隐私政策Privacy Policy

1. 我们处理什么What we process

StayFresh 不要求 StayFresh 账号。应用在本机保存用户输入的冰箱、储藏空间、食材、日期、采购、菜谱、计划、做饭和小票记录。小票文字识别在设备端完成，用户核对后才入库。尚未确认的个人菜谱导入草稿保存在本机；确认保存的个人菜谱结构数据会写入本机数据区，并可通过待同步队列同步到当前 Apple/iCloud 身份的私有 CloudKit。基础本地 JSON 导出可由所有用户使用，包含当前 scope 中已定义的业务数据投影与遗漏元数据，不含图片字节。购买时 Apple / RevenueCat 按其服务处理购买与权益信息。RevenueCat 还可能处理设备类型、操作系统等技术信息和交易信息（例如 Apple 购买收据）；具体以其服务与隐私政策为准。

StayFresh does not require an app account. The device stores entries for fridges, storage spaces, ingredients, dates, shopping, recipes, plans, cooking, and receipts. Receipt OCR runs on device and entries are saved only after review. Unconfirmed personal-recipe import drafts stay on the device. Once a personal recipe is confirmed and saved, its structured recipe data is stored in the local scope and may sync through the durable outbox to the current Apple/iCloud identity’s private CloudKit database. Free local JSON export provides the defined business-data projection and omission metadata for the current scope; it does not include image bytes. Apple / RevenueCat process purchase and entitlement information for their services. RevenueCat may also process technical information such as device type and operating system, and transaction information such as an Apple receipt; see its services and privacy policy for details.

2. 数据存在哪里Where data lives

Local SQLite is the active-scope source. When enabled and available, data syncs to the user’s private CloudKit database. Provider keys are stored in iOS Keychain and sent as authentication to the chosen provider when a request is made. Apple / RevenueCat separately handle purchases and entitlements.

3. 何时数据会离开设备When data leaves the device

启用 iCloud scope 后，业务同步操作发送到用户自己的私有 CloudKit。小票 OCR 在设备端处理；用户主动使用云端小票识别或实物识别时，选择的图片会发送给所选 provider。菜谱生成会在用户逐次确认后发送库存食材名称、数量、单位与保质/过期日期、所选餐位与日期、同一餐已安排或正在替换的菜名（用于避免重复推荐），以及生成过程中同日菜品已用食材和剩余数量（用于分配库存）、过敏原/健康与饮食目标/口味/烹饪偏好，以及收藏、做过、跳过和避开菜谱摘要。个人菜谱 AI 精修在单独确认后，会把原始导入菜谱文字和当前解析出的菜谱草稿字段（例如标题、食材、步骤、提示、标签与餐型）发送给所选 provider。AI Key 仅在 Keychain 保存，但请求时会发给 provider 作为认证；StayFresh 不经自有服务器转发，也不把 Key 写入 CloudKit、业务数据库、日志或遥测。取消应用内确认时不会入队或发送。连接测试可能向所选 provider 发送固定测试文字、应用内置测试图片、所选模型和用于认证的 Key，并可能产生费用。选定 provider 按其自己的条款、定价与保留规则处理请求。

When iCloud is enabled, sync operations go to the user’s private CloudKit database. Receipt OCR runs on device. If the user starts cloud receipt or food-photo recognition, selected images go to the chosen provider. After per-request confirmation, recipe generation sends inventory names, quantities, units and expiry dates; selected meal slots and dates; dish titles already planned for the same meal or being replaced (to avoid duplicate recommendations), and ingredients already allocated to dishes on the same day and remaining quantities during generation (to allocate inventory); allergy, health, diet-goal, taste and cooking preferences; and summaries of liked, cooked, skipped or avoided recipes. After separate confirmation, personal-recipe AI refinement sends the original imported recipe text and the current parsed draft fields, such as title, ingredients, steps, tips, tags, and meal types, to the selected provider. The key stays in Keychain at rest but is sent to the provider as request authentication; StayFresh does not relay it through its own server or store it in CloudKit, the business database, logs or telemetry. Canceling the in-app confirmation does not enqueue or send. A connection test may send fixed test text, an image built into the app, the selected model and the key for authentication to the selected provider, and may incur charges. The selected provider applies its own terms, pricing and retention policy.

当前版本没有新增遥测 SDK。应用不出售个人数据，也不进行跨应用广告追踪。Apple / RevenueCat 购买处理是独立服务。

The current version adds no telemetry SDK. The app does not sell personal data or perform cross-app ad tracking. Apple / RevenueCat purchase processing is separate.

应用读取 App Store 账户的 storefront 国家代码，用于决定显示哪些服务商预设；该代码不代表设备实际所在地。所选服务商或 Apple / RevenueCat 的处理地点可能位于你所在地区以外；具体地点及适用规则取决于服务商、账户和服务配置，请查阅其隐私政策。

The app reads the App Store account storefront country code to decide which provider presets to display; that code does not establish the device’s physical location. Your selected provider or Apple / RevenueCat may process data outside your region. Locations and applicable rules depend on the provider, account and service configuration; consult their privacy policies.

