Privacy Policy / 隐私政策

Near Privacy Policy — version 1.2.0 Policy revision: 2026-11-02 Operator: Mingxi AI · Contact: near@mingxi.io 1. Your choices and local content Near organizes cards, reminders, notes and journal entries. There is no Near account or advertising, and Near does not track you across other companies’ apps or websites. Local recognition is available without enabling cloud AI, iCloud sync or analytics. This policy describes version 1.2.0; features and permissions available on your device depend on its system and your settings. Text, selected photos, scanned codes, imported reminders, records and attachments are stored in the app’s local storage. Sensitive codes use encrypted storage. This is not a claim that every field, attachment, export or system preview is encrypted or hidden. Lock Screen, Live Activity, widget, Watch and shared-image content can be visible to other people; choose masking and authentication settings before displaying sensitive information. Near reads the clipboard when you initiate paste, not to monitor other apps. Shortcuts process only inputs supplied by the shortcuts you configure. 2. Optional third-party AI Cloud AI is off until you configure your own provider, provide a Key and explicitly enable it. The selected endpoint is the recipient. Recognition can send the new text, selected images (including visible names, addresses, codes, health or financial information), and reference time/time zone needed to interpret the request. Speech is transcribed on the device; the resulting text may be sent when you enable AI, but Near does not send the original audio. Near does not automatically send your historical entries or entire photo library. Connection tests use a fictional sample. After you enable automatic AI recognition, subsequent new inputs through the enabled app, share and shortcut flows can be sent without another per-item prompt. Changing provider settings revokes saved authorization. Turn off AI or select local recognition to stop future requests; remove the Key in AI settings to remove local credentials. Canceling cannot retract content already received by a provider. Providers and any intermediaries you select process data under their own terms, retention periods, processing locations and model-training choices. An aggregator may route the request to another model provider. Review those policies and use only services that protect your data appropriately; do not send secrets or information you lack permission to share. Near does not promise zero retention or no training by arbitrary third-party services. Request removal of submitted content from that provider. API Keys are stored in device-only Keychain storage, may be shared with Near’s own extension for authorized requests, and are not synchronized through iCloud. API use may incur provider charges. 3. iCloud, Apple Watch and backups If you enable iCloud sync, eligible cards, notes, journal entries, images and settings are transmitted to Apple’s private CloudKit database under your Apple account. Structured vaccination, medication and medical-appointment records, their images, runs and linked sources are excluded. Other cards sharing such a source also stay local. Manual cloud backups retain the latest three snapshots per device and use the same exclusions. When this version connects, it removes excluded payloads from older sync records and backup snapshots while keeping local health records; this cleanup requires a successful connection, and older devices may re-upload until updated. Do not put personal health information in ordinary notes or journals that you sync. Linked completion titles in journal entries stay on their originating device and are stripped from cloud payloads, including older backups. The local card, note and journal databases are excluded from system backups because they may contain health information. Keep necessary local-only information before changing devices or uninstalling; it cannot be recovered from Near’s cloud snapshots. Switching sync off or losing Pro access stops sync but does not erase other existing local or cloud content. Other devices may upload their remaining copies again. Manage Apple backups separately. WatchConnectivity shares supported content with your paired Watch. 