本頁說明 Yukitary（懸浮桌面 AI 秘書 App，套件名稱 com.winmoon.yuki，以下稱「本 App」）如何處理您的資訊。本 App 由開發者 Winmoon 獨立開發，並非 Google、OpenAI 或 Anthropic 之官方產品，亦未經上述公司審查、贊助、認證或背書。
This page explains how Yukitary (a floating desktop AI secretary app, package name com.winmoon.yuki, "the App") handles your information. The App is independently developed by Winmoon and is not an official product of Google, OpenAI, or Anthropic, and has not been reviewed, sponsored, certified, or endorsed by any of them.
本 App 採用純前端架構：我們沒有自己的後端伺服器，也不會將您的對話內容、照片、記事本、行事曆或鬧鐘資料上傳到任何由開發者營運的伺服器。這些內容僅儲存在您的裝置本機資料庫中。
The App uses a pure front-end architecture: we operate no backend server of our own, and never upload your chat content, photos, notes, calendar entries, or alarms to any server run by the developer. This data is stored only in your device's local database.
Information the App handles: your chat text with the AI assistant (Yuki); photos you take or upload for photo recognition; screen content captured during screen translation; voice input converted to text by your device; notes, calendar events, and alarms you create; and any third-party AI API key you enter yourself (currently Gemini; OpenAI and Anthropic may be added later).
本 App 採用 BYOK（Bring Your Own Key）模式。當您使用 AI 對話、拍照辨識或螢幕翻譯時，您輸入的文字、照片或畫面內容會透過加密連線（HTTPS）直接由您的裝置傳送給您所選擇的第三方 AI 服務供應商，本 App 不會經手、攔截或保存傳輸內容。您的 API 金鑰僅加密儲存在您的裝置上，開發者無法、也沒有權限存取。
The App uses a BYOK (Bring Your Own Key) model. When you use AI chat, photo recognition, or screen translation, the text, photo, or screen content you provide is sent directly from your device to the third-party AI provider you selected, via encrypted transmission (HTTPS); the App never intercepts or retains this content in transit. Your API key is stored only on your device, encrypted, and the developer cannot and has no authorization to access it.
該內容之後續處理，適用該第三方服務供應商自己的隱私權政策，建議另行參閱：Google（Gemini API）— https://policies.google.com/privacy 。
Subsequent handling of that content is governed by the relevant provider's own privacy policy; please review: Google (Gemini API) — https://policies.google.com/privacy.
手動匯出備份功能會產生本機 zip 檔案，您可自行選擇儲存位置，包含您裝置上已安裝的個人雲端硬碟帳號（如 Google 雲端硬碟、pCloud）。開發者無法、也沒有權限存取您的個人雲端硬碟，備份檔案不含您的 API 金鑰。
The manual backup export produces a local zip file, which you may save to a location of your choosing, including your own personal cloud storage account already set up on your device (e.g. Google Drive, pCloud). The developer cannot and has no authorization to access your personal cloud storage. Backup files never include your API key.
本 App 僅依功能需要請求下列權限，遵循最小權限原則：
The App requests only the permissions each feature genuinely needs, following the principle of least privilege:
| 權限 / Permission | 用途 / Purpose |
|---|---|
| 懸浮視窗 SYSTEM_ALERT_WINDOW | 顯示小雪懸浮視窗 / Show the floating Yuki window |
| 相機 Camera | 拍照辨識 / Photo recognition |
| 麥克風 Microphone | 語音輸入 / Voice input |
| 行事曆 Calendar | 建立/讀取本機行事曆事件 / Local calendar events |
| 精準鬧鐘 SCHEDULE_EXACT_ALARM | 準確時間提醒 / Precisely timed reminders |
| 螢幕擷取 MediaProjection | 螢幕翻譯 / Screen translation |
| 通知 Notifications | 顯示提醒與鬧鐘通知 / Reminder and alarm notifications |
| 網路存取 INTERNET／ACCESS_NETWORK_STATE | 將訊息、照片、畫面內容傳送給第三方 AI 服務並取得回覆 / Send messages, photos, screen content to your chosen AI provider and receive a reply |
| 藍牙裝置連線 BLUETOOTH_CONNECT | 語音輸入時可選擇藍牙麥克風 / Choose a Bluetooth microphone for voice input |
| 前景服務通知 FOREGROUND_SERVICE 等 | 懸浮視窗／螢幕翻譯在背景運作時依系統規定顯示常駐通知 / Persistent notification required while the floating window or screen translation keeps running in the background |
| 開機自動啟動 RECEIVE_BOOT_COMPLETED | 重開機後可繼續收到已設定的提醒 / Keep scheduled reminders working after a restart |
| 忽略電池最佳化 REQUEST_IGNORE_BATTERY_OPTIMIZATIONS | 避免系統省電機制中斷懸浮視窗或提醒 / Prevent battery optimizations from interrupting the floating window or reminders |
| 設定鬧鐘 SET_ALARM | 建立鬧鐘捷徑（部分機型因系統限制目前暫時無法使用）/ Create an alarm shortcut (currently unavailable on some devices due to manufacturer restrictions) |
您可在 App 內個別刪除對話、照片、記事本或行事曆項目；解除安裝本 App 會移除裝置本機儲存的所有資料（對話紀錄、記事本、行事曆、鬧鐘、API 金鑰皆為本機儲存，不會殘留在任何伺服器）。建議在解除安裝前先使用備份功能匯出您想保留的資料。
You can delete individual conversations, photos, notes, or calendar items within the App. Uninstalling the App removes all locally stored data (chat history, notes, calendar, alarms, and your API key are all stored locally only, never retained on any server). We recommend exporting a backup of anything you want to keep before uninstalling.
本 App 規劃使用 Google AdMob 提供橫幅與獎勵廣告（觀看廣告可解鎖每日使用額度或立繪內容）。AdMob 可能蒐集裝置廣告識別碼等資訊用於投放與衡量廣告成效，受 Google 隱私權政策規範：https://policies.google.com/privacy 。
The App plans to use Google AdMob for banner and rewarded ads (watching an ad may unlock a daily usage quota or additional content). AdMob may collect information such as your device's advertising identifier for ad delivery and measurement, governed by Google's privacy policy: https://policies.google.com/privacy.
本 App 不是特別針對兒童設計，我們不會刻意蒐集 13 歲以下兒童的個人資訊。
The App is not directed at children, and we do not knowingly collect personal information from children under 13.
我們可能不定期更新本頁內容，更新後將調整上方「最後更新」日期。
We may update this page from time to time; the "Last updated" date above will reflect any change.