Foil 闪卡隐私政策
Foil 闪卡（以下简称“本 App”）是一款闪卡创建、管理和间隔复习工具。本政策说明本 App 如何处理您的数据。
1. 本地数据
您创建或导入的卡组、卡片内容、标签、复习记录、学习设置和本地备份默认保存在您的设备上。这些数据不会用于广告、营销、用户画像或跨 App 追踪。
2. iCloud 与 CloudKit 同步
当您启用 iCloud 同步时，本 App 使用 Apple CloudKit 将您的 App 数据存储在与您 Apple 账户关联的 iCloud 私有数据库中，以便在您的 Apple 设备之间同步和恢复数据。同步数据包括卡组、卡片内容、标签、复习记录、AI 导入场景和相似度忽略操作。复习集、复习引擎偏好和回收站批次分组仅保存在本机，不会存储在 iCloud 中。
本 App 不运营独立的同步服务器，不会出售 CloudKit 中的数据，也不会将其用于广告、营销或追踪。CloudKit 由 Apple 提供并受 Apple 的隐私与安全政策约束。网络传输和存储由 Apple 的系统服务处理。
在 iPhone 或 iPad 上，您可以前往“设置”>“您的姓名”>“iCloud”>“存储到 iCloud”旁的“查看全部”>“Foil”并关闭 Foil。这只会停止该设备使用 Foil 的 iCloud 同步；不会删除此前存储在 iCloud 中的数据，其他仍启用 Foil iCloud 的设备仍可访问这些数据。
您可以在本 App 的 iCloud 管理页面选择“删除云端数据”，永久删除 Foil 在该 iCloud 账户中的全部同步数据，并清除当前设备上的对应同步数据。执行删除前，Foil 会先在当前设备上创建一份本地安全备份。已同步数据也会从其他使用同一 iCloud 账户同步 Foil 的设备中移除。iCloud 中的删除无法撤销；本地安全备份需由您自行管理。
3. 匿名使用分析
为了了解核心功能是否被使用（例如是否启动 App、是否创建卡组、是否完成导入、是否开始或结束复习、是否打开购买页），本 App 可向第三方分析服务 TelemetryDeck 发送匿名化的产品使用事件。事件使用安装级匿名标识，并可能包含设备类型、系统版本、App 版本，以及粗粒度属性（例如导入格式、卡片数量区间、复习时长区间、购买页来源）。事件不包含卡片正文、卡组名称、标签、剪贴板内容、导入文件名、富文本 HTML、图片或附件路径。
您可在本 App 设置中关闭“共享匿名使用数据”。关闭后，本 App 不再向 TelemetryDeck 发送这些事件。该分析仅用于改进 Foil，不用于广告、营销或跨公司用户画像，也不与其他公司的 App 或网站数据关联。
4. 诊断与反馈邮件
本 App 不会在后台自动向开发者上传崩溃报告。只有当您主动选择“发送反馈”或“发送诊断信息”时，本 App 才会在设备上生成邮件草稿。您可以在系统邮件界面中查看、修改或取消发送。
您选择附加的诊断文件可能包含 App 版本、操作系统版本、设备型号、错误信息、线程名称、文件或映像路径以及内存地址等排障信息。诊断信息仅用于处理您报告的问题。除非排障确有必要且您明确选择提供，本 App 不会主动把卡片正文或完整数据库附加到邮件中。
邮件会发送到下方支持邮箱。您的邮件地址、邮件正文和附件仅用于客户支持与故障排查，不用于营销或追踪。相关邮件通常会在问题处理完成后 90 天内删除；如为安全、争议处理或法律义务所必需，可能保留更长时间。
5. 系统权限
- 通知：仅在您授权后用于发送学习提醒；您可以随时在系统设置中关闭。
- 文件访问：仅在您主动选择文件时用于导入或导出卡片、备份及恢复数据。
- iCloud：仅在启用相关功能时用于同步和恢复本 App 数据。
6. 第三方服务
本 App 使用 Apple 提供的系统服务，例如 iCloud/CloudKit、StoreKit、通知和系统邮件。TelemetryDeck 仅在您未关闭“共享匿名使用数据”时接收上文所述的匿名产品事件。本 App 不集成第三方广告网络，也不使用第三方数据经纪服务。若未来的数据处理方式发生变化，本政策和 App Store 隐私信息将同步更新。
7. 数据安全
我们尽量减少数据处理范围，并依赖 Apple 平台提供的沙盒、传输保护和 CloudKit 安全机制。但任何存储或传输方式都无法保证绝对安全，请妥善保护您的设备和 Apple 账户。
8. 儿童隐私
本 App 是通用学习工具，不以收集儿童个人信息为目的，也不提供面向儿童的社交、广告或公开内容服务。如监护人认为儿童通过支持邮件提交了个人信息，请联系我们处理删除。
9. 政策更新
当功能或数据处理方式发生重要变化时，我们会更新本政策及生效日期，并在适当情况下通过 App 或 App Store 页面提示。
10. 联系我们
隐私、数据删除或支持问题请联系：andping@126.com
Foil Flashcards Privacy Policy
Foil Flashcards (the “App”) is a tool for creating, managing, and reviewing flashcards with spaced repetition. This policy explains how the App handles your data.
