DoneYet干了么Privacy Policy
Short version: DoneYet has no ads and no analytics SDKs, and an account is optional — every feature works without one. Your tasks and notes live on your device and, if you turn it on, in your own iCloud. The App Store version of DoneYet does not send your content to servers run by DoneYet. When you use the AI features, your request is handled by Apple's models: on your device, or on Apple's Private Cloud Compute.
What stays on your device
- Your plans and notes. Tasks, steps, goals, categories, completion history, the recycle bin, Records (notes and mind maps) and the images you add are stored in the app's private storage on your device. Imports and exports only use files you choose.
- Voice. Speech is turned into text on your device, by Apple's speech recognition or by an optional on-device speech model. Audio is not uploaded.
- Reminders. Notifications are scheduled on your device.
- Calendar and Reminders sync. Only if you turn it on. DoneYet then reads and writes the calendars or lists you choose, on your device.
- Search. If you allow it, task titles are added to the system's on-device search index (Spotlight).
iCloud
"Sync and back up with iCloud" is on by default and can be turned off in Settings. When it is on, the data above is also stored in your own iCloud (Apple's CloudKit private database). Only devices signed in to the same Apple Account can read it. DoneYet cannot see it.
AI features
AI only suggests changes. Nothing is added to your plan until you review it and confirm. You choose the AI in Settings → AI Model:
- Apple on-device model. Everything is processed on your device and works offline.
- Apple cloud model (Private Cloud Compute). The text of your request, together with the tasks it needs (for example the task you are changing, or a few matching calendar events when you ask about your calendar), is sent to Apple's Private Cloud Compute. Apple uses it only to fulfill that request and does not store it; DoneYet's servers are not involved and we never see it. Apple applies a daily usage limit to each Apple Account. See Apple's Privacy Policy and Private Cloud Compute.
AI output can be wrong. Please check suggested times and details before you confirm.
Account (optional)
You can sign in with Apple, with Google, or with an email code. Signing in is optional. If you do, our account server (Cloudflare, United States) keeps:
- Who you are to us: an account number, the sign-in method and the identifier Apple or Google gives us for you, and your email address if you used email or Google (with Sign in with Apple you can hide your email; we then only get Apple's relay address and never show it). With Sign in with Apple and Google we may also receive your name if you choose to share it.
- Basic facts: when you signed up and last signed in, app version, language, region, and whether you are a DoneYet Pro member.
- Usage counts: how many times per day you used a few features (opened the app, used AI planning, chat or mind-map expansion, used voice input, created or completed a task, finished or skipped the introduction, saw or started a subscription). Only numbers — never the content of your tasks, notes, voice or AI conversations.
We use this to run your account and to understand which features people use so we can improve DoneYet. Verification codes and sign-in sessions are stored only as one-way hashes. We don't sell or share it, and we don't use it for advertising or tracking across other apps. Your tasks and notes are still not uploaded to us.
Delete your account anytime in Settings → Account → Delete Account. We then delete your account, sign-in identities, sessions and usage counts from our server, and revoke the Sign in with Apple authorization. Your tasks on your devices and in iCloud are not affected.
Purchases
DoneYet Pro subscriptions are sold and billed by Apple. We do not receive your name, email or payment details. The app checks whether a subscription is active using Apple's StoreKit on your device. The free tier counts how many AI requests you made today on your device only.
Downloads
If you choose (or your language defaults to) the on-device SenseVoice speech model, the app downloads the model file once from ModelScope, a third-party model hosting site. Like any download, that site sees your IP address; no personal content is sent.
Crash reports
The App Store version does not send crash reports to us. If you turn on "Share With App Developers" in your device's Analytics settings, Apple may share anonymous crash and usage data with us. You can turn that off at any time in iOS Settings.
Permissions
The app asks for the microphone and speech recognition (voice input), calendars and reminders (only if you turn on sync), notifications (reminders) and the camera (photos in Records), each at the moment you first use that feature. You can change them at any time in iOS Settings.
What we don't do
- No tracking, no advertising, no data brokers, no selling or sharing of personal information.
- No access to your contacts or location.
- No training of AI models on your content.
Children
DoneYet is not directed to children under 13 and we do not knowingly collect personal information from them.
Deleting your data
Your content isn't on our servers. If you signed in, delete your account in Settings → Account → Delete Account and we remove the account data described above. You can delete items in the app, turn off iCloud sync, remove DoneYet's data in Settings → [your name] → iCloud → Manage Storage, or delete the app.
Changes and contact
If this policy changes, we will update this page and the date above. Questions: support@doneyetapp.com.
