简要说明：我们只为提供拍题批改、错题本、AI 辅导和学习周报而处理你的数据。我们不展示广告，也不出售你的个人信息。仅在本次会话确认成年并允许 Apple 系统跟踪权限后，我们使用 Meta（Facebook）衡量广告带来的安装与应用激活；拒绝不影响学习功能。仅在你单独明确允许后，你提交的学习内容才会发送给 OpenAI 生成批改和讲解；你可以随时在 App 内注销账户并删除数据。
1. 适用范围
本政策适用于 Unmistake iOS 应用及其后台服务（以下统称「本服务」），说明我们收集哪些信息、如何使用和共享、保存多久，以及你拥有哪些权利。本服务由 Unmistake 团队（以下简称「我们」）提供。使用本服务前请完整阅读本政策；如不同意，请停止使用。
2. 我们收集的信息
| 类别 | 具体内容 | 来源与用途 |
|---|
| 账户信息 | 邮箱地址；通过「通过 Apple 登录」或 Facebook 登录时取得的账户标识，以及你授权共享的姓名、邮箱、头像；邮箱登录设置的密码（仅保存加密摘要）；昵称 | 创建和识别账户、登录、找回账户、联系你 |
| 学习内容 | 你拍摄或从相册选择的题目照片、输入的题目和作答、批改结果、错题本、练习与小测作答、AI 辅导对话、你上传的题库文件（PDF、图片、文档等）、学习反思 | 提供批改、讲解、错题复习、练习、辅导和题库导入；仅用于为你本人提供服务 |
| 学习档案（可选） | 身份（学生、家长、个人学习者）、出生日期、国家或地区、学段 | 判断是否需要监护人同意、调整讲解难度 |
| 学习周报设置 | 接收周报的邮箱、每周目标、订阅或退订状态 | 向你发送你订阅的学习周报 |
| 购买信息 | Apple 返回的交易编号、商品、购买与到期时间、试用与退款状态、积分余额与流水 | 开通和恢复 PLUS 会员、核算积分、处理退款。我们不会获得你的银行卡或其他支付信息，付款由 Apple 处理 |
| 使用与设备信息 | 设备标识符（iOS 供应商标识符 IDFV，保存在设备钥匙串中；不同于广告标识符 IDFA）、IP 地址、App 版本、系统语言、请求时间、每日功能使用次数、错误日志 | 保障账户安全、防止滥用、计算免费额度、排查故障 |
| 反馈信息 | 你通过「帮助与反馈」提交的内容和我们的回复 | 回应你的问题、改进服务 |
设备权限：相机（拍摄题目）和相册（选择题目图片、保存学习结果）仅在你主动使用对应功能时请求，你可以在系统「设置」中随时关闭。我们不会在后台访问相机或相册，也不会读取你未选择的照片。语音提问还会请求麦克风和语音识别权限，由 Apple 语音识别将声音转为文字；音频可能发送给 Apple 处理。识别文字仅在你提交且授予 AI 数据分享许可后才发送给 OpenAI。
我们不收集：精确位置、通讯录、健康数据。我们不展示广告。只有本次会话确认年满 18 岁且在 Apple 系统 ATT 弹窗中允许跟踪后，才初始化 Meta（Facebook）SDK 用于安装和应用激活归因。归因可能处理 IDFA、安装与激活事件、设备和应用信息及 IP 地址；我们不向该功能传入学习内容、账户邮箱、姓名或购买信息。年龄未知或未成年，以及跟踪被拒绝或受限制时，SDK 不初始化，学习功能仍可正常使用。你可在「我的 → 设置 → 广告归因权限」打开 iOS 设置撤回授权；之后不再主动发送新的归因事件，已发送的数据无法撤回，按 Meta 隐私政策处理。
3. 我们如何使用信息
- 提供、维护和改进本服务的各项功能；
- 验证身份、保障账户和交易安全，识别和防止欺诈、刷量、滥用；
- 计算免费额度、会员权益和合理使用上限；
- 在你订阅时发送学习周报，在必要时发送与账户、订阅相关的服务通知；
- 遵守法律法规、响应合法的执法或监管要求。
我们不会将你的学习内容用于广告投放，也不会出售你的个人信息。我们不会使用你的学习内容训练我们自己的模型；第三方 AI 服务商对数据的使用以下文第 4 节所述为准。
4. 第三方 AI 服务
批改、讲解、练习生成、AI 辅导和题库整理由第三方大语言模型完成。当你使用这些功能时，我们会把完成该任务所需的内容发送给模型服务商：题目照片或文字、你的作答、之前的批改结果、辅导对话上下文、上传文件中的文字和页面图像，以及学科和语言设置。我们不会为 AI 任务自动附加你的账户邮箱、姓名、密码或支付信息；但你自己写在题目、照片或对话中的个人信息会作为该内容的一部分被处理，请在提交前移除。
当前 AI 接收方为 OpenAI 官方 API（OpenAI，api.openai.com）。我们只在提供所请求功能所需的范围内向其发送第 4 节所列学习内容，并要求服务商按照适用的数据处理协议提供不低于本政策所述标准的隐私与安全保护，包括保密、按指示处理和适当的安全措施。OpenAI 的 API 数据控制说明指出：API 数据默认不用于训练或改进模型，除非客户主动选择共享；默认滥用监控日志可能包含请求和回复，通常最多保留 30 天，但法律或安全需要时可能更久；不同 API 功能还可能有单独的应用状态保留规则。我们不声称已启用零数据保留，也不保证撤回许可后 OpenAI 立即删除此前接收的数据。有关处理义务见 OpenAI 数据处理附录。
我们会在首次向 OpenAI 发送学习内容之前单独征求你的明确许可。新版 App 在新安装后会再次请求确认，不会仅因该账号曾在其他地方同意而自动开始分享。本次 AI 数据分享说明更新后，所有账户（包括此前已同意的账户）均须重新确认，旧许可不能代替新许可。接受本政策、登录或授予相机权限均不代表同意 AI 数据分享。你可以拒绝，或在「我的 → 设置 → AI 数据分享」撤回许可；撤回后不再发送新的 AI 请求，仍可使用不依赖 AI 的已有记录、支持和账户删除功能。撤回不会使此前已完成的处理自动失效；如需删除已有内容，请使用删除功能或联系我们。
AI 生成的内容可能存在错误，请结合教材和老师的指导判断。
5. 我们如何共享信息
除下列情形外，我们不会向第三方共享你的个人信息：
- 服务提供商：Vultr（云服务器，托管数据库和后台服务）、阿里云对象存储 OSS（存储题目照片和上传文件）、第 4 节所列 AI 模型服务商、邮件发送服务商（发送学习周报）。它们只能按我们的指示、为提供本服务处理数据；
- Apple 与 Facebook：你选择用其账户登录时，以及通过 Apple 完成购买、恢复购买和退款时；
- Meta（Facebook）归因：仅在第 2 节所述成年确认及 ATT 授权后共享安装和应用激活归因信息；
- 法律要求：为遵守法律法规、法院命令或政府机关的合法要求，或为保护用户、公众或我们的合法权益所必需；
- 业务变更：发生合并、收购或资产转让时，我们会要求接收方继续遵守本政策，或重新征求你的同意。
6. 跨境传输
我们的服务器和上述服务商可能位于你所在国家或地区以外（包括美国）。我们会采取合理措施，确保你的信息在传输和存储过程中得到与本政策一致的保护。
7. 保存期限
- 账户信息和学习内容：在你的账户存续期间保存，用于持续提供服务；
- 你主动删除的错题、记录：从你的列表中移除，并在合理期限内从系统中清除；
- 注销账户后：我们会删除或匿名化你的账户信息和学习内容，但法律要求保留的信息（例如交易记录）在法定期限内保留；
- 服务日志：仅保留排查故障和安全审计所需的期限。
8. 你的权利
- 访问与更正：你可以在 App 内查看和修改你的资料与学习记录；
- 删除：你可以删除单条错题或记录；
- 注销账户：在 App「我的 → 设置 → 注销账户」中即可发起，无需联系客服；
- 撤回同意：你可以在「我的 → 设置 → AI 数据分享」撤回 AI 许可，关闭相机、相册权限，或退订学习周报；
- 取消订阅：在 iPhone「设置 → Apple 账户 → 订阅」中管理或取消；
- 如需导出数据或行使你所在地法律（如 GDPR、CCPA）赋予的其他权利，请通过第 12 节的方式联系我们，我们会在 30 天内答复。
9. 未成年人保护
本服务仅面向年满 13 周岁的用户，不向 13 周岁以下用户开放；父母或监护人的同意不能解除此年龄限制。13–17 岁用户必须完成家庭监护人验证后，才可向第三方 AI 服务分享学习内容。我们会结合用户确认的年龄范围及已提供的出生日期执行这些限制。家长如发现孩子在未经同意的情况下提供了个人信息，请联系我们删除。
10. 信息安全
我们采用 HTTPS 加密传输，密码仅以加密摘要保存，AI 服务密钥加密存储，照片通过有时效的访问链接读取，并对后台访问实施权限控制。但没有任何系统能保证绝对安全；如发生个人信息安全事件，我们会依法及时通知你。
11. 政策更新
我们可能适时更新本政策。重大变更时，我们会在 App 内或通过其他适当方式通知你。更新后继续使用本服务即表示你接受更新后的政策。
12. 联系我们
如对本政策或你的个人信息有任何问题、意见或请求，请发送邮件至 guangtuzi@gmail.com，或在 App「帮助与反馈」中留言。
In short: we process your data only to provide photo grading, the mistake notebook, the AI tutor and weekly reports. We display no ads and do not sell your personal information. Only adults confirmed in the current session who allow Apple tracking permission can enable Meta (Facebook) attribution for installs and app activations. Declining tracking does not affect learning features. Learning content you submit is sent to OpenAI for grading and explanations only after your separate explicit permission. You can delete your account and data in the app at any time.
