言落Yanluo
隐私政策Privacy Policy
我们只会在你按下时才听。
言落是一款 iOS 语音随笔。你按下录音，我们把这段话转成文字，收在你的手机上。本政策说明我们处理哪些个人信息、用来做什么、保存多久，以及你可以如何查阅、导出、撤回同意和注销。
本政策适用于言落 iOS 应用，以及 aoaai.com/yanluo 下的说明页面。联系邮箱：[email protected]。
1. 同意之前
第一次打开，你会看到本政策。在你点「同意」之前，我们不初始化支付、Apple 登录和云端服务，不申请麦克风，不读取剪贴板、安装列表、IMEI 或 MAC 地址。
你点「不同意」之后，可以留下看看空的首页。此时不会开始上述采集。点「同意」只表示你接受本政策，录音仍要等你自己按下。
2. 我们处理的信息
2.1 录音
你点下录音后，言落使用麦克风，把声音录成手机里的一个音频文件。录音只在你按下时开始，再按一次结束。单次最长约 3 分钟。锁屏或短暂离开应用时，录音可以继续，以免一句话被打断。
这段录音用于转成文字，以及在你自己的手机上回放。我们不用录音做声纹识别，也不用它判断你是谁。
需要转写时，录音会短暂上传到阿里云对象存储，区域在中国上海。识别结束即删除云端文件。若当次删除没有成功，残留文件会在 1 日内清除。云端录音不公开访问。短于约 2 秒、或几乎没有人声的录音不会上传，也不计墨滴。
本机原音默认保留。超过 30 天，或累计超过 50 篇（以先到者为准），应用只留下文字并删掉原音。你也可以在「设置」里随时「删除录音，只留文字」。
2.2 识别文本
转写由阿里云百炼的语音识别完成。当前版本在你的手机上去掉口头语、整理标点并分段，不把正文发给对话大模型改写。成稿处标有「由 AI 整理」。
识别得到的文字、会话标识、时长，以及本次计入的墨滴，保存在两处：你的手机；阿里云表格存储（中国上海）。云端这份用于把文字交回给你，并避免同一次录音被重复计费。
你在稿页修改的标题和正文写在这台手机上。云端保存的是当次识别文本，不会自动跟着你的修改更新。
2.3 账号
可以不登录使用。同意之后，当你开始转写或购买时，应用会在本机生成一个随机的访客标识，并在云端建立对应的墨滴账本。访客标识不是手机号，也不能单独识别你的真实身份。
你勾选协议并选择「通过 Apple 登录」后，我们向 Apple 请求登录凭证，只保存 Apple 用户标识，用来把墨滴和识别记录记在同一账号上。我们不向你索取姓名、手机号或通讯录。登录凭证里即使带有邮箱，我们的服务也不读取、不保存该邮箱。
绑定后赠送 30 滴，每个 Apple 用户标识只赠一次。绑定前已经购买的墨滴会并入该账号。
2.4 购买
墨滴通过 Apple 应用内购买支付。当前商品是「9.9 元 100 滴」，一次付清，不会自动扣费。我们接触不到你的银行卡或支付密码。
购买时，交易凭证会送到我们的服务器，只为向 Apple 核对这笔付款是否成功、是否已经入过账。我们保存交易号和商品标识。入账以核对结果为准。
2.5 产品事件
同意之后，我们只记录五类事件是否发生：同意隐私政策、第一次完成录音识别、第一次生成长图、购买墨滴，以及将来若提供年包时的购买。事件记在阿里云表格存储，内容是事件名称和时间，不含你说的话，也不含文稿正文。
我们不接入广告或运营类第三方统计 SDK。
2.6 本机标记
本机还保存：你是否同意本政策及政策版本、是否完成过第一篇、是否看过麦克风说明、访客标识。这些只为让应用按你的选择工作。
3. 个人信息收集清单
| 信息 | 何时 | 目的 | 存放 |
|---|---|---|---|
| 麦克风录音 | 你按下录音 | 转成文字、本机回放 | 本机；云端仅识别期间 |
| 识别文本、时长、会话标识、计滴结果 | 转写时 | 成稿、避免重复计费 | 本机，以及阿里云表格存储（上海） |
| 访客标识 | 同意后使用转写或购买 | 未绑定时的墨滴账本 | 本机，以及表格存储 |
| Apple 用户标识 | 你选择绑定 | 同一账号下的墨滴与文稿记录 | 本机，以及表格存储 |
| 购买交易号、商品标识 | 你买入墨滴 | 核对付款、防止重复入账 | 表格存储；凭证交 Apple 核对 |
| 五类产品事件 | 同意之后 | 了解功能是否被用过 | 表格存储，不含正文 |
| 隐私同意版本 | 你点同意或撤回 | 记录授权范围 | 本机 |
4. 我们如何使用
- 把你按下后的录音转成文字，并在本机整理成稿。
