隐私政策

1. 适用范围与处理主体

本政策适用于 KIFXPRO 移动应用及其官方静态网站。应用商店、下载渠道或软件包信息可能同时显示 KIFXPRO 和内部项目名称，具体以实际发布版本为准。

个人信息处理者/开发者：

Apple、Google、设备操作系统、语音识别服务、应用商店、浏览器、打印/分享目标和网站托管服务商是各自独立的服务提供者，其处理活动受各自条款与隐私政策约束。

2. 隐私摘要

• 无需账号：当前版本不提供注册、登录、用户档案或开发者云端空间。
• 本地优先：搬家项目、箱子记录、备注、物品清单、状态、标签和应用管理的照片默认保存在设备本地。
• 按需权限：相机、照片、麦克风和语音识别权限仅在你主动使用对应功能时请求。
• 最小二维码：标签只包含格式版本、项目 ID、箱子 ID 和可读箱号，不包含地址、照片、备注或物品清单。
• 由你分享：CSV、PDF、PNG 和备份包只有在你主动导出、打印或分享时才会交给系统界面及你选择的目标。
• 无广告与行为分析：当前项目代码未集成广告 SDK、第三方行为分析 SDK、跨应用追踪或第三方 AI。

3. 我们处理的信息与目的

使用核心功能不要求你提交姓名、手机号码、身份证件、联系人、精确位置、支付信息或广告标识符。请不要在备注、照片或语音内容中记录不必要的敏感个人信息。

4. 功能如何处理信息

4.1 本地记录与离线搜索

应用把项目、箱子、物品、状态历史和偏好写入本地应用数据文件，并在设备上完成搜索、筛选、汇总和报告生成。当前版本没有把这些记录同步到开发者服务器的代码路径。

4.2 相机、照片与扫码

拍照登记时，应用调用相机并将你确认的照片复制到应用管理目录；从照片库添加时，只处理你主动选择的图片。扫描标签时，相机画面用于识别支持的二维码；除非你另行执行拍照登记，扫码画面不会作为箱子照片保存。应用不会请求精确位置来标注照片或搬家地点。

4.3 语音登记

只有你点击开始录音后，应用才调用麦克风与操作系统提供的语音识别能力。识别可能在设备上完成，也可能由 Apple、Google 或设备所配置的语音服务处理，取决于平台、设备、语言、系统设置与网络状态。开发者不接收该音频或识别请求；返回的文字可由你修改，保存后成为本地箱子备注。若不希望使用语音服务，可始终改用手动输入。

4.4 标签、导出、备份与恢复

标签、CSV、PDF、PNG 和备份包均在设备上生成。备份包可包含你的全部本地项目、箱子记录、备注、物品清单和应用管理的照片，并附有 SHA-256 完整性校验。恢复时，应用先校验格式与文件哈希；有效备份会替换当前本地数据，无效备份不会覆盖现有记录。

4.5 系统分享与打印

当你点击分享、打印或导出时，应用把相应文件交给操作系统界面。只有你选择目标后，文件才会发送给对应应用、联系人、打印服务、云盘或其他位置。目标服务如何保存和使用文件，受其自身规则约束。

5. 系统权限

你可在系统设置中撤回权限。撤回只会影响需要该权限的功能，不影响已保存在本地的其他记录。当前版本不以定位、通讯录、通知或跨应用追踪权限作为核心功能前提。

6. 信息共享与第三方处理

我们不出售你的个人信息，也不为广告投放共享搬家记录。当前版本没有开发者账号服务器，因此开发者不会常规接收你的项目、箱子、照片或物品清单。

以下场景可能产生由其他主体进行的处理：

• 操作系统与语音服务：在权限申请、照片选择、语音识别、文件访问和系统备份过程中，平台提供者可能按其隐私规则处理必要信息。
• 你选择的分享、打印或存储目标：文件会按你的操作交给对应应用、联系人、打印机、云盘或服务商。
• 应用商店与下载渠道：安装、更新、崩溃诊断或商店分析可能由渠道独立处理；本应用当前未在代码中接入自有分析服务。
• 网站基础设施：访问正式网站时，托管、域名解析或网络防护服务可能处理连接与安全日志。
• 法律要求：如适用法律要求且开发者实际持有相关信息，我们可能依法响应有权机关的有效要求。

