隐私政策
版本 1.0 · 最后更新 2026-10-25 · 生效日期 2026-10-25
1. 我们是谁
Lumen Notes（下称「本 App」）是一款在 iPhone 与 iPad 上使用的 Markdown 笔记应用，由 Lu Li（下称「我们」）发布。我们是你使用本 App 时、本政策所述有限个人信息的处理者。
联系方式：support@gougou.me · 网站：https://gougou.me
2. 一句话说明
- 你的笔记始终留在你的设备上。 我们没有账号系统，也没有云同步或服务器，笔记、附件与备份都不会上传给我们。
- 本 App 不发起网络请求。 Markdown 中引用的网络图片也不会被加载。
- 无广告、无第三方统计、无跨 App 追踪。 我们不使用 IDFA，不请求 ATT 授权，不出售个人信息。
- 唯一离开设备的数据，是你自己通过「分享」发出的备份、你主动发给我们的支持邮件，以及你自己设置的设备备份。
- 你始终拥有控制权。 可以在 App 内删除笔记、清理存储，或删除本 App。
以上仅为便于理解的摘要，具体以本政策正文为准。
3. 我们不收集的信息
| 数据 |
是否收集 |
| 笔记内容、标题、标签与草稿 |
否（仅保存在本机） |
| 附件（照片、文件）及其缩略图 |
否（仅保存在本机） |
| 你导出的备份文件 |
否（文件只保存在你选择的位置） |
| 精确或粗略位置 |
否（本 App 不申请定位权限） |
| 整个相册、通讯录、日历、健康数据 |
否（本 App 不申请相册访问权限，只能拿到你在系统选择器中选中的图片） |
| 姓名、邮箱、电话、通讯地址 |
否（你主动发邮件联系支持时除外） |
| 广告标识符（IDFA）或归因数据 |
否 |
| 上报给第三方的崩溃日志或统计数据 |
否 |
4. 本 App 在你的设备上处理哪些数据
以下数据仅保存在你的设备上本 App 的容器内（一个由 iOS 管理的 App Group 容器，本版本只有本 App 读取它），我们无法远程读取。
4.1 笔记库
笔记保存在本机数据库中，包括：标题、正文（Markdown 原文）、标签、创建与修改时间、修订号、置顶与归档状态、是否已删除（软删除）。删除的笔记会保留一段时间以便恢复，之后被清理。
4.2 附件与缩略图
你添加的照片和文件以原始文件形式保存在 App 内，并记录 SHA-256 摘要，使同一张图片重复导入时只保存一份。缩略图用于列表与详情显示。关闭「保留原图」后，较大的照片会缩到 2048 像素并以 JPEG 保存。
4.3 草稿与设置
未保存的草稿、界面偏好（例如是否保留原图）保存在 UserDefaults 中，用于在中断或重启后恢复。它们不含个人标识，也不会离开设备。
4.4 备份文件
你导出备份时，本 App 在本机生成一个 ZIP（笔记与附件），并通过系统分享面板交给你保存。本机保留最近 3 份导出。备份未加密，内容是明文，请妥善保管。
4.5 相机与照片
添加附件时，你可以用相机拍照（需要相机权限），或用系统照片选择器选图。使用照片选择器时，本 App 不申请相册访问权限，只能拿到你选中的图片。
4.6 本机诊断信息
处理失败等技术信息会写入 iOS 系统日志，不会自动发送到任何地方。
5. 权限
- 相机： 仅在你用「拍照」添加附件时使用。照片保存在本机的笔记附件中，不会写入你的相册，也不会上传。
- 照片： 使用 iOS 系统照片选择器，本 App 不申请相册访问权限。
- 文件： 导入附件与备份使用 iOS 系统文件选择器，本 App 只能读取你选中的文件。
- 其他： 本 App 不申请定位、通讯录、日历、麦克风、蓝牙或本地网络权限。
6. 购买
本版本没有 App 内购买，也不收费。我们不收集任何支付信息，不接入订阅或购买服务商。
7. 离开设备的数据
| 接收方 |
目的 |
数据 |
合法性基础（EEA/英国） |
| 你选择的接收方 |
仅当你使用「分享」导出备份 |
你选择分享的 ZIP 文件 |
由你发起；我们不接收该文件 |
| 我们的邮件服务商 |
仅当你发邮件联系支持 |
你自行提供的内容 |
同意 / 正当利益 |
| Apple Inc. |
仅当你使用 iCloud 或电脑备份设备 |
按 Apple 隐私政策处理的设备备份内容 |
由你发起；Apple 按其政策处理 |
本 App 不接入任何分析、广告、崩溃上报或数据经纪服务，不出售个人信息，不将其用于跨场景行为广告或对你有法律影响的画像。
8. 服务提供商
本 App 不接入第三方 SDK，也没有服务器。iOS 系统（文件选择器、相机、系统备份）按 Apple 的条款处理数据。
9. 保存期限与删除
| 数据 |
位置 |
保存期限 |
| 笔记、标签与草稿 |
你的设备 |
直至你删除笔记或删除本 App |
| 已删除的笔记 |
你的设备 |
30 天后自动清理，或执行「立即清理」时清除 |
| 附件与缩略图 |
你的设备 |
直至你删除对应笔记，并在 30 天后随清理移除 |
| 已导出的备份（最近 3 份） |
你的设备 |
直至你删除它们或删除本 App；保存在别处的副本由你管理 |
| 支持邮件 |
我们的邮件服务商 |
最长 24 个月 |
删除本 App 会删除其中的全部笔记、附件与备份，除非你已导出备份或另有设备备份。
10. 安全
本 App 的数据受 iOS 沙盒与系统数据保护保护，设备锁定时由 iOS 控制访问。笔记与备份没有额外的加密（备份本身是未加密的 ZIP），因此主要风险在于你的设备锁屏密码与备份文件存放的位置。请为设备设置密码，并把备份保存在可信的位置。任何存储方式都无法做到 100% 安全。
11. 你的隐私权利
根据你所在地区的法律，你可能享有访问、更正、删除、限制或反对处理、数据可携带、撤回同意，以及向当地监管机构投诉的权利。
由于我们没有账号、也不持有你的笔记：
- 设备上的数据： 可在 App 内查看、编辑、删除，或通过「导出备份」取得副本。
- 支持邮件： 可要求我们删除。
行使任何权利请发送邮件至 support@gougou.me。我们将在 30 天内答复（加州请求为 45 天），并可能需要验证请求。
EEA / 英国（GDPR / UK GDPR）： 我们的合法性基础为履行合同（提供 App）、正当利益（安全与改进）与同意（相机）。你可反对基于正当利益的处理，并向所在国监管机构投诉。
