腕上回声·WristEcho

隐私政策

生效日期:2026 年 10 月 27 日
适用于腕上回声(WristEcho)iPhone App、Apple Watch App「回声」、表盘组件和本网站

English version: Privacy Policy in English

先说结论:腕上回声没有服务器,不收集任何数据。录音、转写、声纹、搜索和 AI 整理都在你自己的设备上完成,开发者看不到、也拿不到你的任何内容。

这份政策由谁负责

腕上回声由一位独立开发者开发和发布,App Store 上显示的开发者就是我们。文中的「我们」指开发者,「你」指使用 App 的人。有任何隐私问题,请写信到 wty2003728@gmail.com。

我们不收集数据

  • 没有账号,不需要注册或登录。
  • 没有自己的服务器,你的录音、文字、声纹和日报都不会传给我们。
  • App 里没有统计、广告、崩溃上报或追踪类的第三方代码,也不跨 App 或网站追踪你。
  • 我们不出售、不出租、不共享任何个人信息,因为我们手里根本没有。

App Store 上这款 App 的隐私标签是「未收集数据」。

只在你设备上处理的数据

数据怎么产生保存在哪里
录音你在手表或 iPhone 上点开始后录下的声音,或者你导入的音频文件iPhone。手表上只是暂存,传到 iPhone 后删除
转写文字iPhone 在本机把录音转成文字iPhone
说话人标签、声纹和声音特征见下一节iPhone
搜索索引为了能按意思搜索,iPhone 把文字换算成一组组数字iPhone,不进备份,需要时从文字重新建立
日报、周报、标题和问答在本机用 Apple 智能、你下载的本地模型或摘录整理生成iPhone
待办从日报里整理出来,可以编辑、勾选和删除iPhone。你点「加入提醒事项」后,会写进系统默认的提醒事项列表,并由这个列表所属的账户同步(iCloud,或你添加的 Exchange、Google 等账户)
设置你在 App 里做的选择,比如转写语言、自动清理iPhone 和手表

如果你打开了 iCloud 云备份或用电脑备份 iPhone,其中的文字、声纹、日报等还会随你自己的备份一起保存(音频默认不进备份),见下面的「iCloud 和电脑备份」。

转写用的是 Apple 系统自带的离线语音识别,或者 App 内置的识别模型;区分说话人和声纹用的是 App 内置的模型;按意思搜索用的是 Apple 的 NaturalLanguage 框架。这些都在设备上运行。

声纹和其他人的声音

录音会录下你身边的人。和别人说话时,请让对方知道你在录音,并遵守当地关于录音的法律,有的地方要求在场的每个人都同意。要不要告知、怎么取得同意,由你负责。第一次使用时 App 会请你确认这一点,录音时手表和 iPhone 上都有明显的提示。

声纹是什么。声纹是从一段说话声音里算出来的一组数字,用来判断后来的录音里是不是同一个人在说话。它不是录音本身。

声音特征。为了以后还能认出是谁在说话,每段转写会为其中每个说话人存一份声音特征(同样是一组数字)。没认出来的人,声音特征会和这一段的音频一起删除,只有陌生人和环境声的段默认 14 天后清理;删除某个人时,和这个人有关的声音特征也一起删除。你确认某个人知道并同意被记住后,以前录音里还留着这个声音的地方也会标上这个人。

声纹怎么来的。

  • 你自己对着 iPhone 读一段文字,大约 20 秒。
  • 家人或同事在你身边读同样一段文字。录之前,App 会提醒你先征得对方同意。
  • 你在某段录音里把一个说话人标成某个人时,默认只标这一段,不会提取声纹。只有你确认对方知道并同意被识别,App 才会从这段录音里提取这个声音的特征,加到这个人的声纹里,方便以后认出来。标成「我」时,会直接用来完善你自己的声纹。

