Privacy Policy — 人生成就 / LifeAchievement

1概述

「人生成就」是一款帮助你记录人生目标、成就和成长复盘的 iOS 应用。我们高度重视你的隐私。本应用的设计原则是数据本地优先（local-first）：你的个人数据默认全部保存在你自己的设备上，我们（开发者）不运营任何服务器来收集、存储或分析你的个人数据。

2我们收集和保存哪些数据

你在使用过程中产生的以下内容，全部保存在你设备本地（应用沙盒的 Documents 目录），以 JSON 文件形式存储：

个人资料：昵称、人生愿景描述、语气偏好

成就树、成就节点、人生徽章及其状态

成就证据（文字记录、引用、你添加的图片）

复盘 / 反思内容

生活维度（健康、财富、关系等）的自定义配置

应用设置（包括你选择的 AI 服务商与模型偏好）

        这些数据不会被自动上传到开发者的任何服务器——因为开发者没有运营任何此类服务器。
      

3本地数据安全

加密存储

AI 生成的徽章图片使用 AES-GCM（Apple CryptoKit）加密后写入磁盘；密钥仅保存在本设备 Keychain（ThisDeviceOnly）。

密钥管理

你填写的第三方 AI API Key 仅保存在本设备 Keychain（kSecAttrAccessibleWhenUnlockedThisDeviceOnly），不会发送给开发者，也不会随备份同步到其他设备。

4第三方 AI 服务

部分功能（AI 生成成就路径、AI 复盘、生成徽章图片等）需要调用你自行选择并配置的第三方 AI 服务。只有当你主动使用这些 AI 功能时，相关内容才会离开你的设备。

由你掌控：你需要自行填写所选服务商的 API Key，应用才会调用对应服务。

发送的内容：当你触发某个 AI 功能时，应用会把完成该功能所必需的文本直接从你的设备发送给你所选择的服务商。

数据直连：这些请求由你的设备直接发送给对应服务商，不经过开发者的任何中转服务器。

可选的服务商包括：Anthropic、OpenAI、OpenRouter、Google Gemini、DeepSeek、Groq、Mistral、Moonshot（Kimi）、阿里云百炼、智谱 GLM、MiniMax 等，以及你自定义的兼容接口。

        注意：你发送的内容将受到对应服务商自身隐私政策的约束。如果你不使用任何 AI 功能，则不会有任何个人数据离开你的设备。
      

5我们不做的事

不收集姓名 / 邮箱 / 电话 / 位置不含分析 / 广告 / 追踪 SDK 不出售或出租数据不需要注册账号不进行跨应用追踪

6数据保留与删除

你的数据保存在设备本地，由你完全掌控。你可以在应用内删除对应的成就、证据、复盘等内容。

卸载应用会删除该应用沙盒内的全部本地数据（包括 Documents 目录中的数据文件与图片）；保存在 Keychain 中的密钥会按 iOS 的机制处理。

你通过设备备份（如 iCloud 或 iTunes/Finder 加密备份）所做的备份，受 Apple 的备份机制与政策约束。

7儿童隐私

本应用面向成年用户，不针对 13 岁以下儿童，也不会有意收集儿童的个人信息。

8政策变更

如本政策发生变更，我们会更新本文档顶部的「最后更新」日期，并在新版本应用中提供更新后的政策。

9联系方式

✉️

邮箱

cfateachingassistant@gmail.com

1Overview

LifeAchievement is an iOS app that helps you record life goals, achievements, and reflections. We take your privacy seriously. The app is local-first by design: all of your personal data is stored on your own device by default, and we (the developer) do not operate any server that collects, stores, or analyzes your personal data.

2What Data We Store

Everything you create in the app is stored locally on your device (in the app sandbox's Documents directory) as JSON files, including:

Profile: nickname, life-vision text, tone preference

Achievement trees, nodes, and badges with their status

Evidence (text entries, quotes, images you add)

Reflections

Life-dimension configuration (health, wealth, relationships, etc.)

App settings (including your chosen AI provider and model preferences)

        This data is not automatically uploaded to any developer server — because no such server exists.
      

3Local Data Security

Encryption at Rest

AI-generated badge images are encrypted with AES-GCM (Apple CryptoKit) before being written to disk. The encryption key is stored only in this device's Keychain (ThisDeviceOnly, not synced via iCloud Keychain).

Credential Storage

Any third-party AI API keys you enter are stored only in this device's Keychain (kSecAttrAccessibleWhenUnlockedThisDeviceOnly). They are never sent to the developer and are never synced to other devices via backups.

4Third-Party AI Services

Some features (AI-generated achievement paths, AI reflections, badge image generation) call third-party AI services that you choose and configure yourself. Data leaves your device only when you actively use these AI features.

You are in control: You must supply your own API key for a provider before the app will call it.

What is sent: When you trigger an AI feature, the app sends only the text necessary for that feature directly from your device to the provider you selected.

Direct connection: These requests go directly from your device to the provider; they do not pass through any developer-operated server.

Supported providers include: Anthropic, OpenAI, OpenRouter, Google Gemini, DeepSeek, Groq, Mistral, Moonshot (Kimi), Alibaba Cloud Bailian / Qwen, Zhipu GLM, MiniMax, and any custom compatible endpoint you configure.

        Note: Content you send is subject to the privacy policy of the provider you selected. If you do not use any AI feature, no personal data leaves your device.
      

5What We Do Not Do

No collection of name / email / phone / location No analytics / advertising / tracking SDKs No selling or renting of data No account registration required No cross-app tracking

6Data Retention & Deletion

Your data lives locally on your device and is fully under your control. You can delete achievements, evidence, reflections, and other content within the app.

Uninstalling the app removes all local data in the app sandbox (including data files and images in the Documents directory). Keys stored in the Keychain are handled per iOS behavior.

Any device backups you create (e.g., iCloud or encrypted iTunes/Finder backups) are governed by Apple's backup mechanisms and policies.

7Children's Privacy

The app is intended for adults, is not directed to children under 13, and does not knowingly collect personal information from children.

8Changes to This Policy

If this policy changes, we will update the "Last updated" date at the top of this document and provide the updated policy in a new version of the app.

9Contact

✉️

cfateachingassistant@gmail.com