中文 · English
人生里程碑 隐私政策
更新日期：2026 年 10 月 2 日
「人生里程碑」（以下简称「本 App」）非常重视您的隐私。
本地优先
我们坚持本地优先：您的隐私数据与里程碑——里程碑、照片、视频、录音、心情、纪念日、生日、人生篇章——完全由您自己掌控，只存放在：
- 您的手机本地（默认）；或
- 您主动选择的个人云存储：您自己的 iCloud 云盘、Google Drive 等。
本 App 只负责把备份文件交给您选择的存储服务（技术对接），我们不运营任何存放用户数据的服务器，也无法访问您的 iCloud、Google Drive 中的内容。这些服务分别按照 Apple、Google 的隐私政策保护您的数据。
如果将来有很多用户希望由我们提供官方云备份，它也只会是可选功能：我们会提前更新本政策，并且只有在您主动开启后才会使用。
第三方 AI（可选，自带 API Key）
本 App 的 AI 助手默认在您的设备上运行（支持 Apple 智能的设备使用系统自带的设备端模型，其他设备使用本机规则生成），数据不会离开您的手机。
如果您在「设置 → AI 助手」中主动填写自己的 API Key、接入第三方模型（如 Claude、ChatGPT、Gemini、DeepSeek、Kimi、GLM、MiniMax、OpenRouter 或其他兼容服务），使用 AI 功能（一句话记录、问问我的人生、写感想、推荐下一个里程碑、最近小结、帮我规划、岁月年报）时，生成所需的文字摘要（例如打卡天数，里程碑的标题、日期、心情、地点和简短感想，以及您输入的话）会由您的手机直接发送给您选择的服务商，不经过我们；照片、视频、录音和「健康」数据不会被发送。「问问我的人生」的对话只保留在当前页面，离开后即清空。
- 您的 API 调用及其中的隐私数据，会按照您所选模型提供商的用户数据与隐私政策进行处理。
- 部分模型的免费 API，其数据可能会被对应的模型提供商用于内部训练，建议您在使用其 API 前提前做好调研。
- 本项目不会收集任何您的 AI 沟通记录与分析记录，请您做好数据备份。
- 您的 API Key 只保存在本机钥匙串中，不会进入备份，也不会上传到任何地方。您可以随时在设置中关闭第三方模型。
我们收集哪些数据
不收集任何数据。 本 App 没有账号系统，不包含任何第三方统计、广告或追踪 SDK。
权限说明
- 照片：仅在您主动选择照片时读取您选中的那一张，用于里程碑配图。
- 相机 / 麦克风：仅在您点击「拍照留念」「录像留念」「录一段话留念」时使用，拍摄和录音内容只保存在本 App 内。
- 通知：用于纪念日提醒、习惯打卡提醒和每周小结，全部为本地通知，可在设置中关闭。
- Face ID：仅用于您主动开启的应用锁，生物识别由系统处理，本 App 无法获取任何生物特征信息。
- 健康（可选）：仅在您主动开启「从『健康』自动记录」后，读取跑步、游泳、骑行的运动距离和每日步数，用来推进您已添加的阶梯。本 App 只读取、不写入「健康」，健康数据不会被上传、出售或用于广告，也不会发送给任何第三方（包括第三方 AI）。
- 语音识别：仅在您点击「用说的」时使用，语音只在您的设备上转成文字，声音不会被上传或保存。
- 照片识别：您为里程碑选择照片后，本 App 会用系统自带的识别能力，在您的设备上识别照片中的场景和文字，用来建议标题。照片不会被上传。
- Siri 与快捷指令：您对 Siri 说的记录内容由系统转成文字后交给本 App，在本机完成记录。
数据备份与删除
您可以在「我 → 设置与数据备份」中开启 iCloud 自动备份，或导出备份文件自行保存到 Google Drive 等位置。
删除的领域和里程碑会先放进「最近删除」，30 天后自动彻底删除，也可以手动立即删除。删除 App 或在设置中选择「清空所有数据」即可永久删除全部数据。
联系我们
如有任何问题，请通过本页面所在网站的「支持」页面与我们联系。
Life Milestone Privacy Policy
Last updated: October 2, 2026
Life Milestone (“the app”) takes your privacy seriously.
Local first
Your milestones and private data — milestones, photos, videos, voice memos, moods, key dates, birthdays and life chapters — stay under your control and are stored only:
- on your iPhone (the default); or
- in personal cloud storage you choose, such as your own iCloud Drive or Google Drive.
The app only hands backup files to the storage service you pick. We run no servers that hold user data and cannot access anything in your iCloud or Google Drive. Those services protect your data under Apple's and Google's privacy policies.
If we ever offer an official cloud backup, it will be optional: we will update this policy first, and it will only be used after you turn it on.
Third-party AI (optional, bring your own key)
By default the AI features run on your device (the on-device Apple Intelligence model where available, otherwise built-in rules), and nothing leaves your phone.
If you add your own API key in Settings › AI Assistant and connect a third-party model (such as Claude, ChatGPT, Gemini, DeepSeek, Kimi, GLM, MiniMax, OpenRouter or another compatible service), the text summary needed for each AI feature (one-line log, Ask My Life, reflections, next-milestone suggestions, recaps, plans and Life Reports) — such as check-in counts, milestone titles, dates, moods, places, short notes and what you type — is sent directly from your phone to the provider you chose, never through us. Photos, videos, voice memos and Health data are never sent. Ask My Life conversations exist only on that screen and are cleared when you leave it.
- Your API calls, and any private data in them, are handled under the user-data and privacy policy of the model provider you choose.
- Some providers may use data from free API tiers to train their models. Please research a provider before using its API.
- We never collect your AI conversations or analysis results. Please keep your data backed up.
- Your API key is stored only in this device's Keychain. It is never included in backups or uploaded anywhere, and you can turn the third-party model off at any time.
Data we collect
None. The app has no accounts and contains no third-party analytics, advertising or tracking SDKs.
Permissions
- Photos: only the photos you pick, used for milestone pictures.
- Camera / Microphone: only when you tap to take a photo, record a video or record a voice memo. What you capture stays in the app.
- Notifications: local reminders for key dates, habits and the weekly recap. You can turn them off in Settings.
- Face ID: only for the app lock you turn on. Biometrics are handled by iOS; the app never receives biometric data.
- Health (optional): only after you turn on “Sync from Apple Health”, the app reads run, swim and ride distances and daily steps to move the ladders you've added. It reads but never writes Health data. Health data is never uploaded, sold, used for advertising or shared with anyone, including third-party AI providers.
- Speech recognition: only when you tap “Speak”. Speech is turned into text on your device; audio is not uploaded or stored.
- Photo recognition: when you add a photo to a milestone, the app uses iOS's built-in recognition on your device to suggest a title from the scene and any text in the photo. Photos are not uploaded.
- Siri & Shortcuts: what you tell Siri is turned into text by iOS and logged by the app on your device.
Backup and deletion
You can turn on automatic iCloud backup in Me › Settings & Backup, or export a backup file and keep it wherever you like, such as Google Drive.
Deleted areas and milestones go to Recently Deleted and are permanently removed after 30 days, or right away if you choose. Deleting the app, or choosing “Erase All Data” in Settings, permanently removes all of your data.
Contact
If you have any questions, please reach us through the Support page on this website.