DeepSeek 开放平台由杭州深度求索人工智能基础技术研究有限公司运营。使用 DeepSeek 时，服务商依其实际适用的条款处理数据；请参阅 DeepSeek 开放平台服务协议（https://cdn.deepseek.com/policies/zh-CN/deepseek-open-platform-terms-of-service.html），联系邮箱为 api-service@deepseek.com。

The DeepSeek Open Platform is operated by 杭州深度求索人工智能基础技术研究有限公司. When you use DeepSeek, the provider processes data under its applicable terms; see the DeepSeek Open Platform Terms of Service (in Chinese: https://cdn.deepseek.com/policies/zh-CN/deepseek-open-platform-terms-of-service.html). Contact: api-service@deepseek.com.

4. 保留期限Retention

本机业务数据保留到用户在应用内删除、清除应用数据或卸载应用为止；iCloud 私有数据保留到用户从当前 scope 删除或按 Apple 的 iCloud 管理方式清除为止。购买与权益记录由 Apple / RevenueCat 按其服务、安全、财务和法律义务保留。发送给用户所选 AI provider 的内容由该 provider 按其政策保留；StayFresh 不以此路径保存 provider key。

Local business data remains until you delete it in the app, clear the app’s data, or uninstall the app. Private iCloud data remains until you delete it from the current scope or remove it using Apple’s iCloud controls. Apple / RevenueCat retain purchase and entitlement records according to their service, security, financial, and legal obligations. Content sent to an AI provider you choose is retained under that provider’s policy; StayFresh does not store the provider key through that path.

5. 清除与用户选择Deletion and choices

设置中的四个动作范围不同。清除此设备数据会删除本设备登记的 StayFresh 数据区数据库、同步队列、AI 任务资产和已登记的通用应用设置，然后建立新的空白本地数据区；它不会删除 iCloud 云数据、购买权益、Keychain 中保存的 AI Key，或服务商名称、连接地址和模型等连接元数据。菜谱导入临时图片目录由独立的取消/过期孤儿清理流程处理，不属于本次设备清除动作。清除当前云数据只针对当前已验证 iCloud 身份的 StayFreshPrivateZone，本机记录保留；存在待同步操作时应用会拒绝执行。清除后旧本机记录不会自动回灌到云端，但以后新产生的修改仍可能同步。设置项“清除已保存的 AI Key”只删除 iOS Keychain 中的 provider 凭据，保留 provider 名称、连接地址和型号等连接元数据。恢复购买用于重新读取平台权益，不会删除 Apple / RevenueCat 购买记录。卸载 App 不能保证 iOS 删除 Keychain 凭据。用户可从系统/Apple 购买设置管理退款与订阅。

The four Settings actions have different effects. Clear this device data deletes the StayFresh data-scope databases registered on this device, sync queues, AI job assets, and registered general app settings, then creates a fresh local data scope; it does not delete iCloud data, purchase entitlements, the AI key in Keychain, or provider connection metadata such as name, URL and model. The temporary recipe-import image directory is handled by its separate cancellation/orphan-cleanup path and is not part of this device-clear action. Clear current cloud data affects only the StayFreshPrivateZone for the currently verified iCloud identity and leaves local records in place; the app refuses while sync operations are pending. After clearing, old local rows are not automatically reimported, though later changes may sync. “Clear saved AI key” deletes only the provider credential in iOS Keychain and leaves provider name, connection URL, model, and other connection metadata. Restore purchases refreshes platform entitlements and does not delete Apple / RevenueCat purchase records. Uninstalling the app does not guarantee that iOS removes Keychain credentials. Manage refunds and subscriptions through Apple’s purchase settings.

如需询问访问、更正、删除或其他适用的数据权利，可通过本页联系邮箱联系我们；运营者会查看并处理这些请求。请勿通过邮件发送密码、验证码、Apple ID 凭据或 AI API Key；我们可能需要适当核实请求，以保护数据。我们只能处理我们实际掌握的数据；设备、iCloud 和第三方服务中的数据可能需要使用相应控制或联系相应服务商。

To ask about access, correction, deletion or other applicable data rights, contact us using the email on this page; the operator will review and handle these requests. Do not email passwords, verification codes, Apple ID credentials or AI API keys; we may need appropriate verification to protect data. We can address only data we actually hold; data on your device, in iCloud or with third parties may require the relevant controls or a request to that provider.

6. 儿童、变更与安全Children, changes, and security

StayFresh 面向普通家庭成人用户，不是专门面向儿童设计的服务。我们不会有意收集儿童的个人信息。我们会在功能、数据处理或法律要求发生变化时更新本政策，并更新生效日期。用户应妥善保管设备、Apple ID、Keychain 和第三方 provider 账户。

StayFresh is intended for adult household users and is not specifically directed to children, and we do not knowingly collect children’s personal information. We may update this policy when the app, data practices, or legal requirements change; the effective date will be updated. Protect your device, Apple ID, Keychain, and third-party provider accounts.

7. 联系Contact

运营主体：
联系邮箱：

Operator:
Contact: