Finwhale Privacy Policy 鲸鱼记账（Finwhale）隐私政策

Everything you enter is written to a database inside the app's own storage on your device:

• Transactions — amount, currency, category, note, date, and the payment account they belong to.
• Accounts, budgets, categories, exchange rates you accepted, and app settings.

This data is protected by iOS data protection (the file is encrypted at rest with a key tied to your device and your passcode). It is never uploaded to us, and we could not read it even if we wanted to — we hold no copy.

你录入的全部内容都写入 App 沙盒内本机数据库：

• 账单流水：金额、币种、分类、备注、日期、所属账户。
• 收款/支出账户、预算、自定义分类、你确认采用的汇率、App 设置。

这些数据受 iOS 数据保护机制保护（静态加密，密钥绑定你的设备与锁屏密码）。它不会被上传给我们，我们也不持有任何副本，因此无法读取。

• No account, no email, no phone number, no name is required or requested.
• No advertising, no ad networks, no SDKs of any kind are embedded in the app.
• No analytics, no usage tracking, no crash reporting, no session or device identifiers.
• No selling, sharing, renting or transferring of any personal data — there is none to share.

• 不需要也不索取账号、邮箱、手机号或姓名。
• 不含广告、不接入任何广告网络，App 内没有第三方 SDK。
• 没有行为统计、没有使用埋点、没有崩溃收集、没有设备或广告标识符。
• 不会出售、共享、出租或转让任何个人数据 —— 因为我们不持有可共享的数据。

3.1 Exchange rates. When you record an amount in a currency other than your home currency, the app fetches current rates from api.frankfurter.dev, an open public service. The request contains only the currency codes you need, for example ?base=USD&symbols=EUR,JPY. It carries none of your ledger data and no personal identifier. Your standard iOS/IP address is visible to that service as it is to any website you visit.

3.2 Voice entry. If you use "hold to speak", audio is transcribed through Apple's Speech Recognition framework. Apple's own privacy terms apply to that transcription. The app does not store the audio recording, and does not receive or keep a transcript beyond filling in the amount and note fields on your screen.

3.3 Receipt / screenshot recognition. If you pick a payment screenshot, the image is analysed by Apple's Vision framework on your device. The image is not uploaded, and the recognised text goes straight into a draft entry that you must confirm before it is saved.

Nothing else in the app contacts a network. Browsing your ledger, editing, deleting, budgeting, reports and exporting all work with Airplane Mode on.

3.1 汇率获取。当你记录非主币种金额时，App 会向公开服务 api.frankfurter.dev 请求最新汇率。请求内容只有你需要的币种代码，例如 ?base=USD&symbols=EUR,JPY，不含任何账本数据与个人标识。该服务会像任何网站一样看到你的 iOS/网络 IP 地址。

3.2 语音记账。使用「按住说话」时，语音通过苹果的语音识别（Speech Recognition）框架转写，该转写适用苹果自身的隐私条款。App 不保存录音音频，也除填充到你屏幕上的金额与备注外不留存任何转写文本。

3.3 小票/截图识别。你选择支付截图后，图片由苹果 Vision 框架在本机分析。图片不会上传，识别出的文字只会生成一条待确认草稿，需你确认才会入账。

除以上三项，App 内没有任何其他联网行为。查看账本、编辑删除、预算、报表、导出在飞行模式下均可正常使用。

Finwhale Pro is sold through Apple's App Store using StoreKit. Your subscription is managed by Apple, and Apple receives the payment. We never see your name, card details or billing address, and we do not receive a list of who has subscribed. A receipt may be stored on your device so the app can restore your entitlements after a reinstall.

Finwhale Pro 通过苹果 App Store 与 StoreKit 销售，订阅由苹果管理，款项由苹果收取。我们看不到你的姓名、银行卡信息或账单地址，也不会收到订阅者名单。购买凭证可能保存在你的设备上，以便重装后恢复你的权益。

In the App Store privacy nutrition label we declare that this app does not collect data. The only data that exists is on your device and is not transmitted to us or to third parties in a way that constitutes "collection" under Apple's definition.

在 App Store 的隐私营养标签中，我们声明本 App 不收集数据。唯一存在的数据在你设备上，不会以苹果定义构成「收集」的方式传输给我们或第三方。

• Export. Data & Privacy → Export produces full CSV and JSON files of everything you have recorded, which you save, share or delete yourself.
• Deletion. Deleting an entry removes it immediately. Deleting the app removes the entire on-device database. There is no server-side copy to ask us to erase.
• Lock. You can require Face ID / Touch ID to open the app, and hide balances when the app moves to the background.

• 导出。「数据与隐私 → 导出」可生成包含全部记录的 CSV 与 JSON 文件，由你自己保存、分享或删除。
• 删除。删除某笔记录即刻生效；卸载 App 会连同本机数据库一并清除。服务端没有副本需要你去请求删除。
• 锁定。可要求 Face ID / Touch ID 才能打开 App，并在切后台时遮挡金额。

Finwhale is a general-purpose budgeting tool intended for adults. It is rated 4+ because it contains no objectionable content, not because it is designed for children. We collect no data from anyone, of any age.

鲸鱼记账是面向成人的通用记账工具。分级为 4+ 是因其不含不良内容，并非面向儿童设计。我们不向任何人、任何年龄段收集数据。

If this policy changes, the date at the top of this page is updated and the new version is published here. This page is the authoritative version; any translation is for convenience only.

若本政策变更，本页顶部日期会更新并在此发布新版。本页为权威版本，其他语言仅供阅读便利。

Questions about this policy, or a feature request that touches privacy: see contact below.

关于本政策的疑问，或涉及隐私的功能建议，可通过下方方式联系我们。