1. 处理哪些数据

• 你在应用内主动录制的语音
• 由语音生成的转写文本
• 识别出的日程、待办或备忘（标题、时间、备注）
• 你授权后的日历与提醒事项：前后几天的日程用于判断时间和避免重复；较早的日程只在本机用于学习你常用的名字
• 你对转写或标题所做的修改
• 一个随机生成的设备标识，只用于统计用量和防止滥用
• 你主动导出或恢复的本地备份

2. 如何使用

• 把语音转写为文字
• 判断是日程、待办还是备忘，提取标题和时间
• 写入 Calendar 或 Reminders：有把握时直接写入并给出可撤销的回执，没把握时先让你确认
• 学习你的修改，减少同一个词再次听错
• 按你的要求导出、恢复或删除本地数据

3. 发送到云端的内容

语音识别和意图解析需要云端服务。Krono 只发送完成这一次请求所必需的内容，经 Krono 运营的代理服务转发：

• 录音，以及你常用的专有名词 → Deepgram（语音转写）
• 转写文本，以及前后几天日程的标题和时间 → Fireworks AI（美国，运行开源 DeepSeek 模型，做意图解析）
• 转写前后的修改对比 → Fireworks AI（提取你常用的专有名词）

Fireworks 在美国、日本、英国、德国或冰岛的服务器上处理，不保存请求内容，不用它训练模型，数据不发送给 DeepSeek 公司，也不经过中国。

录音时的实时字幕由 Apple 语音识别提供，按 Apple 的隐私政策处理。

Deepgram 的每个请求都退出了它的模型改进计划，录音只在处理时保留；Fireworks 对开源模型默认不保存请求内容。两家都不用你的数据训练模型。

第一次使用语音功能前，Krono 会先说明这些并征得你的同意，没同意之前不发送任何内容；可以随时在设置的「云端识别与解析」中撤回。

代理服务不保存录音、转写、日历或提醒事项内容，只按设备标识记录每天的用量（如转写秒数、请求次数）和运行指标。

4. 本地存储与控制

写入记录、录音、识别纠错数据和学到的名字都存储在设备本地。录音默认一直保留，可在设置里打开「自动清理旧录音」只保留最近 30 天。

• 查看和修改：在系统日历 / 提醒事项中进行
• 撤销一次写入：使用写入后的回执
• 删除全部本地数据、导出或恢复备份：在应用设置中操作
• 随时在系统设置中关闭任一权限

5. 欧洲经济区、英国和瑞士用户（GDPR）

• 数据控制者：晏恩华（个人开发者），地址 上海市宝山区联杨路 1078 弄 3 号 1104 室，邮箱 solonman@gmail.com
• 处理依据：转写、解析和写入是履行你请求的服务所必需（第 6(1)(b) 条）；按设备统计用量、限流和防滥用基于正当利益（第 6(1)(f) 条），只记用量、不记内容；读取日历和提醒事项基于你在 iOS 中授予的权限，可随时撤回
• 跨境传输：第 3 节的服务商在欧洲经济区以外处理数据，传输依据与各服务商签订的数据处理协议及欧盟标准合同条款
• 保存期限：设备上的数据保存到你删除为止，打开「自动清理旧录音」后录音只留 30 天；代理的每日用量记录约 13 个月后自动删除；两家 AI 服务商不保留请求内容
• 你的权利：访问、更正、删除、限制或反对处理、获得数据副本。设备上的数据可在 App 设置里导出或全部删除；代理上的用量记录请发邮件申请访问或删除。你也有权向所在国的数据保护监管机构投诉

1. Data Krono processes

• Voice recordings you make in the app
• Transcripts generated from them
• The events, to-dos and notes recognised from them (title, time, notes)
• With your permission, Calendar and Reminders: the surrounding days are used to place times and avoid duplicates; older events are used on this device only, to learn the names you use
• Corrections you make to transcripts or titles
• A randomly generated device identifier, used only to meter usage and prevent abuse
• Backups you choose to export or restore

2. How it is used

• To transcribe speech
• To tell whether you meant an event, a to-do or a note, and extract its title and time
• To write to Calendar or Reminders: directly with an undoable receipt when Krono is confident, after asking you when it is not
• To learn from your corrections so the same word is not misheard again
• To export, restore or delete local data when you ask

3. What is sent to the cloud

Speech recognition and intent parsing run in the cloud. Krono sends only what one request needs, through a proxy operated by Krono:

• The recording and the proper nouns you use → Deepgram (transcription)
• The transcript and the titles and times of events in the surrounding days → Fireworks AI (US; runs the open-source DeepSeek model for intent parsing)
• Before/after pairs of your corrections → Fireworks AI (learning your proper nouns)

Fireworks processes requests on servers in the US, Japan, the UK, Germany or Iceland, does not store them or train on them, and does not send them to DeepSeek or to China.

The live caption shown while you speak comes from Apple speech recognition and is handled under Apple's privacy policy.

Every request to Deepgram opts out of its Model Improvement Program, so recordings are kept only while they are processed; Fireworks does not store requests for open models. Neither trains models on your data.

Before you first use voice input, Krono shows this and asks for your consent; nothing is sent until you agree, and you can withdraw consent at any time under "Cloud recognition" in settings.

The proxy does not store recordings, transcripts, calendar or reminder content. It keeps only per-device daily usage counts (such as seconds transcribed and request counts) and operational metrics.

4. Storage and your controls

Records, recordings, corrections and learned names are stored on your device. Recordings are kept until you delete them, or for 30 days if you turn on "Auto-delete old recordings" in settings.

• View and edit entries in the system Calendar / Reminders apps
• Undo a write from its receipt
• Delete all local data, export or restore a backup in the app's settings
• Turn off any permission in iOS Settings at any time

5. Users in the EEA, UK and Switzerland (GDPR)

• Controller: Enhua Yan (晏恩华), individual developer, Room 1104, No. 3, Lane 1078, Lianyang Road, Baoshan District, Shanghai, China, solonman@gmail.com
• Legal basis: transcription, parsing and writing are necessary to provide the service you request (Art. 6(1)(b)); per-device usage metering, rate limiting and abuse prevention rely on our legitimate interest (Art. 6(1)(f)) and record usage only, never content; Calendar and Reminders access relies on the permission you grant in iOS, which you can withdraw at any time
• International transfers: the providers in section 3 process data outside the EEA under data processing agreements and the European Commission's Standard Contractual Clauses
• Retention: data on your device stays until you delete it (recordings for 30 days if you turn on auto-delete); the proxy's daily usage records are deleted automatically after about 13 months; the two AI providers do not keep request content
• Your rights: access, rectification, erasure, restriction, objection and portability. Export or delete on-device data from the app's settings; email us to access or delete the proxy's usage records for your device. You may also complain to your local data protection authority