1. 谁负责你的信息

Bible Whisper 由开发者徐帆（Fan Xu）运营。本政策适用于 Bible Whisper App、App Clip 及官网，说明账号、读经、闹钟、NFC、读经计划、AI 同行、小组分享和客服涉及的个人信息处理。首发版本免费，不提供订阅、App 内购买或数字功能付费解锁。

隐私联系邮箱：evan.xu666@gmail.com。请求中请描述你希望访问、更正或删除的信息，不要提供密码、验证码或完整支付卡资料。

2. 我们处理哪些信息，为什么

信息来自你的输入、功能使用记录及必要的网络请求。注册需要账号信息；手机号、头像、AI 内容、社区发布和客服资料可由你选择提供。请避免提交不必要的敏感信息，提供他人信息前应有适当依据。

3. AI 同行与 DeepSeek

AI 同行经我们的后端调用 DeepSeek 官方 API，不通过第三方 AI 转接平台。你明确同意后，提问文字及生成回复所必需的对话上下文会发送给 DeepSeek，以生成经文建议、反思和祷告提示。输入中包含的个人或敏感信息也会随该内容传送。

你可以拒绝 AI 数据共享，或通过 App 提供的 AI 同意控制撤回同意。拒绝或撤回后，不再发送新的 AI 请求；再次使用需要共享数据的 AI 功能时，应重新同意。撤回不影响此前处理的合法性，也不自动删除已发送到服务商的数据。

AI 请求会离开设备。我们的服务器暂存生成回复，主动保存的卡片和相关会话记录也会保存在服务器；本地记录与服务端记录分别处理。DeepSeek 的留存、模型改进用途及数据权利处理受适用的官方 API 条款及其隐私政策约束；我们不承诺第三方零留存、绝不用于训练，或其数据也在 90 天内删除。你可通过我们的隐私邮箱询问或请求协助处理已经共享的数据。

AI 生成内容可能有误。不要依赖 AI 提供医疗或紧急援助，也不要向 AI 输入不愿向该服务商披露的私人信息。

4. 其他共享与广告

我们使用阿里云提供服务器托管和基础设施。托管服务可能为提供存储、网络和运行服务而处理服务器中的信息。Apple 提供 App Store 分发和平台服务，并适用其隐私政策。当你用邮件联系支持时，邮件服务参与传送和保存相关通信。

我们要求为我们处理个人信息的服务提供方，仅为相应服务目的处理信息，并提供不低于本政策及 Apple 要求的数据保护。另行向其他接收方共享个人信息时，将按适用要求说明用途并取得所需许可；法律要求的披露除外。

Bible Whisper 不使用广告或统计 SDK。服务运行日志及自有后端指标用于运行、安全、故障排查和服务表现分析。我们不会通过广告或统计 SDK 将你的活动与其他公司的 App 或网站活动连接起来。

你主动发布或分享内容时，内容会向对应小组、受众或外部分享目标公开；接收者可能自行保存副本。不要发布不希望受众看到的私人内容。

5. 保存与删除规则

不同数据适用不同保存规则，不是所有服务器数据都在 90 天后自动删除。

• 账号及同步的阅读、笔记、计划和社区内容，在提供对应服务期间保存；你可以使用相关删除入口或申请删除账号。
• AI 回复找回正文的默认暂存期为 24 小时，到期后由清理任务清除。生成会话元数据、主动保存的卡片及反馈是不同记录，可通过清除 AI 数据或删除账号处理；正文到期不等于全部会话记录同时删除。
• AI 运行指标的当前默认保存期为 90 天，由定时清理任务处理。
• 访问日志采用每日轮转并最多保留 10 份归档的配置；其他运行、客服和治理记录按处理问题、安全及必要审计的用途保存。你可联系隐私邮箱提出删除请求。

删除账号会清除相应账号内容、撤销访问凭据并移除或匿名化关联记录。已识别的上传文件通过后续处理清除，个别旧文件可能需要人工核对；App 提供删除回执和状态。必要的删除回执、安全和治理审计记录与业务内容分别处理。

备份中的旧副本与当前业务数据分开处理，按现行备份政策在适用的 90 天保存周期内到期清除；主数据库删除回执不表示备份副本已经实时清除。备份不用于重新启用已删除的账号。

本地记录受设备存储、系统备份及设备服务影响；卸载 App 不等于删除服务器账号。DeepSeek、Apple 和其他独立服务有各自的保存规则，不能因清除本 App 数据就推定第三方副本也已经删除。可通过隐私邮箱请求协助。

