← Back to Home

隐私政策

版本 1.0 · 最后更新 2026-10-24 · 生效日期 2026-10-24

1. 我们是谁

DocsKit(下称「本 App」)是一款 iPhone 上的 PDF 扫描、编辑与整理工具,由 Lu Li(下称「我们」)发布。我们是你使用本 App 时、本政策所述有限个人信息的处理者。

联系方式:support@gougou.me · 网站:https://gougou.me

2. 一句话说明

以上仅为便于理解的摘要,具体以本政策正文为准。

3. 我们不收集的信息

数据 是否收集
文档、扫描件、导入的 PDF 与图片及其内容 否
OCR 识别出的文字、批注、签名图像 否(仅保存在本机)
PDF 密码 否(密码只用于加密或解密该文件,本 App 不保存)
面容 ID / 触控 ID 等生物识别数据 否(验证由 iOS 完成,本 App 只得到「成功 / 失败」结果)
姓名、邮箱、电话、通讯地址 否(你主动发邮件联系支持时除外)
精确或粗略位置 否(本 App 不申请定位权限)
整个相册、通讯录、日历、麦克风、健康数据 否(本 App 不申请相册访问权限,只能拿到你在系统选择器中选中的图片)
广告标识符(IDFA)或归因数据 否
上报给第三方的崩溃日志或统计数据 否(见 4.6 节)

4. 本 App 在你的设备上处理哪些数据

以下数据仅保存在你的 iPhone 上本 App 的私有容器内。除缓存与临时文件外,它们会随你自己的 iCloud 或电脑设备备份一起备份(如果你开启了备份)。我们无法远程读取。

4.1 文档文件

你扫描、导入、合并、拆分或转换生成的 PDF,以及回收站中的文档,都以文件形式保存在本 App 内。你编辑时添加的文字、高亮、手绘和签名会写入对应的 PDF 文件。导入时,本 App 会把你选中的文件复制一份到 App 内。

4.2 文档库数据库

为显示、排序和搜索文档,本 App 在本机数据库中保存:

4.3 文字识别(OCR)

OCR 使用 Apple 的 Vision 框架在本机完成,不把页面图像发给我们或任何第三方。识别出的文字保存在上述搜索索引中;你选择「另存为可搜索 PDF」时,还会写入新生成的 PDF。

4.4 签名

你绘制的签名会以图片形式保存在本机,方便下次「使用已保存的签名」。该文件使用 iOS 最高级别的数据保护(设备锁定时不可读取)。你可以随时重新签名覆盖它。

4.5 设置与免费次数记录

4.6 本机诊断信息

处理失败等技术信息会写入 iOS 系统日志,不会自动发送到任何地方。若你主动发邮件附上截图或说明,是否发送、发送什么由你决定。

4.7 缓存与临时文件

页面缩略图保存在缓存目录;处理中的临时文件(例如合并、拆分的中间文件和分享用的副本)保存在临时目录,并在每次启动时清空。设置中的「清除缓存」会删除缩略图和临时文件,不影响你的文档。

5. 权限

6. 购买与订阅

购买通过 App Store 由 Apple 处理。我们不会收到你的姓名、支付卡、账单地址或 Apple ID 密码。Apple 会向我们(及订阅服务商)提供交易标识、购买的商品、购买时间与订阅状态。

我们使用 RevenueCat, Inc.(下称 RevenueCat) 管理权益、校验收据、恢复购买并了解订阅的总体表现。RevenueCat 会收到由其 SDK 生成的应用内用户 ID(不是你的 Apple ID)、购买与交易数据,以及设备型号、系统版本、语言区域、IP 地址等技术信息。它不会收到你的文档或文档中的任何内容。

