我们处理哪些数据Data we handle
本应用不要求任何个人信息：不注册、不登录、没有账号体系。你使用过程中产生的数据只有你自己输入和记录的内容：
- 咖啡豆资料：名称、烘焙商、产区、处理法、烘焙度、日期、克数、价格、风味标签与备注——均由你输入；
- 冲煮记录：器具、参数（粉量、水温、时间等）、评分、酸甜苦醇余五项感受、文字笔记；
- 风味记录：日期、评分、标签与笔记（部分由冲煮记录自动生成摘要，内容仍来自你的记录）；
- 图片：你为咖啡豆拍摄或从相册选取的照片（选取通过系统照片选择器完成，本应用因此不需要相册权限）；
- 偏好设置：语言、默认冲煮参数、提醒开关等，保存在设备本地。
以上数据不含姓名、邮箱、电话号码、位置、设备标识符或任何可用于识别你身份的信息。
数据存储与保留Storage & retention
- 所有数据保存在你设备上本应用的沙盒目录中，不进入任何由我们控制的服务器；
- 数据会一直保留，直到你删除对应记录（可删除单条冲煮、风味记录或整包豆子及其全部历史）或卸载本应用（卸载会删除本应用沙盒内的全部数据）；
- 如果你开启了设备的 iCloud 备份，上述数据会包含在系统备份中——这是 Apple 提供的系统机制，本应用不参与、不上传；
- 你可以随时将全部数据导出为 JSON 或 CSV 文件（在本机生成，通过系统分享面板交给你指定的去处）。
设备上的分析与预测On-device analysis
本应用的分析功能完全在设备上运行，不联网：
- 冲煮阶段的计算与推荐来自内置规则引擎；
- 「问一问」的检索使用 Apple 系统提供的端侧语句向量（NaturalLanguage 框架）与本地知识库（随应用打包）；
- 「预计风味窗口」是一项实验功能，由随应用内置的 Core ML 模型推理，可在设置中关闭；
- 个人基线、参数区间等统计只基于你自己的记录。
网络行为Network activity
本应用的核心功能没有任何网络请求——飞行模式下可完整使用。不存在遥测、使用统计、广告、崩溃上报或远程配置，也未集成任何第三方分析或广告 SDK。
唯一的可选例外：
- 在「设置 → 本地智能 → 高级设置」中，你可以自行配置一个 Ollama 服务地址（默认关闭；默认地址为本机回环
127.0.0.1:11434）。启用后，你在「问一问」输入的问题文本，以及为回答而检索出的记录片段，会发送到你自己填写的那个服务器地址；
- 该功能默认关闭；不启用即保持完全离线，且本应用开发者不运行、不经过、也无法接触你配置的任何服务。
系统权限Permissions
- 通知：在你保存第一包咖啡豆时请求一次，用于风味窗口提醒。拒绝或关闭后，其余功能不受影响；
- 照片选取使用系统照片选择器，不需要相册权限；
- 本应用不请求定位、相机、麦克风、通讯录或健康数据权限。
你的控制权Your control
- 查看与修改：所有记录都在应用内随时可查看、编辑；
- 删除：可删除单条冲煮记录、风味记录或整包豆子（删除整包会一并删除其历史）；
- 导出：随时导出完整 JSON 备份或 CSV 表格，数据带得走；
- 撤回同意：通知权限可在系统设置中随时关闭；Ollama 高级设置可在应用内随时停用。
儿童隐私Children
本应用不收集任何用户的数据（如上所述，对所有人都是如此），因此也不收集儿童的个人数据。
政策更新Updates
当应用的数据处理方式发生变化时，我们会更新本页内容并修改上方的生效日期。请以页面上的日期为准。
· · ·
English version below
Privacy Policy
Effective date: October 10, 2026. BrewPhase ("the app") is published by the BrewPhase project developer (github.com/banmu123/BrewPhase). This policy describes what the app actually does with data, based on its real implementation.
Data we handle
The app requires no personal information: no sign-up, no login, no accounts. The only data involved is what you type and record yourself:
- Coffee bean profiles — name, roaster, origin, process, roast level, dates, weight, price, flavour tags and notes, all entered by you;
- Brew logs — method, parameters (dose, temperature, time, etc.), ratings, five taste axes and notes;
- Tasting notes — date, score, tags and notes (some are summarised from your brews);
- Photos — pictures you take or pick for a bag (picked via the system photo picker, so the app needs no photo-library permission);
- Preferences — language, default brewing parameters and reminder switches, stored on the device.
None of this includes your name, email, phone number, location, device identifiers or anything that could identify you.
Storage & retention
- All data lives in the app's sandbox on your device. There is no developer-controlled server;
- Data is kept until you delete the records (single brews, tasting notes, or a whole bag with its history) or uninstall the app (uninstalling removes everything in the sandbox);
- If you enable iCloud device backup, the data is included in that system backup — handled by Apple's mechanism, not uploaded by the app;
- You can export everything as JSON or CSV at any time (generated on-device, shared via the system share sheet to wherever you choose).
On-device analysis
All analysis runs entirely on your device, offline:
- Phase calculation and recommendations come from a built-in rules engine;
- "Ask" retrieval uses Apple's on-device sentence embeddings (NaturalLanguage) and a knowledge base bundled with the app;
- "Flavour window" is an experimental feature powered by a Core ML model bundled with the app, and can be turned off in settings;
- Personal baselines and parameter ranges are computed from your own records only.
Network activity
The app's core features make no network requests — everything works in airplane mode. There is no telemetry, analytics, advertising, crash reporting or remote config, and no third-party SDKs are integrated.
The single optional exception:
- In Settings → Local Intelligence → Advanced you may configure your own Ollama server (off by default; default address is the loopback
127.0.0.1:11434). When enabled, the question text you type in "Ask", plus the record snippets retrieved to answer it, are sent to the server address you entered yourself;
- The feature is off by default. Leave it off and the app stays fully offline; the developer neither runs nor can see any server you configure.
Permissions
- Notifications: requested once when you save your first bag, for flavour-window reminders. Denying them does not affect anything else;
- Photo picking uses the system photo picker and requires no photo-library permission;
- The app never requests location, camera, microphone, contacts or health data.
Your control
- View & edit: every record is visible and editable in the app;
- Delete: individual brews, tasting notes, or a whole bag with its history;
- Export: full JSON backup or CSV tables at any time — your data leaves with you;
- Withdraw consent: notifications can be switched off in system settings; the Ollama option can be disabled in the app at any time.
Children
The app collects no data from anyone — as described above — and therefore collects none from children.
Updates to this policy
When the way the app handles data changes, this page will be updated and the effective date above revised. Please refer to the date shown at the top.