加州（CCPA / CPRA）： 过去 12 个月我们未出售或共享个人信息，也不会明知而出售或共享 16 岁以下消费者的个人信息。你享有知情、删除、更正与选择退出出售/共享的权利，我们不会因你行使权利而歧视你。
中国大陆（PIPL）： 本 App 在你的设备上处理笔记与附件，不传输其内容。你可联系我们行使 PIPL 项下的权利。
12. 跨境传输
我们位于 中华人民共和国。若你发邮件联系我们，邮件可能由位于其他国家的服务商处理；在需要时，传输依据标准合同条款或适用的充分性认定。除邮件、你自行分享的备份与你设置的设备备份外，本 App 不传输数据。
13. 儿童
本 App 不面向 13 岁以下（EEA / 英国为 16 岁以下）儿童。我们不会明知而收集儿童的个人信息。
14. 第三方链接
本 App 及本页面可能链接到 Apple 或其他网站，其隐私实践适用其自身政策，而非本政策。
15. 政策变更
当 App 功能或法律要求变化时，我们可能更新本政策。新版本会标注新的「最后更新」日期；重大变更会在生效前于 App 内或本页说明。生效日之后继续使用即表示你接受更新后的政策。
16. 联系我们
Lu Li
邮箱：support@gougou.me
Privacy Policy
Version 1.0 · Last updated 2026-10-25 · Effective date 2026-10-25
1. Who we are
Lumen Notes ("the App") is a Markdown notes app for iPhone and iPad, published by Lu Li (the "Developer"). We are the data controller for the limited personal data described in this policy.
Contact: support@gougou.me · Website: https://gougou.me
2. The short version
- Your notes stay on your device. There is no account, no cloud sync and no server, and your notes, attachments and backups are never uploaded to us.
- The App makes no network requests. Images linked from the web in Markdown are not loaded either.
- No ads, no third-party analytics, no cross-app tracking. We do not use the Advertising Identifier (IDFA) and do not request App Tracking Transparency permission.
- What leaves your device: a backup you share yourself, a support email you choose to send us, and any device backup you set up.
- You stay in control. You can delete notes, clean up storage or delete the App at any time.
This is a summary; the rest of this policy explains the details.
3. What we do not collect
| Data |
Collected? |
| Note content, titles, tags and drafts |
No — stored on your device only |
| Attachments (photos, files) and thumbnails |
No — stored on your device only |
| Backups you export |
No — the file goes only where you save it |
| Precise or coarse location |
No — the App does not request location |
| Photo library, contacts, calendar, health data |
No — the App does not request photo library access; it only receives images you pick in the system picker |
| Name, email, phone, postal address |
No — except when you email support yourself |
| Advertising identifier (IDFA) or attribution data |
No |
| Crash logs or analytics sent to third parties |
No |
4. What the App processes on your device
The data below is stored only in the App's container on your device (an iOS App Group container that, in this version, only this App reads). We cannot read it remotely.
4.1 Note library
Notes are stored in a local database: title, body (Markdown source), tags, creation and modification times, revision, pin and archive state, and whether the note is deleted (soft delete). Deleted notes are kept for a while so they can be restored, then cleaned up.
