念述 / Nianshu 隐私政策

更新日期：2026-10-28 · 适用于 iOS 应用「念述」（Nianshu）

我们重视你的隐私。本政策说明「念述」如何收集、使用与保护信息。

App Store Review — Third-party AI (Guideline 2.1)

1. Does the app use a third-party AI service?
Yes. After the user taps “生成故事 / Generate Story”, our backend uses DeepSeek (text) and GRS gpt-image-2 (cover image) solely to provide in-app features.

2. What personal data is collected and/or sent to third-party AI services?
Only content the user voluntarily enters for that story: spoken-or-typed transcript and the selected topic title (sent to DeepSeek to draft/polish the story); a short scene description derived from the generated story (sent to GRS to create a cover). We do not send Apple ID, name, email, device identifiers, location, contacts, photos, microphone audio files, or payment data to any AI provider. On-device Apple Speech Recognition is used for transcription and is not a third-party cloud ASR.

3. Does the app obtain the user’s explicit consent before sending their data, in the app’s UI?
Yes. Tapping “生成故事 / Generate Story” first shows an in-app confirmation that names DeepSeek and the cover-image provider (GRS), lists what text is sent, and requires the user to tap “同意并生成 / Agree & Generate” before any data leaves the device for AI. Users may cancel and keep typing or discard content. On-device Apple Speech Recognition may produce a transcript without calling third-party AI. This policy is available in-app at Me → Privacy Policy. Audio is recorded only while the user holds “按住说话”; it is stored for playback/backup and is not uploaded to the AI services.

Apple 审核补充（第三方 AI）

是否使用第三方 AI？ 是。用户点击「生成故事」后，服务端使用 DeepSeek（文本成稿/润色）与 GRS gpt-image-2（故事封面）。
向第三方 AI 发送哪些个人数据？ 仅该次创作中用户主动提供的口述/键盘文字（含对 AI 追问的回答）、所选话题标题与讲述人称呼（如「妈妈」，发给 DeepSeek，用于追问细节与整理成稿）；以及由成稿抽取的短画面描述（发给 GRS 生封面）。不发送 Apple ID、姓名、邮箱、设备标识、位置、通讯录、你附加的照片、麦克风原始音频或支付信息。
发送前是否在 App 界面取得明确同意？ 是。点击「生成故事」后会先弹出说明（DeepSeek / GRS、发送的文字范围），须再点「同意并生成」才会向第三方 AI 发送数据；可点取消。设备端语音识别（Apple SFSpeechRecognizer）可在未调用第三方 AI 的情况下完成转写。

1. 我们收集的信息

故事内容：你主动录制的语音、转写文字、选择的话题、讲述人称呼（如「我」「妈妈」）、对 AI 追问的回答，以及经 AI 整理后的故事标题与正文，用于创作、时光轴与同步。
音频（可选）：仅在你按住说话时录制；可能上传至我们的存储服务以便回放与备份，不会发送给第三方 AI。
照片（可选）：仅当你主动为故事附加一张照片时，通过系统照片选择器读取你选中的那一张，压缩后上传至我们的存储服务用于故事配图；我们不会访问你的整个相册，照片不会发送给第三方 AI。
账号信息：游客模式下使用设备匿名标识；若你使用「通过 Apple 登录」，我们会保存 Apple 提供的用户标识与（可选）姓名。上述账号信息不发送给第三方 AI。
设备与诊断：可能收集基本设备型号、系统版本与错误日志，用于保障服务稳定。
购买与订阅信息：若你订阅或购买单篇解锁，我们会保存 Apple 返回的交易标识、商品标识、购买环境与订阅到期时间，用于开通并校验你的付费权益。我们不会收到、也不会保存你的支付方式、银行卡号或 Apple ID 密码——付款全程由 Apple 处理。

2. 我们如何使用信息

将口述内容转写并生成可阅读的故事；
在时光轴中保存、同步与展示你的故事；
在故事会中展示运营精选内容（你的私有故事默认不会公开，除非你主动投稿且经处理）；
完成登录、账号升级与注销；
发放新用户赠送次数，开通、校验与恢复你的付费权益（订阅状态与剩余生成次数）。

