有数隐私政策
1. 适用范围
本隐私政策适用于有数 iOS 应用。有数是个人财务记录与规划工具，用于管理资产、现金流、预算、资产配置、家庭共享显示信息和长期计划。
2. 我们处理的数据
有数会在你的设备上保存你主动录入或导入的数据，包括资产、现金流、预算、计划、资产配置、家庭成员显示偏好和应用设置。
如果你启用 Apple 登录、iCloud 同步或家庭共享，相关数据会通过 Apple iCloud / CloudKit 存储和同步，用于在你的设备之间同步，并支持你主动参与的家庭共享功能。
3. 照片与账单截图
账单截图识别仅在你主动选择图片时使用系统照片选择器。图片用于在设备上提取账单候选记录，不会上传到有数自有服务器。导入前，你可以在预览页确认或修改识别结果。
4. 第三方服务
有数使用 Apple 提供的系统能力，例如 Sign in with Apple、iCloud / CloudKit、系统照片选择器和系统邮件功能。相关数据处理也受 Apple 的隐私政策和你的 Apple ID / iCloud 设置约束。
如果你主动配置 API Key、同意数据授权并开启 Agent，有数会将回答当前问题所需的财务数据和你的提问直接发送给你选择的模型服务商。为支持连续提问，当前对话最近的部分问题和回答也会作为上下文发送；其他对话和本机完整对话数据库不会发送。第一版服务商为 DeepSeek。数据可能在中华人民共和国境内处理，并受 DeepSeek 隐私政策及你的 DeepSeek 账户设置约束。当前可见家庭资产会移除成员名称、资产名称、标识符和备注后再发送。
如果你单独开启外部行情工具，Agent 可以按需向你配置的 AKTools 服务（用于 AKShare）、Yahoo Finance、Tushare Pro 或 Alpha Vantage 发送对应服务的认证凭据及模型生成的查询参数。查询参数由 Agent 根据当前问题和上下文生成，可能包含你的提问或已提供给模型的财务数据片段。认证凭据不会发送给 DeepSeek，但返回的行情结果会作为当前问题的上下文发送给 DeepSeek。Yahoo Finance 行情接口不是 Yahoo 官方公开 API，可能延迟、限流、变更或停止可用；其他服务的数据范围、频率、权限和费用受对应账户与套餐约束。
Agent 默认关闭。DeepSeek API Key、Tushare Token 和 Alpha Vantage API Key 仅保存在当前设备的系统钥匙串中，不会同步到 iCloud、写入有数数据库或包含在备份中。Agent 只能读取财务数据，不能修改记录，也不使用你的数据进行跨 App 或跨网站跟踪广告。
有数当前不将你的财务记录出售给第三方，也不使用这些记录进行跨 App 或跨网站跟踪广告。
5. 数据删除与控制
你可以在 App 的账户详情中删除当前账号数据。删除后，有数会移除本机数据，并同步删除 iCloud 中由有数保存的数据。你也可以退出 Apple 登录并关闭同步；本机数据会保留在当前设备，除非你主动删除。
6. 备份与导出
如果你导出数据备份，App 会生成 JSON 文件。导出的文件由你自行保存和管理，请妥善保管，避免泄露财务信息。
7. 联系我们
如果你对本隐私政策或数据处理有问题，请联系：support@spacelion.com。
Share Privacy Policy
1. Scope
This Privacy Policy applies to the Share iOS app. Share is a personal finance recording and planning tool for managing assets, cashflow, budgets, asset allocation, family display information, and long-term plans.
2. Data We Process
Share stores the data you enter or import on your device, including assets, cashflow, budgets, plans, asset allocation, family member display preferences, and app settings.
If you enable Sign in with Apple, iCloud sync, or family sharing, related data is stored and synced through Apple iCloud / CloudKit to sync across your devices and support family sharing features you choose to use.
3. Photos and Bill Screenshots
Bill screenshot recognition uses the system photo picker only when you actively choose images. Images are used on device to extract bill candidates and are not uploaded to Share-owned servers. Before importing, you can review and edit the recognized results.
4. Third-Party Services
Share uses Apple system services such as Sign in with Apple, iCloud / CloudKit, the system photo picker, and system mail features. Related processing is also governed by Apple's privacy policy and your Apple ID / iCloud settings.
If you provide an API key, accept the data authorization, and enable Agent, Share sends the financial data needed to answer the current question and your prompt directly to your selected model provider. To support follow-up questions, a recent portion of questions and answers from the current conversation is also sent as context; other conversations and the complete local conversation database are not sent. The first provider is DeepSeek. Data may be processed in the People's Republic of China and is governed by DeepSeek's privacy policy and your DeepSeek account settings. Currently visible family assets are stripped of member names, asset names, identifiers, and notes before transmission.
If you separately enable an external market-data tool, the Agent may send the corresponding service credential and model-generated query parameters to your configured AKTools service (for AKShare), Yahoo Finance, Tushare Pro, or Alpha Vantage when needed. The Agent generates those parameters from the current question and context, so they may include parts of your question or financial data already provided to the model. Credentials are not sent to DeepSeek, but returned market data is sent to DeepSeek as context for the current question. The Yahoo Finance endpoint is not an official public Yahoo API and may be delayed, rate-limited, changed, or discontinued; other services' data coverage, frequency, permissions, and fees depend on the corresponding account and plan.
Agent is disabled by default. The DeepSeek API key, Tushare token, and Alpha Vantage API key are stored only in the system keychain on the current device and are not synced to iCloud, written to the Share database, or included in backups. The Agent can only read financial data, cannot modify records, and does not use your data for cross-app or cross-site tracking advertising.
Share does not sell your financial records to third parties and does not use those records for cross-app or cross-site tracking advertising.
5. Deletion and Control
You can delete current account data in the app's Account Details. Share removes local data and syncs deletion of Share data stored in iCloud. You can also sign out of Apple and turn off sync; local data remains on the current device unless you delete it.
6. Backup and Export
If you export a data backup, the app creates a JSON file. You are responsible for storing and protecting exported files because they may contain financial information.
7. Contact
If you have questions about this Privacy Policy or data processing, contact: support@spacelion.com.