中文 | English — An English version follows the Chinese text below.
隐私政策
本隐私政策说明我们如何收集、使用、存储、共享和保护你在使用“课记”时产生的信息。本应用用于将你主动导入的本地视频、PDF 或经你授权访问的百度网盘文件整理为学习笔记、讲义、批注和知识关联内容。
1. 我们收集的信息
我们只在实现功能所需范围内处理以下信息：
- 你主动导入的本地视频、PDF、文件名、课程标题、文件路径和基础媒体信息。
- 你在应用内生成或编辑的学习笔记、手写批注、问答记录、目录、知识关联和学习状态。
- Apple 登录返回的账号标识、后端 userId、登录状态和后端 JWT。
- Apple 登录时经你授权返回的邮箱地址与姓名。若你在 Apple 登录界面选择“隐藏我的邮箱”，我们收到的是 Apple 生成的中继地址而非你的真实邮箱。二者仅用于账号识别与在应用内展示你的昵称，不用于营销推送，也不会共享给第三方；账号注销时一并删除。
- 你的账号登录状态、解析速度偏好，以及内测版本可能保存的后端访问令牌状态。
- 你授权百度网盘后返回的 OAuth access token、refresh token 和过期时间。相关 token 仅保存在设备 Keychain 中。
- 为生成学习笔记而临时上传到解析后端的视频片段、音频、截图、PDF 文本、题目画面、公式、表格、转写文本和笔记文本。大文件可能先经由我们运营的华为云对象存储（OBS）直传中转，再由后端取回处理（详见第 5 节）。
- 你在使用“拍照找笔记 / 拍照解题”时，通过相机拍摄或从相册主动选择的题目照片。照片仅用于识别题目原文并定位相关笔记，用完不长期保存。
- 你使用“音频笔记”录制的语音。音频笔记仅保存在设备本地，不上传服务器（需要麦克风权限）。
- 消耗型内购相关信息：当你购买积分包时，Apple 会向我们提供 StoreKit 签名交易（JWS）。我们据此处理产品标识、交易号、原始交易号、用于绑定购买到你账号的 appAccountToken、购买环境和购买时间，用于校验交易、防止重复或跨账号兑换、发放积分并记录积分流水。我们不接触你的 Apple ID 密码、银行卡或支付账户信息，支付与扣费均由 Apple 处理。
- 后端处理请求所需的技术日志，例如请求时间、接口路径、任务状态、错误信息和处理耗时。正式服务不记录完整 API Key、百度 token、后端 JWT、内购凭证、请求体或用户原始文件内容。
我们不会主动读取你未选择导入的文件，也不会在后台扫描你的相册、网盘或文件系统；相机与相册仅在你主动拍照或选择照片时使用，麦克风仅在你主动录制音频笔记时使用。
在将个人内容发送给 AI 服务前，应用会在首次进入应用以及每次披露版本更新后展示“AI 数据处理”授权页，明确说明发送的数据类别、接收方和处理用途。你点击“同意并继续”后，应用才会发送需要处理的内容；选择“暂不同意，继续使用非 AI 功能”不会发送这些内容。你可以在“设置 → AI 数据处理”中查看说明并撤回同意；撤回不会删除已经生成的本地笔记，但之后的 AI 请求会暂停，直到你再次同意。
2. 我们如何使用信息
- 将视频转写成文字，并结合画面识别生成可跳转的视频学习笔记。
- 将 PDF 保留为笔记资料，或在你开启教材关联时提取文本和向量用于知识关联。
- 支持“第二大脑”笔记问答（检索在你的设备本地完成，仅把命中的少量笔记片段与你的问题发给后端生成回答）与“每日一测”自测题的生成与批改。
- 支持“拍照找笔记 / 拍照解题”：识别你提供照片中的题目并在你的笔记中定位相关内容。
- 支持百度网盘 OAuth 授权、目录浏览、视频导入和在线播放。
- 保存你的本地资料库、文件夹、笔记、批注和设置。
- 支持 Apple 登录、账号识别、积分余额与内购兑换校验、账号注销和服务端数据删除。
- 诊断解析失败、网络失败、模型接口错误和后端配置问题。
- 防止未授权访问正式解析后端。
3. AI 处理与第三方服务
本应用本地不进行大模型推理。你主动选择并发起 AI 功能后，相关内容会发送到我们运营的解析后端，再由后端转交给唯一的 AI 服务接收方：阿里云百炼 Alibaba Cloud Model Studio（DashScope）及其兼容接口。你无需配置模型 API Key，也无需另行向模型服务商付费。