3. 第三方服务

为完成本应用功能，我们使用下列服务。处理过程仅用于提供功能，不会出售你的个人信息。

DeepSeek：文本生成与口述纠错润色。发送内容为用户主动输入的文字与话题。
GRS（gpt-image-2）：根据成稿抽取的画面描述生成封面图。不发送原始口述音频或账号标识。
对象存储 / CDN（七牛，zhanzhantarot.com）：存储故事音频、你附加的照片、封面与本隐私政策页面。
通过 Apple 登录：账号认证；标识仅保存在我们的服务器，不转发至 AI 服务。
Apple（App 内购买 / StoreKit）：处理付款并签发交易凭证。我们仅校验该凭证以开通权益，不接触你的支付信息。

4. 数据保存与删除

你可以在「我的」中注销账号。注销后，我们将对账号标识做脱敏处理，并停止向你展示相关故事内容。本地设备上的缓存可由你卸载应用清除。

出于对账与防止同一笔交易重复入账的需要，交易标识与赠送发放记录会在账号注销后继续保留；这些记录不包含你的支付信息。订阅的续期与取消请在「设置 › Apple ID › 订阅」中管理，取消后不会自动退款，已付费周期内仍可使用。

5. 权限说明

麦克风：用于录制讲述；
语音识别：用于将语音转成文字（设备端）；
照片：使用系统照片选择器，无需相册权限，只读取你选中的那一张。

你可以在系统设置中随时关闭上述权限；关闭后仍可使用键盘输入创作。

6. 联系我们

如对本政策有疑问，请通过 App Store 产品页或应用内反馈渠道联系我们。

Privacy Policy (English)

Last updated: 2026-10-07 · Applies to the iOS app Nianshu (“念述”).

Third-party AI disclosure

Yes, we use third-party AI after an explicit in-app confirmation. Tapping Generate Story opens a dialog naming DeepSeek and GRS, describing the text sent; the user must tap Agree & Generate before any data is shared with those services. Data sent is limited to the user’s voluntarily provided story text (including answers to AI follow-up questions), topic, and storyteller label such as “Mom” (DeepSeek) and a derived cover-scene prompt (GRS gpt-image-2). Account identifiers, audio files, attached photos, and other personal data are not sent to AI providers.

Information we collect

Story content: transcripts, selected topics, storyteller labels, answers to AI follow-up questions, and AI-drafted titles/bodies for creation, timeline, and sync.
Audio (optional): recorded only while you hold-to-speak; stored for playback/backup; not sent to AI providers.
Photo (optional): only the single photo you choose through the system photo picker, compressed and stored as the story’s illustration; we do not access your photo library, and photos are not sent to AI providers.
Account: anonymous device identifier in Guest mode; Apple user identifier and optional name if you use Sign in with Apple. These are not sent to AI providers.
Device/diagnostics: basic model, OS version, and error logs for stability.
Purchases: if you subscribe or buy a single unlock, we store the transaction identifier, product identifier, environment, and subscription expiry returned by Apple, in order to grant and verify your entitlement. We never receive or store your payment method, card number, or Apple ID password — payment is handled entirely by Apple.

How we use information

Turn spoken or typed memories into readable stories with covers;
Save and show stories on your personal timeline;
Show operator-curated featured stories in Story Club (your private stories are not public by default);
Sign in, upgrade from guest, and delete the account;
Grant the new-user free credits, and activate, verify, and restore your paid entitlement (subscription status and remaining generation credits).

Third-party services

DeepSeek — story drafting and light transcript polish;
GRS gpt-image-2 — cover illustration from a short scene description;
Qiniu CDN (zhanzhantarot.com) — audio, attached photos, covers, and this policy page;
Sign in with Apple — authentication only;
Apple (In-App Purchase / StoreKit) — processes payment and issues the signed transaction we verify to grant entitlement. We never handle your payment details.

Retention and deletion

You may delete your account in Me. After deletion we de-identify the account and stop showing associated stories. Local cache can be removed by uninstalling the app.

Transaction identifiers and free-credit grant records are retained after account deletion for accounting and to prevent the same purchase from being credited twice; these records contain no payment information. Manage renewal or cancellation under Settings › Apple ID › Subscriptions. Cancelling does not trigger an automatic refund, and access continues until the end of the paid period.

Permissions

Microphone and Speech Recognition are used for hold-to-speak transcription on device. You may turn them off in iOS Settings and still type a story. Photos are chosen through the system picker, which needs no photo library permission.

Contact

Questions about this policy can be sent via the App Store product page or in-app feedback.