- 按有效时长计算墨滴：不足约 2 秒不计；其后每满 60 秒进一滴，不足 60 秒按 1 滴计。第一次转写不扣滴。识别失败不扣滴。
- 维护账号、入账，并防止同一笔购买或同一次录音重复记账。
- 在你要求时导出文稿、删除本机录音或注销账号。
- 保障服务可用。运行日志只保留会话标识、时长、状态和错误代码，不记录录音地址、原文或手机号。
我们不把你的录音或文稿用于广告，也不出售个人信息。
5. 保存期限
| 信息 | 期限 |
|---|---|
| 云端录音 | 识别结束即删；残留不超过 1 日 |
| 本机原音 | 30 日或 50 篇，以先到者为准；你可随时提前删除 |
| 本机文稿 | 留到你删除该篇、注销或卸载 |
| 云端识别文本、访客或 Apple 标识、墨滴余额 | 留到你注销；注销后 15 日内删除 |
| 购买交易对应关系 | 注销后删除。法律法规要求留存的交易记录，只在法定最短期限内保留最少必要的交易号与入账结果 |
| 产品事件与运行日志 | 事件与账号一并删除。日志只含会话标识、时长、状态和错误代码，按排障所需的最短时间保存 |
卸载应用会去掉本机文稿和原音。云端账本和识别文本不会因此自动消失，需要按注销账号页提出删除：https://aoaai.com/yanluo/delete-account/
6. 委托处理与第三方
为完成你要求的功能，我们委托下列方处理相应信息。处理地点在阿里云中国上海区域。登录和购买核对会把必要凭证提交给 Apple，Apple 可能在其服务所在地处理这些凭证。除此之外，我们不把你的录音和文稿转移到境外。
| 提供方 | 处理内容 | 目的 |
|---|---|---|
| Apple 登录 | 登录凭证中的用户标识 | 绑定账号 |
| Apple 应用内购买 | 交易凭证、交易号 | 核对付款并入账 |
| iOS 麦克风与音频会话 | 你按下后的录音 | 在本机采集声音 |
| 阿里云函数计算 | 上传许可、转写调度、计滴、入账、事件 | 完成识别与账本 |
| 阿里云对象存储 | 识别期间的录音文件 | 短暂存放，识别后删除 |
| 阿里云百炼 | 录音 | 语音转写 |
| 阿里云表格存储 | 识别文本、账本、交易对应、事件 | 交回文字并记账 |
| 本机数据库 | 文稿、会话、墨滴缓存 | 离线阅读与防丢失，不上传这份数据库 |
你通过系统分享面板发出长图或导出文稿时，内容交给你选中的对象。我们不知道你分享给了谁，也不因此建立一份社交档案。
法律法规、诉讼或有权机关提出强制性要求时，我们可能依法提供相关信息。
7. 你的权利
- 查阅和复制：在应用里打开文稿。「设置」→「导出文稿」，可导出这台手机上的标题和正文。
- 更正：在稿页修改标题和正文。若要更正云端保存的识别文本，请发邮件。
- 删除某一篇：在应用里删除该篇，本机文稿与原音会从首页移除。
- 只删除原音：「设置」→「删除录音，只留文字」。
- 撤回同意：「设置」→「撤回同意」。撤回后回到隐私页，我们停止新的云端采集，也不再为新录音申请麦克风。已经产生的记录不会单凭撤回而消失，你可以再要求删除。
- 注销账号：按 https://aoaai.com/yanluo/delete-account/ 操作。
- 拒绝麦克风：言落仍可打开，已有文稿仍可阅读。新的转写需要麦克风。
请将请求发到 [email protected]。我们在 15 日内答复。为确认是你本人，我们可能请你从仍可打开的设备说明情况，或提供大约的绑定、购买时间。我们不要求你提供 Apple ID 密码。
8. 未成年人
言落不面向不满 14 周岁的儿童。我们不主动收集儿童个人信息。若你是监护人，认为我们在不知情的情况下处理了儿童信息，请发邮件，我们核实后会删除。
9. 安全
录音与文稿存放在应用沙盒，以及访问受控的云端。上传使用限时、限路径的链接，不能用来列举或读取他人的文件。应用内不保存云账号密钥。请保管好你的设备与 Apple ID。
10. 政策更新
更新本政策时，我们会改版本号和生效日期，并公布在 https://aoaai.com/yanluo/privacy/ 。若变更扩大收集范围或改变使用目的，我们会在应用内再次请你同意。你拒绝后，可以停止使用并要求删除已有信息。
11. 联系我们
隐私政策：https://aoaai.com/yanluo/privacy/
We listen only while you are pressing.