一旦你把备份、报告、标签或照片分享至应用之外，请根据内容敏感程度谨慎选择接收方和保存位置。

7. 信息保存与删除

• 本地项目和箱子记录会持续保存在应用数据中，直至你在应用内删除、恢复另一份备份覆盖数据、清除应用数据或卸载应用。
• 删除箱子或项目时，应用会尽力删除其管理目录中的关联照片；操作系统缓存、设备备份或你先前导出的副本可能不随之删除。
• 应用内归档只是隐藏到归档列表，不等于删除；恢复归档不会创建云端副本。
• 导出的 CSV、PDF、PNG、ZIP 备份和打印任务由你选择的文件位置、接收方或服务管理，需要你在对应位置自行删除。
• 网站语言偏好可通过清除本站浏览器存储删除；网站基础设施日志的期限取决于正式部署配置和服务商规则。

设备系统备份、整机迁移或你启用的云端设备备份可能复制应用数据，这类副本由你的设备与平台设置控制，并非 KIFXPRO 开发者云同步。

8. 本网站与外部链接

本网站为静态页面，不设置广告 Cookie 或跨站追踪器。语言选择保存在浏览器 localStorage，键名为 kifxpro-site-language。网站代码不会把该值发送给开发者；但浏览器请求页面时，网络与托管基础设施仍可能产生常规连接日志。

应用设置页可在外部浏览器打开本政策，点击后你会离开应用本地环境。邮件链接会交给设备上的邮件应用。浏览器、邮箱服务和其他外部目标适用各自的隐私规则。

9. 你的控制与权利

由于核心数据默认由你在设备上持有，你可以直接：

• 查看、编辑、搜索、归档、恢复或删除项目和箱子记录；
• 移除箱子照片，或删除整个项目及其关联记录；
• 拒绝或撤回相机、照片、麦克风和语音识别权限；
• 不使用语音、二维码、打印、分享或备份功能，改用手动登记和手写箱号；
• 导出 CSV、报告或完整备份，以便自行保存和迁移；
• 清除应用数据或卸载应用，删除设备上的应用数据（外部副本和系统备份需另行处理）；
• 通过本政策列明的邮箱咨询隐私问题或依法行使适用权利。

因为开发者当前不持有本地应用数据，我们通常无法从服务器查找、导出、修改或恢复你的记录。

10. 安全与数据边界

本地优先能减少数据离开设备的机会，但无法消除设备丢失、弱密码、越狱/Root、恶意软件、错误分享、未加密外部存储或打印件被他人看到等风险。请使用设备锁，谨慎分享含照片、地址、备注或物品清单的文件，并为重要备份选择可信位置。

二维码没有加密，其设计目的仅是定位本机记录。虽然当前载荷不含照片、地址或物品清单，但他人看到标签时仍可能读取项目/箱子标识与可读箱号，请勿把机密内容写入箱号。

11. 本政策的更新

如果应用增加账号、云同步、在线备份、协作、第三方 AI、广告、分析、订阅、在线处理或其他会改变数据流的功能，我们会在上线前重新评估并更新本政策。重大变更可能通过应用内提示、网站公告、商店更新说明或适用法律要求的方式通知。

12. 联系我们

如对本政策、权限用途或 KIFXPRO 的数据处理有疑问，请联系：

1. Scope and controller

This policy applies to the KIFXPRO mobile application and its official static website. Store listings, distribution channels, or package metadata may show KIFXPRO together with an internal project name; the actual released build controls.

Data controller/developer:

Apple, Google, device operating systems, speech providers, app stores, browsers, print/share destinations, and website hosting providers are independent service providers governed by their own terms and privacy policies.

2. Privacy summary

• No account: the current version has no registration, sign-in, user profile, or developer-hosted cloud space.
• Local-first: moving projects, box records, notes, item lists, statuses, tags, and app-managed photos stay on your device by default.
• Permissions on demand: camera, photo, microphone, and speech permissions are requested only when you choose the matching feature.
• Minimal QR data: labels contain only a format version, project ID, box ID, and readable box code—not addresses, photos, notes, or item lists.
• You initiate sharing: CSV, PDF, PNG, and backup files reach the system interface and your selected destination only after you export, print, or share them.
• No ads or behavior analytics: the current code includes no ad SDK, third-party behavior analytics SDK, cross-app tracking, or third-party AI.

3. Information we handle and why

Core features do not ask you for a name, phone number, government ID, contacts, precise location, payment details, or advertising identifier. Please avoid putting unnecessary sensitive personal information into notes, photos, or voice content.

4. How features process information

4.1 Local records and offline search

The app writes projects, boxes, items, status history, and preferences to local app data files. Searching, filtering, summaries, and report generation happen on the device. The current version has no code path that synchronizes these records to a developer server.

4.2 Camera, photos, and scanning

When you register a box with the camera, the app copies the photo you confirm into its managed directory. When you add a library image, it processes only the image you select. During label scanning, camera frames are used to recognize supported QR codes and are not saved as box photos unless you separately use photo capture. The app does not request precise location to tag photos or moving places.

