隐私政策
Privacy Policy

1. 适用范围与运营者

本隐私政策适用于 Starfire AI iOS 应用（以下简称“本应用”）。本应用由 羊德松（以下简称“我们”）提供和运营。

联系邮箱/隐私邮箱：deyuany054@gmail.com
联系地址：深圳市龙岗坂田街道星河双子塔西塔31F

2. 我们处理的信息

我们遵循最小必要原则，仅在您主动使用对应功能时处理以下信息：

3. 设备权限

3.1 相机

仅在您主动拍照、识图、图片翻译、拍题、作业批改，或主动启动边录边译时请求，用于获取本次拍摄的图片或录制本次视频画面。

3.2 照片

仅在您主动选择图片或视频时使用，用于读取您选择的项目。本应用不会主动扫描整个照片图库。

3.3 麦克风

仅在您主动开始语音输入、语音翻译、同声听译、会议录音或边录边译时请求，用于录制本次音频并完成端侧语音识别与翻译。

您可以在系统设置中撤回权限。撤回后，仅依赖该权限的功能会无法使用，其他功能不受影响。

4. 系统服务、下载与分享

• Apple 系统框架：相机、照片、Vision、AVFoundation、Translation、AVSpeechSynthesizer、Core ML 和系统备份用于实现对应功能，其处理同时受 Apple 隐私政策和系统设置约束。
• StoreKit 与 App Store：用于加载商品、价格与优惠资格，处理购买、家长审批、续期、退款和恢复权益。我们不会获得您的银行卡或完整支付资料。
• 系统资源下载：操作系统可能连接 Apple 服务下载语言、语音或系统组件资源；该过程由 Apple 控制。
• 可选模型下载：当您主动下载额外端侧模型时，本应用会向模型文件托管地址发起下载请求。下载请求不会包含聊天、图片、录音、视频或订阅交易内容；托管服务仍可能按其规则处理网络请求通常附带的 IP 地址、请求时间和基础网络日志。
• 文件分享：只有在您主动点击分享或导出后，系统分享面板才会把您选择的图片、视频、音频或文档交给您选定的应用或服务；后续处理受该接收方规则约束。

本应用未配置第三方广告或跨应用广告追踪功能。

5. 第三方 SDK：友盟移动统计

为统计功能使用情况、分析产品运行效果并改进用户体验，本应用接入由 友盟同欣（北京）科技有限公司提供的友盟移动统计 SDK。 我们不会在您同意本隐私政策前初始化该 SDK；只有您点击“同意并继续”后，应用才会调用 SDK。

• 处理目的：应用启动与活跃统计、功能使用分析、运营效果评估和产品体验优化。
• 可能处理的信息：设备型号、终端制造商、操作系统及版本、应用版本、应用分发渠道、SDK 版本、语言、时区、网络类型与状态、IP 地址、系统允许的设备标识符（例如 IDFV），以及功能点击、事件时间和运行日志。实际范围以设备系统授权、SDK 配置和友盟规则为限。
• 处理方式：SDK 自动采集并通过加密网络传输至友盟服务，用于汇总统计分析。我们未启用第三方广告功能，也不会通过本 SDK 上传聊天正文、图片、录音、视频、字幕文本或订阅交易内容。
• 权限说明：本应用不会为友盟统计申请相机、照片、麦克风或精确位置权限；如未来涉及 IDFA 等需要系统单独授权的信息，将另行取得您的系统授权。

您可查看 友盟统计 SDK 合规配置指引 和 友盟+隐私政策。

6. 信息保存与删除

• 聊天、图片、学习记录、会议纪要、视频工程、字幕、绘画结果及导出文件主要保存在设备应用沙盒内。
• 每日免费使用日期和次数保存在设备本地，日期变化后自动重置当日次数。
• 订阅交易与权益由 StoreKit 和 App Store 管理。
• 您可以在应用内删除普通会话或清空考试等固定会话；也可以删除学习记录、会议记录和视频工程。
• 边录边译期间产生的音频片段、无声视频、转写和译文仅在设备本地处理。完成并生成后，相关内容按视频工程规则保存在应用沙盒；取消本次边录边译时，应用会清理其管理的临时文件。
• 删除会议或视频工程时，应用会同时删除其管理的关联本地文件；已通过系统分享或另存的副本需由您在目标位置删除。
• 卸载本应用通常会删除应用沙盒内的数据；系统备份副本受您的 Apple 账户及备份设置控制。
• 除法律另有要求外，我们仅在实现对应功能所需的最短期间内处理信息；由您保存在本地的历史会一直保留到您删除或卸载应用。