声纹怎么用。只用来在你的录音里标出谁在说话。声纹和声音特征保存在你的 iPhone 上,除了随你自己的 iCloud 或电脑备份保存,不会离开你的设备,不会发给我们或任何第三方,也不会被用来判断情绪、健康、年龄、性别等任何个人特征。

怎么删除。在「设置 › 人物与声纹」里可以删除某个人,或者重录声纹。删除某个人后,录音和文字都保留,只是不再标出这个人的名字,和这个人有关的声音特征也会删除。「删除全部数据」会删除所有声纹和声音特征。

在一些地方,声纹属于生物识别信息或敏感个人信息,例如欧盟《通用数据保护条例》、中国《个人信息保护法》和美国伊利诺伊州的《生物识别信息隐私法》。给别人录声纹之前,请先取得对方明确的同意。

存在哪里,怎么保护

  • 数据存在 App 在 iPhone 上的私有存储空间里,其他 App 不能直接读取,「文件」App 里也看不到。
  • 数据受 iOS 数据保护。iPhone 开机后第一次解锁之后可以读写,所以锁屏时也能继续录音和转写。
  • 手表上的录音按 10 分钟一段暂存,通过 Apple 的 Watch Connectivity 传给你配对的 iPhone,不经过我们。iPhone 确认收到后,手表上的那一段就会删除。
  • 你可以在「设置 › 隐私」里打开应用锁。打开后,每次打开 App 或者离开超过 1 分钟再回来,都要用面容 ID、触控 ID 或锁屏密码验证,多任务界面里也看不到 App 里的内容。

iCloud 和电脑备份

腕上回声不用 iCloud 同步,也不把数据存到任何云端。但如果你打开了 iPhone 的 iCloud 云备份,或者用电脑备份 iPhone,系统会按 Apple 的规则备份 App 的数据:

  • 录音音频默认不进备份。「设置 › 存储 › 音频不进 iCloud 备份」默认是打开的;关掉这个开关,音频也会进备份。Apple 说明这个设置是给系统的提示,不能保证在所有情况下都不被备份。
  • 转写文字(包括其中的声音特征)、日报、待办和声纹会随设备备份一起保存。用这个备份恢复新 iPhone 时,它们会一起回来。
  • 搜索索引不进备份。恢复以后,App 会从转写文字重新建立。
  • 下载的本地模型不进备份。

备份由 Apple 保存在你的 Apple 账号下并加密,打开「高级数据保护」后是端到端加密。我们访问不到你的备份。

App 什么时候会联网

App 没有自己的服务器,只在下面这些情况联网,而且都不会上传你的录音、文字或声纹:

  • 下载语音识别资源。某种语言第一次转写时,iOS 会从 Apple 下载这种语言的离线识别资源。
  • 下载语言资源。第一次建立搜索索引时,iOS 会从 Apple 下载 NaturalLanguage 框架需要的语言资源。
  • Apple 智能的模型由系统下载和管理,App 不参与。
  • 下载本地模型,只在你确认之后。App 从 huggingface.co 下载公开的模型文件,连不上时改用镜像站 hf-mirror.com。请求里只有模型文件的地址,不带账号、Cookie 或你的任何内容。和访问任何网站一样,对方服务器会看到你的 IP 地址和系统自动附带的基本信息(比如系统版本)。这两个网站由第三方运营,有各自的隐私政策。
  • App Store 地区。App 通过 StoreKit 读取 App Store 的国家或地区,用来决定是否提供生成式 AI。
  • 打开网页和发邮件。你点隐私政策、条款或帮助时,链接在 Safari 里打开;你点「联系我们」时,打开的是你自己的邮件 App,发不发、写什么由你决定。

AI 怎么处理

  • Apple 智能:在支持的 iPhone 上,日报、周报、标题和问答用 Apple 的 Foundation Models 框架在本机生成,不使用 Apple 的私有云计算(Private Cloud Compute)。Apple 智能本身受 Apple 隐私政策约束。
  • 本地模型:你选择下载的开源模型(Qwen3,Apache 2.0 许可)用 MLX 在 iPhone 上运行。
  • 摘录整理:不用任何生成模型,只从你的录音文字里挑出原话。

