概述
咕咕拼音（App 显示名「拼音输入法」，键盘名「拼音键盘」）由个人开发者开发，致力于保护用户隐私。本隐私政策说明我们如何收集、使用和保护你的个人信息。
核心承诺：键盘扩展零权限、零网络、零数据收集。你输入的一切只存在于你的设备上。
Overview
Gugu Pinyin (App display name "拼音输入法 / Pinyin Input", keyboard name "拼音键盘 / Pinyin Keyboard") is developed by an individual developer and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information.
Our core promise: the keyboard extension requires zero permissions, zero network access, and collects zero data. Everything you type stays on your device.
我们收集什么数据
键盘扩展
✓ 不收集任何数据。
- 不请求"允许完全访问"权限
- 无法连接网络（iOS 系统强制隔离）
- 不能读取通讯录、剪贴板、相册、位置
- 不追踪输入内容，所有输入直接上屏到系统文本框
- 本地词频学习完全在设备内完成，不上传
主应用
✓ 仅在以下场景使用网络：
- 订阅与购买：连接 Apple App Store 验证和完成支付。此过程由 Apple 处理，我们无法访问你的支付信息。
- 恢复购买：从 Apple 服务器同步已购项目。
- 除此之外，主应用也不主动联网或上传任何数据。
What Data We Collect
Keyboard Extension
✓ We collect no data.
- We do not request "Allow Full Access"
- We cannot connect to the network (enforced by iOS sandbox isolation)
- We cannot read your contacts, clipboard, photo library, or location
- We do not track what you type — all input goes directly to the system text field
- Local word-frequency learning happens entirely on-device and is never uploaded
Main App
✓ The network is used only in these scenarios:
- Subscriptions & purchases: connecting to the Apple App Store to verify and complete payments. This is handled by Apple; we cannot access your payment information.
- Restore Purchases: syncing previously purchased items from Apple's servers.
- Apart from these, the main app does not proactively connect to the network or upload any data.
数据存储
以下数据仅存储在本地设备中：
- 订阅状态：存储在 iOS Keychain 和 App Group 共享 UserDefaults 中，用于键盘扩展校验会员权限。
- 用户词频 / 用户词库：你选字、选词的频率与个人词条记录，仅用于个性化候选排序。存储在 App Group 容器内，不上传。
- 输入历史：不保存。每次键盘关闭即清除。
以上数据均不与任何第三方共享，不会离开你的设备。
Data Storage
The following data is stored only on your local device:
- Subscription status: stored in iOS Keychain and the App Group shared UserDefaults, used only by the keyboard extension to verify membership.
- User word frequency / user dictionary: records of the characters and words you choose, used only for personalized candidate ranking. Stored in the App Group container and never uploaded.
- Input history: not saved; cleared every time the keyboard is dismissed.
None of this data is shared with any third party and never leaves your device.
第三方服务
本应用使用的唯一第三方服务是 Apple StoreKit（App 内购买与订阅），由 Apple Inc. 提供。
StoreKit 受 Apple 隐私政策 约束。我们无法访问你的 Apple ID、支付方式或购买记录详情。
本应用不使用任何分析 SDK、广告 SDK、统计工具或第三方追踪服务。
Third-Party Services
The only third-party service used by this app is Apple StoreKit (in-app purchases and subscriptions), provided by Apple Inc.
StoreKit is governed by the Apple Privacy Policy. We cannot access your Apple ID, payment method, or purchase details.
This app does not use any analytics SDK, advertising SDK, statistics tool, or third-party tracking service.
