1. 我们收集和处理的信息

• 录音文件、音频时长、创建时间、录音类型、标题、人数、备注等录音基本信息。
• 设备本地生成的转写文本、说话人分段、情绪标签、声音事件和基础质量判断。
• 你为深度访谈或播客补充的内容题纲、访谈背景、组织信息、访问对象信息等上下文。
• Apple 登录返回的用户标识，以及为了账户和积分同步所需的后台用户记录。
• 积分余额、消耗记录、内购商品 ID、交易 ID，以及 Apple 内购验证所需的交易信息。

2. 本地录音与本地分析

录音文件默认保存在你的设备本地。基础分析会使用设备内置模型完成语音活动检测、说话人分离、语音转写和情绪识别。除非你主动登录、购买积分或点击生成云端 AI 报告，录音文件和本地分析结果不会因为基础分析流程自动上传到服务器。

3. 云端 AI 报告

当你点击生成云端 AI 报告并确认授权时，App 会将本地生成的转写文本、角色信息、时间戳、情绪标签、录音类型、标题、时长，以及你补充的题纲、背景、组织或人物说明发送到我们的 PocketBase 后台。后台会根据积分规则扣除积分，并将上述必要文本数据转发给 DeepSeek API 生成报告。除非后续功能另行说明并获得你的确认，App 不会为了生成云端 AI 报告发送原始录音文件。报告结果会返回 App 并保存在你的设备记录中。

4. 登录、积分和内购

App 使用 Sign in with Apple 进行身份验证。你购买积分时，交易由 Apple StoreKit 处理；我们会保存必要的商品 ID、交易 ID、积分变动和验证状态，用于发放积分、处理重复交易、退款或异常订单。

5. 第三方服务

我们使用 Apple 提供的登录与内购服务，并使用 DeepSeek API 作为第三方 AI 服务生成云端 AI 报告。DeepSeek API 仅在你主动确认生成云端报告时接收必要的文本、时间戳、角色、情绪标签和你补充的上下文信息。我们要求第三方服务在处理这些数据时提供同等或更高水平的保护，并仅将数据用于完成你请求的功能。

6. 数据保留与删除

你可以在 App 内删除录音记录。删除操作会移除设备本地保存的录音、转写和报告记录。服务器端账户、积分、交易和云端报告相关记录会按照安全、审计、退款处理和法律合规需要保留必要期限。

7. 数据安全

我们通过 HTTPS 与服务器通信，并限制后台接口访问权限。由于任何网络传输和本地存储都无法保证绝对安全，请避免在录音中包含不必要的敏感个人信息。

8. 联系我们

如对本隐私政策或数据处理有疑问，请通过 support@kudesign.net 联系我们。

1. Information We Process

• Recording files and metadata, such as duration, creation time, recording type, title, expected speaker count, and notes.
• On-device transcripts, speaker segments, emotion labels, sound events, and basic quality signals.
• Optional context you provide, such as topic outlines, interview background, organization details, and respondent information.
• Apple sign-in identifiers and backend user records required for account and credit synchronization.
• Credit balance, credit transactions, in-app purchase product IDs, transaction IDs, and transaction verification data.

2. Local Recording and On-Device Analysis

Recordings are stored locally on your device by default. Basic analysis uses bundled on-device models for voice activity detection, speaker diarization, transcription, and emotion recognition. Recordings and local analysis results are not automatically uploaded as part of the basic analysis workflow unless you sign in, purchase credits, or choose to generate a cloud AI report.

3. Cloud AI Reports

When you generate a cloud AI report and confirm permission, the app sends locally generated transcript text, speaker roles, timestamps, emotion labels, recording type, title, duration, and any optional outline, background, organization, or profile notes you provide to our PocketBase backend. The backend deducts credits according to the applicable rule and forwards the necessary text data to DeepSeek API to generate the report. Unless a future feature separately explains this and asks for your confirmation, the original audio file is not sent for cloud AI report generation. The report is returned to the app and stored with your recording record.

4. Sign-In, Credits, and In-App Purchases

The app uses Sign in with Apple for authentication. Credit purchases are processed through Apple StoreKit. We store necessary product IDs, transaction IDs, credit changes, and verification status to grant credits, prevent duplicate processing, and handle refunds or abnormal transactions.

5. Third-Party Services

We use Apple services for sign-in and in-app purchases, and DeepSeek API as the third-party AI service for cloud AI reports. DeepSeek API receives necessary transcript text, timestamps, speaker roles, emotion labels, and optional context only after you choose to generate a cloud report and confirm permission. We require third-party services to provide the same or an equivalent level of protection and to use the data only to provide the requested feature.

6. Retention and Deletion

You can delete recording records in the app. Deletion removes locally stored audio, transcripts, and report records from your device. Server-side account, credit, transaction, and cloud report records may be retained as needed for security, audit, refund handling, and legal compliance.

7. Security

We use HTTPS for communication with the backend and restrict access to backend APIs. No network transmission or local storage method can be guaranteed to be absolutely secure, so please avoid recording unnecessary sensitive personal information.

8. Contact

If you have questions about this Privacy Policy or our data practices, contact us at support@kudesign.net.