寄忆增加任何涉及数据的新功能（例如可选的 iCloud 加密备份），本政策将同步更新，并以本页最新日期为准。我们承诺，任何变更都不会削弱你对自身数据的掌控权。 Should Jiyi add any data-related feature in the future (e.g. optional encrypted iCloud backup), this policy will be updated accordingly, with the date on this page reflecting the latest version. We commit that no change will weaken your control over your own data.