按你发起的功能，可能发送的数据包括：
- 你选择的视频、音频片段和视频画面。
- 你选择的 PDF 文字、OCR 文字、转写文本、题目画面、截图、公式和表格。
- 你请求处理的笔记片段、输入的问题，以及生成测验所需的笔记内容。
- 你主动提交的文字或手写作答，用于批改。
这些内容可能包含姓名、声音、笔迹、学校或课程信息、画面中的人物等个人信息。处理用途包括转写、画面识别、OCR、总结、讲解、问答、出题、批改，以及知识关联所需的向量计算。Apple 账号密码、支付信息、Apple 登录凭证、账号标识、姓名和邮箱不会发送给 AI 服务接收方。AI 内容不会用于广告、画像或跟踪。
应用会在首次使用需要发送内容的 AI 功能前征得你的明确同意；没有同意时不会发送 AI 内容。应用只会在用户主动选择并发起相关功能后处理内容，不会因为后台自动导入或恢复任务而绕过同意。你可以在“设置 → AI 数据处理”撤回同意。
我们要求阿里云百炼仅在完成上述服务所需范围内处理发送的数据，并采取不低于本政策所述的安全、保密和用途限制保护，不将这些内容用于广告或独立建立用户画像。相关处理同时受阿里云百炼适用的隐私政策、服务条款和数据安全承诺约束。
请不要导入你无权处理的受版权保护课程、考试资料、商业机密、个人敏感信息或他人隐私内容。
4. 百度网盘授权
- 应用会通过百度网盘开放平台 OAuth 授权页获取你的授权。
- 应用仅请求实现文件浏览、导入和播放所需的基础权限。
- 你的百度账号密码不会被本应用获取。
- access token 和 refresh token 存储在设备 Keychain 中。
- 后端仅在列目录、获取播放地址、临时下载你主动选中的网盘文件用于解析时使用 access token，不持久化保存 token。
- 解析时，服务端会将你主动选择的百度网盘文件临时下载到任务目录，用于转写、画面识别和笔记生成；任务完成或失败后删除临时目录，不长期保存原始网盘文件。
- 你可以在应用“模型配置”中解除百度授权。
5. 本地与服务端存储
应用会在设备本地保存导入的视频或 PDF 副本、课程笔记、PDF 章节、知识关联、问答记录、音频笔记、批注、文件夹结构和用户偏好。百度 OAuth token、后端访问令牌、Apple 登录后的后端 JWT 和 userId 存储在 iOS Keychain。
服务端会保存账号 userId、积分账本、内购交易记录（含交易号与用于账号绑定的 appAccountToken，作幂等防重复入账）、任务状态和模型配置状态。平台托管模型所需的服务密钥仅保存在服务端，不会写入客户端工程或日志。账号注销后，完整内购记录会删除；为防止同一购买凭证在重注册后再次兑换，仅保留交易号的带密钥单向摘要和保留时间，不保留账号、商品、金额、Apple ID 或 appAccountToken。服务端状态文件会采用原子写入和备份轮转，并应放在持久化服务器存储中。
为提升大文件上传的稳定性，视频、音频等大文件可能先直传到我们运营的华为云对象存储（OBS）临时桶，再由后端从内网取回用于解析。上传对象以你账号专属的前缀隔离，仅归属你本人；解析任务完成或失败后会清理相关临时对象与目录，不长期保存原始文件。
6. 数据共享
除以下情形外，我们不会向第三方出售、出租或共享你的个人信息：
- 在你明确同意后，为完成 AI 转写、识别、总结、解释、问答、出题、批改和向量计算，将必要内容发送给阿里云百炼 Alibaba Cloud Model Studio（DashScope）。我们要求该服务商提供不低于本政策的安全、保密和用途限制保护，并仅按上述服务目的处理内容。
- 为完成百度网盘授权、列目录、获取文件元数据和播放地址，请求百度网盘开放平台。
- 为完成大文件直传中转，将你上传的视频、音频临时存放到我们运营的华为云对象存储（OBS）。
- 为校验积分包内购、防止凭证被重复或跨账号使用，向 Apple App Store 服务器核验交易凭证。支付与扣费由 Apple 处理，我们不接触你的支付账户信息。
- 法律法规、监管机关、司法机关要求提供时。
- 为保护用户、应用或服务安全而必须处理时。
7. 数据删除与撤回
你可以在应用内删除课程、PDF、笔记、批注和文件夹。你可以在模型配置中清除后端访问令牌、解除百度网盘授权或关闭教材关联。
