隐私政策

生效日期：2026 年 9 月 5 日；最近更新：2026 年 9 月 28 日

简要说明：phoread 采用本地优先设计，不使用广告。三端的远端产品统计默认关闭，仅在你主动开启后发送不含阅读内容的功能事件，可随时关闭。未登录时，书架、生词本和阅读进度只保存在本机；登录并使用同步时，明确列出的学习数据会上传到 phoread 账号服务。网页版首次开启联网语境释义前会征求你的同意；同意后，阅读时可按需请求当前句的词义或译文。App 的主动整句翻译、你主动打开的 AI 陪读和另行开启的 Chrome 扩展 DeepSeek 联网精译也会发送必要文字。Chrome 扩展默认的本地翻译不走该网关。

1. 本机保存的信息

你导入的文章和电子书、OCR 识别文字、生词、阅读进度、阅读设置、词汇画像以及本地操作记录首先保存在设备上。登录状态令牌和随机设备标识保存在系统安全存储中。Chrome 扩展还会在本机保存站点偏好、生词原句及译文、页面标题与来源 URL、难词相遇 URL、阅读统计、翻译与 AI 缓存和可选 Anthropic API Key。翻译网关不会接收书架、生词本或阅读进度。

2. 需要联网的功能

  • 账号与同步：只有在你选择使用手机号、邮箱、Apple 或微信登录时，phoread 账号服务才处理手机号、邮箱地址或身份提供方返回的账号标识、昵称、头像、随机设备标识及会话令牌，并通过阿里云短信或 DirectMail 发送验证码。登录后进行同步时，书架元数据、阅读进度、生词、设置、词汇画像和标注会发送到位于阿里云中国杭州地域的账号服务，用于在你的设备间同步。导入的完整文章、电子书、原始图片和 OCR 图片不属于同步内容。验证码不会明文保存，会话令牌只保存不可逆摘要，第三方刷新凭据会加密保存。
  • 联网词义与整句翻译：网页版仅在你开启联网语境释义后，按阅读位置或操作需要，将当前句、最多前两句和后一句上下文及文章标题发送到 phoread 翻译网关，再由网关发送给 DeepSeek；可在阅读设置中关闭。App 在你主动请求整句翻译时发送相同范围的文字。请求不含姓名、邮箱或 phoread 账号；网关处理 IP 地址、随机安装标识和请求时间，并将译文加密缓存最多 30 天。Chrome 扩展默认使用 Chrome 138+ 内置 Translator API 在设备内翻译；首次启用可能下载语言包。只有你另行确认并开启 DeepSeek 联网精译时，扩展才会把当前待译文字、最小相邻上下文和随机安装标识发送到同一网关，不发送完整网页或来源 URL。
  • AI 陪读（App）：只有你在阅读页长按底部色条打开 AI 陪读时，App 才会把当前页正文、最多约 1,200 字符的前文节选、书名与章节名、阅读进度和词汇量估计，以及你输入或说出的问题和本次对话中此前的问答，发送到 phoread 翻译网关，再由网关发送给 DeepSeek 生成回答；不会发送整本书、生词本、账号或 OCR 图片。回答由 AI 生成，可能不准确。网关处理 IP 地址、随机安装标识和请求时间；对话只保存在当前运行的 App 内存中，不写入书架或账号。按住说话时，语音由系统语音识别转成文字：iOS 在设备支持时于本机识别，否则由 Apple 语音识别服务处理；HarmonyOS 使用系统离线识别；Android 由你设备上的系统语音识别服务处理。App 只接收识别出的文字，不保存录音。
  • Chrome 扩展 Anthropic BYOK：只有你另行提供自己的 API Key、勾选专项同意并主动使用 AI 词卡或句法解析时，相关词句与 Key 才会从浏览器直接发送给 Anthropic。请求不经过 phoread 服务器；费用、限额和保存方式受你的 Anthropic 账户及其政策约束。
  • 网页导入：仅在你主动提交 URL 时访问目标网页。目标网站或其托管服务会收到正常网页请求包含的信息。
  • 离线语音模型：你选择下载时，模型文件从阿里云对象存储（Alibaba Cloud OSS，域名 apps-ringleleap.oss-cn-shanghai.aliyuncs.com）获取。该服务会收到下载请求通常包含的 IP 地址、时间和设备网络信息等技术信息；朗读内容不会随模型下载请求发送。
  • 应用内购买：iOS/iPadOS 的 Apple App Store、Android 的 Google Play 或 HarmonyOS NEXT 的华为 AppGallery 负责商品展示、付款、订阅和退款。我们不会获得你的银行卡或完整付款资料。你登录并购买或恢复权益时，App 会向账号服务发送商店签名交易凭据、商品与交易标识、购买/到期/撤销时间和账号绑定标识，服务端向相应商店验证交易并保存账号权益与订单记录，用于恢复购买、防止重复交付、处理续订和退款。App 也会在本机保存当前权益状态。
  • 反馈邮件：你主动发送反馈时，邮件内容和你的发件地址会由你选择的邮件服务商处理，并发送给我们。
  • 网页版：网页版会从 Google Fonts 加载字体；链接导入可能依次使用 r.jina.ai、corsproxy.io 或 allorigins.win 获取你提交的 URL；PDF 功能按需从 cdnjs 加载 pdf.js。这些服务和静态站点托管方会收到正常网络请求包含的技术信息。
  • 可选产品使用统计：Web、App 和浏览器扩展默认关闭远端产品统计，只有你主动开启后才发送导入结果、实际阅读会话、查词、存词和复习等功能事件。使用独立随机、持久的统计安装标识；登录后的事件关联服务端确认的统计账号，登录前事件不会回溯合并。事件不包含正文、标题、词条、问答、录音、网址、手机号、邮箱、验证码或支付凭据。事件先进入 Phoread 统计收集服务，再投递到自建 OpenPanel，用于改进产品，统计数据最多保留 12 个月；普通网络服务仍会处理请求 IP 等连接信息，但不会把用户 IP 或原始浏览器标识转发给 OpenPanel。可随时关闭，本机会立即停止并清空待发队列，联网后确认服务端撤销；已发送的数据不会因关闭立即删除，如需删除可联系我们。Web 尊重 GPC 和请勿跟踪。

