Stepping 隐私政策

Stepping Privacy Policy

最后更新：2026-09-07 · 生效日期：2026-09-07

Last updated: 2026-09-07 · Effective: 2026-09-07

一句话：你的任务、心情和设置只存在你自己的手机里，Stepping 没有账号、没有云、不卖数据。唯一会离开设备的数据，是你主动使用 AI 功能时输入的文字（经我们的代理转发给大模型），以及语音速记时由 Apple 处理的音频。

In short: Your tasks, mood records and settings live only on your own device. Stepping has no account, no cloud, and sells no data. The only data that leaves your device is (a) the text you type into AI features (forwarded through our proxy to an LLM), and (b) audio processed by Apple when you use voice dictation.

1. 我们收集和处理的数据

1. Data We Collect & Process

1.1 仅存储在你设备本地（不会上传）

1.1 Stored only on your device (never uploaded)

以下数据由 iOS 本地存储（UserDefaults、App 沙盒文件、SwiftData、Keychain）保存，Stepping 的服务器不接收、不备份、不读取：

The following are kept in iOS local storage (UserDefaults, app sandbox files, SwiftData, Keychain). Stepping's servers never receive, back up, or read them:

数据类型	Data	说明	Notes
任务与步骤	Tasks & steps	标题、拆解步骤、备注、完成状态、创建时间	Titles, breakdown steps, notes, completion, created time
今日聚焦 / 带入今天	Today Focus	你手动标记的当日重点任务	Tasks you manually star for the day
心情记录	Mood log	最近 90 天的心情条目（本地文件，自动过期）	Last 90 days, local file, auto-expires
规划校准	Planning calibration	个人预估偏差系数（反向规划用）	Personal estimate-bias factor
偏好设置	Preferences	难度偏好、精力时段、通知、字体缩放、语言	Spice level, energy pattern, notifications, font, language
使用额度	Usage quota	每日 AI / 引导次数（本地计数）	Daily AI / guidance counts (local)
订阅与试用状态	Subscription state	首装时间存于 Keychain（防卸载重装重置试用）	Install date in Keychain (trial anti-reset)

本地卸载 App 即删除这些数据；也可在 App 内「设置 → 清除数据」一键清空。

On-deviceDeleting the app removes this data; or use In-App Settings → Clear Data.

1.2 使用 AI 功能时发送给第三方

1.2 Sent to third parties when you use AI features

当你使用任务拆解、脑暴、语气分析、决策助手、语音速记的 AI 拆解等功能时，你输入给 AI 的文字内容会通过 Stepping 的 Cloudflare Worker 代理转发给大模型服务商（DeepSeek，或经 OpenRouter 路由的 OpenAI / Anthropic / Google 等模型）。

When you use AI features (task breakdown, brainstorm, tone analysis, decision helper, voice AI breakdown, etc.), the text you enter is forwarded through Stepping's Cloudflare Worker proxy to an LLM provider (DeepSeek, or OpenRouter-routed OpenAI / Anthropic / Google models).

该 Worker 是纯转发代理，不记录、不存储任何对话内容。
传输过程启用 SSL 证书锁定（SSL Pinning），防止中间人窃听。
大模型服务商可能按其自身隐私政策留存并处理这些内容；我们不附加任何账号或身份标识。
夜间 22:00–06:00 为无限模式， AI 调用不消耗次数，但内容仍按上述方式处理。

The Worker is a pass-through proxy — it logs and stores nothing.
Transit uses SSL certificate pinning to block interception.
The LLM provider may retain/process content per its own policy; we attach no account or identity.
Night mode (22:00–06:00) is unlimited but content is still processed as above.

第三方DeepSeek / OpenRouter 等模型的隐私条款见其官网。

Third partySee each provider's policy on their site.