腕上回声不使用任何第三方 AI 服务,也不需要 API Key。AI 生成的内容可能出错,要紧的事请回听原声核对。如果以后在中国大陆 App Store 上架,那里下载的版本不启用生成式 AI 功能,只用摘录整理。

购买

腕上回声在 App Store 付费下载,没有 App 内购买。付款由 Apple 处理,我们拿不到你的姓名、Apple 账号或付款信息。Apple 提供给开发者的销售报告是汇总数据,不能识别到你个人。

崩溃报告和诊断信息

App 里没有崩溃上报工具。只有你在 iPhone 的「设置 › 隐私与安全性 › 分析与改进」里打开了「与 App 开发者共享」,Apple 才会把崩溃日志和汇总的使用数据提供给我们。这些数据由 Apple 收集,不包含你的录音和文字内容。

遇到问题时,你可以在「设置 › 帮助与支持 › 诊断信息」里生成一份诊断信息:App 和系统版本、设备型号、设置、录音段数和处理队列这类统计,以及系统交给 App 的崩溃和性能报告。里面不包括任何录音、文字、人名或声纹。发送前你能看到全部内容,只有你自己点分享,它才会离开这台 iPhone。

保留和删除

  • 数据会一直留在你的设备上,直到你删除它。
  • 自动清理旧音频默认打开,可以在「设置 › 存储」里调整:只有陌生人和环境声的段,音频默认保留 14 天(可设 1 到 90 天);有认识的人说话的段,音频默认保留 90 天(可选 30 天、1 年或一直保留);还没录你自己的声纹时,认不出的声音也按认识的人的时间保留;标了 ⭐ 的段保留音频;还没转写的音频不会自动清理;完全没人说话的段,音频会立即删除。清理只删音频,文字和搜索一直保留。
  • 空间不足时:iPhone 剩余空间不到 2 GB 时,先清理只有陌生人和环境声的音频,还不够再清理 30 天以前的其他音频。标了 ⭐ 的段和所有文字都不受影响。
  • 手动删除:可以删除整场录音、单个 10 分钟的段、某个人的声纹、下载的本地模型和示例数据。
  • 删除全部数据:「设置 › 删除全部数据」会删除这台 iPhone 上的录音、文字、声纹、日报、待办和搜索记录,设置会保留。还在手表上、没传到 iPhone 的录音,之后仍会传过来。
  • 删除 App 会删除它在设备上的全部数据。已有的 iCloud 或电脑备份按 Apple 的规则保留,你可以在系统设置里管理或删除备份。
  • 已经加进「提醒事项」的待办、你导出或分享出去的文件,由你自己保管,需要在对应的地方删除。

导出

「设置 › 存储 › 导出全部文字」会把所有转写按天整理成一个文本文件,你可以存到「文件」或者发给自己。单场录音和日报也可以分享文字,单独一段也可以分享它的录音和文字。导出的文件由你保管。

儿童

腕上回声不是为 13 岁以下(或当地法律规定的年龄以下)的儿童设计的。我们不收集任何人的个人信息,包括儿童。如果家长担心孩子的使用,所有数据都在设备上,可以按上面的方法删除。

在法律有要求的 Apple 账号上(例如美国德州),App 会通过系统向你询问一次年龄段(Apple 的 Declared Age Range),不保存你的年龄,也不会发给我们。

你的权利

数据只在你的设备和你自己的备份里,所以你可以直接在 App 里查看、导出、更正(比如改转写里的某一句、改日报的标题和摘要、改说话人)和删除。我们手里没有关于你的数据,没法替你查询、更正或删除,也没法帮你找回丢失的数据。

