仓鼠记账 隐私政策
生效日期：2026 年 8 月 6 日 · 适用产品：仓鼠记账（Hamster Ledger）iOS 应用
仓鼠记账是一款个人实物资产记录工具。本政策说明我们如何处理你的数据。简而言之：我们不收集你的任何数据。你的资产记录和照片只保存在你的设备和你自己的 iCloud 账户中，开发者无法访问。
一、我们处理的数据
- 资产记录：你录入的物品名称、分类、价格、购买日期、渠道、品牌型号、保修信息、备注、出售/报废状态。
- 图片：你拍摄或选择的商品照片、发票与订单截图。
- 偏好设置：估算现值、保修提醒、iCloud 同步、语言等开关状态。
二、数据存储在哪里
- 你的设备：上述数据默认存储在设备本地数据库中。
- 你的 iCloud 账户：开启 iCloud 同步后，数据通过 Apple CloudKit 同步到你的 iCloud 私有数据库。该空间属于你的 Apple 账户，数据由 Apple 按其隐私政策托管，开发者（我们）无权访问、无法读取。你可以随时在设置中关闭同步，关闭后新数据仅保存在本地。
三、我们不做的事
- 不收集、不上传、不分析你的任何使用数据；
- 没有账号系统，不要求注册登录；
- 不包含广告、不包含任何第三方统计或分析 SDK；
- 不跟踪你（App Tracking Transparency 意义上的"跟踪"为零）；
- 不出售、不共享你的个人信息给任何第三方。
四、系统权限的使用
- 相机：仅用于拍摄商品照片，照片保存在你的设备/你的 iCloud 中。
- 照片图库：仅用于你选择商品照片或订单截图。通过系统相册选择器访问，我们无法浏览你的图库。
- 通知：仅用于保修到期前的本地提醒（到期前 30 天/7 天），通知由设备本地调度，不经过任何服务器。
- 文字识别（OCR）：订单截图的识别使用 Apple Vision 框架在设备本地完成，截图不会上传到任何服务器。
五、数据导出与删除
- 你可以随时在「设置」中导出全部资产为 CSV 文件，文件由系统分享面板交给你处理。
- 你可以在应用内随时编辑或删除任何记录；删除应用会同时删除设备上的本地数据。
- 删除 iCloud 中的数据：关闭同步后删除应用，或通过「设置 → Apple 账户 → iCloud → 管理储存空间」删除应用数据。
六、数据安全
本地数据受 iOS 系统沙箱与设备加密保护；同步数据经由 Apple CloudKit 以加密通道传输并存储于你的私有数据库。由于数据不经过我们的服务器，不存在我们侧的数据泄露风险。
七、儿童
本产品不面向 13 岁以下儿童，也不会有意收集儿童信息。
八、政策变更
如本政策更新，我们会在本页面发布新版本并更新生效日期。重大变更会在应用内提示。
九、联系我们
如对本政策或数据处理有疑问，请联系：【stevenjonathan776@hotmail.com】
Hamster Ledger Privacy Policy
Effective: August 6, 2026 · Applies to the Hamster Ledger iOS app
Hamster Ledger is a personal asset-tracking app. In short: we collect nothing. Your records and photos live only on your device and in your own iCloud account — the developer cannot access them.
1. Data We Process
- Asset records: item names, categories, prices, purchase dates, channels, brands/models, warranty info, notes, and sold/scrapped status that you enter.
- Images: product photos, receipts and order screenshots you capture or pick.
- Preferences: toggles for value estimation, warranty reminders, iCloud sync, and language.
2. Where Your Data Lives
- On your device: everything is stored in the on-device database by default.
- In your iCloud account: if you enable iCloud sync, data syncs via Apple CloudKit to your private iCloud database. That space belongs to your Apple account and is hosted by Apple under their privacy policy. The developer has no access to it. You can turn sync off at any time in Settings; new data then stays local only.
3. What We Don't Do
- No collection, upload, or analysis of your usage data;
- No accounts, no sign-up;
- No ads, no third-party analytics or tracking SDKs;
- No "tracking" as defined by Apple's App Tracking Transparency;
- No sale or sharing of your personal information with third parties.
4. How System Permissions Are Used
- Camera: only to take product photos, stored on your device or in your iCloud.
- Photo Library: only to let you pick photos or order screenshots via the system photo picker, which does not give us library access.
- Notifications: only for local warranty-expiry reminders (30/7 days ahead), scheduled entirely on-device with no server involved.
- OCR: order screenshots are recognized on-device using Apple's Vision framework. Screenshots are never uploaded.
5. Export & Deletion
- Export all assets as CSV anytime from Settings; the file is handed to you via the system share sheet.
- Edit or delete any record in the app at any time. Deleting the app removes its local data from your device.
- To remove synced data: disable sync and delete the app, or use Settings → Apple Account → iCloud → Manage Storage.
6. Security
Local data is protected by the iOS sandbox and device encryption. Synced data travels over CloudKit's encrypted channels into your private database. Because nothing passes through our servers, there is no developer-side data to breach.
7. Children
The app is not directed at children under 13 and does not knowingly collect their information.
8. Changes
We will post updates on this page with a new effective date, and call out material changes in the app.
9. Contact
Questions about this policy: [stevenjonathan776@hotmail.com]