PhotoSpeak 隐私政策

最后更新：2026-09-22

一、服务说明

PhotoSpeak 是一款帮助你通过描述照片练习英语口语的应用。每天选一张照片，录一段英语，AI 自动批改、改写、生成播客和复习卡片。使用本应用即表示您接受以下条款。

二、我们收集的信息

  1. 账号信息：通过 Apple ID 登录时收集 Apple 提供的用户标识符（Apple sub），如您选择共享，还包括邮箱与姓名。通过手机号登录时收集您的手机号。
  2. 学习内容：您选择的照片、录制的语音、对应的文本（英文转写、AI 改写后的版本、AI 生成的对话上下文）。这些内容主要保存在您的设备本地；进行 AI 分析时通过加密通道（HTTPS）传输至下述第三方服务商。
  3. 使用与运维统计：每日学习次数、收听时长、复习卡片数量，以及 AI 能力类型、模型标识、token 或字符数量、耗时、请求状态和订阅套餐。长期运维记录不保存照片、录音、提示词或生成正文。为避免网络重试造成重复调用和重复计费，我们会按下文所述短期保存加密的 AI 响应。
  4. 可选诊断数据：“发送诊断数据”默认关闭。仅在您登录后主动开启时，Sentry 才会接收崩溃堆栈、错误类型、应用/系统版本、设备类型、少量性能轨迹、事件时间及去标识化事件/设备标识。发送前会移除请求正文、认证头、照片、录音、转写、AI 正文和控制台消息正文。

三、我们如何使用这些信息

  1. 账号信息用于识别和恢复您的账号，不会用于推送广告或第三方营销。
  2. 学习内容仅用于：(a) 向第三方 AI 服务商发送以生成分析、改写、语音；(b) 在您的设备本地存储以便复习。
  3. 第三方服务商：
    • 火山引擎（豆包大模型/方舟）（图像理解、文本分析、语音合成和语音转文字）—— 服务商网站
    • Sentry（可选的崩溃、错误与性能诊断）—— 数据区域：European Union (Germany)；诊断事件最多保留 30 天。您可随时在 app 的 Account 页面关闭，关闭后不再发送新事件。
    • 第三方处理范围、留存期限和是否用于改进服务，以我们与服务商适用的企业协议及其隐私政策为准。我们会在更换服务商或处理方式发生重大变化时更新本政策。

四、数据存储与传输

  1. 账号信息存储于位于中华人民共和国境内的服务器（阿里云上海地域），以 PostgreSQL 数据库保存。
  2. 照片、原始录音及完整学习历史的长期副本仅存储于您的本地设备。为完成 AI 功能，照片、转写文本或待合成文本会经由我们的服务器转发至第三方服务商；请求正文不会写入业务数据库。
  3. 为安全恢复中断的请求，AI 分析与追问响应会以 AES-256-GCM 加密形式最多保留 72 小时，语音合成响应最多保留 24 小时。为防止旧请求在未来被重复执行和计费，仅含不可逆请求键摘要、键控内容哈希及运行状态的去重记录会保留：新版请求通常在 400 天拒绝期及 7 天安全余量后分批删除，内测旧版请求则保留至账号永久删除；其中不含照片、录音、转写、提示词或生成正文。上述数据只用于安全重放和防重复计费，不用于训练、广告或建立云端学习档案。
  4. 启用诊断时，诊断事件经 TLS 传输至上述 Sentry 区域，并按上述期限自动删除。关闭开关不会影响登录、练习、AI 或订阅功能。
  5. 所有 API 请求通过 HTTPS（TLS 1.2+）加密传输。

五、您的权利

  1. 注销账号：在 app 内的"账号"页面点击"注销账号"。本机学习内容会立即且不可恢复地删除；服务器账号进入 7 天冷静期，期间重新登录可恢复账号（不恢复已删除的本机内容）；冷静期满后服务器侧账号信息将被永久删除。
  2. 查询和更正：在 app 内"账号"页面修改昵称。如需查询或更正其他信息，请发邮件至 heyyiru@gmail.com。
  3. 本地数据清理：在 iOS"设置 → 通用 → iPhone 储存空间 → PhotoSpeak"中卸载 app 即可清空所有本地学习内容。
  4. 诊断退出：在 app 的 Account 页面关闭“发送诊断数据”，即可立即阻止新的错误与性能事件发送；如需处理已发送事件，请通过下方邮箱联系我们。

六、用户行为规范

  1. 禁止上传违法、淫秽、骚扰他人的内容。
  2. 不得利用本应用进行任何商业用途的批量内容生成。

七、免责声明

AI 生成的英语建议仅供学习参考，不保证语法绝对准确。正式书面或考试场合请人工复核。

八、政策变更

本政策可能更新。重大变更将通过 app 内通知或邮件方式告知。继续使用即视为接受变更后的条款。

九、联系我们

如有任何疑问，请联系：heyyiru@gmail.com

Privacy Policy (English)

Last updated: 2026-09-22

1. About

PhotoSpeak helps Chinese-native English learners practice spoken English by describing photos. By using the app you agree to this policy.