如果你给我们写邮件,我们会收到你的邮箱地址和你写的内容,只用来回复你,不会用于营销,也不会交给别人。支持邮箱由 Gmail 提供,邮件会经过 Google 的服务器。你可以随时要求我们删除往来邮件。

本网站

本网站是托管在 GitHub Pages 上的静态网页,不用 Cookie,不放统计代码,也不加载外部字体或脚本。GitHub 可能出于安全和运维需要记录访问者的 IP 地址,详见 GitHub 的隐私声明。

政策变更和联系方式

如果这份政策有变化,我们会更新本页和顶部的生效日期;有重要变化时,会在 App 的更新说明里告诉你。以后如果加入任何需要收集数据的功能,会先更新这份政策和 App Store 上的隐私标签。

联系邮箱:wty2003728@gmail.com

Privacy Policy

Effective October 27, 2026
Applies to the WristEcho (腕上回声) iPhone app, its Apple Watch app, its watch face complication and this website

In short: WristEcho has no servers and collects no data. Recording, transcription, voiceprints, search and AI summaries all happen on your own devices. The developer cannot see or access any of your content.

Who is responsible

WristEcho is developed and published by an independent developer, the developer shown on the App Store. "We" means the developer and "you" means the person using the app. For any privacy question, email wty2003728@gmail.com.

We collect no data

  • There is no account. You never sign up or log in.
  • We run no servers. Your recordings, transcripts, voiceprints and reports are never sent to us.
  • The app contains no third-party analytics, advertising, crash-reporting or tracking code, and it does not track you across apps or websites.
  • We do not sell, rent or share personal information, because we don't have any.

The app's App Store privacy label is "Data Not Collected".

Data processed only on your devices

DataWhere it comes fromWhere it is kept
RecordingsAudio recorded after you tap Start on Apple Watch or iPhone, or audio files you importiPhone. The watch only holds segments until they reach the iPhone
TranscriptsYour iPhone turns the audio into text on the deviceiPhone
Speaker labels, voiceprints and voice featuresSee the next sectioniPhone
Search indexTo search by meaning, your iPhone turns text into numerical vectorsiPhone, excluded from backups and rebuilt from the transcripts when needed
Daily and weekly reports, titles, answersGenerated on the device by Apple Intelligence, a local model you downloaded, or extract modeiPhone
To-dosTaken from your reports; you can edit, check off and delete themiPhone. If you tap Add to Reminders, they are written to your default Reminders list and synced by the account that list belongs to (iCloud, or an Exchange, Google or other account you added)
SettingsYour choices in the app, such as transcription language and cleanupiPhone and Apple Watch

If you use iCloud Backup or back up your iPhone to a computer, the transcripts, voiceprints, reports and other data above are also included in your own backup (audio is left out by default). See "iCloud and computer backups" below.

Transcription uses Apple's built-in offline speech recognition or a speech model bundled with the app. Speaker separation and voiceprints use models bundled with the app, and search by meaning uses Apple's NaturalLanguage framework. All of these run on the device.

Voiceprints and other people's voices

Recordings capture the people around you. When you talk with others, let them know you are recording and follow the recording laws where you are; some places require everyone present to agree. Whether and how you inform people and obtain consent is your responsibility. The app asks you to confirm this before first use, and a clear indicator is shown on the watch and iPhone while recording.

What a voiceprint is. A voiceprint is a set of numbers calculated from a sample of someone's speech, used to tell whether the same person is speaking in later recordings. It is not the recording itself.

Voice features. So that people can be recognized later, each transcript stores a voice feature (also a set of numbers) for every speaker in it. For a speaker who isn't recognized, the feature is deleted together with that segment's audio; segments with only strangers or background sound are cleaned up after 14 days by default. Removing a person deletes the voice features tied to them. When you confirm that someone knows and agrees to be remembered, earlier recordings that still hold their voice are labeled with their name too.