3. 设备权限

  • 相机：用于拍摄书页并在设备上识别文字。
  • 麦克风与语音识别：只在你按住 AI 陪读的说话按钮时使用，把语音转成文字；不保存录音。
  • 照片：用于选择待识别图片或保存你生成的分享图片。
  • 文件：用于选择导入的文档以及保存你主动导出的文件。
  • 剪贴板：只在你主动点击粘贴时读取。

照片、原始文档和 OCR 图像不会被上传到 phoread 服务器。

4. 我们不进行的活动

我们不出售个人信息，不使用广告 SDK，不进行跨 App 或跨站跟踪，也不把本地学习数据用于广告画像、信用、借贷或与英文阅读辅助无关的目的。远端产品统计默认关闭，开启后的处理方式见第 2 节；本地日志不会补传。Chrome 扩展获得的数据只用于提供和改进用户已清楚看到并同意的英文网页阅读辅助功能，其使用、传输或披露遵守 Chrome Web Store User Data Policy 的 Limited Use 要求。

5. 保存期限与删除

本地数据会保留到你删除相应内容、清除应用/扩展数据或卸载产品。短信验证码挑战最多保留 7 天。你在 App 内申请注销账号后，全部会话立即失效；账号及其关联身份、同步记录和加密凭据进入 15 天恢复期，期满后自动永久删除。翻译网关的加密译文缓存最多保留 30 天；AI 陪读的单轮回答以加密形式最多保留 1 天，仅用于断线后重发；每日用量统计按假名化安装标识记录并最多保留 90 天。网页版使用统计事件最多保留 12 个月。Chrome 扩展设置中的“导出全部本地数据”不会导出 API Key；“删除全部扩展数据与凭据”会删除生词、URL、统计、缓存、API Key、站点设置和同意记录。

6. 第三方处理与跨境传输

以下清单区分 App 内 SDK、系统服务和服务端接口。首次启动的政策同意仅保存在本机；账号恢复与商店权益查询在你明确同意后启动。微信仅在你选择微信登录时初始化；AppGallery 版的会员付款使用华为应用内支付。

