1. 适用范围与联系
本政策适用于 Jarvan Yan 提供的口袋文档 iOS App 及配套服务。您使用不同功能时，处理的信息范围不同。隐私或数据请求请联系 yanjiawen1992@gmail.com，也可通过 App 内帮助反馈联系我们。
2. 本地文件与系统权限
扫描、普通文字识别、文档阅读编辑、签名、水印及支持的本地转换会访问您选择或创建的文件。文件与编辑结果默认保存在设备上；保存到 iPhone 文件或系统分享时，由您选择位置及接收方。系统文件提供方可能是您自行启用的云盘。相机仅用于主动拍摄和扫描；相册选择器只向 App 提供您选中的项目，保存图片时按系统要求申请添加权限。您可在系统设置撤回权限，并改用文件导入。部分本机转换为核对费用、免费额度和保存状态，会提交源文件与结果的摘要、大小、所选页数、操作类型及任务或保存回执；这一计费流程不上传文件正文。我们不因连接账户而自动上传整个本地文件库。
3. 账户、会员与积分
账户服务处理本 App 范围内的 iCloud 身份关联信息、随机安装标识、验证证明和会话凭据、应用版本及语言，以及会员状态、积分余额与收支、使用额度、邀请关系和审核结果。这些信息用于连接账户、同步权益、处理请求、防止重复发放及欺诈。Apple CloudKit 用于 iCloud 身份验证；我们的服务器保存账户与权益记录。App Store 付款账户可以与设备 iCloud 账户不同。Apple 处理支付，我们接收交易标识、商品、购买和到期时间、退款或撤销状态及购买校验数据，用于到账和恢复；不会取得您的 Apple 账户密码或银行卡信息。
4. 云端文档与 AI 处理
只有在您选择可用的云端工具并确认上传后，才会传输该任务选定的文件、文件名、页面、提取文字或页面图像，以及处理选项、文件大小和页数。服务器及相应云服务处理这些内容并返回结果。保留结构的云端压缩与普通本机压缩属于不同处理方式，请以工具上传说明为准。AI 处理仅在功能显示可用时提供，使用前显示处理范围、地区和费用。您可在提交前取消；取消不能保证撤回已经提交到云服务的处理。请确保您有权处理文件及其中的个人信息，敏感资料可优先选择本机处理。
5. 服务商与处理地区
Apple 提供 iCloud、CloudKit 和 App Store 服务。口袋文档账户及处理服务器目前托管于阿里云中国内地；可用云端文档转换由阿里云文档服务处理，AI 服务启用时由阿里云提供。相应服务商仅在所需流程中接收身份验证、支付校验或您确认提交的任务内容；详情可查看下方官方隐私政策。本政策说明当前服务器所在地；云端工具使用前会说明处理方式，AI 启用时另行显示处理地区；Apple 的处理地区受其服务安排和隐私政策约束。如服务地区或接收方发生实质变化，将更新说明并在适用时取得必要同意。
6. 广告与隐私选择
支持新开屏规则的版本中，应用可能在每天首次打开时展示一次开屏广告，此后每累计3次真正从后台返回前台时再展示一次，按北京时间自然日重新计算。开屏广告仅在合适的打开或返回加载阶段展示，首次完成隐私说明当次不展示；旧版本保留其原有开屏规则。非会员的扫描保存页可能在保存按钮上方显示横幅广告；会员不显示此横幅。支持新版普通转换规则的版本中，非会员每成功完成3次普通转换后可能展示一次插屏广告，免费和积分付费转换均计次，原积分扣费规则保持不变；会员免普通转换插屏。您也可主动选择观看激励视频获得积分。广告使用 Google Mobile Ads SDK 和 Google UMP 同意管理工具。为请求和展示广告、衡量效果、分析及防止欺诈，我们和 Google 可能处理受系统权限和地区设置限制的设备与标识信息、广告展示及互动记录、IP 地址及由此推断的大致位置、设备信息，以及性能、崩溃和诊断数据。我们请求非个性化广告，并关闭发布商广告个性化和第一方标识功能；不请求 App Tracking Transparency（ATT）追踪权限，不使用广告数据在其他公司的 App 或网站间追踪您的活动。拒绝 Apple 追踪权限不会单独阻止广告请求；地区性同意和适用法律要求仍须遵守。UMP 按您的隐私选择决定是否可请求广告及适用的受限广告处理；不能请求广告、无库存、网络失败或加载超时时可继续使用 App，不会因此强制追踪。广告不会获取您的文档内容。首次启动会提供隐私说明；需要时提供地区性同意表单。需要提供隐私选项时，您可从“我的 → 更多设置 → 广告隐私选项”或激励广告页修改选择。开屏、横幅和普通转换插屏均不奖励积分。支持后台配置奖励规则的版本默认每次完整观看奖励2积分、每日最多5次；活动可开启或暂停，单次积分及每日次数可调整，以观看前页面显示的当前规则为准，按北京时间重置。已开始观看的奖励按领取时规则兑现。已发布旧版本保留原每次1积分、每日最多3次规则。激励积分仅在服务器核验 Google 签名回调后入账；客户端播放回调不会直接发分。奖励积分仅用于 App 服务，不可提现或转让。Google 对其收集信息的使用与保存依其隐私政策执行。