1. Data stored locally
Decks, card content, tags, review history, study settings, and local backups that you create or import are stored on your device by default. This data is not used for advertising, marketing, profiling, or cross-app tracking.
2. iCloud and CloudKit sync
When you enable iCloud sync, the App uses Apple CloudKit to store App data in the iCloud private database associated with your Apple Account. This enables synchronization and recovery across your Apple devices. Synced data includes decks, card content, tags, review history, AI import scenarios, and dismiss actions. Review sets, review-engine preferences, and trash batch groupings remain only on the local device and are not stored in iCloud.
The App does not operate an independent sync server. CloudKit data is not sold or used for advertising, marketing, or tracking. CloudKit is provided by Apple and is subject to Apple's privacy and security policies. Network transmission and storage are handled by Apple's system services.
On iPhone or iPad, you can go to Settings > [your name] > iCloud > See All next to Saved to iCloud > Foil, then turn off Foil. This only stops Foil from using iCloud on that device. It does not delete data already stored in iCloud, and that data remains available to other devices where Foil iCloud remains enabled.
You can choose “Delete Cloud Data” on the App's iCloud management page to permanently delete all Foil sync data from that iCloud account and clear the corresponding synced data on the current device. Before deletion, Foil creates a local safety backup on the current device. Synced data is also removed from other devices using the same iCloud account to sync Foil. Deletion from iCloud cannot be undone; you are responsible for managing the local safety backup.
3. Anonymous product analytics
To understand whether core features are used (for example whether the App opens, a deck is created, an import finishes, a review starts or ends, or the purchase page is opened), the App may send anonymized product-usage events to the third-party analytics service TelemetryDeck. Events use an installation-level anonymous identifier and may include device type, system version, App version, and coarse attributes such as import format, card-count buckets, review-duration buckets, or purchase-page source. Events do not include card text, deck names, tags, clipboard content, import filenames, rich-text HTML, images, or attachment paths.
You can turn off Share Anonymous Usage Data in the App settings. When it is off, the App stops sending these events to TelemetryDeck. This analytics use is only for improving Foil. It is not used for advertising, marketing, or cross-company profiling, and it is not linked with other companies’ apps or websites.
4. Diagnostic and feedback email
The App does not automatically upload crash reports to the developer in the background. A diagnostic email draft is created only when you actively choose to send feedback or diagnostic information. You can review, edit, or cancel the message in the system mail interface.
Diagnostic files you choose to attach may include the App version, operating-system version, device model, error details, thread names, file or image paths, and memory addresses. This information is used only to investigate the issue you reported. The App does not intentionally attach card text or a complete database unless it is necessary for troubleshooting and you explicitly choose to provide it.
The message is sent to the support address below. Your email address, message, and attachments are used only for customer support and troubleshooting, not for marketing or tracking. Support emails are generally deleted within 90 days after the issue is resolved, unless longer retention is necessary for security, dispute resolution, or legal obligations.
5. System permissions
- Notifications: used only with your permission for study reminders; you can disable them in system settings.
- File access: used only when you select files to import or export cards, backups, or restored data.
- iCloud: used only when the relevant features are enabled to sync and recover App data.
6. Third-party services
The App uses Apple system services such as iCloud/CloudKit, StoreKit, notifications, and system mail. TelemetryDeck receives the anonymous product events described above only while Share Anonymous Usage Data remains enabled. The App does not integrate third-party advertising networks or use third-party data brokers. If these practices change, this policy and the App Store privacy information will be updated.
7. Data security
We minimize data processing and rely on Apple platform protections such as app sandboxing, transport protection, and CloudKit security. No method of storage or transmission can be guaranteed to be completely secure, so please protect your device and Apple Account.
8. Children's privacy
The App is a general-purpose study tool. It is not designed to collect children's personal information and does not provide child-directed social, advertising, or public-content services. A parent or guardian who believes a child submitted personal information through support email may contact us to request deletion.
9. Changes to this policy
When features or data practices materially change, we will update this policy and its effective date and, where appropriate, provide notice in the App or on the App Store product page.
10. Contact
For privacy, data-deletion, or support questions, contact andping@126.com.