1. 适用范围
本政策说明光启心语iPhone App及相关账号服务如何处理信息。首发目标为所有可发行的海外 App Store 店面，不含中国大陆。最终开放范围以发行时适用的地区规则与实际支持能力为准。登录方式以正式发行版本提供的选项为准。
2. 本机手记与体验快照
你可以不登录开始体验。你主动保存的心情、留话、读后回应、小事、共鸣句、补记和当时已取得的体验快照存放在当前设备的App私有目录。登录不会自动把私人手记同步到云端。
留话、读后回应、小事及补记正文不会随“让解读参考心情”功能发送给服务端或AI。选中的心情标签的处理方式另见第4节。
保存手记时，文字及本机已有图片先保存，本轮缺失的图片可在后台限时补存。不会为补齐历史文字重新生成解读。手记使用系统文件保护，并将目录标记为排除系统备份。你可从手记列表删除记录；卸载App会移除App本机数据。已主动存入系统相册的图片由你通过相册另行管理。
3. 账号资料、记录与收藏
当你选择注册、登录或维护资料时，账号服务处理对应账号标识和认证信息，以及你填写的显示名、头像、生日、联系邮箱或手机号等当前功能支持的字段。实际必填项以最终发行界面为准，不因本稿表述而要求额外填写。
你主动保存到账号的占卜记录和收藏由账号服务保存，以供登录后回看。它们与本机私人手记分别保存，不自动相互同步。
自定义心情标签在游客状态保存在本机。登录后新建标签可保存到当前账号；游客标签只有在你主动选择同步时才上传。删除自定义标签不修改已经保存的手记。
4. 心情参考与AI反馈
当前开发版的“我的”设置中，“让解读参考心情”默认开启并记住选择，你可关闭。启用时，本次选中的心情标签可与场景、卡名、牌位、正逆位和解读上下文一起交由服务端及AI处理，用于本次解读、来信与祝福。私人留话、读后回应、小事和补记正文不会随此功能发送。
当前 AI 对接为 DeepSeek 开放平台，使用 Chat Completions API。该平台公开文档说明默认启用输入前缀的磁盘上下文缓存。适用于本项目的接收方主体、处理地区、请求及输出的最长保留期和训练使用安排：待核对适用协议或服务商说明。参阅 DeepSeek API 上下文缓存说明。
解读、来信与祝福可能由AI生成，可能存在错误，仅供自我观察与阅读参考。本地开发版已接入首次生成前告知，允许主动选择参考心情、仅牌面或暂不使用AI；在“我的”中可调整或撤回。默认开启偏好不等于已经授权。授权按本机安装保存，不自动跨设备同步；撤回影响未来生成，不删除已保存的本机内容，也不撤销已完成的服务商处理。当前说明仍标为开发版，处理事实补齐和真机验收后方可作为正式发布流程。
5. 照片、相册与分享
更换头像时，App通过系统照片选择器取得你选中的图片，裁剪后上传作为账号头像。保存祝福图片到相册时，App请求添加照片权限。你可拒绝相关权限或在系统设置中调整。手记与补记正文不会自动加入祝福分享图。
6. 设备、安全与服务记录
App与账号服务通过HTTPS通信，使用登录凭证、设备标识及请求签名支持认证和服务安全。登录凭证保存在系统Keychain，语言、偏好及必要缓存保存在本机。
后端在提供服务、保存账号记录时处理相应请求及连接IP，并可能据IP推断地区。IP推断地区不等于读取设备GPS。实际日志字段、访问人员、分析用途与各数据保留期限：待运营配置核实。
7. 服务商、保存期限与数据处理地区
最终政策将逐项列明实际云服务、图片存储/CDN及AI服务的接收方、处理地区、用途和相关政策链接。当前代码中的可配置服务不直接等于全部启用的服务。
目前业务服务沿用香港2.0环境；线上图片配置仍指向cdn.easytoolkit.cn。业务主机地域不代表图片加速节点或AI服务的处理地域，正式版需分别披露。已发现数据库每日备份调度和Nginx按日轮转配置，但尚不能据此确定所有数据的实际保留期限及备份删除安排。
当前应用运行包配置对应用文件日志归档设置 30 天的历史上限和 5 GB 的总量上限。数据库每日备份脚本按数量保留最近 14 份匹配归档。数据库记录、图片、系统日志、其他备份副本和恢复后的删除规则：待完成核对。这些配置不能代替针对具体数据的留存说明。
8. 管理、删除与联系
你可使用App内资料编辑、退出登录、本机手记删除、账号记录/收藏管理及账号删除等已提供的功能。退出登录不等于删除账号，也不会自动清除本机手记。
账号删除覆盖范围、资源异步清理、交易信息去关联后的保留安排及备份处理方式，需以最终发行版本与实际后端行为核对后列明。私人手记在设备上独立管理。
用户反馈、访问、更正、删除或其他信息请求可通过 soulnest2026@163.com 提出。身份核验、响应期限、联系地址与适用地区的投诉渠道：待确认。
9. 适用年龄与政策变更
首发设计按发行地区确定账号和 AI 的年龄条件，并保留已保存的本机手记回看。具体地区、年龄条件、核验方式和无法满足条件时的功能安排，待实现并核对后写入正式版。正式政策将写明版本、生效日期、重大变更的通知方式及适用时重新取得许可的方式。
1. Scope
This draft explains how the Lumiwhisper iPhone app and its account service handle information. The planned launch covers eligible overseas App Store storefronts outside mainland China. Availability and sign-in options will depend on the release version and applicable regional requirements.
2. On-device journal and experience snapshots
You can begin without signing in. Journal entries you save, including mood, notes before drawing, responses, small actions, selected quotes, follow-ups and available experience snapshots, are kept in the app’s private storage on your device. Account sign-in does not automatically sync them.
Journal text stays on your device when mood tags are used for readings. The app saves text and available images first, and can briefly retry missing images in the background. Journal storage uses system file protection and is marked for exclusion from system backup. You can delete an entry in the app. Uninstalling removes the app’s local data. Manage images you deliberately save to Photos separately.
3. Accounts, saved readings and favorites
When you register, sign in or edit your profile, the service handles account identifiers, authentication information and any supported profile details you provide, such as a display name, avatar, date of birth, email or phone number. Required fields depend on the release version.
Readings and favorites you deliberately save to your account are stored separately from your journal. Guest-created mood tags stay on your device until you choose to sync them. New custom tags created while signed in can be saved to your account. Deleting a custom tag does not change past journal entries.
4. Mood tags and AI
Readings, letters and blessings can use the selected scene, card names and positions, card orientation and relevant context. If you allow AI to reference your mood, the selected tags for that session can be included. Your notes before drawing, responses, small actions and follow-up text stay on your device.
The app currently uses the DeepSeek Chat Completions API. DeepSeek documents default disk-based caching of input prefixes. The terms applicable to this project, including the recipient, processing locations, maximum input and output retention, and training arrangements, are pending confirmation. DeepSeek API caching documentation
The development version asks for permission before first use. You can allow card readings with mood tags, allow cards only, or decline AI. Change or withdraw permission from Profile. Permission is kept on this installation. Withdrawal applies to future requests. AI-generated content may contain errors and is provided for personal reflection.
5. Photos and sharing
The app uses the system photo picker for a picture you select, then uploads the cropped image as your avatar. Saving a blessing image to Photos requires add-only photo permission. You can manage permissions in system Settings. Journal and follow-up text is not automatically added to blessing images.
6. Device and service security
The app connects to the account service over HTTPS. It uses credentials, device identifiers and request signatures for authentication and security, and stores session credentials in Keychain. The service processes request and connection data, including IP addresses that may be used to infer a region. Actual log fields, access, uses and retention remain under review.
7. Providers, storage and retention
The business service currently runs in Hong Kong. Storage, content delivery and AI processing locations are reviewed separately. Service providers and the retention and deletion periods for account records, images, logs and backups are pending confirmation. Current log rotation and database backup limits do not establish a general retention period.
8. Manage or delete information
Use the app to edit supported profile fields, delete local journal entries, manage saved readings and favorites, or request account deletion. Signing out keeps your account and local journal. The scope of account deletion, image cleanup and backup handling remains under review.
For feedback or to request access, correction or deletion, email soulnest2026@163.com. Identity checks, response periods and local complaint channels are pending confirmation.
9. Age eligibility and policy changes
The launch plan applies region-specific eligibility to accounts and AI while keeping existing on-device journal entries accessible. The supported regions, age checks and options when eligibility cannot be established are pending implementation and review. The published policy will specify its effective date and how significant changes are communicated.