4.3 Voice entry

The app calls the microphone and the operating system's speech-recognition capability only after you start listening. Recognition may run on device or may be handled by Apple, Google, or the speech service configured on the device, depending on the platform, device, language, settings, and network state. The developer does not receive the audio or recognition request. You can edit the returned text before it becomes a local box note, or use manual entry instead.

4.4 Labels, exports, backups, and restore

Labels, CSV, PDF, PNG, and backup files are generated on device. A backup may contain all local projects, boxes, notes, item lists, and app-managed photos, plus SHA-256 integrity checks. During restore, the app validates the format and file hashes first. A valid backup replaces current local data; invalid data does not overwrite existing records.

4.5 System sharing and printing

When you tap share, print, or export, the app hands the relevant file to the operating-system interface. The file reaches an app, contact, print service, cloud drive, or other destination only after you select it. That destination handles the file under its own rules.

5. System permissions

You can withdraw permissions in system settings. This affects only the features that require them, not other records already stored locally. The current version does not require location, contacts, notifications, or cross-app tracking for core use.

6. Sharing and third-party processing

We do not sell your personal information or share moving records for advertising. Because the current version has no developer account server, the developer does not routinely receive your projects, boxes, photos, or item lists.

Other parties may process data in these situations:

• Operating-system and speech services: platform providers may process necessary information for permissions, photo selection, speech recognition, file access, and system backup under their policies.
• Share, print, and storage destinations you choose: files are provided to the app, contact, printer, cloud drive, or service you select.
• App stores and distribution channels: a channel may independently handle installation, updates, crash diagnostics, or store analytics. The app currently includes no developer-operated analytics service.
• Website infrastructure: hosting, DNS, or network-protection providers may handle connection and security logs when you visit the deployed website.
• Legal requirements: if applicable law requires it and the developer actually holds relevant information, we may respond to a valid request from a competent authority.

Once you share a backup, report, label, or photo outside the app, choose the recipient and storage location according to the sensitivity of its contents.

7. Retention and deletion

• Local projects and box records remain in app data until you delete them in the app, restore another backup over them, clear app data, or uninstall the app.
• When a box or project is deleted, the app makes a best effort to remove related photos from its managed directory. Operating-system caches, device backups, and copies you exported earlier may remain.
• Archiving in the app only moves a project to the archive list; it is not deletion and does not create a cloud copy.
• Exported CSV, PDF, PNG, and ZIP files and print jobs are managed by the file location, recipient, or service you selected and must be deleted there.
• Remove the website language preference by clearing this site's browser storage. Website-log retention depends on the final deployment configuration and provider rules.

System device backup, device migration, or a cloud device backup that you enable may copy app data. Those copies are controlled by your device and platform settings and are not KIFXPRO developer cloud sync.

8. This website and external links

This is a static website. It sets no advertising cookies or cross-site trackers. Language selection is stored in browser localStorage under kifxpro-site-language. The website code does not send that value to the developer, although normal connection logs may still arise in network and hosting infrastructure when the browser requests a page.

The app settings page may open this policy in an external browser, which leaves the app's local environment. Email links are handed to the device's mail app. Browsers, email providers, and other external destinations follow their own privacy rules.

9. Your controls and rights

Because you hold core data locally by default, you can directly:

• view, edit, search, archive, restore, or delete projects and box records;
• remove box photos or delete an entire project and its related records;
• deny or withdraw camera, photo, microphone, and speech permissions;
• avoid voice, QR, print, share, or backup features and use manual entry plus handwritten box codes instead;
• export CSV, reports, or a complete backup for your own storage and migration;
• clear app data or uninstall the app to remove app data from the device, while handling external copies and system backups separately; and
• contact us at the email below with a privacy question or to exercise an applicable legal right.

Because the developer does not currently hold local app data, we normally cannot search, export, modify, or restore your records from a server.

10. Security and data boundaries

Local-first design reduces opportunities for data to leave the device, but it cannot remove risks such as a lost device, weak passcode, jailbreak/root access, malware, accidental sharing, unencrypted external storage, or printed records being seen by others. Use a device lock, share files containing photos, addresses, notes, or item lists carefully, and store important backups in a trusted location.

QR codes are not encrypted and are intended only to locate a local record. Although the current payload excludes photos, addresses, and item lists, someone viewing a label may read project/box identifiers and the human-readable code. Do not put confidential information in a box code.

11. Changes to this policy

If the app adds accounts, cloud sync, online backup, collaboration, third-party AI, advertising, analytics, subscriptions, online processing, or another feature that changes data flows, we will reassess and update this policy before release. Material changes may be announced in the app, on the website, in store release notes, or as required by applicable law.

12. Contact us

For a question about this policy, a permission, or KIFXPRO data handling, contact: