分账本 隐私政策
分账本（iOS App 和网页版）用来和朋友一起记共同支出、算出谁欠谁。这份政策说明我们收集哪些数据、怎么用、存在哪里，以及你怎么删除它们。
1. 谁在处理你的数据
分账本由个人开发者 Zhi Guo 开发和运营（下称“我们”）。联系邮箱：540393671@qq.com。
2. 我们收集的数据
分账本没有账号，不需要手机号、邮箱或密码。为了让同一个群组的人看到同一本账，下面这些数据会上传到服务器：
- 群组里填写的内容：群组名称、类型和货币；成员称呼（你自己和朋友的名字或昵称）；每笔账的说明、金额、日期、类别、备注，谁付了多少、每人该分摊多少；外币账目的原始金额和汇率。
- 设备标识：App 第一次打开时随机生成的一串字符，用来记住你在群组里是哪位成员、群组是哪台设备建的（只有建群的设备能删除群组）。它不是 Apple 的广告标识符，也不和其他 App 共享。
- 防滥用的临时记录：为了限制过于频繁的请求，服务器会在内存里临时记录访问的 IP 地址和请求次数，停止访问两小时后自动清除，不写入日志或硬盘。
我们不收集通讯录、位置、照片、广告标识符或任何设备上的其他数据。App 和网页里没有广告，也没有第三方统计或追踪 SDK。
3. 我们怎么使用这些数据
只用来提供分账功能：保存账目、在群组成员之间同步、计算结余和结清方案。我们不用这些数据做广告或用户画像，不出售，也不和第三方共享（下面第 6 条的服务商除外）。
4. 数据存在哪里
- 默认情况下，群组存在我们租用的阿里云服务器上，服务器位于中国广东省深圳市。如果你在中国大陆以外使用，你的数据会被传输到中国境内的这台服务器。
- 如果你在 App 的“设置 → 服务器”里填了自己的服务器链接，之后新建的群组会存在那台服务器上，由它的运营者负责，不经过我们的服务器。
- App 会在你的手机上保存一份缓存，方便没网时查看和记账，联网后再上传。
- App 和服务器之间的传输全部使用 HTTPS 加密。
5. 谁能看到你的账
只有拿到群组邀请链接的人能看到和修改这个群组。邀请链接里带有一把随机生成的密钥，请只发给群组成员。分账本没有公开的群组列表、个人主页或搜索功能。
我们作为服务器的运营者，在技术上能访问服务器上的数据。我们只会在排查故障、处理举报或法律要求的情况下查看。
6. 第三方服务
- 阿里云：提供服务器托管。
- 汇率数据：记外币账时，服务器会向公开的汇率服务（Frankfurter，欧洲央行数据；以及 fawazahmed0 currency-api、open.er-api.com 作为备用）查询汇率。查询只包含两种货币的代码和日期，不包含任何账目内容或个人信息。
7. 保存多久、怎么删除
- 群组会一直保存，直到建群的人删除它：在 App 首页把群组左滑选“删除”，或者在“群组设置”里点“删除群组”。删除后立即从服务器上移除，所有成员都看不到了，无法恢复。
- “离开群组”只会从你的手机上移除这个群组，服务器上的账不变。
- 你也可以在群组里修改或删除任何一笔账，改动会同步给所有成员。
- 如果你没法在 App 里删除（比如重装过 App，或者你不是建群的人），请把群组的邀请链接发到 540393671@qq.com，我们会在核实后 15 个工作日内删除。
8. 你的权利
你可以随时在 App 里查看、更正和删除群组里的数据。如果想了解我们保存了哪些和你有关的数据、要求删除、或对数据处理有疑问，请发邮件联系我们，我们会在 15 个工作日内答复。
9. 儿童
分账本不面向儿童，我们不会有意收集儿童的个人信息。如果你发现儿童向我们提供了个人信息，请联系我们删除。
10. 举报
如果你发现有人用分账本传播违法或不当内容，请把相关的邀请链接和说明发到 540393671@qq.com，我们会尽快处理，必要时删除相关群组。
11. 政策更新
政策有变化时，我们会更新这个页面和上面的生效日期。重大变化会在 App 更新说明里告知。
Split Notebook Privacy Policy
Split Notebook (分账本; the iOS app and the web version) lets you track shared expenses with friends and work out who owes whom. This policy explains what data we collect, how we use it, where it is stored and how you can delete it.
