✳ HEUREKER+

隐私政策

生效日期：2026年11月2日。本政策适用于由 Zhen Ning 提供的 Castory iOS/iPadOS App。

1. 本机记录

出钓日期、地点、经纬度、鱼种、数量、鱼饵、尺寸、重量、天气、浪况、笔记及所选照片、视频和截图保存在设备的 App 存储中。Castory 不要求注册、不提供账号同步，平台 AI 仅处理你主动同意发送的素材预览和聚合统计，不提供记录云同步，也不内置广告、行为跟踪或分析 SDK。设备系统备份可能保存 App 数据，受你的 Apple 备份设置控制。

2. 照片、视频和位置

自定义相册浏览会申请系统照片读取权限，支持只允许部分照片；相册列表和网格读取你授权范围内的相册、照片/视频标识、拍摄信息及缩略图，只为你选中的素材读取原文件。未授权时仍可使用系统素材选择器，不要求扩大权限。导入会尝试读取原文件或照片图库记录中的拍摄时间和 GPS。文件指纹、相册来源标识及预览画面用于本机查重和分组；画面相似不代表同一条鱼。视频不做全片扫描，只生成选定时刻的截图，允许调整截图时刻。新导入视频以独立文件保存在 App 本地存储，不再将整个视频装入记录数据库；旧版数据库视频仍兼容播放。保存后的原视频和截图保留在本机，视频可能仍含原始元数据。不会后台扫描相册原文件，也不会使用手机当前定位冒充拍摄位置。导入后的预览 JPEG 会去除原始元数据，读取出的时间和坐标单独作为本机记录保存。照片中的可见内容仍可能包含个人信息，请注意选择。

3. 主动联网功能

4. API Key

用户的 Key 保存在设备钥匙串中，仅在设备解锁时可读，使用 ThisDeviceOnly 属性，不通过 iCloud 钥匙串同步。Key 不写入安装包、本机记录数据库、JSON 导出或 Castory 服务器。不在聊天、支持反馈或公开截图中发送 Key。可在“设置”点击“恢复使用 Castory”；卸载 App 不一定删除钥匙串项目，也可在对应服务商平台撤销 Key。

5. 控制与删除

可以不启用 AI、不匹配天气，仍可记录和进行本机统计。可在记录详情中删除记录及关联照片、视频和截图。JSON 导出由你主动保存或分享，包含坐标但不含照片、视频或截图；请自行控制导出文件和接收人。删除 App 通常会删除其本机数据库，但系统备份和第三方服务已收到的数据需分别管理。服务商数据删除应联系相应服务商。

6. 费用、儿童和安全

Castory 当前不包含内购或订阅。自带 Key 模式的 API 费用由你的账户承担；平台模式由 Castory 承担 API 费用并设有用量限制。App 不针对儿童提供服务，也不主动收集年龄信息。网络使用系统 HTTPS；无法保证任何设备或第三方网络服务绝对安全。AI 鉴定可能出错；天气和浪况不是航行或安全判断依据。

7. 支持和政策更新

隐私问题可通过 支持页面 联系。GitHub 问题默认公开，请勿提交私人数据。支持网站由 GitHub Pages 托管，其技术日志受 GitHub 隐私政策管理。本页面会随数据处理方式变化更新日期。

Privacy Policy

Effective November 2, 2026. Castory is provided by Zhen Ning.

Fishing records, selected photos, videos and extracted frames are stored locally. File fingerprints, picker identifiers and preview similarity support local duplicate checks; similarity does not prove fish identity. Videos are not scanned end to end. Original saved videos may retain metadata. New videos are saved as app-local files; older database-stored videos remain readable. Apple Maps receives map/search requests when you use the map picker. Foreground location is requested only after you explicitly choose current location; no background tracking is used. No Castory account, advertising, tracking SDK, or fishing-record cloud sync is used. The optional platform AI gateway runs on Google Cloud. OS backups may include app data. The custom album browser requests Photos read access and supports limited access. It reads authorized album/asset metadata and thumbnails locally, and opens original files only for selected media. If access is denied, the system picker remains available. Capture time and GPS may come from the original file or Photos metadata; there is no background location access or original-library scan.

Weather lookup is optional and sends the record's time and coordinates to Open-Meteo. Optional AI requires authorization before first use and is then initiated by you. Without a personal API key, requests are forwarded through Castory on Google Cloud to DeepSeek. With a personal key, requests go directly to the HTTPS Chat Completions-compatible endpoint and model you configure. Its privacy policy and API terms apply. Grouping runs locally using capture time, short-video intervals and conservative image matching without uploading media. Optional fish assessment sends up to six representative re-encoded photos and selected video frames per fish without attached metadata, never original videos or historical media. Assessment also sends the fish-group label to identify the target fish; avoid private information in labels. Group identity and size or weight estimates need user review; visible personal information can remain. AI summaries send aggregated time, bait, weather, wave, catch and fishing-duration statistics for up to 200 recent trips, not photos, coordinates, location names or notes. Avoid private information in bait labels.

Personal-key requests go directly over HTTPS to your selected provider; platform requests go through Castory on Google Cloud. The gateway does not persist images, prompts or AI responses. It retains installation public keys, verification counters, usage counts and temporary duplicate-request identifiers for authentication and rate limits, without names or accounts. Google Cloud may retain technical request logs such as IP, time and status, without request/response bodies. Providers receive network metadata and may retain requests under their policies; DeepSeek can associate requests with your API account. Castory does not control provider retention. See the provider policy links above.

Your API key is stored in the device Keychain using WhenUnlockedThisDeviceOnly, not in the app bundle, database, exports or a Castory server. Delete it in Settings or revoke it at the provider; uninstalling may not clear Keychain items. Personal-key usage is billed by your selected API provider. Castory covers platform API usage within its limits; the operator key stays in server-side Secret Manager. Castory currently has no in-app purchases or subscriptions.

You can use local logging and statistics without AI. Delete individual records in the app. Exports include coordinates but not photos, videos or extracted frames and are controlled by you; they are not a complete backup. Manage OS backups and provider-held data separately. Contact support through the linked GitHub issue form without disclosing private data; issues are public. This support website is hosted by GitHub Pages and subject to its hosting privacy practices.

HEUREKER support: team@heureker.com.