隐私政策

翻丫（TransUtter）· 生效日期：2026 年 9 月 25 日 · English version below

翻丫（TransUtter，以下称“本 App”）在简体中文、英语、法语、西班牙语、葡萄牙语（巴西）之间互译播客、网页文章和文本，并用语音朗读出来。这份政策说明我们收集什么、为什么收集、会交给谁处理，以及你怎么删除它。

一、账号信息

本 App 只提供“通过 Apple 登录”（Sign in with Apple）一种登录方式。登录时 Apple 会给我们一个针对本 App 的匿名用户标识符。

• 我们保存：该匿名标识符、我们生成的内部账号 ID、账号创建时间、账号状态。
• 我们不保存你的邮箱地址。即使你在登录时选择共享真实邮箱，我们的服务端也只用它完成本次登录校验，不写入数据库。
• 我们拿不到你的 Apple ID 密码，也拿不到你的姓名（除非你主动写在反馈邮件里）。

二、你提交的内容

本 App 有两种处理方式，隐私影响完全不同：

本机处理

文本翻译与本地音频转写在你的设备上完成，使用 Apple 的翻译框架与设备端语音识别模型。这些内容不会上传到我们的服务器，也不会发给任何第三方。首次使用时设备会下载所需的语音识别模型文件，这个过程不包含你的任何内容。

云端处理

播客转译以及你主动选择云端时，以下内容会上传到我们的服务器：你粘贴的文本、你分享的网页文章正文、你上传的音频文件、你提交的播客链接及其对应的音频。

为完成语音识别、机器翻译和语音合成，上述内容会交由受我们委托的第三方云服务处理。这些服务商仅按我们的指示处理数据，用途限于提供本 App 的转换功能，不得用于其他目的。我们会随技术条件变化调整所使用的服务商。

这些服务商可能依据其所在地的法规对内容进行合规审核，因此个别内容可能无法完成处理。发生这种情况时，App 会向你说明并且不扣除点数。

处理过程中产生的临时文件在任务结束后即被删除。

邮件转发

登录后你会得到一个专属邮箱地址。转发到这个地址的邮件，由受我们委托的邮件收发服务商接收并转交给我们的服务器；这意味着这些邮件的内容会经过该服务商的系统。它仅按我们的指示处理这些邮件，不得用于其他目的。你不使用这个功能时，不会有任何邮件经过它。

• 我们保存的是：发件人地址与显示名、主题、正文纯文本、正文里的链接、收到的时间。附件一律丢弃、不保存。链接是为了让你能在 App 里打开「请确认订阅」这类邮件里的确认链接，它与正文一起暂存、一起删除；我们不会替你点开任何链接。
• 正文会暂存，因为要等你决定这封信是否转成语音、用什么方向、在云端还是在本机处理。最长保存 7 天，到期自动删除。
• 你选择云端处理时，正文按上面“云端处理”的方式交给第三方云服务；转换完成后我们随即清空所保存的正文。
• 你选择在本机朗读时，正文只下发到你的设备，不经过任何第三方云服务；你的设备处理完成后我们随即清空所保存的正文。
• 收件箱里的记录（发件人、主题、状态）同样在 7 天后删除；你也可以随时在 App 里单独删除某一封。
• 你可以随时更换专属地址，旧地址立即失效。
• 我们不用这些邮件训练模型，不把它们用于广告，也不做任何内容分析。

三、我们不保存你提交的内容

你上传的音频文件、你粘贴的文本、你分享的网页文章正文，以及它们的处理结果，我们都不长期保存。这些内容只在转换过程中存在于我们的服务器上，转换完成并由你的设备取回后即被删除。

唯一的例外是转发到你专属地址的邮件。它必须先到达、再等你决定要不要转成语音，所以正文会暂存在我们的服务器上，最长 7 天；你处理完那一封（云端转换完成，或你的设备完成本机处理）之后，我们随即清空正文，不等 7 天。到期未处理的会连同记录一起自动删除。

• 用于处理的原始上传文件在任务结束时即从服务器删除。
• 处理结果（转写文稿、译文、合成音频）在你的设备取回后删除，不会保留在我们的服务器上。由邮件转成的语音，为了让你有时间打开 App 取回，最长保留 7 天。
• 我们不会用你提交的内容训练模型。

如果你对某条内容有额外的删除需求，请通过下方邮箱联系我们。

四、购买信息

订阅通过 App 内购买（Apple 的 App Store）完成。支付全程由 Apple 处理，我们不接触也不保存你的银行卡号、支付信息或账单地址。

为了给你的账号发放点数、处理续订与退款对账，我们保存 Apple 提供的交易记录：交易 ID、商品 ID、购买时间、购买环境（正式/沙盒）、是否已退款，以及 Apple 返回的原始交易凭证。

五、通知

本 App 使用本地通知（订阅播客的新集提醒，检查在你的设备上进行）与远程推送（云端转换完成、收到转发邮件时通知你）。远程推送需要你先在系统里允许通知，并且已登录——未登录时我们不收集推送令牌。

为此我们保存一个 Apple 推送令牌。它是 Apple 为“本 App + 这台设备”签发的投递地址，随卸载重装更换，不能用来跨 App 识别你，也不用于广告或跟踪。你退出登录、删除账号，或卸载本 App（Apple 会告知我们该令牌已失效）时，我们都会删除它。

推送内容里不包含你的私有内容。你上传的音频、粘贴的文本、分享的网页正文，其标题一律不写进推送——推送要经过 Apple 的服务器。这类内容的推送只说“你的转换已经完成”，标题要等你打开 App 后才从本机读取。公开播客的集名会出现在推送里。

邮件相关的推送同样一个字的邮件内容都不带：不带主题，也不带发件人，只告诉你“收到一封新邮件”。

六、我们不做的事

• 不集成第三方分析、崩溃统计或广告 SDK。
• 不收集广告标识符（IDFA），不做跨 App 跟踪。
• 不访问你的通讯录、相册、位置或健康数据。
• 不出售你的个人信息，也不把你的内容用于训练我们自己的模型。

七、数据保留与删除

• 删除账号：App 内“设置”里可直接删除账号。执行后我们会删除你的登录凭据并将账号标记为已删除，你将无法再用它登录。你的专属邮箱地址、收件箱里的全部邮件（含正文）与发件人设置，在同一次操作里一并删除。
• 额度账本会保留：出于财务审计和退款对账的需要（这也是 Apple 的要求），与交易和额度变动相关的最小记录会被保留，其中不含你的姓名或邮箱。
• 一条防滥用记录会保留：新用户首次登录时我们会赠送一份体验点数。为了防止同一个 Apple 账号靠“删号再注册”反复领取，我们会保留一条加盐单向哈希——它由你的 Apple 账号标识计算得出，无法反推回你的账号，也不与任何用户记录关联（不含用户 ID、姓名或邮箱），除领取时间外不含任何其它信息。它的唯一用途是判断“这个 Apple 账号是否已经领过赠送点数”。
• 未使用的点数在账号删除后不予退还，也无法转移。删除账号不会自动取消订阅，请另行在 iOS 的订阅设置中取消。
• 本机数据：删除 App 即删除设备上的全部历史记录、缓存结果与已下载模型。

八、儿童

本 App 不面向 13 周岁以下儿童，也不会有意收集儿童的个人信息。

九、政策变更

政策更新时我们会修改本页顶部的生效日期。涉及重大变更时，我们会在 App 内提示。

十、联系我们

隐私相关问题、数据删除请求，请邮件联系：support@petlec.com。

Privacy Policy

TransUtter · Effective 25 September 2026

TransUtter translates podcasts, web articles and text between Simplified Chinese, English, French, Spanish and Brazilian Portuguese, and reads the result aloud. This policy describes what we collect, why, who processes it, and how you delete it.

1. Account information

Sign in with Apple is the only sign-in method. Apple gives us an app-specific anonymous identifier.

• We store: that anonymous identifier, an internal account ID we generate, the creation time and the account status.
• We do not store your email address. Even if you choose to share your real address at sign-in, our server uses it only to complete that sign-in and never writes it to the database.
• We never receive your Apple ID password or your name.

2. Content you submit

On-device processing

Text translation and local audio transcription run on your device using Apple's translation framework and an on-device speech-recognition model. This content is not uploaded to us and not shared with any third party. On first use the device downloads the speech-recognition model files; that download contains none of your content.

Cloud processing

For podcast conversion, and whenever you choose cloud mode, the following is uploaded to our server: text you paste, article text you share, audio files you upload, and podcast links plus the corresponding audio.

To perform speech recognition, machine translation and speech synthesis, that content is processed by third-party cloud services engaged by us. They act only on our instructions, solely to provide the app's conversion features, and for no other purpose. The providers we use may change as the technology does.

Those providers may screen content for compliance with the regulations that apply to them, so some submissions cannot be completed. When that happens the app tells you, and no points are charged.

Temporary files created during processing are deleted once the job finishes.

Email forwarding

Once signed in you get your own email address. Mail sent to it is received by an email provider acting on our instructions and passed to our server — which means the contents of those emails pass through that provider's systems. It processes them only on our instructions and for no other purpose. If you don't use this feature, no mail of yours goes through it.