7. 反馈与运行信息
诊断日志默认仅在设备收集。您主动选择发送诊断时，会上传加密的崩溃或运行诊断文件，以及报告编号、发生时间、应用版本和构建号、设备型号、系统版本，并与本次服务账户关联，用于排查故障。诊断包含崩溃堆栈和固定的功能步骤，不包含文档正文、文件名、密码或登录凭据。只能上传最近7天的报告；更早的报告可通过系统分享自行选择接收方，或在本机删除。打开诊断页面、发生崩溃或重新启动均不会自动上传诊断。
您主动发送反馈时，会上传问题描述、选填联系方式、所选截图及必要的应用信息，用于回复和排障。未发送内容不会因反馈入口自动上传。服务器会处理请求所需的 IP 地址、访问时间、请求路径、任务状态、错误信息和安全校验记录，用于服务运行、防滥用和故障排查。我们不出售个人信息，也不会使用广告数据在其他公司 App 或网站间跟踪您的活动。
8. 保存期限
设备最多保留20份加密诊断，您可手动删除；达到上限时优先清理最早的报告，不因超过7天而自动删除。上传的诊断在后台保留30天后安排清理，删除服务账户也会移除其诊断；本机删除不自动撤回已上传或已分享的副本，后台删除可通过帮助反馈申请。
本地文件由您管理，卸载 App 可能删除本机数据。云端任务的输入和结果按任务创建起 1 小时有效期管理，保存确认、取消或过期后安排清理；网络、处理中任务及清理失败可能造成延迟，并不表示到期瞬间完成物理删除。自有云存储异常残留会继续安排清理；第三方处理结果遵循其独立规则，不能用本服务期限替代第三方规则。账户、积分、会员、邀请及反馈记录在提供服务期间保留，或按您的有效删除请求处理。为防止同一广告交易重复发奖，账户删除后仍可能保留不含账户标识的交易摘要；Google 收集的信息按其政策保存。必要的交易、防滥用、安全及依法留存记录按相应用途保留；运维备份在正常替换或清理前可能包含历史记录。
9. 访问、更正与删除
您可在 App 查看积分与账户状态，并通过帮助反馈或邮箱申请访问、更正、导出或删除相关资料。支持账户删除的版本可从“我的 → iCloud 账户 → 删除账户”发起；如入口暂不可用，请通过邮箱申请，我们会核验必要信息并依法处理。删除会清除活跃账户、积分、会员关联、邀请与反馈记录，并使会话失效；本机文档保留。系统会保留最少量的去标识化删除、防重复交易和防滥用凭据（包括广告交易摘要），避免旧购买或身份静默重建已删除账户。卸载 App 不等于删除服务账户，删除服务账户也不会自动取消 Apple 订阅。请勿向客服发送 Apple 密码、完整支付卡信息或无关敏感文档。
10. 安全与您的选择
我们使用 HTTPS、访问限制、身份校验和隔离的服务配置保护数据，但任何系统都不能保证绝对安全。您可管理系统权限、选择本机工具、在上传前取消、导出并删除本地文件，或在 Apple 系统中管理订阅。基于同意进行的处理可撤回；撤回不影响撤回前合法进行的处理，拒绝必要信息可能影响对应功能。依法需要提供信息、处理安全事件或保护合法权益时，我们会在必要范围内处理或披露。
11. 未成年人及政策更新
本 App 不专门面向儿童。未成年人应在监护人指导下使用；如发现未经适当同意处理了未成年人信息，请联系我们。功能或数据处理变化时会更新本页并标明日期，重大变化会通过适当方式提示，并在适用时重新取得同意。
Privacy Policy
1. Scope and contact
This policy applies to the Pocket Documents iOS app and related services provided by Jarvan Yan. The data processed depends on the features you use. Contact yanjiawen1992@gmail.com or in-app support for privacy and data requests.