我们不会收到或保存你的支付信息,也不会把购买数据用于广告。

7. 离开设备的数据

接收方 目的 数据 合法性基础(EEA/英国)
Apple Inc. App Store 购买、收据校验、退款 按 Apple 隐私政策处理的 Apple ID 交易数据 履行合同;法定义务
RevenueCat, Inc. 订阅管理、权益同步、恢复购买 应用内用户 ID、购买/交易数据、设备型号、系统版本、语言区域、IP 地址 履行合同;正当利益(防欺诈)
你选择的接收方 仅当你使用「分享」或「打印」 你选择分享或打印的文件 由你发起;我们不接收这些文件
我们的邮件服务商 仅当你发邮件联系支持 你自行提供的内容 同意 / 正当利益

通过「分享」发出的文件由你选择的 App 或服务按其自身政策处理。我们不出售个人信息,不将其用于跨场景行为广告,也不用于对你有法律影响的画像或自动化决策。

8. 服务提供商

Apple 与 RevenueCat 作为我们的服务提供商 / 处理者(Apple 同时是 App Store 支付的独立控制者),受其自身条款与数据保护承诺约束。我们不接入任何其他会收集数据的第三方 SDK。

9. 保存期限与删除

数据 位置 保存期限
文档文件、文档库数据库、搜索索引、书签 你的设备 直至你彻底删除文档或删除本 App;可能进入你自己的设备备份
回收站中的文档 你的设备 不会自动清空,直至你「彻底删除」「清空回收站」或删除本 App
已保存的签名 你的设备 直至你重新签名覆盖或删除本 App
设置与免费次数记录 你的设备 直至你修改或删除本 App
缩略图与临时文件 你的设备 临时文件在下次启动时删除;缩略图可通过「清除缓存」删除,iOS 在空间不足时也可能清理
支持邮件 我们的邮件服务商 最长 24 个月
购买记录 Apple / RevenueCat 按其政策及税务、会计法律

删除本 App 会删除其中的全部文档,除非你另有备份或已通过「分享」导出。删除 App 不会取消订阅。

10. 安全

本 App 的文件受 iOS 数据保护与 App 沙盒保护,已保存的签名使用最高级别的数据保护,所有网络请求使用 HTTPS。你可以开启面容 ID / 触控 ID 应用锁,或为单个 PDF 设置密码。由于文档从不离开设备(除非你自己分享),文档的主要风险在于你的设备锁屏密码,而不是我们的服务器。任何存储方式都无法做到 100% 安全,但我们尽量让可能暴露的数据最少。

11. 你的隐私权利

根据你所在地区的法律,你可能享有访问、更正、删除、限制或反对处理、数据可携带、撤回同意,以及向当地监管机构投诉的权利。

由于我们没有账号、也不持有你的文档:

行使任何权利请发送邮件至 support@gougou.me。我们将在 30 天内答复(加州请求为 45 天),并可能需要验证请求;由于我们掌握的数据很少,验证通常仅限于邮件往来或应用内用户 ID。

EEA / 英国(GDPR / UK GDPR): 我们的合法性基础为履行合同(提供 App 与购买)、正当利益(安全、防欺诈、维护免费次数的公平性)与同意(相机、面容 ID)。你可反对基于正当利益的处理,并向所在国监管机构投诉。

加州(CCPA / CPRA): 过去 12 个月我们未出售或共享个人信息,也不会明知而出售或共享 16 岁以下消费者的个人信息。你享有知情、删除、更正与选择退出出售/共享的权利,我们不会因你行使权利而歧视你。你可委托授权代理人。

中国大陆(PIPL): 本 App 在你的设备上处理文档,不传输其内容。Apple / RevenueCat 的购买相关处理可能涉及跨境传输,这是履行你购买订阅时订立的合同所必需。你可联系我们行使 PIPL 项下的权利。

其他地区: 即使未在此列出,我们同样遵守适用的强制性消费者与隐私法律。

12. 跨境传输

我们位于 中华人民共和国。Apple 与 RevenueCat 可能在美国及其他国家处理数据。在需要时,传输依据标准合同条款或适用的充分性认定(例如参与该框架的提供商所适用的欧盟-美国数据隐私框架)。你可向我们索取更多信息。

