一、核心原则：你的数据不经过我们的服务器

1. Core principle: your data never passes through our servers

Feng Apps 的所有产品遵循「服务器零存储」的设计：我们不搭建用于收集、存储或分析你个人数据的中心化服务器。每一款应用都在你的设备本地完成核心处理；涉及「同步」的应用仅作为通道，在你的设备与你自己选择的服务之间中转数据，我们全程无法接触你的内容。我们没有账号体系，不收集身份信息、设备指纹或行为数据。

Every Feng Apps product follows a zero-server-storage design: we do not operate centralized servers that collect, store, or analyze your personal data. Each app performs its core processing locally on your device. Apps that "sync" act purely as a channel between your device and a service you choose; we never have access to your content. We have no account system and collect no identity, device-fingerprint, or behavioral data.

二、各应用的数据说明

2. How each app handles data

2.1 缠论画线 / ChanLine（股票画线工具）

2.1 ChanLine (stock charting tool)

• 画线、参数、自选标的与 K 线回放等全部仅保存在本机 / 本应用私有存储，不上传任何服务器。
• 应用不要求登录、不绑定账号，因此不存在任何云端个人数据。
• 不含任何统计、广告或分析 SDK。

• Drawings, parameters, watchlists, and candlestick replays are stored only in local / app-private storage and are never uploaded to any server.
• The app requires no login and has no account binding, so there is no cloud personal data of any kind.
• It contains no analytics, advertising, or tracking SDKs.

2.2 23同步 / 23Sync（通讯录同步工具）

2.2 23Sync (contacts-sync tool)

23同步是一款基于 CardDAV 开放协议（RFC 6352）的通讯录同步工具，帮助你在手机与你自己的邮箱服务器之间双向同步联系人。它不收集、不存储、不传输你的通讯录内容到开发者服务器；所有联系人数据仅在你的手机与你本人配置的邮箱服务器之间直接传输（全程 HTTPS 加密），同步逻辑完全在你的设备本地运行。

23Sync is a contacts-sync tool based on the open CardDAV protocol (RFC 6352) that syncs your contacts between your phone and your own email server. It does not collect, store, or transmit your contact data to our servers; all contact data moves only between your phone and the email server you configure (encrypted with HTTPS), with sync logic running entirely on your device.

• 本应用主动收集的信息：无。不含任何统计、广告或分析 SDK。
• 付费激活时一次性上传的最小信息：你输入的激活码，以及设备标识哈希（ANDROID_ID 经 SHA-256 不可逆计算，无法反推设备或身份），仅用于验证激活码有效性并限制每台激活码最多 3 台设备。激活成功后结果保存在本机，之后永久离线使用。
• 仅保存在本机、从不上传：邮箱账号与授权码、同步状态与设置、试用与激活状态。

• Information the app actively collects: none. No analytics, advertising, or tracking SDKs.
• Minimal data uploaded once at paid activation: the activation code you enter, and a device-identifier hash (ANDROID_ID run through irreversible SHA-256, from which neither the device nor your identity can be derived), used only to validate the code and limit it to 3 devices. After activation, the result is stored locally and the app works fully offline thereafter.
• Stored locally only, never uploaded: email account and authorization code, sync status and settings, trial and activation state.

2.3 未来工具类应用

2.3 Future utility apps

我们后续发布的效率与工具类应用将继续遵循「服务器零存储 / 本地处理 + 通道中转」原则。若某款新应用因功能需要引入不同于上述的数据处理方式，我们会单独、明确地告知你，并在必要时征得你的单独同意，不会默默改变本政策所承诺的边界。

Future productivity and utility apps will continue the "zero-server-storage / local processing + channel relay" principle. If a new app requires a different data-handling approach for its functionality, we will notify you separately and clearly and, where necessary, obtain your explicit consent — we will not silently change the boundaries promised by this policy.

三、我们不会与第三方共享你的数据

3. We do not share your data with third parties

我们不出售、不租赁、不共享你的任何个人数据给任何第三方。唯一的例外是你主动配置用于同步的服务（例如你在 23同步 中自行选择的邮箱服务商），相关数据仅在你设备与该服务商服务器之间传输。我们自身不接入任何第三方数据 SDK。

We do not sell, rent, or share any of your personal data with any third party. The only exception is a service you deliberately configure for syncing (for example, the email provider you choose in 23Sync); that data travels only between your device and that provider's servers. We ourselves integrate no third-party data SDKs.

四、第三方 SDK 与广告

4. Third-party SDKs and advertising

无。Feng Apps 全系产品不含任何广告、统计、崩溃分析或行为追踪类第三方 SDK。我们不投放广告，也不向任何分析平台回传使用数据。

None. No Feng Apps product contains any third-party SDK for advertising, analytics, crash reporting, or behavioral tracking. We run no ads and send no usage data to any analytics platform.