4. Optional usage analytics Usage analytics is off by default. If enabled, TelemetryDeck receives approved feature events (such as app opening, card categories, recognition success and completion states), a pseudonymous installation identifier, and SDK environment metadata such as app/system version, device class and locale. These are used to understand feature usage and reliability. Card text, notes, photos, API Keys and actual pickup codes are excluded from the event schema. A random installation identity is used instead of an advertising identifier. Pseudonymous does not mean impossible to link events within an installation. Turning analytics off blocks future delivery, discards pending local signals and removes the local analytics identity. It does not withdraw signals already delivered. Provider retention depends on the service configuration; contact us for retention or deletion requests. Aggregated statistics may no longer be attributable to an individual installation. See https://telemetrydeck.com/privacy/ for the provider’s policy. 5. Other network services and permissions Camera and photo access are used for the photos you capture/select, recent screenshots and saving share images. AI image transmission and iCloud image storage follow the choices above. Microphone and speech permissions support on-device dictation. Face ID is handled by Apple; Near receives an authentication result, not biometric templates. Reminders permission imports chosen reminders; notification and alarm permissions deliver your scheduled alerts. Location supports weather, Apple map/travel queries and arrival reminders; relevant coordinates or place queries are sent to Apple when those services are used. Online movie artwork retrieval is disabled in this version pending verification of image rights. You can select your own image or crop one locally; local cropping sends no image to a movie catalog. Use only images you have permission to use. Existing user-selected images remain on your device and follow your sync choices. Recognition-rule, holiday-calendar and shortcut updates contact Near’s website, GitHub or jsDelivr for public files. Network operators can receive IP addresses, request paths and timing. Contacting support sends the email address, message and attachments you choose to provide. We use these only to answer and resolve your request and retain them as needed for that purpose or legal obligations; ask us for deletion. 6. Retention, deletion and withdrawal Stored items remain until you delete them, clear app data, or an applicable cleanup rule runs. Deleted records may remain in the recycle bin until it is emptied or its cleanup period ends. Sensitive-code expiry follows the item’s configured lifetime and completion state; there is no universal 24-hour limit for all current items. Clear Near data in Settings to remove local data; review any reported cleanup failures. A paired Watch needs to reconnect for a clearing update. Clearing local data or uninstalling does not delete exported copies, screenshots, other devices, provider submissions, cloud snapshots or existing device backups. Disable sync on all your devices before removing Near’s stored iCloud data through Apple’s iCloud storage controls. Manage Apple backups separately. Revoke camera, photos, location, microphone and reminders permissions in system Settings. Stop configured shortcut automations separately. Contact near@mingxi.io to request access, correction or deletion of data we hold; we cannot erase information held solely by Apple or a provider you selected. 