How voiceprints are created.

  • You read a short text to your iPhone for about 20 seconds.
  • A family member or colleague reads the same text next to you. Before recording, the app reminds you to get their consent first.
  • When you label a speaker in a recording as a particular person, only that segment is labeled by default and no voiceprint is extracted. Only after you confirm that the person knows and agrees to be recognized does the app extract that voice's features from the recording and add them to the person's voiceprint so they can be recognized later. Labeling a speaker as yourself refines your own voiceprint directly.

How voiceprints are used. Only to label who is speaking in your recordings. Voiceprints and voice features stay on your iPhone and never leave your devices except inside your own iCloud or computer backups. They are never sent to us or anyone else, and are never used to infer emotion, health, age, gender or any other personal characteristic.

How to delete them. In Settings › People & Voiceprints you can delete a person or re-record a voiceprint. Deleting a person keeps the recordings and text but stops labeling that person's name, and deletes the voice features tied to them. Delete All Data removes every voiceprint and voice feature.

In some places voiceprints count as biometric or sensitive personal information, for example under the EU General Data Protection Regulation, China's Personal Information Protection Law and Illinois' Biometric Information Privacy Act. Get a person's explicit consent before recording their voiceprint.

Where data is stored and how it is protected

  • Data is kept in the app's private storage on your iPhone. Other apps cannot read it, and it does not appear in the Files app.
  • Data is covered by iOS Data Protection and becomes available after the first unlock following a restart, so recording and transcription can continue while the phone is locked.
  • On Apple Watch, audio is held in 10-minute segments and sent to your paired iPhone through Apple's Watch Connectivity, never through us. Each segment is deleted from the watch once the iPhone confirms it arrived.
  • You can turn on App Lock in Settings › Privacy. The app then asks for Face ID, Touch ID or your passcode every time you open it or return after more than a minute, and hides its content in the app switcher.

iCloud and computer backups

WristEcho does not use iCloud sync or store data in any cloud. If you use iCloud Backup or back up your iPhone to a computer, iOS backs up app data under Apple's rules:

  • Audio is excluded from backups by default. Settings › Storage › Keep Audio Out of iCloud Backup is on by default; turn it off to include audio. Apple describes this setting as a hint to the system rather than a guarantee.
  • Transcripts (including their voice features), reports, to-dos and voiceprints are included in device backups. They come back when you restore a new iPhone from that backup.
  • The search index is not backed up. After a restore, the app rebuilds it from the transcripts.
  • Downloaded local models are never backed up.

Apple stores backups encrypted under your Apple Account, end-to-end encrypted if Advanced Data Protection is on. We have no access to your backups.

When the app goes online

WristEcho has no servers of its own. It goes online only in these cases, and none of them uploads your recordings, transcripts or voiceprints:

  • Speech recognition assets. The first time you transcribe a language, iOS downloads the offline recognition files for it from Apple.
  • Language assets. When the search index is first built, iOS downloads the language files the NaturalLanguage framework needs from Apple.
  • The Apple Intelligence model is downloaded and managed by iOS, not by the app.
  • Local model download, only after you confirm it. The app downloads public model files from huggingface.co, falling back to the mirror hf-mirror.com. The requests contain only the file addresses, with no account, cookies or content of yours. As with any website, those servers see your IP address and basic information the system adds automatically, such as the OS version. Both sites are run by third parties with their own privacy policies.
  • App Store region. The app reads your App Store country or region through StoreKit to decide whether generative AI is offered.
  • Web pages and email. The privacy policy, terms and help pages open in Safari. Contact Us opens your own Mail app, and you decide whether and what to send.

How AI is used

  • Apple Intelligence: on supported iPhones, reports, titles and answers are generated on the device with Apple's Foundation Models framework. Private Cloud Compute is not used. Apple Intelligence itself is covered by Apple's privacy policy.
  • Local model: an open-source model you choose to download (Qwen3, Apache 2.0 license) runs on your iPhone with MLX.
  • Extract mode: no generative model at all; it picks original sentences from your transcripts.

