Tapkeep 隐私政策
生效日期：2026-09-05 · 适用于 Tapkeep（iOS / Android）
一句话
Tapkeep 没有账号、没有服务器。你的记账数据只存在于你的设备和你自己选择的网盘里。我们（开发者）无法访问、也不会收集你的任何记账数据。
1. 我们收集什么
不收集。App 不接入任何统计、广告或崩溃上报 SDK，不向开发者的服务器发送任何数据（我们没有服务器）。崩溃日志只保存在你的设备上，仅当你主动在「设置 → 关于 → 导出诊断日志」时才会导出，由你决定是否发给我们。
2. 数据存放在哪里
- 设备本地：账户、交易、类目、附件等保存在 App 的私有存储中；开启应用锁后需要 Face ID / 指纹 / PIN 才能查看。
- 你自己的网盘（可选）：如果你开启同步，App 会把账本以文件形式写入你指定的 WebDAV 服务器或 Google Drive。这些文件由你的网盘服务商存储，受其隐私政策约束；我们无法访问。
- 凭证：WebDAV 密码、Google 登录令牌保存在系统安全存储（iOS Keychain / Android Keystore）中，从不写入日志或备份文件。
3. Google Drive 与 Google 用户数据
选择 Google Drive 同步时，App 通过 Google 登录并仅申请 https://www.googleapis.com/auth/drive.file 权限——它只能查看和管理由 Tapkeep 自己创建的文件（你的 Drive 根目录下的 Tapkeep 文件夹），看不到你 Drive 里的其他文件。App 获得的 Google 用户数据仅用于在你的设备与你的 Drive 之间同步账本文件，不会用于其他目的、不会出售、不会用于广告，也不会传给任何第三方。
Tapkeep 对通过 Google API 获取的信息的使用，遵守 Google API 服务用户数据政策，包括其中的「有限使用」（Limited Use）要求。你可以随时在 Google 账号权限页撤销授权，或在 App 内「设置 → 同步 → 断开」。
4. 网络请求
App 只在两种情况下访问网络：（1）与你配置的网盘同步；（2）每日拉取汇率。汇率请求只包含币种代码，不携带任何账本数据或个人信息。汇率来源：fawazahmed0 exchange-api、Frankfurter（欧洲央行参考汇率）、ExchangeRate-API（"Rates By Exchange Rate API"）。
5. 权限
- 相机、相册、文件：仅在你为交易添加附件时使用。
- 生物识别：仅用于解锁 App。
- 网络：同步与汇率。
App 不申请定位、通讯录、麦克风、通知以外的其他权限。
6. 数据删除与导出
删除 App 即删除设备上的全部数据。网盘中的 Tapkeep 文件夹由你在网盘中自行删除。你随时可以导出 CSV 或包含全部数据和附件的备份 zip。
7. 儿童
Tapkeep 面向成年人的个人记账，不针对 13 岁以下儿童设计，也不会有意收集儿童信息（事实上不收集任何人的信息）。
8. 变更
政策如有变更会更新本页及顶部的生效日期；涉及数据处理方式的实质变化会在 App 内提示。
9. 联系
开发者：Roy · ylws73@gmail.com
In one sentence
Tapkeep has no accounts and no servers. Your bookkeeping data exists only on your device and in the cloud storage you choose. We (the developer) cannot access it and do not collect it.
1. What we collect
Nothing. The app contains no analytics, advertising or crash-reporting SDKs and sends no data to any server of ours (we operate none). Crash logs stay on your device and are exported only when you tap "Settings → About → Export diagnostics"; you decide whether to send them to us.
2. Where your data lives
- On your device: accounts, transactions, categories and attachments are stored in the app's private storage; with the app lock enabled they require Face ID / fingerprint / PIN to view.
- In your own cloud storage (optional): if you enable sync, the app writes your ledger as files to the WebDAV server or Google Drive you configure. Those files are stored by your provider under its privacy policy; we have no access to them.
- Credentials: WebDAV passwords and Google sign-in tokens are kept in the system secure store (iOS Keychain / Android Keystore) and never written to logs or backups.
3. Google Drive and Google user data
When you choose Google Drive, the app signs in with Google and requests only the https://www.googleapis.com/auth/drive.file scope: it can view and manage only files it created itself (the Tapkeep folder in your Drive root) and nothing else in your Drive. Google user data obtained by the app is used solely to sync your ledger files between your device and your Drive. It is not used for any other purpose, not sold, not used for advertising and not shared with third parties.
Tapkeep's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time at Google Account permissions or via "Settings → Sync → Disconnect" in the app.
4. Network requests
The app uses the network only to (1) sync with the cloud storage you configured and (2) fetch daily exchange rates. Rate requests contain currency codes only — no ledger data or personal information. Sources: fawazahmed0 exchange-api, Frankfurter (ECB reference rates), ExchangeRate-API ("Rates By Exchange Rate API").
5. Permissions
- Camera, photos, files: only when you attach a receipt.
- Biometrics: only to unlock the app.
- Network: sync and exchange rates.
No location, contacts or microphone access is requested.
6. Deletion and export
Uninstalling the app deletes all data on the device. The Tapkeep folder in your cloud storage is yours to delete there. You can export CSV or a full backup zip (all data and attachments) at any time.
7. Children
Tapkeep is a personal finance tool for adults, is not directed at children under 13, and knowingly collects no information from anyone.
8. Changes
Changes are published on this page with an updated effective date; material changes to data handling are announced in the app.
9. Contact
Developer: Roy · ylws73@gmail.com