Privacy Policy
Guangzhou Huanfang Intelligent Technology Co., Ltd. (“we”) provides 知几记账. This policy explains what information the app processes, when information leaves your device, and how you can manage it. 知几 does not operate its own account server for storing personal ledgers; you can use the app without configuring AI and without enabling iCloud sync.
1. Information we process
- Ledger and management data: amounts, dates, income and expense types, categories, accounts, ledgers, budgets, recurring tasks, lending and borrowing records, social gift records, and notes that you enter or organize.
- Attachments you add: receipt or voucher images, your avatar, and the text and audio recordings produced when you actively use voice entry.
- Content you actively submit to AI: depending on the specific AI feature, this may include text you type, text produced by on-device OCR of a screenshot, the current conversation, and the portion of transaction summaries needed to answer the request. The current implementation sends recognized text to the AI provider, not the original screenshot image.
- AI configuration: the provider you select and your API key. The key is stored in the iOS Keychain shared access group so that both the main app and the share extension can use it.
- Purchase entitlement data: StoreKit transaction information such as product identifiers, subscription validity periods and revocation status. Your payment method and full card details are handled by Apple; the app never receives your full card number.
2. On-device storage and iCloud sync
Ledgers are stored on your device by default. You may choose to enable personal iCloud sync in the app settings. Once enabled, ledger records, accounts, categories, books, and related voucher images, avatar and voice attachments may be stored through Apple CloudKit in the private database associated with your Apple ID and synced across devices signed in to the same Apple ID. Sync depends on your Apple account, network, and CloudKit service status.
After you turn sync off, the app switches to a local storage configuration, but it does not automatically send CloudKit a request to erase data that was previously synced; the synced iCloud copy may remain. 知几 currently has no separate entry point for wiping the entire CloudKit private database. After you sign out of iCloud or uninstall the app, the Apple-side copy is no longer managed by the app, and its retention and deletion timing is determined by Apple’s account and data management mechanisms. Please use Apple’s own iCloud account and data management tools to manage the cloud copy; deleting records on this device or uninstalling the app is not a substitute for managing synced data on the Apple side.
3. Optional AI and third-party services
On-device OCR, rules, and manual entry are the primary bookkeeping paths. AI recognition and the AI assistant are optional capabilities and are not a precondition for using basic bookkeeping. Only when you configure an API key and actively use an AI feature will the app send the content required for that request to the API of the provider you selected. Requests go directly to the selected provider using the key you configured; 知几 does not operate its own AI relay server. Different features send different content, so please avoid including unnecessary sensitive material before you submit a request.
Version 1.0 currently offers Tongyi Qianwen (Alibaba Cloud), DeepSeek and Moonshot (Kimi). Zhipu AI and OpenRouter are not offered in 1.0; configurations left over from an upgrade are blocked before any request is sent. Each provider’s rules on data retention, processing locations, transfers and model improvement are governed by the terms in force at the time; we do not make retention-period or no-training guarantees on a provider’s behalf. Please read the policy of the provider you select first:
- Alibaba Cloud Model Studio privacy notice
- DeepSeek Privacy Policy
- Moonshot / Kimi Open Platform Privacy Policy
The provider pages above are listed for public reference only; whether a page or set of terms applies to the specific API product, account and model you use is determined by the provider’s terms in force at the time. You can remove a saved API key in the app’s AI settings. Removing a key does not automatically delete request content already sent to a provider; please submit data requests through that provider’s own process.
4. Voice input and recordings
Speech-to-text in 1.0 is enabled only when a recognizer is available and the device and selected language support on-device recognition. The app requires Apple Speech to recognize on device and does not fall back to Apple server processing; when the conditions are not met, no recording is started for transcription and you are prompted to type instead. Long-press and smart entry hand microphone audio buffers to on-device Speech requests and do not create recording files. If you actively send recognized text in the AI assistant, that text may be sent as a separate request to the AI provider you selected.