6. 你的隐私选择与权利

• 删除账号：通过 App 内提供的删除账号入口发起，按界面提示确认和完成必要的身份验证。遇到问题可联系隐私邮箱。
• AI 同意：你可拒绝首次共享请求，并通过 App 内的 AI 同意控制撤回后续共享同意。
• 系统权限：在设备设置中管理已授予的通知及其他系统权限。关闭权限可能影响对应功能。
• 数据请求：通过隐私邮箱申请访问、更正、删除或获取个人信息副本，以及提出适用法律下的限制处理、反对处理或撤回同意请求。

我们可能进行合理的身份验证，以防止他人访问或删除你的信息，并按照适用法律的期限处理请求。你也可向所在地有权限的数据保护机构投诉。停止使用一项功能或撤回同意，不会自动删除与该功能有关的历史数据；可另行提出删除请求。

7. 信息安全与处理地区

我们按信息性质采取合理的技术与管理保护，限制个人信息处理的目的和访问范围。任何网络传输或存储方式都不能保证绝对安全。

Bible Whisper 的当前服务器托管在美国硅谷地区。使用 DeepSeek 官方 API 时，信息可能在其服务适用的其他地区处理；请参阅服务商的政策。跨境处理时，我们按适用的数据保护要求履行必要义务。使用第三方 AI 前，你应结合敏感性决定是否提交内容。

8. 未成年人

账号注册、AI 同行和社区参与仅面向 18 岁及以上用户，注册需要成年自我声明；这不是身份证件核验。游客仍可使用公开阅读、灵修等基础功能。若发现未成年人提交了账号或私人内容，请联系隐私邮箱处理或删除。商店年龄分级与账号功能的成年要求分别适用。

9. 政策更新

我们会在本页发布政策更新并修改日期。对共享对象、目的或处理方式的重大变更，会以适当方式告知；法律或平台规则要求同意的，将在相应处理开始前征求同意。

1. Who is responsible

Bible Whisper is operated by developer 徐帆 (Fan Xu). This policy covers the Bible Whisper app, App Clip, and website, including accounts, reading, alarms, NFC experiences, plans, AI Companion, groups, sharing, and support. The first release is free and does not offer subscriptions, in-app purchases, or paid digital unlocks.

Privacy contact: evan.xu666@gmail.com. Describe your request without sending passwords, verification codes, or full payment card details.

2. Information and purposes

• Accounts and profiles: username, email, password, user identifiers and login credentials support registration, authentication, recovery and security. You may optionally provide a phone number, nickname, biography and avatar. Account passwords are stored as hashes rather than plaintext.
• Reading and settings: synced reading records, plans and progress, notes, highlights, points and preferences support reading features, progress displays and experiences matching your settings. Local alarms and device settings are handled separately from server records.
• AI and sensitive content: scenarios, circumstances, text and language preferences support Scripture suggestions, reflections and prayer prompts. Responses, saved cards and feedback may contain religious beliefs, health information or other sensitive content. Generation status, safety classifications, usage and timing support functionality, safety, budgets and evaluation of feature performance. Cross-session AI memory is disabled in the first release.
• Community and images: posts, comments, prayers, group messages, images, church or group memberships, follows, likes, favourites, reports and blocks support communication and moderation. Content is linked to accounts; an anonymous prayer hides the displayed identity but remains linked to its submitting account on our server.
• Location and searches: when you grant location permission and use nearby churches, device coordinates are sent to our backend and may include precise latitude and longitude. You can disable permission and use search instead. Scripture and church search terms are sent to the backend. Request URLs may contain coordinates or search terms and be retained in access logs. The absence of a dedicated personal location or search-history table does not mean these requests are never retained.
• Service, performance and support: IP addresses, request times and paths, device request headers, response and error status, generation timing and technical identifiers support account security, diagnostics, abuse prevention and service-performance analysis. Feedback, emails, descriptions and screenshots support assistance and privacy requests. Some records can be associated with you through accounts, sessions or other information.

Information comes from your input, feature use and necessary network requests. Account information is required for registration; phone numbers, avatars, AI content, community submissions and support information are optional. Avoid unnecessary sensitive information and ensure an appropriate basis before providing another person's information.

3. AI Companion and DeepSeek

AI Companion uses our backend to call the official DeepSeek API, without an AI intermediary. After your explicit consent, your question and the conversation context necessary to respond are sent to DeepSeek to generate Scripture suggestions, reflections, and prayer prompts. Personal or sensitive information included in that content is also transmitted.

