隐私政策
版本 1.0 · 最后更新 2026-10-24 · 生效日期 2026-10-24
1. 我们是谁
DocsKit(下称「本 App」)是一款 iPhone 上的 PDF 扫描、编辑与整理工具,由 Lu Li(下称「我们」)发布。我们是你使用本 App 时、本政策所述有限个人信息的处理者。
联系方式:support@gougou.me · 网站:https://gougou.me
2. 一句话说明
- 你的文档始终留在你的 iPhone 上。 扫描、导入的文件、批注、签名和识别出的文字都保存在本机;文字识别(OCR)在本机完成。我们不上传、不查看、不收集、不存储你的文档内容。
- 无需账号。 使用本 App 不需要注册,我们不会索要你的姓名、邮箱或手机号。
- 无广告、无第三方统计、无跨 App 追踪。 我们不使用 IDFA,不请求 ATT 授权,不出售个人信息,也不将其用于行为广告。
- 唯一离开设备的数据,是 Apple 与我们的订阅服务商 RevenueCat 为完成购买、校验和恢复购买所必需的数据,以及你自己通过「分享」「打印」发出去的文件。
- 你始终拥有控制权。 你可以随时删除文档、清空回收站、清除缓存,或删除本 App。
以上仅为便于理解的摘要,具体以本政策正文为准。
3. 我们不收集的信息
| 数据 |
是否收集 |
| 文档、扫描件、导入的 PDF 与图片及其内容 |
否 |
| OCR 识别出的文字、批注、签名图像 |
否(仅保存在本机) |
| PDF 密码 |
否(密码只用于加密或解密该文件,本 App 不保存) |
| 面容 ID / 触控 ID 等生物识别数据 |
否(验证由 iOS 完成,本 App 只得到「成功 / 失败」结果) |
| 姓名、邮箱、电话、通讯地址 |
否(你主动发邮件联系支持时除外) |
| 精确或粗略位置 |
否(本 App 不申请定位权限) |
| 整个相册、通讯录、日历、麦克风、健康数据 |
否(本 App 不申请相册访问权限,只能拿到你在系统选择器中选中的图片) |
| 广告标识符(IDFA)或归因数据 |
否 |
| 上报给第三方的崩溃日志或统计数据 |
否(见 4.6 节) |
4. 本 App 在你的设备上处理哪些数据
以下数据仅保存在你的 iPhone 上本 App 的私有容器内。除缓存与临时文件外,它们会随你自己的 iCloud 或电脑设备备份一起备份(如果你开启了备份)。我们无法远程读取。
4.1 文档文件
你扫描、导入、合并、拆分或转换生成的 PDF,以及回收站中的文档,都以文件形式保存在本 App 内。你编辑时添加的文字、高亮、手绘和签名会写入对应的 PDF 文件。导入时,本 App 会把你选中的文件复制一份到 App 内。
4.2 文档库数据库
为显示、排序和搜索文档,本 App 在本机数据库中保存:
- 文档标题、文件名、文件大小、页数、创建与最近打开时间、收藏标记、是否有密码、移入回收站的时间、OCR 状态;
- 书签(所在页码与标题);
- 搜索索引:文档标题,以及你对文档执行 OCR 后识别出的文字。
4.3 文字识别(OCR)
OCR 使用 Apple 的 Vision 框架在本机完成,不把页面图像发给我们或任何第三方。识别出的文字保存在上述搜索索引中;你选择「另存为可搜索 PDF」时,还会写入新生成的 PDF。
4.4 签名
你绘制的签名会以图片形式保存在本机,方便下次「使用已保存的签名」。该文件使用 iOS 最高级别的数据保护(设备锁定时不可读取)。你可以随时重新签名覆盖它。
4.5 设置与免费次数记录
- 应用锁的开关状态,以及每日免费工具次数(当天日期与已用次数)保存在 iOS
UserDefaults 中,不含任何个人标识。
- 本 App 不保存其他标识符。
4.6 本机诊断信息
处理失败等技术信息会写入 iOS 系统日志,不会自动发送到任何地方。若你主动发邮件附上截图或说明,是否发送、发送什么由你决定。
4.7 缓存与临时文件
页面缩略图保存在缓存目录;处理中的临时文件(例如合并、拆分的中间文件和分享用的副本)保存在临时目录,并在每次启动时清空。设置中的「清除缓存」会删除缩略图和临时文件,不影响你的文档。
5. 权限
- 相机: 仅在你扫描纸质文件时使用。扫描图像在本机生成 PDF,不会存入你的相册,也不会上传。你可在 iOS 设置 → 隐私与安全性 → 相机中随时关闭。
- 面容 ID / 触控 ID: 仅在你开启应用锁后用于解锁本 App,失败时可改用设备密码。验证由 iOS 完成,本 App 无法获得任何生物识别数据。
- 照片: 本 App 不申请相册访问权限。「图片转 PDF」使用 iOS 系统照片选择器,本 App 只能拿到你选中的图片。