你可以在设置中使用“注销账号并删除数据”。该操作会请求后端删除账号记录、模型配置、积分余额、积分账本、完整内购记录和任务记录，并清空本机资料库、笔记、PDF、视频、百度授权和登录状态。为防止“注销后重注册重复领取新人赠送”或重放旧购买凭证，我们会保留最小化的防滥用标记：新人赠送标记仅含账号哈希与发放时间；内购防重标记仅含交易号的带密钥单向摘要与保留时间。两者均不含邮箱、商品、金额、Apple ID 或 appAccountToken。
积分包属于消耗型内购，不是订阅。注销账号会删除剩余积分和已经兑换到账的完整交易记录，仅保留上述不可用于恢复积分的防重摘要；这些积分之后无法通过 App Store 恢复找回。退款请依据 Apple 的政策向 Apple 申请。
目前后端设计应避免长期保存用户原始视频、PDF 和百度 token。解析临时目录（含华为云 OBS 临时对象）会在任务完成或失败后删除，并在后端启动时清理残留临时目录。
8. 未成年人
本应用面向有自主学习需求的用户。如果你是未成年人，应在监护人同意和指导下使用，不应上传包含个人敏感信息或无权处理的课程资料。
9. 安全措施
- 敏感 token 使用 Keychain 保存。
- 正式后端应启用 HTTPS。
- 正式后端应启用 Apple 登录和账号 JWT。内测后端访问令牌仅用于内部测试或管理接口。
- 平台托管的模型 API Key 只保存在服务端，不写入客户端工程或日志。
- 百度 SecretKey、华为云 OBS 密钥只保存在服务端。
- 华为云 OBS 上传对象按账号专属前缀隔离，仅归属你本人可访问。
- 内购凭证经 Apple 官方证书链校验，并绑定到你的账号（appAccountToken）防止跨账号或重复使用。
- 注销后以带密钥的单向交易摘要阻止旧购买凭证被再次兑换，不保留完整交易内容或账号关联。
- 后端日志脱敏，不记录完整 API Key、百度 token、后端 JWT、内购凭证、请求体或用户原始文件内容。
- 后端临时处理目录会在任务结束后清理，并在启动时清理残留目录。
请注意，任何互联网传输和电子存储都无法保证绝对安全。
10. 政策更新
我们可能根据产品功能、第三方服务或法律要求更新本政策。重大变更会在应用内或发布页面提示。
11. 联系我们
如对隐私政策、数据处理或删除请求有疑问，请联系：1016979878@qq.com
Privacy Policy
This English version is provided for users outside mainland China and describes the same practices as the Chinese text above. If the two versions differ, the Chinese version prevails, without affecting any mandatory rights you have under the law of your place of residence.
CourseNote turns lecture videos, PDFs and Baidu Netdisk files that you choose to import into study notes, outlines, annotations and knowledge links. This policy explains what information we process, why, where it is stored, who we share it with, and your rights.
1. Information we process
We process only what is needed to provide the features you use:
- Content you import: local videos, PDFs, file names, course titles, file paths and basic media information.
- Content you create: notes, handwritten annotations, Q&A history, outlines, knowledge links and study progress.