  • 微信 OpenSDK（通过 Fluwx 适配层接入）：提供方为腾讯/微信。你主动选择微信登录时，SDK 与微信交换 AppID、授权范围、随机请求状态和授权码，账号服务再处理获授权的账号标识、昵称与头像。SDK 所需的设备、应用及网络信息由微信按其规则处理。用途为身份认证；未选择微信登录时不会主动注册微信 SDK。微信 Open SDK 个人信息处理规则。
  • HarmonyOS IAP Kit：提供方为华为，具体服务主体以设备中的华为支付/应用内购买条款为准。通过系统接口查询商品、已购交易和订阅，传递商品标识与账号绑定标识，接收签名交易、订阅状态及错误信息；华为负责支付账户、必要的设备/网络信息和交易安全处理。用途为购买、恢复及订阅管理。华为隐私声明。
  • DeepSeek API：提供方为杭州深度求索人工智能基础技术研究有限公司及其关联公司。仅在你主动使用联网翻译或 AI 陪读时，由我们的服务器发送第 2 节所列文字；不会发送账号、完整书籍或 OCR 图片。它是服务端 API，不是在 App 内运行的数据采集 SDK。DeepSeek 隐私政策。
  • 阿里云账号基础设施、短信、DirectMail 与 OSS：提供方为阿里云计算有限公司及相应服务关联方。账号与验证码服务处理所需手机号、邮箱、验证码发送信息和必要网络日志；OSS 在你下载语音模型时处理 IP、请求时间和网络信息。App 内不嵌入阿里云广告或行为分析 SDK。阿里云隐私权政策。
  • 其他发行平台及浏览器功能：Apple 登录/StoreKit 由 Apple 提供，Google Play Billing 由 Google 提供，分别在对应平台完成主动选择的登录或商店购买；Anthropic API 由 Anthropic 提供，仅用于 Chrome 扩展中另行同意的自带密钥功能，不在鸿蒙 App 中启用。Apple 隐私政策、Google 隐私政策、Anthropic 隐私政策。

DeepSeek、Anthropic、阿里云账号基础设施与短信、阿里云对象存储、目标网页、Apple、微信、Google Play、华为 AppGallery 和邮件服务商是独立的第三方。DeepSeek 可能在中国处理翻译请求；Apple 或微信会在你选择相应登录方式时处理身份认证；应用商店处理购买；Chrome 管理本地翻译语言包下载。其他服务也可能在你所在国家或地区之外处理请求。请查看相应服务的隐私政策，以了解其保存期限、法律依据和权利请求方式。

7. 儿童隐私

phoread 面向一般英语学习者，并非专门面向 13 岁以下儿童。我们不会故意收集不符合适用法律要求的儿童账号资料。如果监护人认为儿童向我们提供了个人信息，请联系我们处理。

8. 你的权利与控制

你可以直接查看、导出或删除本地数据。登录用户还可以在 App 内导出账号数据、退出账号或申请删除账号。首次使用时可直接选择是否允许产品使用统计。也可以在「设置 → 隐私与数据」或本节关闭、重新开启，选择只保存在当前浏览器。对于你通过反馈邮件提供的信息，可联系我们申请访问、更正或删除；具体权利取决于你所在地区的法律。

9. 安全

我们通过数据最小化、HTTPS、不可逆令牌摘要、第三方凭据加密、网络隔离、系统沙盒和应用商店购买机制降低数据风险。任何系统都无法保证绝对安全，请妥善保护设备解锁信息和应用商店账号。

10. 政策更新与联系

phoread 的运营者及本政策所述个人信息处理者为上海凌戈曼跃科技有限公司。如果产品的数据处理方式发生变化，我们会更新本页日期，并在必要时通过 App 提示。隐私或数据请求请发送至 zc@ringleap.ai。

Privacy Policy

Effective September 5, 2026; last updated September 28, 2026

In short: phoread is local-first and does not use advertising. Remote product statistics is off by default on all three surfaces; you can optionally enable it and turn it off at any time. When signed out, your library, saved words, and progress remain on-device. If you sign in and sync, the learning data listed below is sent to the phoread account service. The web reader asks before enabling online contextual meanings; after you opt in, it can request meanings or translations for the current sentence while you read. Active App translation, the AI reading companion you open, and separately enabled Chrome extension precision translation also send necessary text through the gateway to DeepSeek.

1. Data stored on your device

Imported documents, OCR text, saved words, reading progress, settings, vocabulary estimates, and local usage events are first stored on your device. Session tokens and a random device identifier are kept in platform secure storage. The Chrome extension also stores site preferences, source sentences and translations, page titles and source URLs, encounter URLs, reading statistics, caches, and an optional Anthropic API key.