• What we store: the sender address and display name, the subject, the plain-text body, the links in the body, and the time it arrived. Attachments are discarded and never stored. The links are kept so that you can open the confirmation link in emails like “please confirm your subscription” from within the app; they are held and deleted together with the body, and we never open any link on your behalf.
• The body is held because the email has to wait for you to decide whether to turn it into audio, in which direction, and whether to do it in the cloud or on your phone. It is held for at most 7 days and deleted automatically when that runs out.
• If you choose cloud processing, the body is handled as described under "Cloud processing" above; we clear our stored copy as soon as the conversion completes.
• If you choose to have it read on your phone, the body is sent only to your device and goes to no third-party cloud service at all; we clear our stored copy as soon as your device is done.
• The inbox record (sender, subject, status) is likewise deleted after 7 days, and you can delete any individual email in the app at any time.
• You can change your personal address whenever you like; the old one stops working immediately.
• We do not train models on this mail, do not use it for advertising, and do not analyse its contents for any other purpose.

3. We do not keep what you submit

Audio files you upload, text you paste, article text you share, and the results produced from them are not kept. They exist on our servers only while the conversion runs, and are deleted once it finishes and your device has retrieved the result.

Email forwarded to your personal address is the one exception. It has to arrive first and then wait for you to decide whether to turn it into audio, so the body is held on our servers for at most 7 days. Once you have dealt with that email — the cloud conversion finished, or your device finished processing it locally — we clear the body straight away rather than waiting out the 7 days. Anything still untouched at the deadline is deleted along with its record.

• The uploaded source file is deleted from the server as soon as the job finishes.
• Results (transcript, translation, synthesised audio) are deleted once your device has retrieved them. They are not retained on our servers. Audio made from a forwarded email is kept for up to 7 days, so that you have time to open the app and fetch it.
• We do not use what you submit to train models.

If you have a further deletion request for specific content, contact us at the address below.

4. Purchase information

Subscriptions are bought through Apple's App Store as in-app purchases. Apple handles payment end to end; we never see or store card numbers, payment details or billing addresses.

To credit points to your account and reconcile renewals and refunds we store the transaction data Apple gives us: transaction ID, product ID, purchase time, environment (production/sandbox), refund status and Apple's signed transaction receipt.

5. Notifications

The app uses local notifications (new episode of a followed podcast — these checks run on your device) and remote push notifications (to tell you a cloud conversion has finished or a forwarded email has arrived). Remote push requires that you allow notifications and are signed in; we collect no push token while you are signed out.

For this we store an Apple push token. It is a delivery address Apple issues for “this app on this device”, it changes when you reinstall, it cannot be used to identify you across apps, and it is never used for advertising or tracking. We delete it when you sign out, delete your account, or uninstall the app (Apple tells us the token is no longer valid).

Push notifications never carry your private content. For audio you upload, text you paste and web articles you share, the title is never put into the notification — notifications pass through Apple's servers. Those say only that your conversion is ready; the title is read from your device after you open the app. Episode names of public podcasts do appear in notifications.

Notifications about forwarded email carry none of the email either: no subject and no sender, only that a new email has arrived.

6. What we don't do

• No third-party analytics, crash-reporting or advertising SDKs.
• No advertising identifier (IDFA), no cross-app tracking.
• No access to contacts, photos, location or health data.
• We do not sell personal information, and we do not use your content to train our own models.

7. Retention and deletion

• Account deletion is available in the app's Settings. We delete your sign-in credential and mark the account deleted; it can no longer be used to sign in. Your personal email address, every email in your inbox (bodies included) and your per-sender settings are deleted in the same operation.
• The quota ledger is retained: for financial audit and refund reconciliation (also an Apple requirement) we keep the minimal records of transactions and quota changes. They contain no name or email.
• One anti-abuse record is retained: new users receive a one-time welcome credit on first sign-in. To stop the same Apple Account from claiming it repeatedly by deleting and re-registering, we keep a salted one-way hash derived from your Apple Account identifier. It cannot be reversed back to your account, is not linked to any user record (no user ID, name or email), and carries nothing beyond the time it was issued. Its only use is answering "has this Apple Account already claimed the welcome credit?".
• Unused points are not refundable or transferable after account deletion. Deleting your account does not cancel your subscription — cancel it separately in the iOS subscription settings.
• On-device data: deleting the app removes all local history, cached results and downloaded models.

8. Children

TransUtter is not directed at children under 13, and we do not knowingly collect their personal information.

9. Changes

We will update the effective date at the top of this page when this policy changes, and notify you in the app for material changes.

10. Contact

Privacy questions and deletion requests: support@petlec.com.