- Account information from Sign in with Apple: an account identifier, our internal user ID, login status and a backend session token (JWT). If you allow it, Apple also provides your email address and name. If you choose "Hide My Email", we receive an Apple relay address instead of your real email. These are used only to identify your account and display your name in the app; they are not used for marketing and are not shared with third parties. They are deleted when you delete your account.
- Preferences: login state, processing-speed preference and similar settings.
- Baidu Netdisk authorization (optional): OAuth access token, refresh token and expiry time. These are stored only in your device Keychain.
- Content sent for processing: video segments, audio, screenshots, PDF text, question images, formulas, tables, transcripts and note text, uploaded temporarily so that notes can be generated. Large files may be uploaded first to a temporary object-storage bucket we operate (see Section 5).
- Photos for "Photo Search / Solve": photos you take or pick, used only to recognize the question and find related notes; not kept long-term.
- Audio notes: recorded on your device and kept only on your device; never uploaded. Requires microphone permission.
- In-app purchases: when you buy credits, Apple provides a signed StoreKit transaction. We process the product ID, transaction ID, original transaction ID, appAccountToken (used to bind the purchase to your account), environment and purchase time, to verify the purchase, prevent duplicate or cross-account redemption, grant credits and keep a credit ledger. We never see your Apple ID password or payment details; Apple handles payment.
- Technical logs: request time, endpoint, job status, errors and processing time. We do not log full API keys, Baidu tokens, session tokens, purchase receipts, request bodies or your original files.
We do not read files you have not chosen to import, and we do not scan your photo library, cloud drive or file system in the background. The camera and photo library are used only when you take or pick a photo; the microphone only when you record an audio note.
Consent for AI processing. Before any personal content is sent to an AI service, the app shows an "AI data processing" consent screen (on first launch and whenever the disclosure changes) explaining what is sent, to whom and why. Content is sent only after you tap "Agree and continue". If you decline, you can keep using non-AI features and nothing is sent. You can review or withdraw consent at any time in Settings → AI Data Processing. Withdrawing does not delete notes already generated on your device, but new AI requests stop until you consent again.
2. How we use information (purposes and legal bases)
| Purpose | Legal basis (where GDPR/UK GDPR applies) |
|---|---|
| Transcribing videos, recognizing on-screen content and generating timestamped notes | Performance of a contract; your explicit consent for AI processing |
| Keeping PDFs as notes; extracting text and embeddings for knowledge links if you enable it | Performance of a contract; consent |
| "Second Brain" Q&A (search runs on your device; only matched snippets and your question are sent) and daily self-tests | Performance of a contract; consent |
| Photo Search / Solve | Performance of a contract; consent |
| Baidu Netdisk authorization, browsing, import and playback | Performance of a contract |
| Account, credit balance, purchase verification, account deletion | Performance of a contract; legal obligations (e.g. tax/consumer law) |
| Diagnosing failures and protecting the service from abuse | Legitimate interests (keeping the service secure and working) |
We do not use your content for advertising, profiling or tracking, and we do not sell or share personal information for cross-context behavioral advertising.
3. AI processing and service providers
The app does not run large AI models on your device. When you start an AI feature, the relevant content is sent to our backend and then to our single AI provider: Alibaba Cloud Model Studio (DashScope) and its compatible interfaces. You do not need your own API key.
Depending on the feature, this may include: video, audio and frames you selected; PDF text, OCR text, transcripts, question images, screenshots, formulas and tables; note excerpts and your questions; and answers you submit for grading. This content may contain personal information such as names, voices, handwriting, school or course details, or people visible in video. Your Apple account password, payment details, Apple sign-in credentials, account identifier, name and email are not sent to the AI provider.
We require the provider to process this content only to deliver the service, with security, confidentiality and purpose limitations no weaker than this policy, and not to use it for advertising or independent profiling. Please do not import content you are not entitled to process.
4. Baidu Netdisk (optional)
If you use Baidu Netdisk: authorization uses Baidu's official OAuth page; we request only the permissions needed to browse, import and play files; we never receive your Baidu password; tokens are stored in your device Keychain. Our backend uses your access token only to list folders and obtain download addresses for files you select, and does not store it. In current versions your iPad downloads the selected file directly from Baidu; earlier versions could temporarily relay large files through our backend or object storage, which were deleted after processing. You can revoke authorization in the app.
