隐私政策

生效及更新日期：2026 年 8 月 25 日

简要说明：PhonoRead 采用本地优先设计。我们没有自建账号、广告或远程分析系统，不会把你的书架、生词本和阅读进度上传到 PhonoRead 服务器。Chrome 扩展在首次明确同意前不会注释或发送网页正文；联网功能只在你同意或主动使用后向下述第三方发出请求。

1. 本机保存的信息

你导入的文章和电子书、OCR 识别文字、生词、阅读进度、阅读设置、词汇画像以及本地操作记录保存在设备上。Chrome 扩展还会在本机保存站点偏好、生词原句及译文、页面标题与来源 URL、难词相遇 URL、阅读统计、翻译与 AI 缓存和可选 Anthropic API Key。它们用于阅读、复习、导出和恢复设置；PhonoRead 当前不运营用于接收这些学习数据的服务器。

2. 需要联网的功能

  • 整句翻译：App/网页版仅在你请求翻译时，把当前句子、最多前两句、后一句和文章标题发送到 PhonoRead 翻译网关，再由网关转发给 DeepSeek。请求不包含姓名、邮箱或 PhonoRead 账号。网关会处理 IP、随机安装标识和请求时间，加密翻译缓存最长保留 30 天，按匿名安装主体汇总的日用量最长保留 90 天。
  • Chrome 扩展精译：扩展默认的 Chrome 138+ Translator API 在设备内翻译。只有你单独确认并开启 DeepSeek 联网精译后，当前待译段落和随机安装标识才会经同一网关发送给 DeepSeek；请求不包含完整网页或来源 URL。
  • Chrome 扩展 Anthropic BYOK：只有你另行提供自己的 API Key、勾选专项同意并主动使用 AI 词卡或句法解析时，相关词句与 Key 才会从浏览器直接发送给 Anthropic。请求不经过 PhonoRead 服务器；费用、限额和保存方式受你的 Anthropic 账户及其政策约束。
  • 网页导入：仅在你主动提交 URL 时访问目标网页。目标网站或其托管服务会收到正常网页请求包含的信息。
  • 离线语音模型：你选择下载时，模型文件从阿里云对象存储（Alibaba Cloud OSS，域名 apps-ringleleap.oss-cn-shanghai.aliyuncs.com）获取。该服务会收到下载请求通常包含的 IP 地址、时间和设备网络信息等技术信息；朗读内容不会随模型下载请求发送。
  • 应用内购买：Apple App Store 或 Google Play 负责商品展示、付款、订阅和退款。我们不会获得你的银行卡或完整付款资料；App 只接收商品标识、交易状态和权益结果，并在本机保存当前权益状态。
  • 反馈邮件：你主动发送反馈时，邮件内容和你的发件地址会由你选择的邮件服务商处理，并发送给我们。
  • 网页版：网页版会从 Google Fonts 加载字体；链接导入可能依次使用 r.jina.ai、corsproxy.io 或 allorigins.win 获取你提交的 URL；PDF 功能按需从 cdnjs 加载 pdf.js。这些服务和静态站点托管方会收到正常网络请求包含的技术信息。

3. 设备权限

  • 相机：用于拍摄书页并在设备上识别文字。
  • 照片：用于选择待识别图片或保存你生成的分享图片。
  • 文件：用于选择导入的文档以及保存你主动导出的文件。
  • 剪贴板：只在你主动点击粘贴时读取。

照片、原始文档和 OCR 图像不会被上传到 PhonoRead 服务器。

4. 我们不进行的活动

我们不出售个人信息，不使用广告 SDK，不进行跨 App 或跨站跟踪，也不把本地学习数据用于广告画像、信用、借贷或与英文阅读辅助无关的目的。App 内的使用事件仅保存在本机。网页版不设置广告或分析 Cookie；保存的生词等只写入浏览器 localStorage。Chrome 扩展获得的数据只用于提供和改进用户已清楚看到并同意的英文网页阅读辅助功能，其使用、传输或披露遵守 Chrome Web Store User Data Policy 的 Limited Use 要求。

5. 保存期限与删除

本地数据会保留到你删除相应内容、清除应用/扩展数据或卸载产品。翻译网关的加密缓存最长保留 30 天，按匿名安装主体汇总的日用量最长保留 90 天。Chrome 扩展设置中的“导出全部本地数据”不会导出 API Key；“删除全部扩展数据与凭据”会删除生词、URL、统计、缓存、API Key、站点设置和同意记录。App 删除一本书会清除与该书关联的书架记录和阅读进度；已保存到生词本的词可以独立保留和删除。

6. 第三方处理与跨境传输

DeepSeek、Anthropic、阿里云对象存储、目标网页、Apple、Google Play 和邮件服务商是独立的第三方。Chrome 管理本地翻译语言包下载；这些服务可能在你所在国家或地区之外处理请求。请查看相应服务的隐私政策，以了解其保存期限、法律依据和权利请求方式。

7. 儿童隐私

PhonoRead 面向一般英语学习者，并非专门面向 13 岁以下儿童。我们不会故意收集儿童的账号资料。如果监护人认为儿童通过反馈邮件向我们提供了个人信息，请联系我们处理。

8. 你的权利与控制

因为主要学习数据只存储在你的设备上，你可以直接查看、导出或删除这些数据。对于你通过反馈邮件提供的信息，可联系我们申请访问、更正或删除；具体权利取决于你所在地区的法律。

9. 安全

我们通过减少远程收集、使用系统沙盒和应用商店购买机制来降低数据风险。任何系统都无法保证绝对安全，请妥善保护设备解锁信息和应用商店账号。

10. 政策更新与联系

如果产品的数据处理方式发生变化，我们会更新本页日期，并在必要时通过 App 提示。隐私或数据请求请发送至 dilukevin@gmail.com。

Privacy Policy

Effective and last updated: August 25, 2026

In short: PhonoRead is local-first. We do not operate a PhonoRead account backend, advertising system, or remote analytics service. The Chrome extension does not annotate or transmit webpage text before first-use consent. Data leaves the device only after you opt into or actively use a disclosed network feature.

1. Data stored on your device

Imported documents, OCR text, saved words, reading progress, settings, vocabulary estimates, and local usage events are stored on your device. The Chrome extension also stores site preferences, source sentences and translations, page titles and source URLs, encounter URLs, reading statistics, caches, and an optional Anthropic API key.

2. Network features

  • Sentence translation: when requested, the App/web version sends the current sentence, up to two preceding sentences, one following sentence, and the article title to the PhonoRead translation gateway, which forwards them to DeepSeek. The request contains no name, email address, or PhonoRead account. The gateway processes an IP address, random installation identifier, and request time. Encrypted translation cache entries are retained for up to 30 days and daily usage aggregated by pseudonymous installation is retained for up to 90 days.
  • Chrome extension precision translation: the default Chrome 138+ Translator API remains on-device. Only after separate consent to DeepSeek precision translation does the extension send the current text to translate and a random installation identifier through the same gateway; the request excludes the full page and source URL.
  • Anthropic BYOK in the Chrome extension: only after separate consent and an active AI action, the relevant word or sentence and the user-provided API key are sent directly to Anthropic. The request does not pass through a PhonoRead server.
  • Web import: the URL you submit is requested from the destination website, which receives ordinary web-request information.
  • Offline voice downloads: when requested, model files are downloaded from Alibaba Cloud Object Storage (OSS) at apps-ringleleap.oss-cn-shanghai.aliyuncs.com. The service receives ordinary download metadata such as IP address, time, and device network information; text being read is not sent with the model download request.
  • Purchases: Apple App Store or Google Play processes products, payment, subscriptions, and refunds. We do not receive full payment-card details. The app receives product and transaction status and stores entitlement state locally.
  • Support email: if you contact us, your email provider processes your address and message and delivers them to us.
  • Web version: the web app loads fonts from Google Fonts; URL import may use r.jina.ai, corsproxy.io, or allorigins.win; PDF support loads pdf.js from cdnjs when requested. Those providers and the static host receive normal network-request metadata.

3. Device permissions

Camera and photos are used for on-device OCR and saving generated images. File access is used for documents you choose to import or export. Clipboard content is read only after you choose to paste. Original photos and documents are not uploaded to a PhonoRead server.

4. No sale, advertising, or tracking

We do not sell personal information, use advertising SDKs, or track users across apps or sites. Data is not used for advertising, credit, lending, or unrelated purposes. Chrome extension data is used only to provide and improve the clearly disclosed English-reading features, in compliance with the Chrome Web Store User Data Policy, including its Limited Use requirements.

5. Retention and deletion

Local data remains until you delete the related content, clear product data, or uninstall. Encrypted gateway cache entries are retained for up to 30 days and daily usage aggregated by pseudonymous installation for up to 90 days. The Chrome extension can export non-secret local data and can delete all extension data and credentials, including URLs, statistics, caches, API key, site settings, and consent records.

6. Third parties and international processing

DeepSeek, Anthropic, Alibaba Cloud OSS, destination websites, Apple, Google Play, and email providers act under their own privacy policies and may process requests outside your country. Chrome manages local translation language-pack downloads.

7. Children

PhonoRead is a general-audience learning app and is not directed specifically to children under 13. Contact us if you believe a child sent personal information through support email.

8. Your choices and rights

You can view, export, and delete local data directly in the app. For information sent by support email, contact us to request access, correction, or deletion, subject to applicable law.

9. Security

We reduce risk through data minimization, platform sandboxing, and store-managed payments. No system can guarantee absolute security; protect your device and store-account credentials.

10. Changes and contact

We will update the date on this page when data practices change and provide in-app notice when appropriate. Contact dilukevin@gmail.com for privacy requests.