澄境 ChengJing
隱私權政策
Privacy Policy
本政策說明澄境筆記如何處理本機資料、Google 備份與同步、AI、共享及檢舉。This policy explains local data, Google backups and sync, AI, sharing and reporting in ChengJing Notes.
繁體中文
澄境如何處理你的資料
澄境筆記以本機資料為主。只有你選用相應功能時,資料才會依本政策傳送至 Google、選定的 AI 服務或科技人的共享/檢舉服務。
1. 適用範圍與預設狀態
本政策適用於《科技人》提供的澄境筆記(ChengJing Notes)Android、Mac 與 Windows 應用,以及相關資料處理功能。筆記、白板、待辦、附件與 AI 對話的主要副本保存在你的裝置。Google 備份/同步、雲端 AI、公開分享與檢舉是不同功能,資料去向如下說明。
澄境不放置廣告、不出售你的個人資料,也不會把私人筆記自動公開。你可以不連結 Google、不啟用共享功能,繼續使用本機筆記。
2. Google 權限與跨裝置同步
澄境要求 https://www.googleapis.com/auth/drive.appdata,只管理澄境在你 Google Drive 中建立的隱藏 App Data,不能瀏覽其他 Drive 檔案。連結時,Google 可能提供帳號顯示名称與電子郵件,供設定頁辨識目前帳號。澄境不要求你的 Google 密碼。
啟用 Google 備份或同步後,內容由裝置直接傳到你自己的 Google Drive;雲端備份與同步內容不另外送到科技人的伺服器。相容版本可透過同一 Google 帳號交換各裝置的修改。首次同步合併不同筆資料,同一筆依修改先後處理,較早的並發內容可能保留供救援。Google App Data 說明。
3. 各功能會傳送哪些資料
Google 備份/同步可能包含卡片與版本、白板與連線、看板、日誌、待辦、片語、標籤、劃記、第二大腦關係、AI 對話、必要設定與你加入的附件。API 金鑰、Google 授權憑證及下載的本機模型不隨知識庫上傳。
使用 OpenRouter 或自訂 AI 供應商時,你的問題、該次功能需要的對話及參考內容會送往你選擇的服務。啟用「搜尋本機知識庫」時,也可能包含相關卡片。選用本機模型時,推論在裝置進行;首次下載模型仍需要連線至模型供應來源。第三方服務的保存與使用規則,依其政策及你的帳號設定而定。
只有你主動發布時,共享大腦或許願池才會將共享暱稱、匿名身分識別碼、選定內容與留言送至科技人透過 Cloudflare 運作的服務,並提供其他使用者閱讀。不要公開他人的個人資訊。其他人可能已保存或收成你分享的內容。
使用提供檢舉功能的版本時,只有在你確認送出後,選定文字、檢舉原因、補充說明與畫面標示的模型/來源資訊才會傳送给科技人/澄境團隊,透過 Cloudflare 私密保存與審閱;不會自動附上整段對話、其他筆記或 API 金鑰。
4. 使用目的與服務提供者
資料用於你選擇的儲存、跨裝置接續、復原、AI 處理、共享互動、檢舉調查及服務安全。科技人不以 Google 使用者資料進行廣告追蹤,亦不將其用於建立或改善一般化 AI 模型。
Google Drive、你指定的 AI 供應商、Cloudflare、模型下載來源與 GitHub 更新服務,可能為提供連線而處理 IP 位址、請求時間及必要的技術/安全日誌。澄境的檢舉服務使用經雜湊處理的來源資訊限制濫用,不把原始 IP 寫入檢舉內容。自願打賞會開啟外部金流頁面,支付資料由該金流服務處理,澄境不接收信用卡資訊。
5. 保留期限與清理
本機內容保留至你刪除或清除該裝置的應用資料;刪除應用不一定清除桌面資料夾,也不會連帶刪除你另存的備份。Google 快照備份保留目前版本與前一天的救援點;前一天救援點只在有效期間內提供,超過 48 小時的救援點與不再引用的備份附件會於後續備份清理時移除。
跨裝置同步的變更紀錄不是兩天快照備份。它們目前可能持續保留在你的 Google App Data,用來合併裝置修改與保全內容;刪除某筆內容後,較舊紀錄或救援副本仍可能存在。要全面移除,須一併清理各裝置、本地備份與 Google 的澄境 App Data。
公開共享內容在你刪除後不再正常公開顯示,但其他人已收成的副本不會同步刪除。部分服務紀錄可能為安全、檢舉處理或復原而保留;可透過下列聯絡方式提出移除要求。檢舉內容的功能性資料庫採最長約 90 天的定期清理;服務商的備份與安全日誌依其保留機制處理。
6. 控制、撤銷授權與刪除要求
你可分別暫停同步、關閉自動備份或中斷 Google 連結。暫停不會刪除雲端內容;中斷連結也不等於刪除 Google 帳號。可至 Google 第三方連線撤銷權限,並在 Google Drive「設定 → 管理應用程式」刪除澄境的隱藏資料。Google Drive 說明。
如要請求刪除科技人服務上的共享暱稱、相關公開內容或檢舉資料,請寄信至 [email protected],主旨註明「澄境資料刪除」,並提供相關共享暱稱、內容識別或檢舉收據。請勿寄送密碼、API 金鑰或 Google 授權憑證。我們可能需要核對要求涉及的資料,以免刪除他人的內容;若需依法或為安全保留特定資料,會說明原因。你自己的 Google Drive 與各裝置副本需另行清除。
7. 安全與政策變更
與雲端服務的連線使用 HTTPS。Google 授權與 API 憑證在本機以作業系統保護或應用加密保存;這不代表整份筆記資料庫或 Google 同步內容已做應用層端對端加密。請保護装置、帳號與自行匯出的備份。
若本政策有重大變更,會更新本頁日期與內容;資料用途變更時,會先提供清楚說明並取得必要同意。隱私聯絡窗口為科技人/澄境團隊:[email protected]。
澄境使用 Google API 取得的資訊,遵守 Google API Services User Data Policy,包括 Limited Use requirements。
English
How ChengJing handles your data
ChengJing Notes is local-first. When you choose the corresponding features, data is sent to Google, your selected AI service, or Techtarian’s sharing/reporting service as described here.