1.3 语音速记（Apple 处理）

1.3 Voice dictation (handled by Apple)

语音速记使用 Apple 的 Speech 框架进行语音识别，需你授权。根据 Apple 的隐私机制，录音可能会上传至 Apple 服务器用于识别（因语言/设备而异，部分可在端侧完成）。音频与识别结果受 Apple 隐私政策约束。若你将识别文本继续用于 AI 功能，则按 1.2 节处理。

Voice dictation uses Apple's Speech framework and requires your permission. Per Apple's policy, audio may be sent to Apple servers for recognition (varies by locale/device; some on-device). Audio and transcripts are governed by Apple's Privacy Policy. If you then use the transcript in an AI feature, section 1.2 applies.

1.4 我们不收集的

1.4 What we do NOT collect

无账号、无邮箱、无手机号——你无需注册即可使用全部功能。
无广告标识符（IDFA），不接入任何第三方广告或行为分析 SDK（无 Firebase / Mixpanel / Adjust 等）。
不收集位置、通讯录、相册、健康（HealthKit）、支付卡等敏感信息。
我们不出售、不出租、不与第三方共享你的个人数据（1.2 节为提供功能所必需的转发除外）。

No account, email, or phone — fully usable without sign-up.
No ad identifiers (IDFA); no third-party ad or analytics SDKs (no Firebase / Mixpanel / Adjust, etc.).
No location, contacts, photos, HealthKit, or payment data.
We do not sell, rent, or share your personal data (except the forwarding in 1.2 required to deliver the feature).

2. 我们如何使用数据

2. How We Use Data

本地数据：仅用于在 App 内为你展示任务、生成引导、记录心情与偏好——全部在设备端完成，不上传即不会被我们"使用"。
AI 输入文本：仅用于调用大模型生成你要的拆解 / 建议 / 分析，不作他用。
我们不会用你的数据做用户画像、广告定向或跨 App 追踪。

Local data: used only on-device to show tasks, run guidance, and record mood/preferences — never uploaded, so never "used" by us remotely.
AI input text: used solely to call the LLM and return your breakdown / suggestion / analysis.
We do not build profiles or ad targeting from your data.

3. 数据保留与删除

3. Retention & Deletion

本地数据：保留至你删除 App 或在 App 内清除数据为止。
AI 转发内容：Stepping 侧不留存；其在 LLM 服务商的留存时长由其政策决定。如希望尽最大可能删除，可联系对应服务商，或发邮件至下方地址，我们将协助说明转发路径。
你有权访问、导出（Pro 支持 PDF 导出）、更正或删除自己的数据。

Local data: retained until you delete the app or clear data in-app.
AI-forwarded content: not retained by Stepping; retention at the LLM provider follows its policy. To request max removal, contact the provider or email us below and we'll explain the path.
You may access, export (Pro PDF export), correct, or delete your data.

4. 儿童隐私

4. Children's Privacy

Stepping 面向成年神经多样性人群（如成人 ADHD）设计，不专门针对 13 岁以下儿童，也未故意收集儿童数据。若你是 18 岁以下用户，请在监护人同意下使用。如我们发现误收集了儿童数据，将立即删除。

Stepping is designed for neurodivergent adults (e.g. adult ADHD) and is not directed to children under 13; we do not knowingly collect children's data. Users under 18 should have parental consent. If we learn we collected a child's data, we will delete it.

5. 联系我们

5. Contact

隐私相关问题：mingzhaoluw@gmail.com

Privacy questions: mingzhaoluw@gmail.com

6. 政策变更

6. Changes

本政策如有更新，将在 App 内及本页面公布新生效日期。重大变更将另行提示。

We will post updates here with a new effective date. Material changes will be noted in-app.

⚠️ 本页面为隐私政策草稿模板，基于 Stepping 当前实际数据架构编写。正式上线前建议由法务按目标市场（中国 / 美国等）法规复核，尤其涉 ADHD 相关表述与未成年人条款。

⚠️ This is a draft template based on Stepping's current data architecture. Before launch, have counsel review it against applicable regulations (China / US), especially ADHD-related wording and minor clauses.