2. Network features

  • Account and sync: only when you choose phone, email, Apple, or WeChat sign-in does the phoread account service process a phone number, email address or provider account identifier, nickname, avatar, random device identifier, and session tokens; Alibaba Cloud SMS or DirectMail delivers verification codes. When a signed-in user syncs, bookshelf metadata, reading progress, vocabulary, settings, vocabulary profile, and highlights are sent to the account service hosted in Alibaba Cloud's Hangzhou, China region. Full imported articles, books, original images, and OCR images are not synced. Codes are not stored in plaintext, session tokens are stored only as irreversible hashes, and provider refresh credentials are encrypted at rest.
  • Online word meanings and sentence translation: after you enable online contextual meanings, the web reader sends the current sentence, up to two preceding sentences, one following sentence, and the article title to the phoread translation gateway as needed while reading; you can turn this off in reader settings. The App sends the same scope when you actively request sentence translation. The gateway forwards the text to DeepSeek. Requests do not contain your name, email address, or phoread account. The gateway processes an IP address, random installation identifier, and request time, and retains encrypted translation cache entries for up to 30 days. The Chrome extension's default on-device translation stays local; if you separately enable DeepSeek precision translation, only the current text and minimal adjacent context are sent through the same gateway, without the full page or source URL.
  • AI reading companion (App): only when you long-press the reader's footer bar to open the AI companion does the App send the current page, an excerpt of up to about 1,200 characters before it, the book and chapter titles, your reading position and vocabulary estimate, your typed or spoken question, and the earlier turns of that conversation to the phoread translation gateway, which forwards them to DeepSeek to generate an answer. It never sends the whole book, your saved words, your account, or OCR images. Answers are AI-generated and can be wrong. The gateway processes an IP address, random installation identifier, and request time. Conversations stay in the running App's memory and are not written to your library or account. When you hold to talk, the system speech recognizer turns speech into text: on iOS on-device when supported, otherwise Apple's speech recognition service; on HarmonyOS the system offline recognizer; on Android your device's speech recognition service. The App receives only the recognized text and does not store recordings.
  • Anthropic BYOK in the Chrome extension: only after separate consent and an active AI action, the relevant word or sentence and the user-provided API key are sent directly to Anthropic. The request does not pass through a phoread server.
  • Web import: the URL you submit is requested from the destination website, which receives ordinary web-request information.
  • Offline voice downloads: when requested, model files are downloaded from Alibaba Cloud Object Storage (OSS) at apps-ringleleap.oss-cn-shanghai.aliyuncs.com. The service receives ordinary download metadata such as IP address, time, and device network information; text being read is not sent with the model download request.
  • Purchases: Apple App Store on iOS/iPadOS, Google Play on Android, or Huawei AppGallery on HarmonyOS NEXT processes products, payment, subscriptions, and refunds. We do not receive full payment-card details. When you sign in and purchase or restore, the app sends signed store evidence, product and transaction identifiers, purchase/expiry/revocation times, and an account-binding identifier to our account service. The server verifies these with the store and records account entitlements and transactions to restore access, prevent duplicate delivery, and handle renewals and refunds. Entitlement state is also cached locally.
  • Support email: if you contact us, your email provider processes your address and message and delivers them to us.
  • Web version: the web app loads fonts from Google Fonts; URL import may use r.jina.ai, corsproxy.io, or allorigins.win; PDF support loads pdf.js from cdnjs when requested. Those providers and the static host receive normal network-request metadata.
  • Optional product usage statistics: remote product analytics is off by default in Web, App and the browser extension. Only after you enable it do feature events such as import outcomes, observed reading sessions, word lookups, saves and reviews leave your device. Analytics uses an independent random persistent installation identifier; events captured while signed in are associated with a verified pseudonymous analytics account. Earlier anonymous events are not retroactively merged. Events contain no reading text, titles, words, questions, answers, recordings, URLs, phone numbers, email, codes or payment credentials. Events go through the Phoread collector to our self-hosted OpenPanel service for product improvement and are retained for up to 12 months. Ordinary network services process connection information, but user IP addresses and raw browser identifiers are not forwarded to OpenPanel. Turning this off stops local collection and clears queued events immediately; server revocation is confirmed when online. This does not immediately delete previously sent data; contact us for deletion. Web honors GPC and Do Not Track.

3. Device permissions

Camera and photos are used for on-device OCR and saving generated images. File access is used for documents you choose to import or export. Clipboard content is read only after you choose to paste. Original photos and documents are not uploaded to a phoread server. The microphone and speech recognition are used only while you hold the AI companion's talk button, to turn speech into text; recordings are not stored.