1. Scope and defaults
This policy covers ChengJing Notes (澄境筆記), provided by Techtarian, on Android, Mac and Windows. Primary copies of notes, boards, tasks, attachments and AI conversations stay on your device. Google backups/sync, hosted AI, public sharing and reporting are separate features with the data flows described below.
ChengJing has no ads, does not sell your personal data, and does not automatically publish private notes. You can use local notes without connecting Google or enabling community sharing.
2. Google access and cross-device sync
ChengJing requests https://www.googleapis.com/auth/drive.appdata to manage only its own hidden App Data in your Google Drive, not other Drive files. Google may provide the account display name and email to identify the connection in Settings. ChengJing never asks for your Google password.
When you enable Google backup or sync, your device transfers that content directly to your Google Drive, not to Techtarian servers. Compatible clients using the same account exchange edits. First sync combines independent items; changes to the same item are ordered, with earlier concurrent values potentially kept for recovery. See Google App Data documentation.
3. Data sent by each feature
Google backups/sync may contain cards and versions, boards and links, kanban, journals, tasks, fragments, tags, highlights, second-brain relationships, AI conversations, necessary settings and attachments you add. API keys, Google authorization credentials and downloaded local models are excluded from knowledge-base uploads.
When using OpenRouter or a custom AI provider, your question and the conversation/reference content needed for that action go to the selected service. Local-knowledge search may include relevant cards. Local-model inference runs on your device, although downloading a model requires a connection to its source. Third-party retention and use depend on that provider’s policies and your account settings.
Only when you choose to publish, shared-brain and wish-pool features send your public nickname, pseudonymous identity ID, selected content and comments to Techtarian’s Cloudflare-hosted service for other users to read. Do not publish someone else’s personal information. Other users may save or collect copies of what you share.
In versions providing reporting tools, only after you confirm sending, the selected text, reason, additional details and displayed model/source information go privately to the Techtarian / ChengJing team through Cloudflare for review. Reports do not automatically include entire conversations, other notes or API keys.
4. Purposes and service providers
Data is used for the storage, continuity, recovery, AI processing, community interactions, report investigation and service security you choose. Techtarian does not use Google user data for advertising tracking or to build or improve generalized AI models.
Google Drive, your selected AI providers, Cloudflare, model download sources and GitHub update services may process IP addresses, request times and necessary technical/security logs to provide their services. ChengJing’s reporting service uses hashed source information for rate limiting and does not store raw IP addresses in report content. Optional tips open an external payment page; the payment provider handles payment details and ChengJing does not receive card information.
5. Retention and cleanup
Local content remains until you delete it or clear the app’s data. Uninstalling does not necessarily remove desktop data folders or separately saved backups. Google snapshot backups keep a current copy and a previous-day recovery point. Previous-day recovery points are available only within their validity period; points older than 48 hours and unreferenced backup attachments are removed during subsequent backup cleanup.
Cross-device sync history is not the two-day snapshot backup. Change records may currently remain in your Google App Data to combine device edits and preserve content. Deleting an item may leave older records or recovery copies. Full removal requires clearing all devices, local backups and ChengJing’s Google App Data.
Deleted shared content is no longer normally displayed publicly, but copies already collected by others are not deleted with it. Some service records may remain for security, report handling or recovery; you can request removal as described below. The reporting database uses periodic cleanup with an approximately 90-day maximum retention window. Provider backups and security logs follow their own retention mechanisms.
6. Controls, revocation and deletion requests
You can pause sync, disable automatic backup or disconnect Google separately. Pausing does not delete cloud data, and disconnecting does not delete your Google Account. Revoke access in Google third-party connections, and remove hidden data in Google Drive under Settings → Manage apps. See Google Drive help.
To request deletion of a public nickname, associated shared content or report data held by Techtarian, email [email protected] with the subject “ChengJing data deletion” and the relevant nickname, content reference or report receipt. Do not send passwords, API keys or Google authorization credentials. We may need to verify which data the request concerns to avoid removing someone else’s content. We will explain any specific retention needed for legal or security reasons. Copies in your Google Drive and on your devices must be cleared separately.
7. Security and changes
Cloud-service connections use HTTPS. Google authorization and API credentials are protected locally by OS facilities or application encryption. This does not mean the entire note database or Google sync content is application-level end-to-end encrypted. Protect your devices, accounts and exported backups.
Material changes will be posted with an updated date. If data-use purposes change, ChengJing will provide clear notice and obtain necessary consent. The privacy contact is the Techtarian / ChengJing team at [email protected].
ChengJing’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.