键盘扩展的隐私保护原理
iOS 键盘扩展运行在严格的系统沙箱中：
- 默认情况下，键盘不能访问网络
- 默认情况下，键盘不能访问其他 App 的数据
- 只有用户主动在"设置 → 通用 → 键盘 → 拼音键盘"中开启"允许完全访问"，键盘才能获得有限的网络和数据库访问权限
咕咕拼音强烈建议用户关闭"允许完全访问"。本键盘所有功能（全键盘拼音、句级输入、用户词库、候选排序、主题、触感、音效）均在关闭完全访问的状态下正常工作。
需要说明：本键盘扩展在技术上声明了"完全访问"能力，但应用内不存在任何将输入内容或数据通过网络发送出去的代码；除非用户手动开启该权限，否则 iOS 的系统隔离会阻止键盘联网。
How the Keyboard Extension Protects Your Privacy
iOS keyboard extensions run in a strict system sandbox:
- By default, the keyboard cannot access the network
- By default, it cannot access data from other apps
- Only if you manually enable "Allow Full Access" under Settings → General → Keyboard → Pinyin Keyboard does the keyboard gain limited network and database access
Gugu Pinyin strongly recommends keeping "Allow Full Access" turned off. All keyboard features (full-keyboard pinyin, sentence-level input, user dictionary, candidate ranking, themes, haptics, key sounds) work normally with Full Access disabled.
Note: technically this keyboard extension declares the "Full Access" capability, but the app contains no code that sends your input or data over the network; unless you manually enable it, iOS sandbox isolation prevents the keyboard from connecting to the network.
剪贴板功能与"允许完全访问"
咕咕拼音的剪贴板功能（长按空格查看或粘贴最近复制的内容）需要读取系统剪贴板。受 iOS 系统限制，键盘扩展只有在开启"允许完全访问"权限后才能访问剪贴板。
如果你希望使用剪贴板功能，请在系统设置中为本键盘开启"允许完全访问"：
- 打开 iOS「设置」→「通用」→「键盘」→「键盘」→ 选择「拼音键盘」
- 开启「允许完全访问」开关
开启后的隐私说明
开启"允许完全访问"后，系统的网络访问能力会被技术上开放。但咕咕拼音键盘扩展仍然不联网、不上传任何数据；即便开启完全访问，所有剪贴板内容也仅保存在本机 App Group 容器内，不离开你的设备，可用一键清空。
如你不希望开启该权限，剪贴板功能将不可用，但所有其他输入功能（全键盘拼音、句级输入、用户词库、候选排序、主题、触感、音效等）均不受影响、照常使用。
Clipboard Feature & "Allow Full Access"
Gugu Pinyin's clipboard feature (viewing or pasting recently copied items by long-pressing the space bar) needs to read the system clipboard. Due to iOS system restrictions, the keyboard extension can only access the clipboard after "Allow Full Access" is enabled.
If you wish to use the clipboard feature, please enable "Allow Full Access" for this keyboard in system settings:
- Open iOS Settings → General → Keyboard → Keyboards → select "Pinyin Keyboard"
- Turn on the "Allow Full Access" switch
Privacy note after enabling
After enabling "Allow Full Access", network access capability is technically opened by the system. However, Gugu Pinyin's keyboard extension still does not connect to the network or upload any data; even with Full Access on, all clipboard content stays only in the on-device App Group container, never leaves your device, and can be cleared in one tap.
If you prefer not to enable this permission, the clipboard feature will be unavailable, but all other input features (full-keyboard pinyin, sentence-level input, user dictionary, candidate ranking, themes, haptics, key sounds, etc.) remain unaffected and work as usual.
用户权利
由于本应用不在服务器端收集任何数据，因此：
- 不存在需要删除的云端数据
- 不存在需要导出的个人信息
- 卸载应用即清除所有本地数据（App Group 容器数据会在卸载时被系统自动清除）
Your Rights
Because this app collects no data on our servers:
- There is no cloud data to delete
- There is no personal information to export
- Uninstalling the app clears all local data (the App Group container data is automatically cleared by the system on uninstall)
儿童隐私
本应用不收集任何人的个人数据，包括儿童。所有年龄段的用户享有同等的隐私保护。
Children's Privacy
This app does not collect personal data from anyone, including children. Users of all ages receive the same privacy protection.
隐私政策更新
本隐私政策可能随时更新。重大变更时，我们会在应用内显著位置通知。建议你定期查阅本页面。
Changes to This Privacy Policy
This Privacy Policy may be updated at any time. For significant changes, we will notify you prominently within the app. We recommend reviewing this page periodically.
Contact Us
If you have any questions about this Privacy Policy, please contact us at: