Privacy Policy

What is stored, and where

Everything you enter lives inside Everproof's own storage area on your device (its app sandbox): the record index, the photos you attach as proof of purchase, and the text recognised from those photos. Nothing is copied anywhere else. Removing the app removes all of it.

你输入的每一项内容都只存在 Everproof 自己的存储区（应用沙盒）里：记录索引、你作为购买凭证附加的照片、 以及从这些照片识别出的文字。不会复制到任何别的地方。卸载应用就等于全部删掉。

How it is protected

• Every record and every photo is encrypted with AES-256-GCM, each item with its own random nonce, under a randomly generated vault key.
• Your passcode never touches storage. It is stretched with PBKDF2-HMAC-SHA256, 310,000 iterations and a random salt into a key-encryption key, which wraps the vault key. A wrong passcode simply fails authenticated decryption — there is nothing to compare against.
• Optional Face ID / Touch ID stores the key in the iOS Keychain with biometryCurrentSet and AfterFirstUnlockThisDeviceOnly: it never syncs to iCloud, never leaves the device, and is voided the moment you change your enrolled face or fingerprint.
• Because the passcode is not recoverable by anyone, forgetting it means the vault is reset. The app offers no reset by email, no recovery key, no back door — that is a deliberate design choice, and the app tells you so before you set the passcode.

• 每一条记录、每一张照片都用 AES-256-GCM 加密，每条各自随机 nonce，密钥是一把随机生成的保险箱主密钥。
• 你的密码从不落盘。它经过 PBKDF2-HMAC-SHA256、31 万次迭代加随机盐，派生出密钥加密密钥，再去包裹主密钥。 密码错了就是认证解密失败——系统里没有任何东西可以拿来比对。
• 可选的 Face ID / Touch ID 把密钥放进 iOS 钥匙串，带 biometryCurrentSet 和 AfterFirstUnlockThisDeviceOnly：不同步 iCloud、不出设备，一旦你改了录入的面容或指纹就立即失效。
• 正因为谁都无法找回密码，忘记密码就意味着保险箱重置。应用不提供邮箱重置、不提供恢复密钥、不留后门—— 这是刻意的设计，应用也会在你设置密码前明确告诉你。

Permissions, and what each one is used for

• Camera — photograph a receipt. The image goes straight into your vault.
• Photo library — you pick specific images to attach. Everproof only reads the ones you select; it never scans or uploads your library.
• Notifications — local reminders for warranty and return deadlines. Scheduled on your device; nothing is sent anywhere.

Text recognition on your receipt photos runs entirely on the device using Apple's own Vision framework. No image or recognised text is transmitted anywhere, and there is no code path that could do so.

• 相机——拍收据。拍完直接进你的保险箱。
• 照片图库——由你挑选要附加的图片。Everproof 只读你选中的那几张，绝不扫描或上传整个相册。
• 通知——保修期与退货期限的本地提醒。全部排程在本机，不发送到任何地方。

收据照片的文字识别完全在本机用苹果自家的 Vision 框架完成。任何图片或识别出的文字都不会被传输到任何地方， 代码里也不存在能做到这件事的路径。

Backups

Everproof can build a backup archive containing your records and photos. That file is created on your device and is yours to keep, move or delete; it stays encrypted and is protected by the same passcode. Everproof never transmits it.

Everproof 可以生成一个包含记录和照片的备份文件。这个文件在你设备上生成，归你处置；它同样是加密的， 用的还是同一个密码。Everproof 从不外传它。

What Everproof does not do

• No analytics, no usage tracking, no crash reporting, no advertising, no attribution.
• No third-party SDKs or embedded web content.
• No accounts, no sign-in, no email collection.
• No collection of any data — so nothing is sold, shared, or disclosed, and there is nothing to hand over on request.

This matches the App Store privacy label for the app, which reads Data Not Collected.

无统计、无使用追踪、无崩溃上报、无广告、无归因；无第三方 SDK，也不内嵌网页；无账号、不登录、不收集邮箱； 不收集任何数据，因此也就无从出售、共享或披露，被要求提供时也没有东西可给。

这与 App Store 上该应用的隐私标签一致：不收集数据（Data Not Collected）。

Children

Everproof is a tool for keeping your own purchase records. It is not directed at children and collects no data from anyone, of any age.

Everproof 是管理自己购物凭证的工具，不面向儿童，也不收集任何年龄段用户的任何数据。

Your data

There is no data subject access request to make, because there is no data held by anyone but you. Deleting the app deletes everything. If you want a copy first, export a backup archive from Settings before deleting.

不存在需要向开发者提出的数据访问或删除请求，因为除了你自己，没有人持有这些数据。删除应用即清空一切。 如果想先留一份，删除前在「设置」里导出备份文件。

Contact

Questions about this policy: email liangsx.168@gmail.com — you will get a reply from the developer.

对本政策有疑问，请发邮件到 liangsx.168@gmail.com， 回复你的是开发者本人。

Changes

If this policy changes, this page is updated and its date below changes with it. The app's behaviour described above is not expected to change: there is no plan to add a backend, analytics or advertising.

本政策如有变更，会直接更新本页并同步下方日期。以上应用行为预计不会改变：没有加后端、 加统计或加广告的计划。