Privacy隐私政策
Effective: July 18, 2026生效日期：2026 年 7 月 18 日
The short version简要说明
Your diary pages, personas, conversation history, and long-term persona memory are stored locally on your device. When you ask for an AI reply, Vellink sends the minimum request needed to its gateway. The gateway is designed not to persist diary text, images, prompts, or AI reply bodies.你的日记页面、人物设定、对话历史和人物长期记忆保存在设备本地。当你请求 AI 回复时，Vellink 仅向网关发送完成回复所需的最少信息。网关被设计为不持久保存日记正文、图片、提示词或 AI 回复正文。
Data kept on your device保存在设备上的数据
The app keeps diary pages, recognized handwriting, conversation history, persona settings, display preferences, and a short-lived service token in app-private storage. Android device keys are generated in Android Keystore. iPad device keys use Secure Enclave or Keychain-backed storage where available.应用会在自身私有存储中保存日记页面、手写识别文字、对话历史、人物设定、显示偏好和短期服务令牌。Android 设备密钥由 Android Keystore 生成；iPad 设备密钥在可用时使用 Secure Enclave 或由 Keychain 保护的存储。
Data processed by the service服务处理的数据
For an AI request, the gateway temporarily processes the selected persona instructions, bounded memory and recent turns, your current message, and an image only when handwriting recognition needs an image fallback. The request is forwarded to the configured AI provider and is not written to the subscription database.生成 AI 回复时，网关会临时处理所选人物指令、受限长度的记忆与近期对话、当前消息，以及仅在手写识别需要时使用的图片。请求会被转发给配置的 AI 服务商，但不会写入订阅数据库。
Service metadata服务元数据
We keep a pseudonymous device identifier derived from the device public key, the public key itself, app platform and version, trial and subscription dates, reply counters, activation-code hashes, purchase identifiers, request identifiers, timestamps, request purposes, and success or failure status. This metadata supports authorization, fraud prevention, quotas, refunds, and service reliability.我们会保存由设备公钥派生的匿名设备标识、公钥本身、应用平台与版本、试用和订阅日期、回复计数、激活码哈希、购买标识、请求标识、时间戳、请求用途以及成功或失败状态。这些元数据用于授权、防滥用、额度、退款和服务稳定性。
Payments付款
iPad purchases are processed by Apple. Website checkout, when enabled, is processed by the payment provider shown at checkout. We do not receive full payment-card details. We may receive transaction identifiers, product, status, region, renewal date, and refund status.iPad 购买由 Apple 处理。官网付款开放后，将由结账页显示的支付服务商处理。我们不会收到完整银行卡信息，但可能收到交易标识、产品、状态、地区、续费日期和退款状态。
Retention and deletion保存与删除
Local diary data remains until you delete it or remove the app. Service metadata is kept only as long as reasonably needed for subscription records, abuse prevention, accounting, dispute handling, and legal obligations. To request deletion of server-side device metadata, email feedback@vell.ink. Some transaction records may need to be retained.本地日记数据会保留到你主动删除或卸载应用。服务元数据仅在订阅记录、防滥用、财务核算、争议处理和法律义务所合理需要的期限内保存。如需删除服务端设备元数据，请联系 feedback@vell.ink；部分交易记录可能依法或因争议处理需要继续保留。