隐私政策

一、我们处理的信息

pocketctl（以下简称“我们”）为提供跨设备 AI 编程会话控制服务，会处理以下信息：

1. 账户信息：邮箱地址、显示名称，以及邮箱验证码或 OAuth 设备授权产生的账户和令牌标识。
2. 设备与推送信息：设备型号、操作系统版本、设备标识符、推送令牌和应用环境。
3. 主机与连接信息：主机名、Daemon 标识、在线状态、网络地址、IP 地址和 User-Agent。
4. 会话内容与元数据：工作目录、会话标题、提示词、回复、命令、路径、差异内容、工具输入输出、审批与问题、错误、状态、时间和用量信息。
5. 候补名单信息：您主动提交的 iOS Beta 通知邮箱。

二、处理目的

1. 账户认证、设备授权和安全审计。
2. 在客户端、Relay 与 Daemon 之间路由控制消息，并持久化事件以支持历史记录和断线重放。
3. 发送任务完成、错误、审批、问题和主机状态等通知。
4. 执行配额统计、故障排查、滥用防护和服务改进。

我们不会出售您的个人信息。

三、第三方处理者

1. 腾讯云邮件服务（SES）：处理收件邮箱、验证码和必要的服务邮件内容。
2. DeepSeek：仅在服务配置了 API Key 且触发标题生成时，处理用于生成标题的用户消息和助手回复；未配置时不会调用。
3. Apple Push Notification Service（APNs）：处理设备推送令牌和通知载荷。通知预览可能包含会话标题、主机名、命令、路径、审批摘要或问题内容。

第三方服务依据其自身条款处理数据，其处理地域可能不同于我们的主要服务地域。

四、存储与传输安全

1. 生产环境客户端与服务之间使用 HTTPS/WSS（TLS）传输。
2. iOS 认证令牌存储于 Keychain，Web 访问令牌仅保存在当前页面内存中，刷新令牌使用 HttpOnly Cookie。
3. Relay 会处理并存储会话事件，并可以读取当前会话事件内容。
4. 主要数据库、基础设施日志和第三方处理服务可能位于不同地域，具体取决于实际部署与服务商配置。

五、保存与删除

1. 账户、主机、会话及事件数据通常在账户有效期间保存，直至您删除相关数据或账户。
2. 删除账户会触发对当前业务数据库中关联账户数据的删除。
3. Nginx 访问日志、Relay 审计日志、第三方服务日志和备份按照各自的运维保留周期清理，可能不会与账户删除同步完成。
4. iOS Beta 候补邮箱保存至完成通知、您请求删除或候补计划终止。

六、您的权利

1. 在应用中查看和更新账户资料。
2. 导出当前产品支持导出的账户和会话数据。
3. 通过“设置 → 账户 → 删除账户”删除账户和当前业务数据。
4. 通过关闭推送权限、退出候补名单或联系我们撤回可撤回的处理同意。

七、未成年人和政策更新

本服务不面向 14 岁以下未成年人。我们更新本政策时会修改版本和生效日期；重大变更将通过应用内通知、网站或电子邮件告知。

八、联系我们

如需行使权利或咨询本政策，请通过应用内“帮助与反馈”或邮箱 james_2001_2001@163.com 联系我们。

1. Information We Process

pocketctl ("we") processes the following information to provide cross-device control of AI coding sessions:

1. Account information: email address, display name, and account or token identifiers created by email verification or OAuth device authorization.
2. Device and push information: device model, operating-system version, device identifiers, push token, and app environment.
3. Host and connection information: hostname, Daemon identifier, online state, network address, IP address, and User-Agent.
4. Session content and metadata: working directory, title, prompts, responses, commands, paths, diffs, tool inputs and outputs, approvals, questions, errors, status, timestamps, and usage.
5. Waitlist information: an email address you submit for iOS Beta notifications.

2. Purposes

1. Account authentication, device authorization, and security auditing.
2. Routing control messages among clients, Relay, and Daemon, and persisting events for history and reconnect replay.
3. Sending task, error, approval, question, and host-status notifications.
4. Quota measurement, troubleshooting, abuse prevention, and service improvement.

We do not sell your personal information.

3. Third-Party Processors

1. Tencent Cloud Simple Email Service (SES): processes recipient email addresses, verification codes, and necessary service-email content.
2. DeepSeek: only when an API key is configured and title generation is triggered, processes user messages and assistant responses used to create a title. It is not called when unconfigured.
3. Apple Push Notification Service (APNs): processes device push tokens and notification payloads. Notification previews may contain a session title, hostname, command, path, approval summary, or question content.

Third parties process data under their own terms, and their processing regions may differ from our primary service region.

4. Storage and Transport Security

1. Production client-to-service traffic uses HTTPS/WSS (TLS).
2. iOS authentication tokens are stored in Keychain. Web access tokens stay in page memory, while refresh tokens use an HttpOnly cookie.
3. Relay processes and stores session events and can read current session-event content.
4. Primary databases, infrastructure logs, and third-party processors may operate in different regions according to the actual deployment and provider configuration.

5. Retention and Deletion

1. Account, host, session, and event data is generally retained while your account is active, until you delete applicable data or the account.
2. Account deletion triggers deletion of associated account data from the current application database.
3. Nginx access logs, Relay audit logs, third-party service logs, and backups follow separate operational retention cycles and may not be deleted synchronously with the account.
4. An iOS Beta waitlist email is retained until notification is complete, you request deletion, or the waitlist program ends.

6. Your Rights

1. View and update account profile information in the app.
2. Export account and session data supported by the current product.
3. Delete your account and current application data through Settings → Account → Delete Account.
4. Withdraw applicable consent by disabling push permissions, leaving the waitlist, or contacting us.

7. Minors and Policy Updates

The service is not directed to children under 14. When this policy changes, we update its version and effective date; material changes will be communicated in the app, on the website, or by email.

8. Contact

To exercise your rights or ask about this policy, use Help & Feedback in the app or email james_2001_2001@163.com.