2. Information we collect

  1. Account info: When you sign in with Apple, we receive Apple's user identifier (and, if you choose to share, your email and name). When you sign in with phone, we receive your phone number.
  2. Learning content: Photos you pick, audio you record, and the resulting transcripts / AI-polished text / AI-generated audio. These live on your device; copies are sent over encrypted HTTPS to the third-party AI services below for processing.
  3. Usage and operations metadata: Learning counts shown in-app, plus AI capability, model identifier, token or character counts, latency, request status, and subscription plan. Long-term operations records do not store photos, recordings, prompts, or generated content. As described below, an encrypted AI response is retained briefly to make retries safe and avoid duplicate charges.
  4. Optional diagnostics: “Send diagnostics” is off by default. Only after you sign in and actively enable it does Sentry receive crash stacks, error types, app/OS versions, device type, a small sample of performance traces, timestamps, and pseudonymous event/device identifiers. Before sending, we remove request bodies, authentication headers, photos, recordings, transcripts, AI content, and console-message bodies.

3. How we use it

  1. Account info is used to identify and recover your account. We don't sell or share it for marketing.
  2. Learning content is sent to (a) AI services for analysis / TTS / ASR; (b) stored on your device for review.
  3. Third-party services:
    • 火山引擎（豆包大模型/方舟） (image and text analysis, TTS, and speech-to-text) — provider website
    • Sentry (optional crash, error, and performance diagnostics) — data region: European Union (Germany); diagnostic events are retained for up to 30 days. You can disable new collection at any time in the app's Account screen.
    • Processing scope, retention, and service-improvement use are governed by the applicable enterprise agreements and provider privacy policies. We update this policy when a provider or material processing practice changes.

4. Storage and transit

  1. Account info is stored on servers located in the People's Republic of China (Aliyun, Shanghai region) in a PostgreSQL database.
  2. Long-term copies of photos, original recordings, and complete learning history stay on your device. To perform AI functions, a photo, transcript, or text to synthesize transits our server on its way to the listed processor; request bodies are not written to our application database.
  3. To recover interrupted requests safely, AI analysis and follow-up responses are stored with AES-256-GCM encryption for up to 72 hours, and speech-synthesis responses for up to 24 hours. To prevent an old request from being executed and charged again, an irreversible request-key digest, keyed content hash, and operational state are retained: new-version request records are normally batch-deleted after a 400-day rejection horizon plus a seven-day safety margin, while legacy beta request records remain until the account is permanently deleted. These records contain no photo, recording, transcript, prompt, or generated content and are used only for safe replay and duplicate-charge prevention, never for training, advertising, or a cloud learning archive.
  4. When diagnostics are enabled, events travel over TLS to the Sentry region above and are automatically deleted under the stated retention. Turning diagnostics off does not affect sign-in, practice, AI, or subscription features.
  5. All API traffic is encrypted via HTTPS (TLS 1.2+).

5. Your rights

  1. Delete account: In-app, Account → Delete account. On-device learning content is deleted immediately and cannot be restored. The server account enters a 7-day cooldown; signing in again during that window restores the account, but not deleted local content. After 7 days the server-side account is permanently removed.
  2. Access and correction: Edit your nickname in-app. For other queries email heyyiru@gmail.com.
  3. Local data wipe: Uninstalling the app from iOS Settings clears all on-device learning content.
  4. Diagnostics opt-out: Turn off “Send diagnostics” in the app's Account screen to immediately stop new error and performance events. Contact us below about already-sent events.

6. User conduct

  1. No uploading illegal, obscene, or harassing content.
  2. No using the app for commercial bulk content generation.

7. Disclaimer

AI-generated English suggestions are for learning reference only. Verify them manually for formal writing or exams.

8. Changes to this policy

This policy may change. Material changes will be communicated via in-app notice or email. Continued use means you accept the updated terms.

9. Contact

For any questions email heyyiru@gmail.com