7. Website, children and changes The public website may use Google Analytics for visits and page interactions; this is separate from the app’s TelemetryDeck setting. Website browser permissions and consent controls apply separately. Do not put private card content into website URLs. Near is not directed at children, and does not intentionally collect children’s personal data. If you believe a child has sent us personal information, contact us to request removal. Depending on your region, you may have rights to access, correct, delete, restrict or object to processing, withdraw consent and complain to your privacy authority. We will assess requests under applicable law. Updated policies will show a new revision date; materially new optional processing requires the relevant consent. 8. Use and purchase terms Apple’s Standard EULA applies: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/ Where offered, digital purchases use Apple’s App Store. Review the product’s displayed price, duration and renewal terms before purchase; restore purchases in the app and manage subscriptions in Apple account settings. Cloud AI is fallible: verify extracted dates, amounts, locations and codes before acting. Travel entries are saved information, not live transport status. Health and vaccination records are organizational aids, not diagnosis, treatment or emergency services. Follow qualified professionals and official notices. Statutory consumer rights are unaffected.

即见隐私政策 — 1.2.0 版 政策修订日期：2026-11-02 运营方：Mingxi AI · 联系方式：near@mingxi.io 1. 你的选择与本机内容 即见用于整理卡片、提醒、备忘和日记，无需即见账号，不含广告，不跨其他公司的 App 或网站追踪你。无需开启云端 AI、iCloud 同步或统计即可使用本机识别。本政策描述 1.2.0，实际可用功能取决于系统和设置。 文字、选中的照片、扫描码、导入的提醒、记录和附件存放在应用本机存储中，敏感码加密保存。这不意味着所有字段、附件、导出文件或系统预览均被加密或隐藏。锁屏、灵动岛、组件、手表及分享图可能被旁人看到，请先配置遮挡和身份验证。仅在你主动粘贴时读取剪贴板；快捷指令只处理你配置并提供的输入，不自动读取短信。 2. 可选的第三方 AI 云端 AI 在你配置服务商、提供 Key 并明确启用前关闭。接收方是你选定的接口。识别可能发送本次新输入的文字、所选图片及用于解释相对时间的参考时间和时区；图片内可见的姓名、地址、取件码、健康或财务信息也可能一并发送。语音在本机转写，启用 AI 后转写文字可能发送，原始音频不发送。不自动上传历史记录或整个相册；连接测试只发送虚构样例。 启用自动 AI 识别后，应用、分享和快捷指令中已授权入口的后续新输入可能直接发送，不逐条再次询问。更改服务商配置会撤销已保存授权。关闭 AI 或切回本机识别可停止后续请求，在 AI 设置移除 Key 可删除本机凭据。取消请求不能撤回服务商已收到的内容。 你选择的服务商和中转方依据其政策决定保留时间、处理地点和模型训练用途；聚合平台可能再转交模型供应商。请先阅读其政策，选择具有适当保护措施的服务，不发送秘密或无权分享的内容。即见不能承诺任意第三方接口均零保留或不用于训练。已发送内容的删除须向接收方提出。Key 存放在仅限本机的钥匙串中，可供即见自己的扩展执行已授权请求，不参与 iCloud 同步；接口可能另行计费。 3. iCloud、Apple Watch 与备份 开启 iCloud 同步后，允许同步的卡片、备忘、日记、图片和设置会传送至你 Apple 账户下的私有 CloudKit 数据库。结构化疫苗、用药、就诊记录及其图片、执行记录和关联来源不上传；共享这些来源的其他卡片也只留在本机。手动云端备份保留每台设备最近三份快照，使用相同排除规则。本版本成功连接后会清除旧同步记录及备份快照中被排除的载荷，保留本机健康记录；清理需要联网完成，未更新的旧设备仍可能重新上传。请勿把个人健康信息写入会同步的普通备忘或日记。 日记附带的完成事项标题仅保存在原设备，并从云端载荷和旧备份中移除。本机卡片、备忘和日记数据库可能含有健康信息，因此均不参与系统备份。换机或卸载前请自行保留必要的本机资料；被排除的内容无法从即见云端快照恢复。关闭同步或 Pro 到期会停止同步，但不会清除其他已有本机或云端内容；其他设备可能再次上传其副本。Apple 系统备份需另行管理。WatchConnectivity 会向配对手表传送支持展示的内容。 4. 可选使用统计 使用统计默认关闭。开启后，TelemetryDeck 接收限定的功能事件，例如打开应用、卡片类别、识别成败、完成状态，以及假名化安装标识和 SDK 环境信息，如应用及系统版本、设备类别、语言地区，用于了解功能使用和可靠性。事件格式不包含卡片正文、备注、照片、Key 或实际取件码。使用随机安装标识而非广告标识；假名化不代表同一安装中的事件无法关联。 关闭统计会阻止后续发送、清除待发送本机事件及本机统计标识，但不能撤回已经发送的数据。服务端保留时间取决于服务配置，保留或删除请求可联系我们；聚合结果可能已无法关联至某个安装。服务商政策：https://telemetrydeck.com/privacy/ 5. 其他联网服务与权限 相机及照片权限用于拍摄、选取照片、显示近期截图及保存分享图。AI 图片发送和 iCloud 图片存储受前述开关控制。麦克风及语音权限用于本机听写。面容 ID 由 Apple 处理，即见只获得验证结果，不接收生物特征模板。提醒事项权限用于导入你选择的提醒；通知和闹钟权限用于到点提醒。位置用于天气、Apple 地图和行程查询、到店提醒，使用有关服务时坐标或地点查询会发送给 Apple。 本版本在图片权利核验完成前停用在线电影封面获取。你可选择有权使用的图片或在本机裁剪，本机裁剪不会将图片发往电影目录服务。已有用户选择的图片保留，并遵循你的同步选择。规则、节假日和快捷指令更新会向即见网站、GitHub 或 jsDelivr 请求公开文件，网络运营方可能获得 IP、路径和请求时间。联系支持时，你主动发送的邮箱、消息及附件用于答复和解决问题，在完成该目的或满足法定义务所需期间保留，可向我们申请删除。 6. 保留、删除与撤回 事项保存到你删除、清除应用数据或触发适用清理规则。删除的记录可能在回收站保留，直至清空或到达清理期限。敏感码根据事项配置的有效期和完成状态清理，现行版本并非所有内容统一在 24 小时内删除。可在设置清除本机即见数据，并检查清理失败提示；手表须重新连接才能接收清空更新。 清除本机或卸载不会删除导出副本、系统截图、其他设备、已发送至服务商的数据、云端快照或既有设备备份。删除云端数据前，请在各设备关闭同步，再通过 Apple 的 iCloud 存储管理移除即见云端数据，设备备份需另外管理。可在系统设置撤销照片、相机、位置、麦克风及提醒事项权限；快捷指令自动化须单独停止。通过 near@mingxi.io 申请访问、更正、删除我们持有的数据；我们无法代为删除仅由 Apple 或你所选服务商持有的信息。 7. 网站、儿童与更新 公开网站可能使用 Google Analytics 衡量访问和页面互动，与 App 内 TelemetryDeck 开关独立，适用浏览器权限及网站同意控制。请勿把私人卡片内容写入网站网址。即见并非面向儿童的服务，不有意收集儿童个人信息；如儿童向我们发送了个人信息，可联系我们删除。依所在地区法律，你可能享有访问、更正、删除、限制、反对处理、撤回同意和向监管机构投诉的权利，我们将依法处理请求。政策更新会标注修订日期，新增实质性可选处理须取得相应同意。 8. 使用与购买条款 适用 Apple 标准最终用户许可协议：https://www.apple.com/legal/internet-services/itunes/dev/stdeula/ 开放销售时，数字购买通过 Apple App Store 完成。购买前请核对显示的价格、期限及续费条款，可在应用恢复购买，在 Apple 账户设置管理订阅。AI 可能出错，请核对日期、金额、地点和码后再操作。交通信息是保存的记录，并非实时运行状态。健康和疫苗记录用于整理，不构成诊断、治疗或紧急服务，应以专业人员和官方通知为准。法定消费者权利不受影响。