7. 您的隐私选择与权利

您可以：

• 在系统设置中撤回相机、照片或麦克风权限；
• 在应用内删除会话、图片、学习记录、会议记录、视频工程或导出文件；
• 在 Apple 账户设置中管理自动续期订阅；
• 通过本政策中的邮箱提出查询、更正、删除、撤回同意、意见或投诉请求。

由于主要内容保存在您的设备上，我们通常无法远程读取、恢复或删除这些本地数据。需要人工核查的隐私请求，我们将在法律规定或承诺的期限内处理。

8. 信息安全

我们通过系统沙盒、应用私有目录、按需权限、端侧处理和减少不必要传输等措施保护信息。但任何存储方式都无法保证绝对安全，请妥善保护您的设备、Apple 账户和导出文件。

9. 未成年人保护

未成年人应在父母或其他监护人指导下使用本应用；不满 14 周岁的未成年人应事先取得父母或其他监护人同意。

本应用不要求未成年人提供真实姓名、学校、班级、住址、联系方式、精确位置或身份信息。请勿在聊天、图片、录音或视频中提交这些非必要信息。如监护人认为未成年人信息被不当处理，请通过本政策中的联系方式联系我们。

10. 数据传输说明

核心聊天、图片 OCR 与翻译、语音识别、视频字幕、边录边译、会议纪要和 AI 推理、视觉理解、文生图均主要在设备本地处理，我们不会主动将这些内容上传至运营者服务器，也不会将这些用户内容发送给第三方 AI 服务进行处理。边录边译仅在您主动启动后采集本次摄像头画面与麦克风音频，其语音识别和翻译在设备本地完成。 在您同意本政策后，友盟移动统计 SDK 会传输本政策第 5 节列明的统计信息；StoreKit、App Store、系统更新、系统资源下载、模型文件下载、系统备份，以及您主动执行的文件分享也可能产生网络传输。这些传输仅发生在对应功能需要、获得您的同意或您主动操作时，并受相关系统或接收方规则约束。

11. 政策更新

当功能、技术或法律要求发生变化时，我们可能更新本政策。重大变化将通过应用内提示、版本说明或本页面公告；更新后的政策自页面标明的生效日期起生效。

12. 联系我们

1. Scope and Operator

This Privacy Policy applies to the Starfire AI application for iOS (the “App”). The App is provided and operated by Yang Desong (羊德松) (“we,” “us,” or “our”).

Contact and privacy email: deyuany054@gmail.com
Contact address: 31F, West Tower, Galaxy Twin Towers, Bantian Subdistrict, Longgang District, Shenzhen, China

2. Information We Process

• Chats and generated content: text you enter, conversation titles, target languages, on-device model responses, translations, and fixed-feature conversation content.
• Images and recognized text: images you take or select, text recognized with Apple Vision OCR, image translations, question-solving content, and homework review results.
• Audio and transcripts: voice input, meeting audio segments, transcripts, translations, summaries, and playback settings.
• Video, subtitle, and translation projects: videos you import; the camera video and microphone audio captured for the current session after you start live recording translation; extracted or segmented audio, recognized text, subtitle timing, translations, voice settings, project names, and exported files. Recognition and translation for live recording translation are performed on device.
• Learning and exam records: task modes, exam settings, recognized questions, answers, explanations, associated images, exported DOCX files, and timestamps.
• Meeting records: titles, transcript segments, live translations, summaries, target languages, local audio paths, and timestamps.
• On-device drawings: prompts, negative prompts, and images generated locally with a Core ML model.
• Preferences, models, and usage state: interface language, theme, translation engine, target language, model selection and download state, local date, daily response count, and current network availability.
• App Store subscriptions: product identifiers, subscription status, offer eligibility, transaction status, and transaction-association identifiers.

Primary content is stored in the App's private on-device database or files. Exported content is stored or shared only as you direct.

3. Device Permissions

• Camera: requested only when you take a photo for image understanding, translation, question solving, or homework review, or after you start live recording translation to capture the current session's video.
• Photos: used only when you select an image or video. The App does not intentionally scan your entire photo library.
• Microphone: requested only after you start voice input, voice translation, interpretation, meeting recording, or live recording translation, to record the current session's audio and perform on-device speech recognition and translation.

You may withdraw permissions in system settings. Only features that depend on a withdrawn permission will become unavailable.