1. Who handles your data
Split Notebook is developed and operated by Zhi Guo, an individual developer (“we”). Contact: 540393671@qq.com.
2. Data we collect
Split Notebook has no accounts and never asks for a phone number, email address or password. So that everyone in a group sees the same ledger, the following data is uploaded to the server:
- What you enter in a group: the group's name, type and currency; member names (your own and your friends' names or nicknames); each expense's description, amount, date, category and note, who paid how much and each person's share; and, for foreign-currency expenses, the original amount and exchange rate.
- A device identifier: a random string the app creates the first time it opens. It remembers which member you are in a group and which device created a group (only that device can delete the group). It is not Apple's advertising identifier and is not shared with other apps.
- Temporary abuse-prevention records: to limit excessive requests, the server keeps IP addresses and request counts in memory and clears them two hours after the last request. They are never written to logs or disk.
We do not collect contacts, location, photos, advertising identifiers or any other data on your device. There are no ads and no third-party analytics or tracking SDKs.
3. How we use it
Only to provide the app's features: storing expenses, syncing them between the members of a group, and calculating balances and settle-up suggestions. We do not use your data for advertising or profiling, we do not sell it, and we do not share it with third parties except the providers in section 6.
4. Where it is stored
- By default, groups are stored on a server we rent from Alibaba Cloud in Shenzhen, Guangdong, China. If you use Split Notebook outside mainland China, your data is transferred to this server in China.
- If you enter your own server link in Settings → Server, groups you create afterwards are stored on that server, operated by whoever runs it, and never pass through ours.
- The app keeps a copy on your phone so you can view and add expenses offline; changes are uploaded when you are back online.
- All traffic between the app and the server is encrypted with HTTPS.
5. Who can see your expenses
Only people who have a group's invite link can see and edit that group. The link contains a randomly generated key, so please share it only with the group's members. Split Notebook has no public group list, profiles or search.
As the operator of the server, we can technically access the data stored on it. We only look at it to fix problems, handle reports, or when required by law.
6. Third-party services
- Alibaba Cloud hosts the server.
- Exchange rates: when you record a foreign-currency expense, the server looks up the rate from public exchange-rate services (Frankfurter, which publishes European Central Bank data, with fawazahmed0 currency-api and open.er-api.com as fallbacks). These requests contain only two currency codes and a date, never any expense or personal data.
7. Retention and deletion
- A group is kept until the person who created it deletes it: swipe left on the group on the app's home screen and tap Delete, or tap Delete Group in Group Settings. It is removed from the server immediately, disappears for every member, and cannot be recovered.
- Leave Group only removes the group from your phone; the ledger on the server is unchanged.
- You can edit or delete any expense in a group, and the change syncs to every member.
- If you can't delete a group in the app (for example, you reinstalled the app or didn't create the group), email the group's invite link to 540393671@qq.com. We will delete it within 15 business days after verifying the request.
8. Your rights
You can view, correct and delete your group data in the app at any time. To ask what data we hold about you, request deletion, or raise any privacy question, email us and we will reply within 15 business days.
9. Children
Split Notebook is not directed at children, and we do not knowingly collect children's personal information. If you believe a child has given us personal information, contact us and we will delete it.
10. Reporting content
If you find Split Notebook being used to share illegal or inappropriate content, email the invite link and a short description to 540393671@qq.com. We will act promptly and delete the group where appropriate.
11. Changes
When this policy changes we will update this page and the effective date above. We will mention significant changes in the app's release notes.