一、 引言

1. Introduction

本隐私政策适用于由 武汉鲸乐互娱文化传媒有限公司（以下简称“我们”）开发并运营的移动端应用产品 —— API Wallet (API 钱包)。我们非常重视您的隐私，并致力于妥善保护您的个人数据与 API 密钥资产。本声明旨在向您说明：API Wallet 采用“本地优先”的设计，默认情况下您的服务商配置、余额记录与 API 密钥主要保存在您的设备本地；当您主动开启“云端余额监控/远程推送提醒”等功能时，应用会将完成该功能所必需的数据同步至我们的服务器。

This Privacy Policy applies to the mobile application API Wallet developed and operated by Wuhan Jingle Huyue Culture Media Co., Ltd. (referred to as "we", "us", or "our"). We take your privacy seriously and are committed to safeguarding your personal data and API key credentials. API Wallet is designed with a local-first approach: by default, provider settings, balance records, and API keys are mainly stored on your device. If you actively enable cloud balance monitoring or remote push alerts, the app will sync the data necessary to provide that feature to our server.

二、 我们如何处理您的敏感信息（API 密钥）

2. Handling of Sensitive Information (API Keys)

API Wallet 的核心功能包括登记 API 服务商信息、保存 API 密钥或余额查询凭证，并用于查询余额与用量。以下是您输入的 API 密钥（API Keys）及相关凭证的处理规则：

API Wallet lets you save API provider settings, API keys, or balance query credentials for balance and usage checks. The details below clarify how API keys and related credentials are handled:

• 本地加密存储：您的 API 密钥在输入后，会通过 iOS 系统级安全能力存储在您设备本机的安全钥匙串（Keychain）中。
• Local encrypted storage: Once entered, your API keys are stored in your device's secure Keychain using Apple's system-level security capabilities.
• 云端监控需同步凭证：如果您主动开启云端余额监控，为了让服务器在您不打开 App 的情况下定时查询余额并发送推送提醒，我们会通过 HTTPS 将相关 API Key、余额查询 Token、用户 ID、API Base URL、服务商名称、模型名称、币种、提醒阈值等必要信息同步至我们的服务器。
• Credentials required for cloud monitoring: If you actively enable cloud balance monitoring, the app will transmit necessary information over HTTPS to our server so that balance checks and push alerts can run when the app is not open. This may include API keys, balance query tokens, user IDs, API base URLs, provider names, model names, currency codes, and alert thresholds.
• 可选启用：云端余额监控不是使用 API Wallet 的必需功能。您可以不开启该功能，仅使用本地保存、本地刷新与本地提醒能力。
• Optional feature: Cloud balance monitoring is optional. You may use API Wallet with local storage, local refreshes, and local alerts without enabling cloud monitoring.

三、 个人数据收集与使用说明

3. Data Collection and Usage

我们不会将您的数据用于广告跟踪或跨应用追踪。为提供应用核心功能，我们可能处理以下数据：

We do not use your data for advertising tracking or cross-app tracking. To provide the app's core features, we may process the following data:

• 注册信息：API Wallet 是一款免注册应用，您无须提供手机号、邮箱或任何第三方社交账户进行登录。
• Account Registration: No registration is needed. You do not need to share phone numbers, emails, or link social media profiles to use the app.
• 设备通知标识：当您允许系统通知并开启远程推送能力时，我们会保存 Apple Push Notification service（APNs）提供的 device token，用于向您的设备发送余额提醒通知。该 token 不用于广告或用户画像。
• Device notification identifier: If you allow notifications and enable remote push functionality, we store the APNs device token provided by Apple Push Notification service to send balance alerts to your device. This token is not used for advertising or profiling.
• 余额与用量数据：应用内的用量变动统计、账单流水、端点排行主要基于您的历史余额刷新记录在设备本地计算与存储。开启云端余额监控后，服务器也会保存必要的最近余额、提醒状态、检查时间、通知时间等信息，用于判断是否需要继续发送余额提醒。
• Balance and usage data: Usage statistics, billing logs, and ranking data are mainly computed and stored on-device from your historical balance refresh records. If cloud balance monitoring is enabled, our server also stores necessary recent balance values, alert status, check times, and notification times to determine whether a balance alert should be sent.
• 错误与运行状态：为排查余额查询失败、推送失败等问题，服务器可能记录有限的接口返回状态、错误信息和执行时间。我们不会将这些信息用于营销或广告。
• Error and operational status: To troubleshoot balance query failures or push delivery issues, our server may store limited response status, error messages, and execution timestamps. We do not use this information for marketing or advertising.

