1我们收集哪些信息

没有。我们不收集任何信息。

这不是修辞。本应用不包含任何网络请求代码、不集成任何第三方 SDK、没有埋点统计， 因此不存在任何信息离开你手机的技术途径。你可以开启飞行模式使用它的全部功能。

2你的数据存在哪里

• 账户与金额：你录入的账户名称、每月余额、房贷车贷参数， 保存在本机应用沙盒的数据库中。
• 设置项：月均开支、月收入、记录频率、应用锁开关、脱敏开关、 提醒开关，同样保存在本机。
• 加密方式：数据库启用 iOS 系统的完全文件保护 （Data Protection，密钥由设备的安全隔区托管）。设备锁屏后，即使数据文件被取出， 也无法解密——包括本应用自己在内。

3数据离开设备的两种方式

都由你主动发起，都要经过系统的分享面板由你选择去向。除此之外没有第三种途径。

• 加密备份（.jdbak）——「设置 → 导出加密备份」。 文件由你设置的密码加密（AES-256-GCM）。我们不保存这个密码，也无法帮你找回： 忘记密码，这份备份就再也打不开了。
• 资产负债表（PDF）——「设置 → 导出资产负债表」。 这份文件是给人看的：伴侣、会计、银行。因此它不加密， 任何拿到它的人都能直接读到你的资产、负债与净资产。

请留意这两者的区别。备份文件没有密码打不开； PDF 报表是明文，请像对待任何一份纸质对账单那样保管它。 即使 App 里开着「隐藏金额」，导出的报表仍是真实数字——报表的用途就是给人看真实数字。

两份文件生成后都由你自己保管：存到「文件」App、隔空投送、或转到电脑上都可以。 文件一旦离开本应用，它的去向由你决定，我们无从知晓也无法干预。

4系统备份

如果你开启了 iPhone 的整机备份（iCloud 备份或电脑备份），本应用的数据会作为整机备份的一部分 被一并备份。这是 iOS 的系统行为，由你在系统设置中控制，数据存放在你自己的 Apple 账户中，我们无法访问。

5本地通知

若你开启更新提醒，提醒会按你选择的记录频率（每月 / 每两个月 / 每季度）在你的设备本地排程。 通知内容在排程时就已确定，不需要联网，也不会读取或发送任何数据。

通知权限只在你主动点「好，提醒我」之后才会申请。你也可以随时在设置里关掉。

6我们不会做的事

• 不收集姓名、手机号、邮箱等任何个人身份信息，不需要注册或登录。
• 不追踪你的活动，不投放广告，不接入任何第三方分析 SDK。
• 不出售、出租或与任何第三方共享你的数据——我们根本没有你的数据。

7删除数据

应用内「设置 → 清空全部数据」会删除本机上的全部账户、历史记录与设置，之后回到首次引导。 删除本应用同样会删除全部数据。两种方式都无法撤销——没有服务器， 也就没有可以找回的地方。

若你之前导出过备份或报表，那些文件由你自己保管，需要你自行删除。

8儿童隐私

本应用适合所有年龄使用。因为不收集任何用户的个人信息，所以也不会收集儿童的个人信息。

9免责说明

本应用提供的是你自己录入数据的汇总与展示，以及基于公开常识区间的一般性参考信息， 不构成任何投资建议、财务建议或专业意见。 房贷剩余本金、车辆估值、月还款额等由公式推算得出，与银行或市场的实际数字可能存在差异， 请以对应机构的正式数据为准。

10政策更新与联系

如本政策有更新，我们会修改本页顶部的生效日期。若你对隐私有任何疑问，请联系：

联系邮箱   bao307976752@gmail.com

1What we collect

Nothing. We collect no information whatsoever.

This is not a figure of speech. The app contains no network request code, integrates no third-party SDK and has no analytics, so there is no mechanism by which anything could leave your device. Every feature works in aeroplane mode.

2Where your data lives

• Accounts and figures — the account names, monthly balances and loan or depreciation parameters you enter, stored in a database inside the app's own sandbox on this device.
• Settings — monthly spend, monthly income, recording cadence, app lock, amount masking and reminder preferences. Also on this device only.
• Encryption — the database uses iOS complete file protection, with keys held by the device's Secure Enclave. Once the device is locked the files cannot be decrypted even if extracted — not by anyone, including the app itself.

3The two ways data can leave your device

Both are started by you, and both go through the system share sheet where you choose the destination. There is no third route.

• Encrypted backup (.jdbak) — Settings → Export encrypted backup. The file is encrypted with a password you choose (AES-256-GCM). We do not store that password and cannot recover it: if you forget it, the backup can never be opened again.
• Balance sheet (PDF) — Settings → Export balance sheet. This document is meant to be read by a person: a partner, an accountant, a bank. It is therefore not encrypted, and anyone who obtains it can read your assets, liabilities and net worth directly.

Please note the difference. The backup file is useless without its password; the PDF report is plain text. Treat it as you would any paper bank statement. Note also that the report always contains real figures even when "hide amounts" is switched on in the app — showing real figures is the report's entire purpose.

Once generated, both files are yours to keep — save to Files, AirDrop them, move them to a computer. After a file leaves the app, where it goes is your decision; we have no knowledge of it and no ability to intervene.

4System backups

If you have iPhone backups enabled (iCloud or computer), this app's data is included as part of that whole-device backup. This is iOS behaviour, controlled by you in system settings. The data goes to your own Apple account, which we cannot access.

5Local notifications

If you turn reminders on, they are scheduled locally on your device according to the recording cadence you chose (monthly, every two months, or quarterly). The content is fixed at scheduling time; no network access is involved, and no data is read or transmitted.

Notification permission is only requested after you actively accept the in-app offer, and can be turned off again at any time in settings.

6What we do not do

• We collect no name, phone number, email or any other identifying information. There is no registration and no login.
• We do not track your activity, serve advertising, or embed any third-party analytics.
• We do not sell, rent or share your data with anyone — we do not have your data.

7Deleting your data

Settings → 清空全部数据 (Erase all data) removes every account, every recorded figure and every preference from this device, returning the app to its first-run state. Deleting the app removes the same data. Neither can be undone — there is no server, so there is nowhere for it to be recovered from.

Any backup or report files you exported earlier are in your own keeping and must be deleted by you.

8Children

The app is suitable for all ages. Since it collects no personal information from anyone, it collects none from children either.

9Not financial advice

The app summarises and presents data you entered yourself, alongside general reference ranges drawn from common public guidance. It does not constitute investment advice, financial advice or professional opinion. Outstanding loan principal, vehicle valuations and monthly repayment figures are derived from formulas and may differ from the actual figures held by your bank or the market; treat the relevant institution's own statements as authoritative.

10Changes and contact

If this policy changes we will update the effective date at the top of this page. Questions about privacy are welcome at:

bao307976752@gmail.com