- 文件: 导入使用 iOS 系统文件选择器,本 App 只能读取你选中的文件;你也可以从其他 App 用「分享 / 打开方式」把 PDF 或图片发送给本 App。
6. 购买与订阅
购买通过 App Store 由 Apple 处理。我们不会收到你的姓名、支付卡、账单地址或 Apple ID 密码。Apple 会向我们(及订阅服务商)提供交易标识、购买的商品、购买时间与订阅状态。
我们使用 RevenueCat, Inc.(下称 RevenueCat) 管理权益、校验收据、恢复购买并了解订阅的总体表现。RevenueCat 会收到由其 SDK 生成的应用内用户 ID(不是你的 Apple ID)、购买与交易数据,以及设备型号、系统版本、语言区域、IP 地址等技术信息。它不会收到你的文档或文档中的任何内容。
我们不会收到或保存你的支付信息,也不会把购买数据用于广告。
7. 离开设备的数据
| 接收方 |
目的 |
数据 |
合法性基础(EEA/英国) |
| Apple Inc. |
App Store 购买、收据校验、退款 |
按 Apple 隐私政策处理的 Apple ID 交易数据 |
履行合同;法定义务 |
| RevenueCat, Inc. |
订阅管理、权益同步、恢复购买 |
应用内用户 ID、购买/交易数据、设备型号、系统版本、语言区域、IP 地址 |
履行合同;正当利益(防欺诈) |
| 你选择的接收方 |
仅当你使用「分享」或「打印」 |
你选择分享或打印的文件 |
由你发起;我们不接收这些文件 |
| 我们的邮件服务商 |
仅当你发邮件联系支持 |
你自行提供的内容 |
同意 / 正当利益 |
通过「分享」发出的文件由你选择的 App 或服务按其自身政策处理。我们不出售个人信息,不将其用于跨场景行为广告,也不用于对你有法律影响的画像或自动化决策。
8. 服务提供商
Apple 与 RevenueCat 作为我们的服务提供商 / 处理者(Apple 同时是 App Store 支付的独立控制者),受其自身条款与数据保护承诺约束。我们不接入任何其他会收集数据的第三方 SDK。
9. 保存期限与删除
| 数据 |
位置 |
保存期限 |
| 文档文件、文档库数据库、搜索索引、书签 |
你的设备 |
直至你彻底删除文档或删除本 App;可能进入你自己的设备备份 |
| 回收站中的文档 |
你的设备 |
不会自动清空,直至你「彻底删除」「清空回收站」或删除本 App |
| 已保存的签名 |
你的设备 |
直至你重新签名覆盖或删除本 App |
| 设置与免费次数记录 |
你的设备 |
直至你修改或删除本 App |
| 缩略图与临时文件 |
你的设备 |
临时文件在下次启动时删除;缩略图可通过「清除缓存」删除,iOS 在空间不足时也可能清理 |
| 支持邮件 |
我们的邮件服务商 |
最长 24 个月 |
| 购买记录 |
Apple / RevenueCat |
按其政策及税务、会计法律 |
删除本 App 会删除其中的全部文档,除非你另有备份或已通过「分享」导出。删除 App 不会取消订阅。
10. 安全
本 App 的文件受 iOS 数据保护与 App 沙盒保护,已保存的签名使用最高级别的数据保护,所有网络请求使用 HTTPS。你可以开启面容 ID / 触控 ID 应用锁,或为单个 PDF 设置密码。由于文档从不离开设备(除非你自己分享),文档的主要风险在于你的设备锁屏密码,而不是我们的服务器。任何存储方式都无法做到 100% 安全,但我们尽量让可能暴露的数据最少。
11. 你的隐私权利
根据你所在地区的法律,你可能享有访问、更正、删除、限制或反对处理、数据可携带、撤回同意,以及向当地监管机构投诉的权利。
由于我们没有账号、也不持有你的文档:
- 设备上的数据: 可在 App 内查看、通过「分享」导出,并通过删除文档、清空回收站或删除 App 清除。
- 购买数据: Apple 持有的数据请联系 Apple;RevenueCat 持有的数据可联系 RevenueCat 或我们,我们会转交相关请求。
- 支持邮件: 可要求我们删除。
行使任何权利请发送邮件至 support@gougou.me。我们将在 30 天内答复(加州请求为 45 天),并可能需要验证请求;由于我们掌握的数据很少,验证通常仅限于邮件往来或应用内用户 ID。
EEA / 英国(GDPR / UK GDPR): 我们的合法性基础为履行合同(提供 App 与购买)、正当利益(安全、防欺诈、维护免费次数的公平性)与同意(相机、面容 ID)。你可反对基于正当利益的处理,并向所在国监管机构投诉。