13. 儿童

本 App 不面向 13 岁以下(EEA / 英国为 16 岁以下)儿童。我们不会明知而收集儿童的个人信息。若你认为儿童向我们提供了个人信息,请联系我们删除。

14. 第三方链接

本 App 及本页面可能链接到 Apple、RevenueCat 或其他网站,其隐私实践适用其自身政策,而非本政策。

15. 政策变更

当 App 功能或法律要求变化时,我们可能更新本政策。新版本会标注新的「最后更新」日期;重大变更会在生效前于 App 内通知你。生效日之后继续使用即表示你接受更新后的政策。

16. 联系我们

Lu Li
邮箱:support@gougou.me

Privacy Policy

Version 1.0 · Last updated 2026-10-24 · Effective date 2026-10-24

1. Who we are

DocsKit ("the App", "we", "us") is an app for scanning, editing and organizing PDFs on iPhone, published by Lu Li (the "Developer"). We are the data controller for the limited personal data described in this policy.

Contact: support@gougou.me · Website: https://gougou.me

2. The short version

This summary is for convenience only. The rest of this policy explains the details.

3. What we do not collect

Data Collected?
Documents, scans, imported PDFs and images, or their content No
Recognized (OCR) text, annotations, signature images No — stored only on your device
PDF passwords No — a password is used only to encrypt or decrypt that file; the App does not store it
Face ID / Touch ID or other biometric data No — iOS performs the check; the App only receives a success/failure result
Name, email address, phone number, postal address No (unless you email support)
Precise or coarse location No — the App does not request location permission
Your whole photo library, contacts, calendars, microphone, health data No — the App does not request photo library access; it only receives the images you pick in the system picker
Advertising ID (IDFA) or attribution data No
Crash logs or analytics sent to a third party No — see §4.6

4. What the App processes on your device

All of the following is stored only in the App's private container on your iPhone. Except for caches and temporary files, it is included in your own iCloud or computer backup of the device, if you use one. We cannot read it remotely.

4.1 Document files

The PDFs you scan, import, merge, split or convert, and the documents in the Trash, are stored as files inside the App. Text, highlights, drawings and signatures you add while editing are written into the PDF file. When you import a file, the App keeps its own copy of the file you selected.

4.2 Library database

To list, sort and search your documents, the App keeps a local database containing:

4.3 Text recognition (OCR)

OCR uses Apple's Vision framework on your device. Page images are not sent to us or to any third party. The recognized text is stored in the search index above and, if you choose "Save as searchable PDF", in the new PDF.

4.4 Signature

The signature you draw is saved as an image on your device so you can "Use saved signature" later. The file uses iOS's strongest Data Protection class (unreadable while the device is locked). You can replace it at any time by drawing a new signature.

4.5 Settings and free-use count

4.6 Local diagnostics

The App writes technical messages (for example, a failed operation) to the iOS system log on your device. They are not automatically sent anywhere. If you email us a screenshot or description, you decide whether and what to send.

4.7 Caches and temporary files

Page thumbnails are kept in the App's cache directory. Files used while an operation runs (for example, intermediate merge/split files and copies made for sharing) are kept in the temporary directory, which is emptied at every launch. "Clear cache" in Settings deletes thumbnails and temporary files without touching your documents.

5. Permissions

6. Purchases and subscriptions

Purchases are processed by Apple through the App Store. We never receive your name, payment card, billing address or Apple ID password. Apple provides us (and our subscription provider) with a transaction identifier, the product purchased, the purchase date and the subscription status.

We use RevenueCat, Inc. ("RevenueCat") to manage entitlements, validate receipts, restore purchases and understand aggregate subscription performance. RevenueCat receives an app-specific user ID generated by its SDK (not your Apple ID), purchase and transaction data, and technical information such as device model, operating system version, locale, and IP address. It does not receive your documents or anything in them.

We do not receive or store your payment details, and we do not use purchase data for advertising.

