Privacy Policy
隐私政策
1. Overview
ExtraBrain (“we”, “the App”) is a personal memory assistant for iPhone. Our design goal is on-device first: your notes, imported documents, embeddings, and recall answers are processed and stored on your device by default. This policy explains what limited account data may leave the device.
2. Data we process on your device
- Memories you create or import (text, PDF, DOCX, Markdown, and derived chunks/summaries).
- On-device embeddings and search indexes used for recall (RAG).
- On-device speech recognition audio processed locally when you use voice input (not uploaded for ASR).
- Local preferences such as appearance and trial status stored with Keychain / UserDefaults.
These content items are not uploaded to ExtraBrain servers for storage or model training.
3. Data we may receive on our control-plane servers
To manage sign-in, free trial, and Pro subscription entitlement, our cloud control plane may process:
- Apple Sign In identity tokens / user identifiers (and email only if Apple provides it).
- Subscription / transaction identifiers needed to validate App Store purchases.
- Device or install identifiers used only for license / trial anti-abuse.
- Basic technical logs (timestamps, API status codes) for reliability and fraud prevention.
We do not store your memory bodies, document contents, chat transcripts, or recall queries on the control plane.
4. Purchases
Payments are processed by Apple. We receive purchase validation results from Apple / StoreKit; we do not receive your full payment card details.
5. Permissions
- Microphone — only when you hold-to-talk; recognition runs on-device.
- Speech recognition — on-device ASR for dictation into chat / recall.
- Files / documents — only files you choose to import.
6. Tracking & analytics
We do not use third-party advertising trackers. App Tracking Transparency tracking is not enabled. Optional analytics SDKs (if any) are disabled by default in current builds.
7. Data retention & deletion
- On-device memories remain until you delete them or uninstall the App.
- You can delete your account from Settings. Account deletion removes control-plane account / entitlement records associated with your user id.
- Uninstalling the App removes local memories from that device.
8. Children
The App is not directed to children under 13 (or the minimum age required in your region). Do not use the App if you are under that age.
9. International users
Control-plane services may be hosted in regions different from yours. By using account features you acknowledge that entitlement metadata may be processed where our servers operate.
10. Changes
We may update this policy. The “Last updated” date will change when we do. Continued use after an update means you accept the revised policy.
11. Contact
Questions about privacy: privacy@extrabrain.app
Support: https://extrabrain.app/support
1. 概述
ExtraBrain(“我们”或“本应用”)是一款面向 iPhone 的个人记忆助手。产品以端侧优先为原则:你的笔记、导入文档、向量索引与回忆回答默认在本机处理与存储。本政策说明哪些有限的账号相关数据可能离开设备。
2. 在本机处理的数据
- 你创建或导入的记忆(文本、PDF、DOCX、Markdown 及衍生分块/摘要)。
- 用于回忆检索(RAG)的端侧向量与索引。
- 语音输入时的麦克风音频:在本机进行语音识别,不上传用于 ASR。
- 外观、试用状态等偏好(Keychain / UserDefaults)。
上述内容不会上传到 ExtraBrain 服务器进行存储或模型训练。
3. 控制面服务器可能接收的数据
为管理登录、免费试用与 Pro 订阅权益,云端控制面可能处理:
- 通过“通过 Apple 登录”获得的身份令牌 / 用户标识(以及 Apple 提供时的邮箱)。
- 用于校验 App Store 购买的订阅 / 交易标识。
- 仅用于许可与试用防滥用的设备或安装标识。
- 用于稳定性与风控的基础技术日志(时间戳、接口状态码等)。
控制面不会存储你的记忆正文、文档内容、对话记录或回忆查询内容。
4. 购买
付款由 Apple 处理。我们仅接收购买校验结果,不会获得你的完整银行卡信息。
5. 权限
- 麦克风:仅在按住说话时使用;识别在本机完成。
- 语音识别:用于对话 / 回忆的端侧听写。
- 文件:仅处理你主动选择导入的文件。
6. 跟踪与分析
我们不使用第三方广告跟踪。未启用 ATT 跨 App 跟踪。当前版本默认关闭可选分析 SDK。
7. 保留与删除
- 本机记忆会保留到你删除记忆或卸载应用。
- 可在设置中删除账号;将移除与你用户标识相关的控制面账号 / 权益记录。
- 卸载应用会删除该设备上的本地记忆。
8. 儿童
本应用不以 13 岁以下(或你所在地区要求的最低年龄以下)儿童为目标用户。
9. 跨境说明
控制面服务可能部署在与你所在地不同的区域。使用账号功能即表示你了解权益相关元数据可能在服务器所在地处理。
10. 变更
我们可能更新本政策,并修改文首更新日期。更新后继续使用即视为接受修订内容。