You can decline sharing or withdraw consent using the AI consent controls in the app. New AI requests stop after refusal or withdrawal. Using a sharing-dependent AI feature again requires renewed consent. Withdrawal does not undo prior processing or automatically delete data already received by the provider.

AI requests leave your device. Our server temporarily retains generated responses and also stores saved cards and related session records. Device records and server records are handled separately. DeepSeek retention, model improvement uses, and data rights are governed by applicable official API terms and its privacy policy. We do not promise zero retention, exclusion from training, or deletion by that provider within 90 days. Contact us for questions or assistance with previously shared data.

AI responses can be incorrect. Do not rely on AI for medical or emergency assistance, or submit private content you do not want disclosed to that provider.

4. Other sharing and advertising

Alibaba Cloud provides server hosting and infrastructure and may process server information to provide those services. Apple provides App Store distribution and platform services under its privacy policy. Email providers participate in delivering and storing support correspondence.

We require providers processing personal information for us to limit processing to the relevant service and provide protection at least equivalent to this policy and Apple's requirements. Other disclosures follow applicable notice and permission requirements, except disclosures required by law.

Bible Whisper does not use advertising or analytics SDKs. Operational logs and our own backend metrics support operation, security, troubleshooting and service-performance analysis. We do not use advertising or analytics SDKs to link your activity with activity in other companies' apps or websites.

Content you choose to publish or share is disclosed to the relevant group, audience, or external destination. Recipients may retain their own copies.

5. Retention and deletion

Different data has different retention rules; server data is not universally deleted after 90 days.

• Accounts and synced reading, notes, plans and community content are retained while providing the corresponding services. Use the relevant deletion controls or request account deletion.
• The default retention period for the AI response-recovery body is 24 hours, after which a cleanup task clears it. Session metadata, saved cards and feedback are separate records and can be handled by clearing AI data or deleting the account. Expiry of the response body does not delete every session record.
• The current default retention period for AI operational metrics is 90 days, enforced by a scheduled cleanup task.
• Access logs are configured for daily rotation with at most 10 archives. Other operational, support and moderation records are retained for resolving issues, security and necessary audits. Contact our privacy email to request deletion.

Account deletion clears the corresponding content, revokes credentials and removes or anonymizes associated records. Identified uploads are cleared through subsequent processing; some legacy files require manual ownership checks. The app provides a deletion reference and status. Necessary deletion receipts, security and moderation audits are handled separately from business content.

Old backup copies are handled separately from current business data and expire within the applicable 90-day cycle under our existing backup policy. A live-database deletion receipt does not mean backup copies have already been cleared in real time. Backups are not used to reactivate deleted accounts.

Device records are affected by local storage, system backups and device services. Uninstalling the app does not delete the server account. DeepSeek, Apple and other independent services have their own retention rules; clearing this app's data does not establish that third-party copies have also been deleted. Contact our privacy email for assistance.

6. Your choices and rights

• Account deletion: initiate deletion through the in-app account deletion entry and follow its confirmation and identity verification prompts.
• AI consent: decline the initial sharing request or withdraw future sharing consent through the app's AI consent controls.
• Permissions: manage notification and other granted system permissions in device settings. Turning them off may affect the related features.
• Data requests: email us to request access, correction, deletion, a copy, or applicable restrictions, objections, or consent withdrawal.

We may reasonably verify your identity to prevent unauthorized access or deletion and respond within applicable legal time limits. You may contact your competent data protection authority. Stopping a feature or withdrawing consent does not automatically delete its historical records; you can request deletion separately.

7. Security and processing regions

We apply reasonable technical and organizational safeguards appropriate to the information and limit processing purposes and access. No transmission or storage method guarantees absolute security.

Our current server is hosted in the Silicon Valley region of the United States. Official DeepSeek API use may involve processing in other regions covered by its services and policies. We follow applicable data protection obligations for international processing. Consider the sensitivity of content before submitting it to third-party AI.

8. Minors

Account registration, AI Companion and community participation are intended for people aged 18 or older. Registration requires an adult self-declaration, which is not identity-document verification. Public reading, devotionals and other basic guest features remain available. Contact our privacy email if a minor has submitted an account or private content. Store age ratings and the adult requirement for account features apply separately.

9. Updates

Updates will appear on this page with a revised date. We will provide appropriate notice of material changes to recipients, purposes, or processing and obtain consent before processing when required by law or platform rules.