2. Local files and permissions
Scanning, ordinary OCR, document viewing/editing, signatures, watermarks and supported local conversions access the files you select or create. Files and results are stored on your device by default. You choose the destination and recipients when saving to Files or sharing; system file providers may include cloud drives you have enabled. Camera access is used for scanning or taking photos you initiate. The system photo picker provides only selected items; permission to add photos is requested when required for export. Permissions can be withdrawn in Settings. Some local conversions send source/result digests, file size, selected page counts, operation type and task/save receipts to verify charges, free allowances and save status. This billing flow does not upload the file content. Connecting an account does not automatically upload your entire local library.
3. Accounts, membership and points
Account services process the app-scoped iCloud identity association, random installation identifier, verification proofs and session credentials, app version/language, membership status, points and usage records, referral relationships and review outcomes. These support account continuity, entitlement delivery, requested functions and prevention of duplicate rewards or fraud. Apple CloudKit supports iCloud verification; our servers store account and entitlement records. The App Store payment account may differ from the device iCloud account. Apple processes payments; we receive transaction and product identifiers, purchase/expiry times, refund or revocation status and verification data. We do not receive your Apple password or payment card details.
4. Cloud document and AI processing
When you choose an available cloud tool and confirm upload, the task may send selected files, filenames, pages, extracted text or page images, processing options, file size and page counts. Our server and the relevant cloud provider process this content and return a result. Cloud compression that preserves document structure differs from ordinary local compression; check the upload notice for the selected tool. AI processing is provided only when shown as available, with scope, processing region and cost disclosed before use. You can cancel before submission. Cancellation cannot guarantee recall of processing already submitted to a provider. Ensure you are authorized to process the file and personal information within it; local tools are available for supported workflows.
5. Providers and processing regions
Apple provides iCloud, CloudKit and App Store services. Our account and processing servers are currently hosted by Alibaba Cloud in mainland China. Available cloud document conversion uses Alibaba Cloud document services; AI processing, when enabled, also uses Alibaba Cloud. Providers receive the verification, transaction or task data required for the requested process. See their official privacy information below. This policy states the current server location. Cloud tools explain their processing method before use, and AI tools separately show their processing region when enabled; Apple processing locations follow its service arrangements and policy. Material changes to locations or recipients will be disclosed, with consent where required.
6. Advertising and privacy choices
In versions supporting the new app-open rules, the app may show one app-open ad on the first opening of each day, then after every three actual transitions from the background to the foreground. The day resets at China Standard Time midnight. App-open ads appear only during suitable opening or return loading opportunities, not when the first privacy notice has just been completed. Older versions retain their original app-open rules. Nonmembers may see a banner above the save button on the scan-save page; members do not see this banner. In versions supporting the updated ordinary-conversion rules, nonmembers may see an interstitial after every three successful ordinary conversions. Both free and point-paid conversions count, and existing point charges still apply. Members are exempt from these interstitials. You may also voluntarily watch a rewarded video to earn points. Advertising uses Google Mobile Ads SDK and Google UMP consent management. To request and display ads, measure performance and prevent fraud, we and Google may process device and identifier information subject to system permissions and regional settings, impressions and interactions, IP address and approximate location inferred from it, device information, and performance, crash and diagnostic data. We request non-personalized ads and disable publisher personalization and the publisher first-party identifier. We do not request App Tracking Transparency (ATT) permission or use ad data to track activity across other companies’ apps or websites. Denying Apple tracking permission alone does not prevent ad requests; regional consent and applicable legal requirements still apply. UMP determines whether ads may be requested and the applicable limited-ad treatment based on your choices. You can continue using the app when ads cannot be requested, there is no inventory, the network fails or loading times out. We do not force tracking. Ads do not access document contents. A privacy notice is available at first launch, with regional consent forms when required. When privacy options are required, open Me > More Settings > Advertising Privacy Options or the rewarded-ad page to change your choices. App-open ads, banners and ordinary-conversion interstitials do not grant points. Versions supporting remotely managed rewards default to two points per completed ad and up to five views per day. The offer may be enabled or paused, and the reward and daily limit may change; the current rules are shown before viewing and reset at China Standard Time midnight. A started viewing keeps the reward accepted at claim time. Previously released versions retain one point per ad and a three-view daily limit. Points are credited only after our server verifies Google’s signed callback; client playback callbacks never grant points directly. Points are for in-app services and cannot be redeemed for cash or transferred. Google’s use and retention of its data follow its privacy policy.