五、权限说明（最小必要原则）

5. Permissions (data minimization)

我们只申请实现核心功能所必需的最小权限，且不同应用权限不同。例如：通讯录读/写权限仅由 23同步 申请（用于同步），缠论画线不申请任何通讯录或敏感权限。

六、跨境用户与数据出境

6. Cross-border users and data transfer

Feng Apps 服务面向全球用户。由于我们的产品采用服务器零存储架构，你的个人内容（如通讯录、画线）不会传输到我们的任何服务器，亦不会跨境传输。除你自行配置的邮箱服务商外，不存在由我们发起的个人信息出境。如未来因功能需要发生任何数据出境，我们将依据适用法规（包括中国《个人信息保护法》与欧盟 GDPR）单独告知并征得你的同意。

Feng Apps serves users worldwide. Because our products use a zero-server-storage architecture, your personal content (such as contacts or drawings) is never transmitted to any of our servers and never transferred cross-border. Apart from the email provider you configure yourself, there is no outbound transfer of personal information initiated by us. If any future feature requires cross-border transfer, we will disclose it separately and obtain your consent in accordance with applicable law, including China's PIPL and the EU GDPR.

七、用户权利

7. Your rights

• 查看：本地数据可在对应应用及系统设置中随时查看。
• 删除：卸载应用即删除全部本地数据；已同步内容归你所有，可通过对应服务（如邮箱网页端）管理。
• 停止与撤回：可随时在应用内或系统设置中停止同步、关闭权限或撤销授权。
• 跨境用户额外权利：依据 GDPR，你享有访问、更正、删除、限制处理、数据可携及反对的权利，可通过下方联系方式行使。

• Access: local data can be viewed anytime in the app and system settings.
• Deletion: uninstalling the app deletes all local data; synced content belongs to you and can be managed via the relevant service (e.g., your email web client).
• Stop and withdraw: you can stop sync, disable permissions, or revoke authorization anytime in the app or system settings.
• Additional rights for cross-border users: under the GDPR you have rights of access, rectification, erasure, restriction, portability, and objection, which you may exercise via the contact details below.

八、数据安全

8. Data security

你的凭据与本地数据仅存储于本机应用私有目录（如 Android 沙箱），其他应用无法访问。与你所配置服务之间的网络传输均使用 HTTPS 加密。设备标识经 SHA-256 不可逆哈希后才用于激活验证，服务器无法反推你的设备或身份。

Your credentials and local data are stored only in the app's private directory on your device (e.g., the Android sandbox) and cannot be accessed by other apps. Network transfers with services you configure use HTTPS encryption. Device identifiers are run through irreversible SHA-256 hashing before activation validation, so the server cannot derive your device or identity.

九、云端共建功能说明

9. Note on cloud co-building features

部分产品曾规划「匿名模型共建」等可选的云端能力。截至本政策更新日期，此类功能尚未进一步开发，也未上线，因此我们目前不收集任何用于共建的云端数据。若未来正式上线任何上传 / 云端协同功能，我们将单独说明其数据用途，并单独征得你的授权，不会默认开启。

Some products previously sketched optional cloud capabilities such as "anonymous model co-building." As of this policy update, such features are not yet developed or released, so we currently collect no cloud data for co-building. If any upload / cloud-collaboration feature is launched in the future, we will describe its data use separately and obtain your explicit authorization — it will never be enabled by default.

十、未成年人保护

10. Children's privacy

Feng Apps 产品为效率与工具类应用，不针对 14 岁以下未成年人设计，不主动收集任何未成年人信息。如您为未成年人监护人，发现未成年人未经授权使用本应用，请联系我们删除相关信息。

Feng Apps products are productivity and utility tools, not directed at children under 14, and we do not knowingly collect any minor's information. If you are a guardian and discover unauthorized use by a minor, contact us to remove the relevant information.

十一、政策变更

11. Changes to this policy

如有重大变更，我们将通过应用内通知及本页面提前 30 天告知，并注明更新日期。继续使用相关应用即视为同意变更后的隐私政策。

For material changes, we will notify you at least 30 days in advance via in-app notice and this page, with the update date shown. Continued use of the apps constitutes acceptance of the revised policy.

十二、联系我们

12. Contact us

• 开发者：梁峰（独立开发者）
• 客服邮箱：dev@feng.chat

• Developer: Liang Feng (independent developer)
• Email: dev@feng.chat

十三、免责声明

13. Disclaimer

Feng Apps 为独立开发者作品，与各邮箱服务商（如腾讯、网易、苹果等）无任何隶属或授权关系。同步行为发生在你与你自己选择的邮箱服务商之间，其服务可用性由对应服务商负责。

Feng Apps is the work of an independent developer and has no affiliation with or authorization from any email provider (e.g., Tencent, NetEase, Apple). Sync occurs between you and the email provider you choose; its availability is the provider's responsibility.