加州(CCPA / CPRA): 过去 12 个月我们未出售或共享个人信息,也不会明知而出售或共享 16 岁以下消费者的个人信息。你享有知情、删除、更正与选择退出出售/共享的权利,我们不会因你行使权利而歧视你。你可委托授权代理人。
中国大陆(PIPL): 本 App 在你的设备上处理文档,不传输其内容。Apple / RevenueCat 的购买相关处理可能涉及跨境传输,这是履行你购买订阅时订立的合同所必需。你可联系我们行使 PIPL 项下的权利。
其他地区: 即使未在此列出,我们同样遵守适用的强制性消费者与隐私法律。
12. 跨境传输
我们位于 中华人民共和国。Apple 与 RevenueCat 可能在美国及其他国家处理数据。在需要时,传输依据标准合同条款或适用的充分性认定(例如参与该框架的提供商所适用的欧盟-美国数据隐私框架)。你可向我们索取更多信息。
13. 儿童
本 App 不面向 13 岁以下(EEA / 英国为 16 岁以下)儿童。我们不会明知而收集儿童的个人信息。若你认为儿童向我们提供了个人信息,请联系我们删除。
14. 第三方链接
本 App 及本页面可能链接到 Apple、RevenueCat 或其他网站,其隐私实践适用其自身政策,而非本政策。
15. 政策变更
当 App 功能或法律要求变化时,我们可能更新本政策。新版本会标注新的「最后更新」日期;重大变更会在生效前于 App 内通知你。生效日之后继续使用即表示你接受更新后的政策。
16. 联系我们
Lu Li
邮箱:support@gougou.me
Privacy Policy
Version 1.0 · Last updated 2026-10-24 · Effective date 2026-10-24
1. Who we are
DocsKit ("the App", "we", "us") is an app for scanning, editing and organizing PDFs on iPhone, published by Lu Li (the "Developer"). We are the data controller for the limited personal data described in this policy.
Contact: support@gougou.me · Website: https://gougou.me
2. The short version
- Your documents stay on your iPhone. Scans, imported files, annotations, signatures and recognized text are stored on the device, and text recognition (OCR) runs on the device. We do not upload, view, collect or store the content of your documents.
- No account. You do not create an account and we do not ask for your name, email or phone number to use the App.
- No ads, no third-party analytics, no cross-app tracking. We do not use the Advertising Identifier (IDFA), we do not request App Tracking Transparency permission, and we do not sell or "share" personal information for behavioural advertising.
- The only data that leaves your device is what Apple and our subscription provider RevenueCat need to sell, validate and restore a purchase — and any file you choose to send yourself with Share or Print.
- You stay in control. You can delete documents, empty the Trash, clear the cache or delete the App at any time.
This summary is for convenience only. The rest of this policy explains the details.