4.2 Attachments and thumbnails
Photos and files you add are stored as files inside the App, with a SHA-256 digest recorded so the same image imported twice is stored once. Thumbnails are used in the list and detail views. With "Keep Original Images" off, large photos are resized to 2048 px and saved as JPEG.
4.3 Drafts and settings
Unsaved drafts and interface preferences (such as whether to keep originals) are stored in UserDefaults so they survive an interruption or a restart. They contain no personal identifiers and never leave the device.
4.4 Backups
When you export a backup, the App creates a ZIP of your notes and attachments on the device and hands it to you through the system share sheet. The 3 most recent exports are kept on the device. Backups are not encrypted — the content is plain text, so keep the file somewhere safe.
4.5 Camera and photos
When adding an attachment you can take a photo (which needs camera permission) or pick one with the system photo picker. With the picker, the App does not request photo library access and only receives the images you select.
4.6 Diagnostics
Technical information about failures is written to the iOS system log and is never sent anywhere automatically.
5. Permissions
- Camera — used only when you take a photo to attach. The photo is stored as a note attachment, is not added to your photo library, and is not uploaded.
- Photos — the system photo picker is used; the App does not request photo library access.
- Files — attachments and backups use the system file picker; the App can only read the files you select.
- Nothing else — the App does not request location, contacts, calendar, microphone, Bluetooth or local network access.
6. Purchases
This version has no in-app purchases and costs nothing. We do not collect payment information and do not use a subscription or purchase provider.
7. What leaves your device
| Recipient |
Purpose |
Data |
Legal basis (EEA/UK) |
| Whomever you choose |
Only when you share an exported backup |
The ZIP file you choose to share |
Initiated by you; we do not receive the file |
| Our email provider |
Only when you email support |
What you choose to send |
Consent / legitimate interest |
| Apple Inc. |
Only if you back up the device to iCloud or a computer |
Device backup contents, handled under Apple's privacy policy |
Initiated by you; Apple acts under its own policy |
The App contains no analytics, advertising, crash-reporting or data-broker SDKs. We do not sell personal information and do not use it for cross-context behavioural advertising or profiling with legal effects.
8. Service providers
The App has no third-party SDKs and no server. iOS itself (file picker, camera, system backup) processes data under Apple's terms.
9. Retention and deletion
| Data |
Location |
Retention |
| Notes, tags and drafts |
Your device |
Until you delete a note or delete the App |
| Deleted notes |
Your device |
Automatically cleaned up after 30 days, or immediately with "Clean Up Now" |
| Attachments and thumbnails |
Your device |
Until you delete the note, then removed by cleanup after 30 days |
| Exported backups (last 3) |
Your device |
Until you delete them or delete the App; copies elsewhere are yours to manage |
| Support email |
Our email provider |
Up to 24 months |
Deleting the App deletes all notes, attachments and backups unless you exported a backup or have a device backup.
10. Security
Data is protected by the iOS sandbox and system data protection, with iOS controlling access while the device is locked. Notes and backups have no additional encryption (the backup itself is an unencrypted ZIP), so the main risks are your device passcode and where you store the backup file. Set a device passcode and keep backups somewhere you trust. No method of storage is completely secure.
11. Your privacy rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, to data portability, to withdraw consent, and to complain to a supervisory authority.
Because we have no account and hold no notes:
- Data on your device can be viewed, edited and deleted in the App, or exported as a backup.
- Support email can be deleted on request.
To exercise any right, email support@gougou.me. We answer within 30 days (45 days for California requests) and may need to verify the request.
EEA / UK (GDPR / UK GDPR): our legal bases are performance of a contract (providing the App), legitimate interests (security and improvement) and consent (camera). You may object to legitimate-interest processing and complain to your local authority.
California (CCPA / CPRA): we have not sold or shared personal information in the past 12 months and will not knowingly sell or share that of consumers under 16. You have the right to know, delete, correct and opt out, and we will not discriminate against you for exercising those rights.
China (PIPL): the App processes notes and attachments on your device and does not transmit their content. You may contact us to exercise your rights under PIPL.
12. International transfers
We are located in the People's Republic of China. If you email us, your message may be processed by service providers in other countries under standard contractual clauses or an applicable adequacy decision where required. Apart from email, backups you share and any device backup you set up, the App transfers nothing.
13. Children
The App is not directed to children under 13 (16 in the EEA/UK). We do not knowingly collect personal information from children.
14. Third-party links
The App and this page may link to Apple or other websites. Their privacy practices are governed by their own policies, not this one.
15. Changes to this policy
We may update this policy as the App or the law changes. A new version will carry a new "Last updated" date, and material changes will be described in the App or on this page before they take effect. Continuing to use the App after the effective date means you accept the updated policy.
16. Contact
Lu Li
Email: support@gougou.me
