E7 TimeBoxE7 TimeBox 隐私政策
E7 TimeBox Privacy Policy
1. 引言与适用范围
1. Introduction and Scope
E7 TimeBox 由杭州驿桥灵科技有限公司（以下简称「我们」）提供。我们深知个人信息对您的重要性，将按照《中华人民共和国个人信息保护法》《中华人民共和国网络安全法》，以及欧盟《通用数据保护条例》（GDPR）、美国加利福尼亚州《消费者隐私法案》（CCPA）等您所在国家或地区适用的数据保护法律法规的要求，以及本政策的约定处理您的个人信息。本政策适用于 E7 TimeBox 应用及其官方网站，说明我们如何收集、使用、存储、共享和保护您的个人信息，以及您享有的权利。
E7 TimeBox is provided by Hangzhou Yiqiaoling Technology Co., Ltd. (hereinafter, "we" or "us"). We fully understand the importance of your personal information to you, and will process your personal information in accordance with the Personal Information Protection Law of the People's Republic of China, the Cybersecurity Law of the People's Republic of China, as well as the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other data protection laws and regulations applicable in your country or region, and in accordance with this Policy. This Policy applies to the E7 TimeBox app and its official website, and explains how we collect, use, store, share, and protect your personal information, as well as the rights you enjoy.
请您在使用前仔细阅读本政策。E7 TimeBox 是一款本地优先的应用：您的日程数据默认只保存在您自己的设备上，只有在您主动开启相应功能（如云同步、AI 功能）时，相关数据才会离开设备。
Please read this Policy carefully before use. E7 TimeBox is a local-first app: by default, your schedule data is stored only on your own device, and the relevant data leaves your device only when you actively enable the corresponding features (such as cloud sync or AI features).
2. 保存在您设备本地的数据
2. Data Stored Locally on Your Device
您的时间卡片、时间轴日程、待办、灵感、周期、日记本与年度归档、打卡凭证（文字与语音）、数据统计、插件及其数据、Agent 会话记录，默认全部存储在设备本机。不注册账号、不开启同步时，这些内容不会上传到我们的服务器。设备本地数据由您自行掌控：删除 App 时会随之删除，请注意提前备份。
Your time cards, timeline schedule, to-dos, ideas, cycles, diary and yearly archives, check-in proofs (text and voice), statistics, plugins and their data, and Agent conversation records are all stored on your device by default. If you do not register an account and do not enable sync, this content is not uploaded to our servers. Local data on your device is under your own control: it is deleted along with the app when you delete the app, so please back it up in advance.
3. 我们收集的信息及用途
3. Information We Collect and Its Purposes
我们遵循最小必要原则，仅在下列场景收集对应信息：
We follow the principle of minimum necessity and collect the corresponding information only in the following scenarios:
- 账号信息（仅注册时）：您的邮箱或手机号、系统分配的数字账号（E7ID）；使用「通过 Apple 登录」或平台对应的 Google、华为账号登录时，我们收到相应平台提供的账号标识。用途：创建与登录账号、找回账号。
- 验证码与风控信息：发送验证码前需完成人机验证（由阿里云验证码服务提供），以防止短信/邮件轰炸与恶意注册。
- 登录设备信息：为支持「登录设备管理」，我们记录账号的登录设备型号与登录时间，供您查看并移除可疑设备。
- 云同步数据（仅当您开启 ArcLing Cloud 官方云同步）：您的日程等同步内容会加密传输并存储在我们的服务器上，数据跟随您的 E7ID。若您选择 iCloud 等系统官方云同步，数据存储于您本人的品牌账户空间（如 iCloud 私有空间），由相应平台管理，我们无法访问，也不存储任何内容。
- AI 请求内容（仅当您使用 AI 功能）：您发送给 E7 Agent 的消息与附件、AI 编辑 / AI 拆解 / AI 路线图等功能的请求内容，会经由我们的服务器转发给 AI 模型服务商以生成结果（详见第 6 条）。
- 用量与计费信息：AI 功能的 Token 用量与云端存储用量会被记账，用于额度展示、防滥用与成本核算；相关记录不含您的对话正文。
- 购买信息：订阅与内购由您所在平台的应用商店（Apple App Store、Google Play、华为应用市场等）处理，我们仅收到用于核验订阅权益的交易凭据，不会接触您的银行卡或支付账户信息。
- 插件签名与举报信息：分享插件时，插件包会携带分享者与接收者的 E7ID 及签名信息，用于验证来源、防止篡改；您举报插件时，被举报的插件包及相关账号信息会提交给我们用于审核处置。
- Account information (only upon registration): your email address or phone number, and the numeric account number assigned by the system (E7ID); when you sign in with "Sign in with Apple" or the platform's corresponding Google or Huawei account, we receive the account identifier provided by the respective platform. Purpose: creating and signing in to your account, and account recovery.
- Verification code and risk-control information: before a verification code is sent, human verification must be completed (provided by the Alibaba Cloud Captcha service) to prevent SMS/email bombing and malicious registration.
- Signed-in device information: to support "signed-in device management", we record the device model and sign-in time for your account, so that you can review and remove suspicious devices.
- Cloud sync data (only when you enable ArcLing Cloud official cloud sync): your synced content such as your schedule is transmitted with encryption and stored on our servers, and the data follows your E7ID. If you choose a system official cloud sync such as iCloud, the data is stored in your own platform account space (such as your iCloud private space) and managed by the respective platform; we cannot access it and do not store any of its content.
- AI request content (only when you use AI features): messages and attachments you send to E7 Agent, and request content of features such as AI Edit / AI Breakdown / AI Roadmap, are forwarded via our servers to AI model service providers to generate results (see Section 6 for details).
- Usage and billing information: token usage of AI features and cloud storage usage are recorded for quota display, abuse prevention, and cost accounting; these records do not contain the text of your conversations.
- Purchase information: subscriptions and in-app purchases are processed by the app store of your platform (Apple App Store, Google Play, Huawei AppGallery, etc.); we only receive transaction credentials used to verify subscription entitlements, and we never come into contact with your bank card or payment account information.
- Plugin signature and report information: when you share a plugin, the plugin package carries the E7IDs and signature information of the sharer and the recipient, used to verify its origin and prevent tampering; when you report a plugin, the reported plugin package and related account information are submitted to us for review and handling.
4. 系统权限的用途
4. Purposes of System Permissions
以下权限均为可选，仅在您使用对应功能时才会请求；拒绝授权仅影响对应功能，不影响其他功能的使用。您可随时在系统设置中更改授权。
All of the following permissions are optional and are requested only when you use the corresponding feature; declining a permission affects only that feature and does not affect the use of other features. You can change your authorization at any time in the system settings.
- 通知：待办截止提醒、周期提醒、时间轴卡片提醒等。普通通知均从设备本地发出，不经过我们的服务器；仅部分特殊通知由服务器统一发送。
- 日历：读取您选择的系统日历，把其中的事件显示为时间轴上的外部日历卡片；您在时间轴上的修改会写回系统日历（订阅日历除外，完全只读）。
- 麦克风与语音识别：录制您的语音并在设备本地转写为文字，用于填写请求、留下打卡语音凭证或生成时间卡片建议。
- 相机：为时间卡片备注拍摄完成凭证。
- 照片库：选取图片用作附件、Agent 图标或对话背景；保存笔记图片到您的相册。
- 位置（仅使用期间）：只在您主动点击「获取当前位置」时读取一次，用于保存该地点；我们不做持续定位，不做轨迹追踪。
- Apple Music：在专注模式中搜索并播放您授权的音乐（需您本人的有效订阅）。
- Siri 与快捷指令、实时活动：支持语音查询与锁屏/灵动岛进度展示（iOS）。
- Notifications: to-do due reminders, cycle reminders, timeline card reminders, and so on. Ordinary notifications are issued locally from your device and do not pass through our servers; only certain special notifications are sent centrally from the server.
- Calendar: reads the system calendars you select and displays their events as external calendar cards on the timeline; changes you make on the timeline are written back to the system calendar (except subscribed calendars, which are entirely read-only).
- Microphone and speech recognition: records your voice and transcribes it into text locally on your device, used for filling in requests, leaving voice check-in proofs, or generating time card suggestions.
- Camera: takes completion proof photos for time card notes.
- Photo library: selects images to use as attachments, the Agent icon, or the conversation background; saves note images to your photo album.
- Location (while using only): read only once when you actively tap "Get current location", in order to save that place; we do not perform continuous positioning or trajectory tracking.
- Apple Music: searches for and plays music you have authorized in focus mode (requires your own valid subscription).
- Siri and Shortcuts, Live Activities: supports voice queries and progress display on the Lock Screen / Dynamic Island (iOS).
5. 我们如何使用信息
5. How We Use Information
我们仅为以下目的使用上述信息：向您提供并改进服务（同步、AI 生成、提醒）；保障账号与服务安全（登录验证、防盗号、防滥用）；额度与计费核算；处理您的举报与投诉；履行法律法规规定的义务。我们不出售您的个人信息，不将您的内容用于广告投放，不会未经您的允许使用您的私人数据训练 AI 模型。
We use the above information only for the following purposes: providing and improving the services for you (sync, AI generation, reminders); safeguarding account and service security (sign-in verification, anti-hijacking, abuse prevention); quota and billing accounting; handling your reports and complaints; and fulfilling obligations prescribed by laws and regulations. We do not sell your personal information, do not use your content for advertising, and will not use your private data to train AI models without your permission.
6. 信息的共享与第三方服务
6. Sharing of Information and Third-Party Services
除以下情形外，我们不会向任何第三方提供您的个人信息：
Except in the following circumstances, we do not provide your personal information to any third party:
- Apple：iCloud 同步、App 内购买、推送通知（APNs）、通过 Apple 登录，均由 Apple 依其隐私政策处理。
- Google：在 Android 版中，登录、推送通知、应用内购买与系统官方云同步等平台服务将由 Google 提供，并由 Google 依其隐私政策处理。
- 华为：在鸿蒙（HarmonyOS）版中，登录、推送通知、应用内购买与系统官方云同步（华为云）等平台服务将由华为提供，并由华为依其隐私政策处理。
- 阿里云：为我们提供服务器、数据库、对象存储、人机验证与内容分发等基础设施（受我们委托处理，不得自行使用您的信息）。
- AI 模型与搜索服务商：为生成 AI 回复、图片/视频/音乐与联网搜索结果，您的相关请求内容会经我们的服务器转发给模型服务商处理。我们统一转发、按需最小传输，不会向模型服务商提供您的账号、密码等身份凭据。
- 依法披露：根据法律法规、强制性行政或司法要求必须提供时，我们会在依法核实后披露必要信息。
- Apple: iCloud sync, in-app purchases, push notifications (APNs), and Sign in with Apple are all handled by Apple in accordance with its privacy policy.
- Google: in the Android version, platform services such as sign-in, push notifications, in-app purchases, and system official cloud sync will be provided by Google and handled by Google in accordance with its privacy policy.
- Huawei: in the HarmonyOS version, platform services such as sign-in, push notifications, in-app purchases, and system official cloud sync (Huawei Cloud) will be provided by Huawei and handled by Huawei in accordance with its privacy policy.
- Alibaba Cloud: provides us with infrastructure such as servers, databases, object storage, human verification, and content delivery (processing entrusted by us; it may not use your information for its own purposes).
- AI model and search service providers: to generate AI replies, images/videos/music, and web search results, your relevant request content is forwarded via our servers to model service providers for processing. We forward uniformly and transmit only the minimum needed, and we never provide your account, password, or other identity credentials to model service providers.