3. What we do not collect
| Data |
Collected? |
| Documents, scans, imported PDFs and images, or their content |
No |
| Recognized (OCR) text, annotations, signature images |
No — stored only on your device |
| PDF passwords |
No — a password is used only to encrypt or decrypt that file; the App does not store it |
| Face ID / Touch ID or other biometric data |
No — iOS performs the check; the App only receives a success/failure result |
| Name, email address, phone number, postal address |
No (unless you email support) |
| Precise or coarse location |
No — the App does not request location permission |
| Your whole photo library, contacts, calendars, microphone, health data |
No — the App does not request photo library access; it only receives the images you pick in the system picker |
| Advertising ID (IDFA) or attribution data |
No |
| Crash logs or analytics sent to a third party |
No — see §4.6 |
4. What the App processes on your device
All of the following is stored only in the App's private container on your iPhone. Except for caches and temporary files, it is included in your own iCloud or computer backup of the device, if you use one. We cannot read it remotely.
4.1 Document files
The PDFs you scan, import, merge, split or convert, and the documents in the Trash, are stored as files inside the App. Text, highlights, drawings and signatures you add while editing are written into the PDF file. When you import a file, the App keeps its own copy of the file you selected.
4.2 Library database
To list, sort and search your documents, the App keeps a local database containing:
- document title, file name, file size, page count, created and last-opened dates, favourite flag, whether the file is password-protected, the date it was moved to the Trash, and OCR status;
- bookmarks (page number and title);
- a search index of document titles and of the text recognized when you run OCR on a document.
4.3 Text recognition (OCR)
OCR uses Apple's Vision framework on your device. Page images are not sent to us or to any third party. The recognized text is stored in the search index above and, if you choose "Save as searchable PDF", in the new PDF.
4.4 Signature
The signature you draw is saved as an image on your device so you can "Use saved signature" later. The file uses iOS's strongest Data Protection class (unreadable while the device is locked). You can replace it at any time by drawing a new signature.
4.5 Settings and free-use count
- Whether the app lock is on, and the free daily tool count (today's date and the number of uses), are stored in iOS
UserDefaults. They contain no personal identifiers.
- The App stores no other identifiers.
4.6 Local diagnostics
The App writes technical messages (for example, a failed operation) to the iOS system log on your device. They are not automatically sent anywhere. If you email us a screenshot or description, you decide whether and what to send.
4.7 Caches and temporary files
Page thumbnails are kept in the App's cache directory. Files used while an operation runs (for example, intermediate merge/split files and copies made for sharing) are kept in the temporary directory, which is emptied at every launch. "Clear cache" in Settings deletes thumbnails and temporary files without touching your documents.
5. Permissions
- Camera: used only when you scan a paper document. Scanned images are turned into a PDF on your device; they are not saved to your photo library and not uploaded. You can turn access off at any time in iOS Settings → Privacy & Security → Camera.
- Face ID / Touch ID: used only to unlock the App when you turn on the app lock; you can use your device passcode instead. iOS performs the check, and the App never gets any biometric data.
- Photos: the App does not request photo library access. Images to PDF uses the iOS photo picker, so the App only receives the images you select.
- Files: importing uses the iOS document picker, so the App can read only the files you select. You can also send a PDF or image to the App from another app with Share / Open in.
6. Purchases and subscriptions
Purchases are processed by Apple through the App Store. We never receive your name, payment card, billing address or Apple ID password. Apple provides us (and our subscription provider) with a transaction identifier, the product purchased, the purchase date and the subscription status.
We use RevenueCat, Inc. ("RevenueCat") to manage entitlements, validate receipts, restore purchases and understand aggregate subscription performance. RevenueCat receives an app-specific user ID generated by its SDK (not your Apple ID), purchase and transaction data, and technical information such as device model, operating system version, locale, and IP address. It does not receive your documents or anything in them.
We do not receive or store your payment details, and we do not use purchase data for advertising.