Yanluo is an iOS voice journal. You press record, and we turn what you say into text that stays on your phone. This policy explains which personal information we process, why, how long we keep it, and how you can access it, export it, withdraw consent, and delete your account.
This policy applies to the Yanluo iOS app and to the pages under aoaai.com/yanluo. Contact: [email protected].
1. Before you agree
The first time you open the app, you see this policy. Before you tap Agree, we do not initialize payments, Sign in with Apple, or cloud services. We do not ask for the microphone, and we do not read the clipboard, the list of installed apps, the IMEI, or the MAC address.
If you tap Disagree, you can stay and look at an empty home screen. None of that collection starts. Tapping Agree only means you accept this policy. Recording still waits until you press.
2. Information we process
2.1 Recordings
After you tap record, Yanluo uses the microphone and saves the sound as an audio file on the phone. Recording starts only when you press, and ends when you press again. One take lasts about 3 minutes at most. If the screen locks or you leave the app briefly, recording can continue, so a sentence is not cut off.
The recording is used to become text, and to play back on your own phone. We do not use it for voiceprint recognition, and we do not use it to decide who you are.
When a transcription is needed, the recording is uploaded briefly to Alibaba Cloud Object Storage in Shanghai, China. The cloud file is deleted when recognition finishes. If that deletion fails, anything left is cleared within 1 day. Cloud recordings are not publicly accessible. A recording shorter than about 2 seconds, or with almost no voice, is not uploaded and does not use ink.
The original audio stays on the device by default. After 30 days, or after 50 notes, whichever comes first, the app keeps the text and deletes the original audio. You can also tap “Delete recordings, keep the text” in Settings at any time.
2.2 Recognized text
Transcription is done by Alibaba Cloud Model Studio speech recognition. The current version removes filler words, fixes punctuation, and splits paragraphs on your phone. It does not send the body to a chat model to be rewritten. Finished notes are marked “arranged by AI”.
The recognized text, session id, duration, and the ink counted for that take are stored in two places: your phone, and Alibaba Cloud Tablestore (Shanghai, China). The cloud copy is used to hand the text back to you, and to avoid charging the same recording twice.
Titles and body text you edit on the note page stay on this phone. The cloud keeps the text from that recognition. It does not automatically follow your later edits.
2.3 Account
You can use Yanluo without signing in. After you agree, when you start a transcription or a purchase, the app creates a random guest id on the device and a matching ink ledger in the cloud. The guest id is not a phone number, and it cannot by itself identify who you are.
After you check the agreement and choose Sign in with Apple, we ask Apple for a sign-in credential and store only the Apple user id, so ink and recognition records stay on the same account. We do not ask you for your name, phone number, or contacts. Even if the credential contains an email address, our service does not read or store that email.
Binding the account gives 30 drops, once per Apple user id. Ink you already bought before binding is merged into that account.
2.4 Purchases
Ink is paid for with Apple in-app purchase. The current product is “100 drops for 9.9 yuan”, paid once. It does not renew. We never see your card or payment password.
When you buy, the transaction receipt is sent to our server only so we can ask Apple whether the payment succeeded and whether it was already credited. We store the transaction id and the product id. The credit follows the verification result.
2.5 Product events
After you agree, we record only whether five kinds of events happened: agreeing to the privacy policy, finishing a first recording recognition, generating a first long image, buying ink, and, if a yearly pack is offered later, buying that. Events are stored in Alibaba Cloud Tablestore. The content is the event name and the time. It does not include what you said, or the body of a note.
We do not integrate advertising or operations analytics SDKs.
2.6 On-device flags
The device also stores whether you agreed to this policy and which version, whether you finished a first note, whether you have seen the microphone explanation, and the guest id. These exist only so the app can follow your choices.
3. What we collect
| Information | When | Why | Where |
|---|---|---|---|
| Microphone recording | You press record | Turn it into text, play it back on the device | On the device; in the cloud only while it is being recognized |
| Recognized text, duration, session id, ink result | During transcription | Finish the note, avoid charging twice | On the device, and in Alibaba Cloud Tablestore (Shanghai) |
| Guest id | Transcription or purchase after you agree | Ink ledger before an account is bound | On the device, and in Tablestore |
| Apple user id | You choose to bind | Ink and note records under one account | On the device, and in Tablestore |
| Purchase transaction id, product id | You buy ink | Verify payment, prevent a double credit | Tablestore; the receipt is checked with Apple |
| Five product events | After you agree | See whether a feature was used | Tablestore, without the note body |
| Privacy consent version | You agree or withdraw | Record the scope of consent | On the device |
4. How we use it
- Turn a recording you started into text, and arrange the note on the device.