- Disclosure required by law: where provision is required by laws and regulations or by mandatory administrative or judicial requirements, we will disclose the necessary information after verification in accordance with the law.
我们不会将您的个人信息转让给任何公司、组织或个人，因合并、收购导致转移的，我们将要求新主体继续受本政策约束。
We do not transfer your personal information to any company, organization, or individual; where a transfer occurs due to a merger or acquisition, we will require the new entity to remain bound by this Policy.
7. 保存期限与删除
7. Retention Period and Deletion
账号数据在您使用服务期间保存，达成处理目的后将被删除或匿名化。您在 App 内注销账号后，我们将删除服务器上与该账号关联的数据（法律法规要求留存的除外）；云端存储中不再被引用的文件会被定期清理。ArcLing Cloud 会员到期后，云端数据转为暂停态并继续保留，续费后恢复同步。
Account data is retained while you use the services and will be deleted or anonymized once the processing purpose has been fulfilled. After you delete your account within the app, we will delete the data associated with that account on our servers (except where retention is required by laws and regulations); files in cloud storage that are no longer referenced are cleaned up periodically. After an ArcLing Cloud membership expires, cloud data enters a paused state and continues to be retained, and sync resumes after renewal.
8. 您的权利
8. Your Rights
依照相关法律法规，您对自己的个人信息享有查阅、复制、更正、补充、删除的权利。您可以：在 App 内直接查阅、修改、删除您的数据；查看并移除登录设备；修改密码；随时在系统设置中撤回任一权限授权；随时在 App 内注销账号。撤回授权不影响撤回前基于授权已进行的处理。如需协助行使上述权利，请通过第 11 条方式联系我们，我们将在 15 个工作日内响应。
In accordance with applicable laws and regulations, you have the rights to access, copy, correct, supplement, and delete your personal information. You can: directly access, modify, and delete your data within the app; view and remove signed-in devices; change your password; withdraw any permission authorization at any time in the system settings; and delete your account within the app at any time. Withdrawing an authorization does not affect processing already carried out on the basis of that authorization before its withdrawal. If you need assistance in exercising the above rights, please contact us via the means in Section 11, and we will respond within 15 business days.
9. 未成年人保护
9. Protection of Minors
本服务主要面向具备完全民事行为能力的用户。未满 14 周岁的未成年人使用本服务，应由监护人阅读本政策并同意；若我们发现在未取得监护人同意的情况下收集了未成年人个人信息，将设法尽快删除。
This service is primarily intended for users with full civil capacity. Minors under the age of 14 should use this service only after a guardian has read and consented to this Policy; if we discover that we have collected a minor's personal information without the guardian's consent, we will seek to delete it as soon as possible.
10. 安全措施
10. Security Measures
我们采取加密传输（HTTPS）、访问控制、最小化收集、签名验证（插件）等技术与管理措施保护您的信息。请您理解，互联网环境并非绝对安全；若不幸发生个人信息安全事件，我们将依法及时告知您事件情况与补救措施，并向主管部门报告。
We adopt technical and administrative measures such as encrypted transmission (HTTPS), access control, minimized collection, and signature verification (plugins) to protect your information. Please understand that the internet environment is not absolutely secure; if a personal information security incident unfortunately occurs, we will promptly inform you of the incident and the remedial measures in accordance with the law, and report to the competent authorities.
11. 政策更新与联系方式
11. Policy Updates and Contact Information
本政策更新时会在本页面公布，重大变更将以显著方式另行提示。任何与个人信息保护有关的疑问、意见或投诉，请联系：info@arclingcn.com，我们将尽快答复您。
Updates to this Policy will be published on this page, and material changes will be additionally notified in a prominent manner. For any questions, comments, or complaints related to personal information protection, please contact info@arclingcn.com, and we will reply to you as soon as possible.