The voice-entry recording screen writes the raw audio to a local file in the app’s Documents directory; this attachment recording is not sent to Apple Speech. After you confirm and save, the app copies the recording as the voice attachment of that transaction. The current code does not delete the Documents source recording after saving, cancelling, a recognition failure, or leaving that recording screen, and does not exclude it from device backups, so the source file may coexist with the transaction attachment and remain in the app sandbox or be included in an iOS device backup.
When you record a voice note while manually creating a transaction or a repayment, the audio is also written to Documents first; after recording finishes successfully, the app reads the audio into the editing draft and deletes the source file, and the audio is persisted as an attachment only after the corresponding transaction is saved successfully. When recording fails, source-file cleanup is not reliably guaranteed. When editing an existing transaction, recordings are staged in the app’s temporary directory and the staged file is deleted after a successful finish; cleanup after a failure is not reliably guaranteed. These manual voice-note flows do not use Apple Speech recognition.
All recordings saved as transaction attachments are retained with the record, do not expire automatically, and can be removed while editing the transaction. With iCloud sync enabled, voice attachments of saved transactions may also sync to your iCloud private database. Source files, transaction attachments, device backups and iCloud copies have different deletion paths; uninstalling the app removes on-device sandbox files but does not automatically delete copies already synced to iCloud.
5. Purposes and recipients
- To provide bookkeeping, categorization, budgeting, statistics, rules, lending and borrowing, and export features on your device.
- To provide personal iCloud sync through Apple CloudKit and speech recognition through Apple Speech, as you choose.
- To process AI requests through the provider you selected, at your active request.
- To process purchases, subscriptions, restore-purchase and refund flows through Apple App Store / StoreKit.
- When you actively use the system share sheet to export a file, the target app you choose receives that file.
The Release build being published does not set an address for the company’s creator-campaign service, so that feature is unavailable in that build and no requests are made to the company’s campaign service. The app does not send personal ledgers to a 知几-operated server. Third-party system services, iOS diagnostics and dependencies in the released build are governed by the actual system settings and that released version.
6. Access, export and deletion
You can view, edit or delete records in the app and export a CSV file when you need one. Uninstalling the app removes on-device app data and on-device recording files; copies you actively synced to iCloud are not deleted automatically by uninstalling. Requests to access or delete content already received by an AI provider must be made to that provider directly. We cannot retrieve or delete on your behalf data held in Apple’s private database or by third-party AI providers, because we have no server that stores it.
For questions about in-app data handling or to raise a privacy concern, contact privacy@huanfine.com. Please do not send API keys, Apple account passwords, or full payment information by email.
7. Permissions, children, and policy updates
Camera, Photos, Microphone and Speech Recognition permissions are managed by iOS and can be adjusted in the device Settings. You may decline these permissions and continue using the manual entry features that remain available. 知几记账 targets general personal income and expense management and does not target children. We will update this policy when features or data-handling practices change and will update the effective date on this page.
8. Operator and contact
Operator: Guangzhou Huanfang Intelligent Technology Co., Ltd.
Address: C297, Room 1505, No. 5 Jianzhong Road, Zhongshan Avenue, Tianhe District, Guangzhou, Guangdong 510000, China
Privacy contact: privacy@huanfine.com
Product support: support@huanfine.com
9. Website reservation emails and site storage
When you enter an email address in the reservation dialog on the website and press the button, the page only attempts to compose a pre-filled draft in your email app; the address is not submitted to a website server or written to a website database. Only after you confirm sending in your email app are the address and the reservation intent sent through the mail service you choose to our product support mailbox, where they are received and stored by the business email service we use. The emails are used to handle TestFlight invitation requests and App Store launch notices; whether the draft itself is stored in your mail account is determined by the mail app or service you use.
Reservation emails are deleted within 30 days after the last TestFlight invitation or App Store launch notice is sent. You may contact product support at any time to request earlier deletion. The website stores only your display-theme and language preference locally in the browser and does not use those settings to store reservation addresses.