隐私政策
简单说：干了么没有广告、不接第三方统计；账号可选，不登录也能用全部功能。你的任务和记录存在你的设备上；打开 iCloud 同步时，也存在你自己的 iCloud 里。App Store 上的干了么不会把你的内容发到干了么的服务器。用 AI 时，由苹果的模型处理：在你的设备上，或者在苹果的私密云计算上。
留在设备上的
- 任务和记录。任务、步骤、目标、分类、完成记录、回收站、「记录」（笔记和导图）和你加进去的图片，都存在设备上 App 自己的存储里。导入导出只用你自己选的文件。
- 语音。说的话在设备上转成文字（Apple 语音识别，或可选的本机语音模型），录音不上传。
- 提醒。通知由 App 在设备上安排。
- 日历和提醒事项同步。只有你打开后，App 才在设备上读写你选的日历或列表。
- 搜索。你允许的话，任务标题会放进系统在设备上的搜索索引（聚焦搜索）。
iCloud
「用 iCloud 同步和备份」默认打开，可以在设置里关掉。打开时，上面这些数据也存进你自己的 iCloud（Apple 的 CloudKit 私有数据库），只有登录同一个 Apple 账号的设备能读到，干了么看不到。
AI 功能
AI 只提建议，你看过、确认了才写进计划。用哪种 AI 在「设置 → AI 模型」里选：
- Apple 本机模型：全部在设备上处理，不联网也能用。
- Apple 云端模型（私密云计算）：你这句话的文字和需要的任务（比如你正在改的那一条；你让 AI 对照日历时，匹配到的少量日程）发到 Apple 的私密云计算处理。Apple 只用它完成这一次请求、不保存；干了么的服务器不经手，我们看不到。Apple 对每个 Apple 账号每天的用量有上限。
AI 可能出错，确认前请核对时间和细节。
账号（可选）
你可以用 Apple、Google 或邮箱验证码登录，不登录也能用全部功能。登录后，我们的账号服务器（Cloudflare，美国）会保存：
- 你在我们这里是谁：账号编号、登录方式、Apple 或 Google 给你的用户标识；用邮箱或 Google 登录时还有你的邮箱（用「通过 Apple 登录」可以隐藏邮箱，我们只拿到苹果的转发地址，也不显示）。你愿意提供时，可能还有名字。
- 基本情况：注册和最近登录时间、App 版本、语言、地区、是不是 Pro 会员。
- 使用次数：每天用了几次几个功能（打开 App、AI 规划 / 对话 / 导图展开、语音输入、新建 / 完成任务、看完 / 跳过引导、看到 / 开通会员）。只有次数，没有任务、记录、语音和 AI 对话的内容。
这些只用来管理你的账号、了解大家常用哪些功能好改进干了么。验证码和登录凭证只存单向哈希。不卖、不共享，不用来投广告，也不跨 App 跟踪。你的任务和记录照旧不上传给我们。
随时可以注销：设置 → 账号 → 注销账号。我们会删掉服务器上的账号、登录身份、会话和使用次数，并撤销「通过 Apple 登录」的授权。手机和 iCloud 里的任务不受影响。
购买
干了么 Pro 订阅由 Apple 销售和扣款，我们拿不到你的姓名、邮箱和付款信息。App 在设备上用 Apple 的 StoreKit 查订阅是否有效。免费版每天的 AI 次数只记在你的设备上。
下载
选用（或你的语言默认使用）本机 SenseVoice 语音模型时，App 会从第三方模型托管网站魔搭（ModelScope）下载一次模型文件。和任何下载一样，对方能看到你的 IP 地址，不会发送你的内容。
崩溃报告
App Store 版不向我们发送崩溃报告。如果你在系统「分析」设置里打开了「与 App 开发者共享」，Apple 可能把匿名的崩溃和使用数据转给我们，随时可以在系统设置里关掉。
权限
麦克风和语音识别（语音输入）、日历和提醒事项（只在打开同步时）、通知（提醒）、相机（在「记录」里拍照），都在你第一次用到对应功能时才问，随时可以在系统设置里改。
我们不做的事
- 不跟踪、不投广告、不卖也不共享个人信息。
- 不读通讯录、不读位置。
- 不用你的内容训练 AI 模型。
未成年人
干了么不面向 13 岁以下的儿童，我们不会有意收集他们的个人信息。
删除数据
你的内容不在我们的服务器上。登录过的话，在「设置 → 账号 → 注销账号」里注销，我们会删掉上面说的账号资料。你也可以在 App 里删除内容、关掉 iCloud 同步、在系统「设置 → 你的名字 → iCloud → 管理储存空间」里删掉干了么的数据，或者删除 App。
变更和联系
本政策有变化时会更新本页和上面的日期。有问题请写信到 support@doneyetapp.com。