Privacy Policy
This Privacy Policy explains how HomeInbox (家事箱) handles household tasks, inbox captures, responsibility history, family member profiles, visibility choices, local deletion, and support requests. HomeInbox is designed as a local-first tool: the current version stores everything on the device and makes no network requests.
1. Scope and Product Purpose
HomeInbox is an iPhone and iPad app for adult household members who want to stop carrying chores in their heads. A thought can be unloaded in one line, clarified with the household into a doable task, and given a clear owner whose acceptance makes the task real. It is a household coordination and memory-relief tool, not a calendar, project manager, monitoring service, scoreboard, or cloud collaboration platform.
2. Information Stored on the Device
Depending on what the user enters or creates, HomeInbox stores inbox captures (the raw text of a thought, its capture time, creator, and clarification status), clarified household tasks (title, notes, optional due date, visibility scope, current responsibility state, assignee and proposed assignee), the responsibility event history (captured, clarified, assigned, accepted, declined, reassigned, completed, reopened, archived, restored), local family member aliases and roles (adult or teen profile), a marker for whether a member is the current user, tombstone records for deleted items, and app preferences.
This content is used only to operate the app, restore unfinished work, display responsibility history, support undo and deletion, and show who can see which items.
3. Local Processing and No Data Collection
The current version processes captures, clarification, ownership transitions, today lanes, and weekly review entirely on the device. It has no account system, no Qiquverse server, no cloud sync, no third-party analytics SDK, no advertising SDK, no cross-app tracking, no data broker, and no external AI service. Because this information is processed on the device and is not transmitted to Qiquverse, Qiquverse does not collect it through the app.
4. Permissions
The current version requests no system permissions. It does not use the microphone, speech recognition, notifications, location, contacts, camera, photo library, Face ID, or Touch ID. If future versions add voice capture, notifications, or real device-to-device handoff, permission will be requested only when the user starts that feature, and this policy will be updated before release.
5. Family Profiles and Visibility
Family members are local profiles created on the device, not accounts. Each item has a visibility scope: private only, selected members, or household. By default an item stays private until the user chooses to share it. A teen profile sees only items that are explicitly shared with or assigned to it. HomeInbox is not a monitoring tool: it does not report on who contributes more, does not create contribution scores, and does not automatically publish household items.
6. Retention, Deletion, and Backups
Local data remains until the user deletes an item, the app purges it after the undo window, the user removes the app, or device and storage operations clear it. Deleting an item keeps it recoverable during a short undo window and then purges the related local records. Removing the app normally removes its local container. Normal Apple device backups may include app-local data according to the user's Apple settings; those backups are operated by Apple and may restore local records. Qiquverse cannot directly delete data that exists only on the user's device or in an Apple-operated backup.
7. Security
Local-first design reduces unnecessary transmission, but no device, software, storage, or backup method can guarantee absolute security. Users should keep the device passcode enabled, keep system software current, and review visibility choices before sharing an item with household members.
8. Support Requests
If a user contacts support, Qiquverse receives the email address, message, and diagnostic information the user voluntarily sends. This information is used to respond and investigate the request. Do not send household task content, family member names, or private notes unless they are necessary and the sender has permission.
9. Changes and Contact
We may update this policy when product behavior, Apple capabilities, data handling, or legal requirements change. The updated date will change when the policy is revised. For privacy questions or deletion guidance, contact [email protected].
隐私政策
本隐私政策说明家事箱（HomeInbox）如何处理家庭事项、收件箱记录、责任历史、家庭成员档案、可见范围选择、本机删除和支持请求。家事箱 按“本地优先”设计：当前版本把一切保存在设备上，不发起任何网络请求。
一、适用范围与产品用途
家事箱 是一款面向成年家庭成员的 iPhone 与 iPad App，帮助把怕忘的家事先从脑子里卸下来：先记一句，再和家人澄清成可做的事，最后交给明确的责任人，只有接受才算真正接手。它是家庭协作与记忆减负工具，不是日历、项目管理、监控服务、评分榜或云协作平台。
二、保存在设备上的信息
根据用户实际输入或创建的内容，家事箱 会在本机保存收件箱记录（一句话念头的原文、记录时间、发起人和澄清状态）、澄清后的家庭事项（标题、备注、可选期限、可见范围、当前责任状态、责任人与拟议责任人）、责任事件历史（记录、澄清、指派、接受、拒绝、转派、完成、重新打开、归档、恢复）、本地家庭成员昵称与角色（成人或青少年档案）、成员是否为当前使用者的标记、已删除事项的墓碑记录和应用偏好。
这些内容仅用于运行 App、恢复未完成工作、展示责任历史、支持撤销与删除，以及判断哪些事项对谁可见。
三、本地处理与不收集数据
当前版本在设备本地完成记录、澄清、责任流转、今日责任和本周回顾。它没有账号系统、没有 Qiquverse 服务器、没有云同步、没有第三方分析 SDK、没有广告 SDK、没有跨 App 追踪、没有数据经纪服务，也没有外部 AI 服务。由于这些信息只在设备上处理且不传给 Qiquverse，Qiquverse 不会通过 App 收集这些内容。
四、权限
当前版本不申请任何系统权限。它不使用麦克风、语音识别、通知、定位、通讯录、相机、相册、面容 ID 或触控 ID。如果未来版本加入语音记录、提醒或真正的设备间交接，只会在用户使用该功能时请求相应权限，并在发布前更新本政策。
五、家庭成员档案与可见范围
家庭成员是在本机创建的档案，不是账号。每个事项都有可见范围：仅自己、指定成员或家庭。默认情况下事项保持私有，只有你主动选择才分享。青少年档案只能看到明确分享或指派给 ta 的事项。家事箱 不是监控工具：它不统计谁贡献更多，不生成贡献评分，也不会自动公开家庭事项。
六、保留、删除与备份
本机数据会保留到用户删除事项、App 在撤销窗口后清除、用户移除 App，或设备与存储操作将其清除。删除事项后在短暂的撤销窗口内可恢复，随后相关本地记录会被清除。移除 App 通常会移除其本地容器。Apple 正常设备备份可能依据用户设置包含 App 本地数据；该备份由 Apple 运营，恢复备份可能恢复本地记录。对于只存在于用户设备或 Apple 运营备份中的数据，Qiquverse 无法直接删除。
七、安全
本地优先设计减少了不必要的传输，但任何设备、软件、存储或备份方式都不能保证绝对安全。用户应保持设备密码开启、保持系统更新，并在向家庭成员分享事项前检查可见范围。
八、支持请求
用户联系支持时，Qiquverse 会收到用户主动发送的邮箱地址、消息和诊断信息，并用于回复和排查。除非确有必要且发送者有权提供，请勿发送家庭事项内容、家庭成员姓名或私密备注。
九、政策更新与联系
当产品行为、Apple 能力、数据处理或法律要求变化时，我们可能更新本政策，并更新页面日期。如有隐私问题或需要删除指引，请联系 [email protected]。