7. What leaves your device

Recipient Why Data Legal basis (EEA/UK)
Apple Inc. App Store purchase, receipt validation, refunds Apple ID transaction data, as described in Apple's privacy policy Contract; legal obligation
RevenueCat, Inc. Subscription management, entitlement sync, restore App-specific user ID, purchase/transaction data, device model, OS version, locale, IP address Contract; legitimate interests (fraud prevention)
Whoever you choose Only when you use Share or Print The files you choose to share or print Initiated by you; we do not receive these files
Our email provider Only if you email support Whatever you choose to include Consent / legitimate interests

Files you send with Share are handled by the app or service you choose, under its own policies. We do not sell personal information, do not share it for cross-context behavioural advertising, and do not use it for profiling or automated decision-making with legal effects.

8. Service providers

Apple and RevenueCat act as our service providers/processors (Apple also acts as an independent controller for App Store payments). They are bound by their own terms and data protection commitments. We do not use any other third-party SDK that collects data.

9. Retention and deletion

Data Where Retention
Document files, library database, search index, bookmarks On your device Until you permanently delete the document or delete the App; may be included in your own device backup
Documents in the Trash On your device Not emptied automatically; kept until you choose "Delete permanently" or "Empty Trash", or delete the App
Saved signature On your device Until you draw a new one or delete the App
Settings and free-use count On your device Until you change them or delete the App
Thumbnails and temporary files On your device Temporary files are deleted at the next launch; thumbnails are deleted by "Clear cache" and may be removed by iOS when storage is low
Support emails Our email provider Up to 24 months
Purchase records Apple / RevenueCat Per their policies and tax/accounting law

Deleting the App deletes all documents in it unless you have a backup or have exported them with Share. Deleting the App does not cancel a subscription.

10. Security

The App's files are protected by iOS Data Protection and the App sandbox; the saved signature uses the strongest Data Protection class; and all network calls use HTTPS. You can turn on the Face ID / Touch ID app lock, or protect individual PDFs with a password. Because your documents never leave the device unless you share them, the main risk to them is your device passcode, not our servers. No method of storage is 100% secure, but we design the App to minimise what could be exposed.

11. Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, to data portability, to withdraw consent, and to lodge a complaint with your local authority.

Because we do not have an account and do not hold your documents:

To exercise any right, email support@gougou.me. We respond within 30 days (45 days for California requests) and may need to verify your request; because we hold little data, verification is usually limited to the email thread or the app-specific user ID.

EEA/UK (GDPR/UK GDPR): our legal bases are performance of a contract (providing the App and purchases), legitimate interests (security, fraud prevention, keeping the free daily uses fair) and consent (camera, Face ID). You may object to legitimate-interests processing and complain to your supervisory authority.

California (CCPA/CPRA): in the past 12 months we have not sold or shared personal information, and we do not knowingly sell or share the personal information of consumers under 16. You have the right to know, delete, correct and opt out of sale/sharing; we do not discriminate against you for exercising these rights. You may use an authorised agent.

Mainland China (PIPL): the App processes your documents on your device and does not transmit their contents. Purchase-related processing by Apple/RevenueCat may involve a cross-border transfer; it is necessary to perform the contract you enter into when you buy a subscription. You may contact us to exercise your rights under PIPL.

Other regions: we honour applicable mandatory consumer and privacy laws even if they are not listed here.

12. International transfers

We are based in China. Apple and RevenueCat may process data in the United States and other countries. Where required, transfers rely on Standard Contractual Clauses or an applicable adequacy decision (for example, the EU–US Data Privacy Framework for participating providers). You can ask us for more information.

13. Children

The App is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

14. Third-party links

The App and these pages may link to Apple, RevenueCat or other sites. Their privacy practices are governed by their own policies, not this one.

15. Changes to this policy

We may update this policy when the App changes or the law requires it. We will post the new version with a new "Last updated" date and, for material changes, notify you in the App before they take effect. Continued use after the effective date means you accept the updated policy.

16. Contact

Lu Li
Email: support@gougou.me

变更记录 / Change log

Version Date Change
1.0 2026-10-24 Initial version.