1. Scope
This policy covers the Unmistake iOS app and its backend services (the "Service"). It explains what we collect, how we use and share it, how long we keep it, and your rights. The Service is provided by the Unmistake team ("we", "us"). If you do not agree with this policy, please stop using the Service.
2. Information we collect
| Category | Details | Source and purpose |
|---|
| Account | Email address; the account identifier from Sign in with Apple or Facebook Login, plus any name, email or profile photo you choose to share; the password you set for email sign-in (stored only as a hash); nickname | Create and identify your account, sign you in, recover access, contact you |
| Learning content | Question photos you take or pick, typed questions and answers, grading results, your mistake notebook, practice and quiz answers, AI tutor conversations, question-bank files you upload (PDFs, images, documents), reflections | Grading, explanations, review, practice, tutoring and question-bank import, used only to serve you |
| Learner profile (optional) | Role (student, parent, independent learner), date of birth, country or region, school stage | Decide whether guardian consent is needed and pitch explanations at the right level |
| Weekly report | Delivery email, weekly goal, subscription status | Send the weekly report you opted into |
| Purchases | Apple transaction IDs, product, purchase and expiry dates, trial and refund status, credit balance and history | Unlock and restore PLUS, track credits, handle refunds. We never receive your card or other payment details; Apple processes payment |
| Usage and device | The iOS identifier for vendor (IDFV), stored in the device Keychain (distinct from the advertising identifier, IDFA), IP address, app version, system language, request times, daily feature counts, error logs | Account security, abuse prevention, free allowances, troubleshooting |
| Feedback | Messages you send through Help & feedback and our replies | Answer you and improve the Service |
Device permissions: the camera (to photograph questions) and photo library (to pick question images and save results) are requested only when you use those features, and you can turn them off in iOS Settings at any time. We never access them in the background or read photos you did not select. Voice questions also request microphone and speech recognition permission. Apple speech recognition converts audio to text and may send audio to Apple for processing. Recognized text is sent to OpenAI only when you submit it after granting AI data-sharing permission.
We do not collect precise location, contacts or health data. We do not display ads. Only after you confirm you are at least 18 in the current session and allow tracking through Apple’s ATT prompt do we initialize the Meta (Facebook) SDK for installation and app activation attribution. Attribution may process IDFA, installation and activation events, device and app information, and IP address. We do not supply learning content, account email, name or purchase information to this feature. The SDK does not initialize if age is unknown or under 18, or tracking is denied or restricted; learning features remain available. Use Me → Settings → Ad attribution permission to open iOS Settings and withdraw permission. We then stop initiating new attribution events; data already sent cannot be recalled and is handled under Meta’s Privacy Policy.
3. How we use information
- To provide, maintain and improve the Service;
- To verify identity, secure accounts and transactions, and detect fraud and abuse;
- To calculate free allowances, membership benefits and fair-use limits;
- To send the weekly report you subscribed to and necessary account or subscription notices;
- To comply with law and respond to lawful requests.
We do not use your learning content for advertising, we do not sell personal information, and we do not use your learning content to train our own models. Third-party AI providers handle data as described in section 4.
