计算器隐私政策
版本 1.0.0 · iPhone / iPad · 更新日期：2026 年 9 月 9 日
一、适用范围与基本原则
本政策适用于宝妈阿叶提供的「计算器 - 高精度计算工作台」（App 内显示为「计算器」，Bundle ID：com.calculatorx）及其 Widget、分享和键盘扩展。应用无需开发者账号，一次付费下载，无内购、订阅、广告、第三方分析或跟踪 SDK。开发者不运营用于接收计算内容的服务器。
二、本机保存的内容
计算表达式与结果、历史记录、工作台及变量、文件夹与标签、收藏值、公式、识别及校正文字、参考汇率快照和偏好保存在设备的应用存储中。不会将这些内容上传到开发者服务器。设备系统备份由你的 Apple 设置控制。
三、相机、照片、文件与 OCR
相机只在主动选择拍照时使用；照片通过系统选择器选取，文件通过系统文件选择器导入。Vision 文字识别在设备上执行。PDF 当前只处理第一页。识别原图默认不保存；确认计算会保存识别文字、校正表达式及置信度。拒绝相关权限不影响其他计算功能。
只有主动点击粘贴时才读取对应剪贴板内容；复制与分享由你发起。若原文件位于 iCloud 或第三方文件提供方，系统可能需要先下载所选文件，这不等于向开发者上传图片。
四、可选 iCloud 私人数据库
iCloud 同步默认关闭。在设置中开启后，应用在下次启动时尝试使用你自己 Apple 账户下的 CloudKit 私人数据库。应用数据模型中的记录可由 Apple 同步到你的设备，包括历史、工作台、公式、收藏和识别文字；这不是开发者自建同步服务。
同步依赖 Apple 账户、网络、存储空间、系统支持及应用权限配置。存储初始化失败时会尝试回退到本机，实际状态显示在设置中。关闭开关会在下次启动停止使用云同步，但不会自动清除已存在的云端副本。标记为「隐私」不等于从 iCloud 或备份中排除该项目。
五、参考汇率网络请求
打开汇率工具或主动更新时，应用可能请求欧洲央行公开的参考汇率 XML。请求不包含你输入的金额、计算历史或工作台内容；网络服务会接收到完成请求所需的 IP 地址与常规请求信息，包括应用 User-Agent。换算在本机完成，失败时可使用带日期的缓存或内置快照。开发者不通过此请求建立用户画像。
六、Widget、快捷指令、分享与键盘
App Group 在本机的主 App 与扩展之间保存最近表达式、结果、收藏值、主题、隐私开关及待处理操作。Widget 可能在主屏幕或锁屏显示计算内容；隐私模式会隐藏结果。分享扩展只处理你交给它的内容，保存动作将结果排队供主 App 下次打开时写入。
键盘不申请「完全访问」，不发送网络请求，不扫描宿主 App 的文本内容；读取可用的共享计算快照并将你计算的结果插入当前文本框。系统可能限制无完全访问键盘获取共享内容，但本地按键计算不依赖网络。
App Intents 与快捷指令由 Apple 系统执行；你交给 Siri 或快捷指令的输入也受相应 Apple 服务设置影响。收藏公式、非隐私工作台及非隐私收藏记录可进入设备 Spotlight 索引。记录与工作台的隐私标记用于排除搜索索引，并非额外加密。
七、隐私锁、保存与删除
隐私锁使用系统设备所有者验证，应用不接收 Face ID 或 Touch ID 的生物特征。后台模糊可遮挡应用切换器画面。隐私锁不为导出文件提供加密，也不控制已经交给其他 App 的副本。
可在记录、工作台、公式库和记忆区使用相应删除操作。卸载主 App 会移除其应用沙盒中的数据，但 App Group、系统索引、系统备份、iCloud、文件 App 或接收方持有的副本由各自存储机制管理，不能仅凭卸载保证全部清除。云端数据请在 Apple 的 iCloud 存储管理中处理。
手动备份包含计算记录、工作台、收藏、公式及识别记录等内容，未额外加密；导出位置和分享对象由你选择，相关服务按其政策处理。请妥善保存，避免发送包含私人内容的完整备份。
八、购买、联系与更新
付费下载和退款由 Apple App Store 处理，应用不读取你的银行卡信息。你主动发送支持邮件时，我们会收到邮件地址及你提供的内容，仅用于回复与处理请求。请避免发送敏感表达式、身份证明或完整私人记录。技术支持与隐私问题：2223140373@qq.com。数据处理方式变化时会更新本页。
Privacy policy
Updated September 9, 2026 · Version 1.0.0 · com.calculatorx
Scope and local data
This policy covers Calculator and its widget, share and keyboard extensions, provided by 宝妈阿叶. No developer account is required. The paid download contains no in-app purchases, subscriptions, advertisements, third-party analytics or tracking SDKs. The developer does not operate a server for receiving calculation content.