5. Where data is stored and international transfers
- On your device: imported videos/PDFs, generated notes, folders, annotations and preferences; tokens and session data in the iOS Keychain.
- On our servers: your user ID, credit balance and ledger, purchase records (including transaction ID and appAccountToken, used to prevent double redemption), job status and configuration.
- Temporary processing: large uploads may be stored briefly in Huawei Cloud Object Storage (OBS) under a prefix unique to your account, then retrieved by our backend. Temporary objects and processing folders are deleted after the job finishes or fails.
Our servers and our AI provider are located in mainland China (People's Republic of China). If you use CourseNote from outside mainland China — including the EU/EEA, the UK, the United States or elsewhere — the content you send for processing and your account data are transferred to and processed in mainland China. Data protection laws there may differ from those where you live, and the European Commission has not issued an adequacy decision for China. We transfer this data because it is necessary to provide the service you request, and we protect it with the safeguards in Section 9. If you do not want your data processed in mainland China, please do not use the AI features or the account system.
6. Sharing
We do not sell, rent or share your personal information, except:
- with Alibaba Cloud Model Studio, after your explicit consent, to perform AI processing (Section 3);
- with Baidu Netdisk Open Platform, to authorize, list files and obtain download addresses;
- with Huawei Cloud OBS, to temporarily store large uploads;
- with Apple, to verify in-app purchases;
- when required by law or by competent authorities, or where necessary to protect users or the service.
7. Retention and deletion
- You can delete courses, PDFs, notes, annotations and folders in the app at any time.
- Settings → Delete Account and Data deletes your account record, configuration, credit balance, ledger, full purchase records and job records on our servers, and clears your local library, notes, PDFs, videos, Baidu authorization and login state on the device.
- To prevent abuse, after deletion we keep only: a welcome-credit marker (an account hash and grant time) and, for each purchase, a keyed one-way hash of the transaction ID and a timestamp. These contain no email, product, amount, Apple ID or appAccountToken and cannot be used to restore credits.
- Credits are consumable purchases, not subscriptions. Deleting your account permanently removes unused credits; they cannot be restored through the App Store. Refunds are handled by Apple under Apple's policies.
- Temporary processing data (including OBS objects) is deleted when a job completes or fails, and leftovers are cleaned up when the backend starts.
8. Your rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you and receive a copy (portability);
- correct inaccurate information;
- delete your information (available directly in the app);
- restrict or object to certain processing;
- withdraw consent at any time (Settings → AI Data Processing), without affecting processing that already happened;
- lodge a complaint with your local data protection authority (for example, in the EU/EEA or UK).
California residents (CCPA/CPRA): we collect the categories described in Section 1 for the purposes in Section 2. We do not sell or "share" personal information for cross-context behavioral advertising, and we do not use sensitive personal information for purposes other than providing the service. You have the rights to know, delete, correct, and not be discriminated against for exercising your rights.
To exercise any right, use the in-app deletion feature or email 1016979878@qq.com. We will respond within 30 days (or the period required by applicable law). We may need to verify that the request comes from the account holder.
9. Security
- Sensitive tokens are stored in the iOS Keychain.
- All traffic to our backend uses HTTPS, and the app verifies our server's certificate for our domain.
- Accounts use Sign in with Apple and signed session tokens.
- API keys for our AI provider, Baidu and Huawei Cloud are stored only on the server, never in the app or logs.
- Uploads to OBS are isolated by an account-specific prefix.
- In-app purchases are verified against Apple's certificate chain and bound to your account.
- Logs are redacted; temporary processing folders are cleaned up.
No method of transmission or storage is completely secure.
10. Children
CourseNote is intended for learners who study independently and is not directed at children under 13 (or the minimum age in your country). If you are a minor, use the app with a parent's or guardian's consent and guidance. If you believe a child has provided us personal information without consent, contact us and we will delete it.
11. Changes
We may update this policy as features, providers or laws change. Material changes will be announced in the app or on this page, with a new "Last updated" date.
12. Contact
Questions, requests or complaints about privacy: 1016979878@qq.com