WristEcho uses no third-party AI service and needs no API key. AI-generated content can be wrong, so check important details against the original audio. If WristEcho is later offered on the China mainland App Store, copies downloaded there will not offer generative AI features and will use extract mode only.

Purchases

WristEcho is a paid download from the App Store, with no in-app purchases. Apple processes payment; we never receive your name, Apple Account or payment details. The sales reports Apple gives developers are aggregated and do not identify you.

Crash reports and diagnostics

The app contains no crash-reporting tool. Only if you turn on Share With App Developers in iPhone Settings › Privacy & Security › Analytics & Improvements does Apple provide us with crash logs and aggregated usage data. Apple collects that data, and it does not contain your recordings or transcripts.

If something goes wrong, Settings › Help & Support › Diagnostics creates a diagnostics file: app and OS version, device model, settings, counts such as recording segments and processing queues, and the crash and performance reports iOS gives the app. It contains no recordings, text, names or voiceprints. You see everything in it first, and it leaves your iPhone only if you share it yourself.

Retention and deletion

  • Your data stays on your devices until you delete it.
  • Automatic audio cleanup is on by default and adjustable in Settings › Storage: audio of segments with only strangers or background sound is kept 14 days by default (1 to 90 days); audio with people you know is kept 90 days by default (or 30 days, 1 year or forever). Until you record your own voiceprint, unrecognized speech follows the people-you-know period. Starred segments keep their audio, audio that hasn't been transcribed yet is never cleaned up automatically, and audio of segments with no speech is deleted right away. Cleanup removes audio only; text and search stay.
  • When storage runs low: with less than 2 GB free, the app first removes audio with only strangers or background sound, then other audio older than 30 days. Starred segments and all text are never touched.
  • Manual deletion: you can delete a whole recording, a single 10-minute segment, a person's voiceprint, a downloaded local model and the sample data.
  • Delete All Data in Settings removes recordings, transcripts, voiceprints, reports, to-dos and search history from this iPhone and keeps your settings. Segments still on the watch that have not reached the iPhone will arrive later.
  • Deleting the app removes all of its data from the device. Existing iCloud or computer backups follow Apple's rules, and you can manage or delete them in system settings.
  • To-dos you added to Reminders and files you exported or shared are under your control; delete them where they are.

Export

Settings › Storage › Export All Text collects all transcripts, by day, into one text file you can save to Files or send to yourself. You can also share the text of a single recording or report, or the audio and text of a single segment. Exported files are under your control.

Children

WristEcho is not designed for children under 13, or under the age set by local law. We collect no personal information from anyone, including children. If a parent is concerned about a child's use, all data is on the device and can be deleted as described above.

On Apple Accounts where the law requires it (for example in Texas), the app asks the system once for your age range (Apple's Declared Age Range). It does not store your age or send it to us.

Your rights

Because your data lives only on your devices and in your own backups, you can view, export, correct (for example, edit a line of a transcript, a report's title and summary, or a speaker label) and delete it directly in the app. We hold no data about you, so we cannot look it up, correct it or delete it for you, and we cannot recover lost data.

If you email us, we receive your email address and what you write. We use it only to reply, never for marketing, and we don't pass it to anyone. Our support mailbox is hosted by Gmail, so messages pass through Google's servers. You can ask us to delete our correspondence at any time.

This website

This website is a set of static pages hosted on GitHub Pages. It uses no cookies, no analytics and no external fonts or scripts. GitHub may log visitors' IP addresses for security and operations; see GitHub's Privacy Statement.

Changes and contact

If this policy changes, we will update this page and the effective date above, and point out significant changes in the app's release notes. Before adding any feature that would collect data, we will update this policy and the App Store privacy label first.

Contact: wty2003728@gmail.com