Expressions, results, history, worksheets, variables, folders, tags, saved values, formulas, recognized and corrected text, reference-rate snapshots and preferences are stored on the device. They are not uploaded to a developer server. System backups follow your Apple settings.
Camera, images, files and OCR
The camera is used when you choose to take a photo. Images and files are selected with system pickers. Vision OCR runs on-device and PDF import processes the first page. Original images are not saved by default; confirming calculation saves recognized text, the corrected expression and confidence. Denying access does not block other calculation tools.
Clipboard reads occur through explicit paste actions. Copy and sharing are initiated by you. A cloud-backed photo or file provider may download a selected file before processing; this is not an upload to the developer.
Optional private iCloud
iCloud is off by default. When enabled, the next launch attempts to use the private CloudKit database of your Apple account. Model records, including history, worksheets, formulas, saved values and recognized text, may sync through Apple to your devices. Availability depends on account, network, storage, system support and app configuration. If storage initialization fails, the app attempts local fallback and shows its storage status in Settings.
Disabling the option takes effect at the next launch and does not erase previous cloud copies. A private-item flag does not exclude the item from iCloud or exported backups.
Exchange-rate requests
Opening the currency tool or refreshing may request the public European Central Bank reference-rate XML. The request does not contain entered amounts, history or worksheets. The service receives the IP address and ordinary request information, including an app User-Agent, needed to serve the request. Conversion runs locally; dated cached or bundled rates are available as a fallback. The developer does not use this request for profiling.
System integrations
An on-device App Group shares the latest expression, result, saved values, theme, privacy setting and pending operations between the app and extensions. Widgets may display calculations on Home or Lock Screens; privacy mode hides results. The share extension processes only the content you provide and queues saved calculations for the next main-app launch.
The keyboard does not request Full Access, send network requests or scan host-app text. It reads an available shared calculator snapshot and inserts the result you calculate. System restrictions may limit shared data access without Full Access; local keypad calculation does not depend on a network.
App Intents and Shortcuts run through Apple system services. Input you provide to Siri or Shortcuts is also subject to those Apple service settings. Favorite formulas, non-private worksheets and non-private favorite history may be indexed by Spotlight on your device. Private flags exclude the relevant history and worksheet items from this index; they are not additional encryption.
Protection, retention and deletion
The privacy lock uses system device-owner authentication; the app does not receive Face ID or Touch ID biometric data. Optional background blur obscures the app-switcher view. These controls do not encrypt exports or protect copies already shared elsewhere.
Use deletion controls in History, Worksheets, Formula Library and Memory Board. Uninstalling removes the main app sandbox, but shared containers, system indexes, backups, iCloud, Files and recipient-held copies are managed separately; uninstalling alone does not guarantee their removal. Manage cloud data in Apple's iCloud storage settings.
Manual backups contain calculation records, worksheets, saved values, formulas and scan records without additional file encryption. You choose where to store or share them; the selected provider applies its own policy. Keep backups secure.
Purchases and contact
Apple handles paid downloads and refunds; the app does not read payment-card details. If you email support, we receive your address and the content you voluntarily send to respond to your request. Do not send sensitive calculations or full private backups. For support and privacy requests, email 2223140373@qq.com. This page will be updated when data handling changes.
九、评分邀请与分享 App
评分邀请仅在本机保存完成计算次数、使用日期、邀请尝试日期、版本与开关状态，不保存表达式或评分。至少使用 3 天、跨 3 个日期完成 10 次计算并停止操作后，应用才可能调用 Apple 的系统评分界面；每版最多请求一次，至少间隔 120 天，365 天内最多 3 次。是否展示由 Apple 决定，应用无法判断你是否评分、几颗星或评论内容。手动打开评价页仅记录打开时间用于减少重复打扰，不视为已完成评价。开关可在设置关闭。
「分享 App」将商店链接与应用介绍交给你选择的系统分享目标，不附带历史或工作台内容。你在 App Store 主动提交的评价由 Apple 按其服务规则处理。
Review requests and app sharing
Only local completion counts, usage dates, request-attempt dates, versions and preferences are retained for review timing, not expressions or ratings. A request may occur after three days, ten calculations across three dates and an idle pause. The app limits attempts to once per version, at least 120 days apart and three per rolling 365 days. Apple controls display. The app cannot determine whether you rated, your stars or review text. A manual review-page open records its date to reduce interruptions, not proof of a review. Disable automatic requests in Settings.
Share App sends the store link and app description to a destination you choose, without calculation history or worksheets. Reviews voluntarily submitted in the App Store are handled by Apple under its service terms.