四、 网络访问与第三方接口连接

4. Network Access and Third-Party Connection

为了提供余额同步与云端监控功能，应用和服务器需要访问网络，并向您配置的目标接口发送请求：

To provide balance sync and cloud monitoring, the app and our server require network access and may send requests to the endpoints you configure:

• 本地刷新：当您在 App 内手动刷新余额时，网络请求通常由您的设备直接发送至您指定的官方接口或自定义中转站点。
• Local refresh: When you manually refresh balances in the app, requests are generally sent directly from your device to the official endpoint or custom gateway you configure.
• 云端监控：当您开启云端余额监控时，我们的服务器会按照计划任务定时访问您配置的余额查询接口，用于获取最新余额并判断是否发送提醒。
• Cloud monitoring: If cloud balance monitoring is enabled, our server periodically accesses the configured balance query endpoint to obtain the latest balance and decide whether to send an alert.
• 无广告与分析 SDK：应用内不集成任何可能收集您设备识别码或跟踪您广告偏好的第三方统计与广告 SDK。
• No Trackers or Ads: The app does not package advertising SDKs or tracking services that monitor hardware markers or browser behavior.

五、 通知提醒服务

5. Notification Services

当您启用低余额提醒时，应用会请求 iOS 系统通知权限。提醒方式可能包括本地通知和远程推送通知：本地通知由设备在 App 内刷新余额后触发；云端余额监控则由我们的服务器定时查询余额，并通过 Apple Push Notification service（APNs）向您的设备发送提醒。通知内容通常包含服务商名称、当前余额与提醒阈值。

When you enable low-balance alerts, the app requests iOS notification permission. Alerts may include local notifications and remote push notifications: local notifications are triggered after in-app balance refreshes, while cloud balance monitoring lets our server periodically check balances and send alerts to your device via Apple Push Notification service (APNs). Notification content typically includes the provider name, current balance, and alert threshold.

六、 数据保存、删除与安全

6. Data Retention, Deletion, and Security

本地数据会保存在您的设备中，您可以通过删除服务商卡片、关闭余额提醒、卸载 App 等方式移除本地数据。开启云端余额监控后，相关账户配置会保存在我们的服务器中，以便持续提供监控服务；当您删除对应账户或关闭/更新云端监控配置时，应用会向服务器同步变更。您也可以通过本政策中的联系方式要求我们协助删除服务器端保存的相关数据。

Local data is stored on your device, and you may remove it by deleting provider cards, disabling balance alerts, or uninstalling the app. If cloud balance monitoring is enabled, related account configuration is stored on our server to provide ongoing monitoring. When you delete an account or disable/update cloud monitoring settings, the app syncs those changes to the server. You may also contact us using the details in this policy to request deletion of related server-side data.

我们通过 HTTPS 传输云端监控数据，并采取合理的访问控制措施限制服务器数据的访问范围。请注意，API Key 本身具有调用第三方服务的能力，请您妥善设置权限和额度，并仅在信任本功能的情况下开启云端余额监控。

Cloud monitoring data is transmitted over HTTPS, and we apply reasonable access controls to limit server-side data access. Please note that API keys may grant access to third-party services. You should configure appropriate permissions and spending limits, and enable cloud balance monitoring only if you trust this feature.

七、 政策更新

7. Policy Updates

我们可能会适时修改本隐私政策的条款。如果我们将修改内容发布，这些修改将立即生效。建议您定期查看此页面以获取最新版本的隐私声明。

We may update this Privacy Policy periodically. Modifications take effect immediately upon being posted. We encourage you to review this document regularly for updates.

八、 联系我们

8. Contact Us

如果您对本隐私政策有任何疑问、意见，或发现我们的应用存在任何安全隐患，请通过以下渠道与我们取得联系：

If you have questions, comments, or report security details about this privacy policy, feel free to contact us via:

武汉鲸乐互娱文化传媒有限公司
Email: liuxin@fengjungpt.com