7. Support and operational data
Diagnostics are collected on the device by default. Only when you choose to send a diagnostic do we receive the encrypted crash or runtime report, report identifier, occurrence time, app version and build, device model and system version, linked to the current service account for troubleshooting. Reports contain crash stacks and fixed action steps, excluding document contents, document names, passwords and sign-in credentials. Only reports from the past 7 days can be uploaded; older reports can be shared with a recipient you choose through the system share sheet or deleted locally. Opening diagnostics, crashing or restarting never automatically uploads a report.
Sending feedback uploads your message, optional contact information, selected screenshots and necessary app information for support. Opening feedback does not automatically send unfinished content. Servers process IP addresses, request times/paths, task status, errors and security records as needed to operate services, prevent abuse and diagnose issues. We do not sell personal information or use ad data to track your activity across other companies' apps or websites.
8. Retention
The device retains up to 20 encrypted diagnostics, which you may delete manually; when the limit is reached, the oldest reports are removed. Reports are not automatically removed merely because they are older than 7 days. Uploaded diagnostics are scheduled for cleanup after 30 days and are also removed when the service account is deleted. Local deletion does not withdraw uploaded or shared copies; you may request server deletion through support.
You manage local files; uninstalling may remove on-device data. Cloud task input and result files use a one-hour validity period from task creation, with cleanup scheduled following save acknowledgement, cancellation or expiry. In-flight work, network issues or cleanup failures can delay physical deletion. Residual objects in our cloud storage remain scheduled for cleanup; third-party results follow separate provider rules. Account, points, membership, referral and feedback records are retained for service operation or addressed through valid deletion requests. A non-account-identifying ad transaction digest may remain after account deletion to prevent duplicate rewards; information collected by Google follows its policy. Minimal transaction, anti-abuse, security and legally required records may remain for the relevant purposes. Operational backups can retain historical data until normal replacement or cleanup.
9. Access, correction and deletion
View account and points information in the app or request access, correction, export or deletion through support/email. Versions supporting account deletion offer Me > iCloud Account > Delete Account. If unavailable, email us; we will verify necessary information and handle the request as required by applicable law. Deletion removes active account, points, membership associations, referral and feedback records and invalidates sessions. Local documents remain. Minimal de-identified deletion, duplicate-transaction and anti-abuse proofs (including an ad transaction digest) remain to prevent silent recreation of a deleted account. Uninstalling does not delete the service account; deleting the service account does not cancel Apple subscriptions. Do not send Apple passwords, full payment card details or unrelated sensitive documents to support.
10. Security and choices
We use HTTPS, access restrictions, identity verification and isolated service configuration. No system can guarantee absolute security. You may manage permissions, use local tools, cancel before upload, export/delete local files and manage subscriptions through Apple. Consent-based processing can be withdrawn without affecting lawful prior processing; withholding necessary information may prevent the related feature. We may process or disclose necessary information to meet legal requirements, handle security incidents or protect lawful rights.
11. Minors and updates
The app is not specifically directed to children. Minors should use it with guardian guidance; contact us if information was processed without appropriate consent. We will update this page and its date when practices change, communicate material changes appropriately and obtain renewed consent where required.