Skip to content
隱私

隱私政策

最後更新：2026 年 4 月 10 日

1. Thremark 收集的內容

  • Marks (saved facts) — stored on your device and synced to our server using an anonymous device ID. You can delete all server data at any time from Settings.
  • Chat messages — stored on your device and synced to our server for multi-device access. Messages are forwarded to AI providers for responses.
  • Anonymous session — a device-generated UUID for API session management. No name, email, or Apple ID is sent to our server.
  • Apple ID (optional) — name and email stored on-device only if you use Sign in with Apple. Not stored on server.
  • Files — AI-generated files synced to server. Delete them any time.
  • Notifications & Reminders — push notifications scheduled on server and delivered via APNs. Device token deleted after delivery.
  • Thinking & reasoning models — messages sent to OpenAI or Anthropic reasoning API. Only final response returned.
  • Photos, Camera & Image Generation — attached images sent to AI provider for analysis. Images not permanently stored on servers.
  • Microphone & Voice AI — audio streamed to Google Gemini Live API or OpenAI Realtime API. Audio not stored after processing.

2. 資料的儲存方式

  • On your device — marks, chats, messages, and files stored locally via SwiftData.
  • On our server — marks, chats, messages, and files synced to Cloudflare D1 database via anonymous device ID.
  • Semantic search index — marks embedded as numerical vectors (Cloudflare Vectorize) for semantic search.
  • Retention — server messages subject to automatic rotation. Marks and files remain until deleted.

3. 第三方服務

  • OpenAI — Chat · Image generation · Live voice · Speech to text. Receives: your message · recent chat history · memory marks · files and images you attach · generation prompts · voice audio. Processed in: United States. Trains on our data: No. Retention: up to 30 days (SOC 2 Type 2, ISO 27001). Policy
  • Google (Gemini) — Chat · Image generation · Live voice. Receives: your message · recent chat history · memory marks · files and images you attach · generation prompts · voice audio. Processed in: United States. Trains on our data: No. Retention: up to 30 days (GDPR DPA, SOC 2). Policy
  • Anthropic (Claude) — Chat. Receives: your message · recent chat history · memory marks · files and images you attach. Processed in: United States. Trains on our data: No. Retention: up to 30 days (SOC 2, GDPR). Policy
  • Kling (Kuaishou) (Plus and Pro only) — Video generation. Receives: generation prompts · the photo you animate. Processed in: Singapore (operator: Kuaishou, China). Trains on our data: Not confirmed. Retention: Not confirmed. Policy
  • Tavily Search — Web search. Receives: search queries. Processed in: United States. Trains on our data: No. Retention: not stored after processing. Policy
  • Cloudflare — Servers and storage. Receives: your message · memory marks · files · anonymous device ID. Processed in: Global edge network. Trains on our data: No. Retention: not stored after processing (SOC 2, ISO 27001, GDPR SCCs). Policy
  • Apple (APNs) — Push delivery · Subscriptions. Receives: push token. Processed in: United States. Trains on our data: No. Retention: not stored after processing. Policy
  • RevenueCat — Subscriptions. Receives: anonymous device ID · subscription state. Processed in: United States. Trains on our data: No. Retention: not stored after processing (SOC 2). Policy
  • GitHub (only if you turn it on) — Repository sync. Receives: memory marks · files · recent chat history. Processed in: United States. Trains on our data: No. Retention: not stored after processing. Policy
  • PostHog — Product analytics. Receives: anonymous device ID · usage events. Processed in: United States / European Union. Trains on our data: No. Retention: not stored after processing. Policy
  • Sentry — Crash reports. Receives: anonymous device ID · error reports. Processed in: United States. Trains on our data: No. Retention: not stored after processing. Policy

List last changed: 2026-08-19

3a. Thremark 向 AI 服務傳送的資料

每次傳送訊息時，以下資料可能會傳輸至我們的某一 AI 提供商（Google Gemini、OpenAI 或 Anthropic）以產生回數：

  • 您的訊息文字 — 您剛剛傳送的目前訊息。
  • 近期對話歷史 — 目前聊天對話中的歷史訊息，用作上下文。
  • Memory marks — 您儲存的主題和事實，將其傳送以便 AI 提供相關且個人化的回數。
  • 附件檔案和圖片 — 您附到訊息中的任何檔案或照片。
  • 語音 — 如果您使用語音輸入，音訊將串流傳送至 OpenAI Whisper（語音轉文字）或 Google Gemini Live / OpenAI Realtime（語音對話）。

AI 提供商不會接收姓名、電子郵件或 Apple ID。根據政策，這些提供商（OpenAI、Google Gemini、Anthropic）均不使用 API 資料訓練或微調其 AI 模型。每家提供商僅為安全監控目的保留資料最多 30 天，之後永久刪除。三家均已取得 SOC 2 認證且符合 GDPR，並在合約上有義務提供本聲明所要求的相同等級的資料保護。您的資料絕不會被出售。您可隨時在設定中刪除所有資料。

4. 我們不收集的資料

  • 我們不會出售、分享或將您的個人資料商業化。
  • 我們不會追蹤您的位置。
  • 我們不使用廣告 SDK 或追蹤器。
  • 我們不在伺服器上收集姓名、電子郵件或 Apple ID。
  • 我們不使用跨應用程式追蹤（未使用 IDFA）。

5. 您的權利

  • Delete all data — available in Settings at any time. Removes all marks, chats, messages, and files from device AND server. Irreversible.
  • Delete account — available in Settings if signed in with Apple.
  • Export — export marks via the share sheet.
  • No account required — Thremark works without signing in. Sign in with Apple is optional.
  • GDPR & CCPA — you have the right to access, correct, or delete your data. Contact us at [email protected].

6. 分析

我們使用 PostHog 進行行為分析（停用識別功能）。不收集個人資料。

7. 兒童

Thremark 不適合 13 歲以下的兒童。我們不會刻意收集兒童的資料。

8. Cookie

我們的 iOS 應用程式不使用 Cookie。

9. 國際資料傳輸

資料在全球分佈的 Cloudflare 伺服器上處理。AI 請求在各自 AI 提供者的伺服器上處理。

10. 處理的法律依據（GDPR）

  • Contract performance — to deliver app features.
  • Legitimate interest — for security and fraud prevention.
  • Consent — for push notifications (revocable at any time).

11. 變更

我們可能會更新本政策。重大變更將透過應用程式更新通知。

12. 聯絡我們

隱私問題: [email protected]