7. What leaves your device
| Recipient |
Why |
Data |
Legal basis (EEA/UK) |
| Apple Inc. |
App Store purchase, receipt validation, refunds |
Apple ID transaction data, as described in Apple's privacy policy |
Contract; legal obligation |
| RevenueCat, Inc. |
Subscription management, entitlement sync, restore |
App-specific user ID, purchase/transaction data, device model, OS version, locale, IP address |
Contract; legitimate interests (fraud prevention) |
| Whoever you choose |
Only when you use Share or Print |
The files you choose to share or print |
Initiated by you; we do not receive these files |
| Our email provider |
Only if you email support |
Whatever you choose to include |
Consent / legitimate interests |
Files you send with Share are handled by the app or service you choose, under its own policies. We do not sell personal information, do not share it for cross-context behavioural advertising, and do not use it for profiling or automated decision-making with legal effects.
8. Service providers
Apple and RevenueCat act as our service providers/processors (Apple also acts as an independent controller for App Store payments). They are bound by their own terms and data protection commitments. We do not use any other third-party SDK that collects data.
9. Retention and deletion
| Data |
Where |
Retention |
| Document files, library database, search index, bookmarks |
On your device |
Until you permanently delete the document or delete the App; may be included in your own device backup |
| Documents in the Trash |
On your device |
Not emptied automatically; kept until you choose "Delete permanently" or "Empty Trash", or delete the App |
| Saved signature |
On your device |
Until you draw a new one or delete the App |
| Settings and free-use count |
On your device |
Until you change them or delete the App |
| Thumbnails and temporary files |
On your device |
Temporary files are deleted at the next launch; thumbnails are deleted by "Clear cache" and may be removed by iOS when storage is low |
| Support emails |
Our email provider |
Up to 24 months |
| Purchase records |
Apple / RevenueCat |
Per their policies and tax/accounting law |
Deleting the App deletes all documents in it unless you have a backup or have exported them with Share. Deleting the App does not cancel a subscription.
10. Security
The App's files are protected by iOS Data Protection and the App sandbox; the saved signature uses the strongest Data Protection class; and all network calls use HTTPS. You can turn on the Face ID / Touch ID app lock, or protect individual PDFs with a password. Because your documents never leave the device unless you share them, the main risk to them is your device passcode, not our servers. No method of storage is 100% secure, but we design the App to minimise what could be exposed.
11. Your privacy rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, to data portability, to withdraw consent, and to lodge a complaint with your local authority.
Because we do not have an account and do not hold your documents:
- On-device data: you can view it in the App, export it with Share, and delete it by deleting documents, emptying the Trash or deleting the App.
- Purchase data: contact Apple for Apple-held data and RevenueCat or us for RevenueCat-held data. We will forward your request where appropriate.
- Support emails: ask us to delete them.
To exercise any right, email support@gougou.me. We respond within 30 days (45 days for California requests) and may need to verify your request; because we hold little data, verification is usually limited to the email thread or the app-specific user ID.
EEA/UK (GDPR/UK GDPR): our legal bases are performance of a contract (providing the App and purchases), legitimate interests (security, fraud prevention, keeping the free daily uses fair) and consent (camera, Face ID). You may object to legitimate-interests processing and complain to your supervisory authority.
California (CCPA/CPRA): in the past 12 months we have not sold or shared personal information, and we do not knowingly sell or share the personal information of consumers under 16. You have the right to know, delete, correct and opt out of sale/sharing; we do not discriminate against you for exercising these rights. You may use an authorised agent.
Mainland China (PIPL): the App processes your documents on your device and does not transmit their contents. Purchase-related processing by Apple/RevenueCat may involve a cross-border transfer; it is necessary to perform the contract you enter into when you buy a subscription. You may contact us to exercise your rights under PIPL.
Other regions: we honour applicable mandatory consumer and privacy laws even if they are not listed here.
12. International transfers
We are based in China. Apple and RevenueCat may process data in the United States and other countries. Where required, transfers rely on Standard Contractual Clauses or an applicable adequacy decision (for example, the EU–US Data Privacy Framework for participating providers). You can ask us for more information.
13. Children
The App is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
14. Third-party links
The App and these pages may link to Apple, RevenueCat or other sites. Their privacy practices are governed by their own policies, not this one.
15. Changes to this policy
We may update this policy when the App changes or the law requires it. We will post the new version with a new "Last updated" date and, for material changes, notify you in the App before they take effect. Continued use after the effective date means you accept the updated policy.
16. Contact
Lu Li
Email: support@gougou.me