4. No sale, advertising, or tracking

We do not sell personal information, use advertising SDKs, or track users across apps or sites. Optional product statistics follows section 2 and does not upload historical local logs. Data is not used for advertising, credit, lending, or unrelated purposes. Chrome extension data is used only to provide and improve the clearly disclosed English-reading features, in compliance with the Chrome Web Store User Data Policy, including its Limited Use requirements.

5. Retention and deletion

Local data remains until you delete the related content, clear product data, or uninstall. SMS verification challenges are retained for no more than 7 days. When you request account deletion in the app, all sessions are revoked immediately; the account and associated identities, sync records, and encrypted credentials enter a 15-day recovery period and are then permanently deleted. Encrypted gateway translation cache entries are retained for up to 30 days; an AI companion answer is kept encrypted for up to 1 day only so an interrupted answer can be resent; daily usage is recorded against a pseudonymous installation identifier and retained for up to 90 days. Web usage-statistics events are retained for up to 12 months. The Chrome extension can export non-secret local data and delete all extension data and credentials.

6. Third parties and international processing

This list distinguishes embedded SDKs, system services, and server APIs. Your policy decision stays on this device. Account restoration and store entitlement checks start after explicit consent. WeChat initializes only when you choose WeChat sign-in; the AppGallery edition uses Huawei in-app purchases.

  • WeChat OpenSDK via Fluwx, provided by Tencent/WeChat: exchanges the AppID, authorization scope, random request state and authorization code when you choose WeChat sign-in. Our account service receives the authorized account identifier, nickname and avatar. WeChat handles required device, application and network information under its own rules. WeChat Open SDK personal information rules.
  • HarmonyOS IAP Kit, provided by Huawei: uses system interfaces for product queries, signed transactions, subscription status and purchase management. Product and account-binding identifiers go to the store; Huawei handles the payment account and necessary device/network information for transaction security. The entity providing the service is identified in the terms shown on your device. Huawei privacy statement.
  • DeepSeek API, provided by Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co., Ltd. and affiliates: receives only the text described in section 2 through our server when you request translation or use the AI reading companion, without your account, full book or OCR image. This is a server API, not an embedded collection SDK. DeepSeek privacy policy.
  • Alibaba Cloud infrastructure, SMS, DirectMail and OSS, provided by Alibaba Cloud Computing Co., Ltd. and relevant affiliates: process the phone number or email needed for login codes and ordinary network logs; OSS receives IP, request time and network details when you download a voice model. No Alibaba advertising or behavioral analytics SDK is embedded in the app. Alibaba Cloud privacy policy.
  • Other platforms: Apple provides sign-in and StoreKit, Google provides Play Billing, and Anthropic provides the separately authorized BYOK API in the Chrome extension. Anthropic features are not enabled in the HarmonyOS app. Apple privacy policy, Google privacy policy, Anthropic privacy policy.

DeepSeek, Anthropic, Alibaba Cloud account infrastructure and SMS, Alibaba Cloud OSS, destination websites, Apple, WeChat, Google Play, Huawei AppGallery, and email providers act under their own privacy policies. DeepSeek may process translation requests in China; Apple or WeChat processes authentication when selected; app stores process purchases; other providers may process requests outside your country. Chrome manages local translation language-pack downloads.

7. Children

phoread is a general-audience learning app and is not directed specifically to children under 13. We do not knowingly collect a child's account information contrary to applicable law. Contact us if you believe a child provided personal information.

8. Your choices and rights

You can view, export, and delete local data directly in the app. Signed-in users can also export account data, sign out, or request account deletion in the app. Web usage statistics can be turned off or back on in this section of the web privacy page (phoread.com/privacy/); the choice is kept only in that browser. For information sent by support email, contact us to request access, correction, or deletion, subject to applicable law.

9. Security

We reduce risk through data minimization, HTTPS, irreversible token hashes, encrypted provider credentials, network isolation, platform sandboxing, and store-managed payments. No system can guarantee absolute security; protect your device and store-account credentials.

10. Changes and contact

phoread is operated by Shanghai Lingge Manyue Technology Co., Ltd., the personal-information handler described in this policy. We will update the date on this page when data practices change and provide in-app notice when appropriate. Contact zc@ringleap.ai for privacy requests.