4. Third-party AI services
Grading, explanations, practice generation, the AI tutor and question-bank processing are performed by third-party large language models. When you use these features we send the provider only what the task needs: question photos or text, your answer, earlier grading results, tutor conversation context, text and page images from files you upload, and your subject and language settings. We do not automatically attach your account email, name, password or payment details to AI tasks. Personal information you include in a question, photo or conversation is part of that content; please remove it before submitting.
The current AI recipient is OpenAI's official API (OpenAI, api.openai.com). We send only the learning content described in section 4 that is needed for your requested feature, and require the provider, under applicable data-processing agreements, to provide privacy and security protection at least equivalent to this policy, including confidentiality, processing on our instructions, and appropriate security measures. OpenAI's API data controls say API data is not used to train or improve models by default unless the customer opts in to share it. Default abuse-monitoring logs may contain requests and responses and are generally retained for up to 30 days, with legal or safety exceptions; individual API features may retain application state separately. We do not claim Zero Data Retention or immediate deletion of previously received data when you withdraw permission. See the OpenAI Data Processing Addendum for its processing obligations.
We ask separately for your explicit permission before first sending learning content to OpenAI. In the updated app, a fresh installation asks for confirmation on that installation even when the account previously agreed elsewhere. Every account, including accounts that previously agreed, must confirm the revised AI data-sharing disclosure again; an old grant does not count as a new grant. Accepting this policy, signing in or allowing camera access does not grant AI data-sharing permission. You can decline or withdraw permission under Me → Settings → AI data sharing. After withdrawal, we stop sending new AI requests; existing records, support and account deletion remain available where they do not require AI. Withdrawal does not undo processing already completed. Use deletion controls or contact us to request removal of existing content.
AI output can be wrong. Please check it against your textbook and your teacher's guidance.
5. How we share information
We share personal information only in these cases:
- Service providers: Vultr (cloud servers hosting our database and backend), Alibaba Cloud Object Storage Service (question photos and uploaded files), the AI providers in section 4, and our email delivery provider (weekly reports). They may process data only on our instructions to provide the Service;
- Apple and Facebook: when you sign in with them, and when Apple handles purchases, restores and refunds;
- Meta (Facebook) attribution: installation and app activation attribution information only after adult confirmation and ATT permission as described in section 2;
- Legal requirements: to comply with law, court orders or lawful government requests, or to protect users, the public or our rights;
- Business transfers: in a merger, acquisition or asset sale we will require the recipient to honour this policy or ask for your consent again.
6. International transfers
Our servers and the providers above may be located outside your country or region, including in the United States. We take reasonable steps to protect your information consistently with this policy wherever it is processed.
7. Retention
- Account information and learning content are kept while your account exists so we can keep serving you;
- Items you delete are removed from your lists and purged from our systems within a reasonable period;
- When you delete your account we delete or anonymise your account information and learning content, except records we must keep by law (such as transaction records) for the required period;
- Service logs are kept only as long as needed for troubleshooting and security audits.
8. Your rights
- Access and correction: view and edit your profile and records in the app;
- Deletion: delete individual notebook items or records;
- Account deletion: start it in the app under Me → Settings → Delete account, without contacting support;
- Withdraw consent: withdraw AI permission under Me → Settings → AI data sharing, turn off camera or photo access, or unsubscribe from weekly reports;
- Cancel a subscription: in iPhone Settings → Apple Account → Subscriptions;
- To export your data or exercise other rights under local law (such as the GDPR or CCPA), contact us as described in section 12. We respond within 30 days.
9. Children
The Service is available only to users aged 13 or older. Users under 13 cannot use the Service, and parental or guardian permission does not remove this restriction. Users aged 13–17 must complete Family guardian verification before sharing learning content with a third-party AI service. We enforce these restrictions using the confirmed age range and any date of birth already provided. Parents who believe their child provided personal information without consent can contact us to have it deleted.
10. Security
We use HTTPS for all traffic, store passwords only as hashes, encrypt AI service keys, serve photos through time-limited links, and restrict access to our backend. No system is perfectly secure; if a personal-data incident occurs we will notify you as required by law.
11. Changes
We may update this policy from time to time. For material changes we will notify you in the app or by other appropriate means. Continuing to use the Service after an update means you accept the updated policy.
12. Contact
For questions, comments or requests about this policy or your personal information, email guangtuzi@gmail.com or use Help & feedback in the app.