- Count ink by usable length: under about 2 seconds is free; after that, one drop for every 60 seconds, and a remainder under 60 seconds counts as 1 drop. The first transcription is free. A failed recognition is free.
- Keep the account and the ledger, and stop the same purchase or the same recording from being counted twice.
- Export notes, delete on-device recordings, or delete the account when you ask.
- Keep the service available. Runtime logs keep only the session id, duration, status, and error code. They do not record the recording address, the original text, or a phone number.
We do not use your recordings or notes for advertising, and we do not sell personal information.
5. How long we keep it
| Information | Period |
|---|---|
| Cloud recording | Deleted when recognition ends; anything left is gone within 1 day |
| On-device original audio | 30 days or 50 notes, whichever comes first; you can delete it sooner |
| On-device notes | Until you delete that note, delete the account, or uninstall |
| Cloud text, guest or Apple id, ink balance | Until you delete the account; deleted within 15 days after that |
| Purchase-to-account link | Deleted after account deletion. Where the law requires a transaction record, only the minimum transaction id and credit result are kept, and only for the shortest period the law requires |
| Product events and runtime logs | Events are deleted with the account. Logs contain only session id, duration, status, and error code, and are kept only as long as needed to fix problems |
Uninstalling the app removes on-device notes and original audio. The cloud ledger and recognized text do not disappear because of that. Ask for deletion on the account page: https://aoaai.com/yanluo/delete-account/
6. Processors and third parties
To do what you asked, we entrust the parties below with the corresponding information. Processing on Alibaba Cloud happens in Shanghai, China. Sign-in and purchase checks send the necessary credentials to Apple, and Apple may process those credentials where its services are located. Other than that, we do not transfer your recordings or notes outside China.
| Provider | What is processed | Why |
|---|---|---|
| Sign in with Apple | User id in the sign-in credential | Bind the account |
| Apple in-app purchase | Transaction receipt, transaction id | Verify payment and credit ink |
| iOS microphone and audio session | The recording after you press | Capture sound on the device |
| Alibaba Cloud Function Compute | Upload permission, transcription scheduling, ink counting, credits, events | Finish recognition and the ledger |
| Alibaba Cloud Object Storage | The recording file during recognition | Hold it briefly, then delete it |
| Alibaba Cloud Model Studio | The recording | Speech to text |
| Alibaba Cloud Tablestore | Recognized text, ledger, transaction link, events | Return the text and keep the ledger |
| On-device database | Notes, sessions, ink cache | Read offline and avoid loss. This database is not uploaded |
When you send a long image or an export through the system share sheet, the content goes to whoever you pick. We do not know who that is, and we do not build a social profile from it.
If a law, a lawsuit, or a competent authority makes a mandatory request, we may provide the relevant information as required.
7. Your rights
- Access and copy: open a note in the app. Settings → Export notes exports the titles and body text on this phone.
- Correct: edit the title and body on the note page. To correct recognized text stored in the cloud, email us.
- Delete one note: delete it in the app. The on-device note and original audio leave the home screen.
- Delete only the original audio: Settings → Delete recordings, keep the text.
- Withdraw consent: Settings → Withdraw consent. You return to the privacy screen. We stop new cloud collection and no longer ask for the microphone for new recordings. Records that already exist do not disappear just because you withdrew. You can still ask for deletion.
- Delete the account: follow https://aoaai.com/yanluo/delete-account/.
- Refuse the microphone: Yanluo still opens, and existing notes can still be read. New transcription needs the microphone.
Send requests to [email protected]. We reply within 15 days. To confirm it is you, we may ask you to explain from a device you can still open, or to give an approximate binding or purchase time. We do not ask for your Apple ID password.
8. Children
Yanluo is not for children under 14. We do not knowingly collect children’s personal information. If you are a guardian and believe we processed a child’s information without knowing it, email us. We will delete it after we check.
9. Security
Recordings and notes stay in the app sandbox and in cloud storage with controlled access. Uploads use links that expire and are limited to one path. They cannot be used to list or read someone else’s files. The app does not store cloud account keys. Please keep your device and Apple ID safe.
10. Policy updates
When we update this policy, we change the version and the effective date, and publish it at https://aoaai.com/yanluo/privacy/. If a change widens what we collect or changes why we use it, we will ask you to agree again inside the app. If you refuse, you can stop using Yanluo and ask us to delete what we already have.
11. Contact
Email: [email protected]
Privacy policy: https://aoaai.com/yanluo/privacy/
Support: https://aoaai.com/yanluo/support/
Delete account: https://aoaai.com/yanluo/delete-account/