4. System Services, Downloads, and Sharing

• Apple frameworks: Camera, Photos, Vision, AVFoundation, Translation, AVSpeechSynthesizer, Core ML, and system backup support the corresponding features and are also governed by Apple's privacy terms and system settings.
• StoreKit and the App Store: used to load products, prices, and offer eligibility and to process purchases, parental approval, renewals, refunds, and restored entitlements. We do not receive card details or complete payment information.
• System resource downloads: the operating system may contact Apple to download language, voice, or system-component resources.
• Optional model downloads: when you choose to download an additional on-device model, the App requests the model file from its hosting address. The request does not contain chats, images, recordings, videos, or subscription transactions. The hosting service may process ordinary network data such as IP address, request time, and basic server logs under its own rules.
• File sharing: only after you choose Share or Export does the system share sheet provide a selected image, video, audio file, or document to the app or service you select. That recipient's rules then apply.

The App does not configure third-party advertising or cross-app advertising tracking.

5. Third-Party SDK: Umeng Mobile Analytics

To understand feature usage, evaluate operation, and improve the user experience, the App integrates the Umeng Mobile Analytics SDK, provided by Umeng Tongxin (Beijing) Technology Co., Ltd. The SDK is not initialized before you agree to this Privacy Policy. It is called only after you select “Agree & Continue.”

• Purposes: app launch and activity statistics, feature-usage analytics, operational evaluation, and product improvement.
• Information that may be processed: device model and manufacturer, operating system and version, app version and distribution channel, SDK version, language, time zone, network type and status, IP address, system-permitted device identifiers such as IDFV, feature interactions, event times, and runtime logs. The actual scope depends on system permissions, SDK configuration, and Umeng's rules.
• Method: the SDK automatically collects the above information and transmits it over an encrypted connection to Umeng for aggregated analytics. We do not enable third-party advertising through this SDK and do not send chat text, images, recordings, videos, subtitle text, or subscription transaction content to it.
• Permissions: the App does not request Camera, Photos, Microphone, or precise-location permission for Umeng Analytics. If a future feature requires IDFA or other separately permissioned information, we will first request the applicable system authorization.

See the Umeng Analytics SDK Compliance Guide and Umeng+ Privacy Policy.

6. Storage and Deletion

• Chats, images, learning records, meeting notes, video projects, subtitles, drawings, and exports are primarily stored in the App sandbox.
• The local date and daily free-response count are stored on the device and reset when the date changes.
• Subscription transactions and entitlements are managed by StoreKit and the App Store.
• You may delete ordinary conversations, clear fixed conversations such as Exam, and delete learning records, meeting records, and video projects.
• Audio segments, silent video, transcripts, and translations created during live recording translation are processed locally. If you complete and generate the result, they are saved in the App sandbox under the existing video-project rules. If you cancel the session, the App removes the temporary files it manages.
• Deleting a managed meeting or video project also removes its associated local files. Copies you shared or saved elsewhere must be deleted at their destination.
• Uninstalling the App normally removes sandbox data. System-backup copies are controlled by your Apple account and backup settings.
• Unless law requires otherwise, information is processed only for the shortest period needed for the relevant feature. Local history remains until you delete it or uninstall the App.

7. Your Choices and Rights

You may withdraw device permissions, delete local records and projects, manage auto-renewable subscriptions in your Apple account settings, or contact us to request access, correction, deletion, withdrawal of consent, or to submit a complaint. Because primary content is stored on your device, we generally cannot remotely read, recover, or delete it.

8. Security

We use system sandboxing, private application storage, on-demand permissions, on-device processing, and data minimization. No storage method is completely secure, so please protect your device, Apple account, and exported files.

9. Protection of Minors

Minors should use the App with a parent or guardian. Users under 14 should obtain parent or guardian consent before use.

The App does not require minors to provide a real name, school, class, address, contact details, precise location, or identity information. Do not include unnecessary personal information in chats, images, recordings, or videos. If a guardian believes a minor's information has been handled improperly, please contact us using the details in this Policy.

10. Data Transfer

Core chat, image OCR and translation, speech recognition, video subtitles, live recording translation, meeting notes, and drawing generation are primarily processed on device. We do not actively upload this content to a server operated by us. Live recording translation captures the current session's camera video and microphone audio only after you start it, and performs speech recognition and translation on device. After you agree to this Policy, the Umeng Mobile Analytics SDK transmits the analytics information described in Section 5. StoreKit, the App Store, system updates, resource downloads, model downloads, system backups, and file sharing you initiate may also involve network transfers governed by the relevant system or recipient.

11. Changes to This Policy

We may update this Policy as features, technology, or legal requirements change. Material changes will be announced in the App, release notes, or on this page. The revised Policy takes effect on the date shown above.

12. Contact Us