卡皮语音输入法 · 隐私政策

这个 App 没有账号系统,不认识你是谁,也不收集任何身份信息。 默认设置下,你说的话、转写出来的文字、你添加的词全部只留在这台设备上。 有几项功能会把内容发出去——它们默认全部关闭,由你自己开、 每次也由你自己按。下面逐条列出来,一条不漏。

English version: see below.

语音和文字

你自己添加的词

「我的词」里的内容——包括弟兄姊妹的名字、常用语、快捷回复—— 只保存在你的手机上,不上传、不同步、不进任何服务器。

这不是疏忽,是有意的设计:这些是真实的人名,不该离开你的设备。 也正因如此,这个 App 没有账号系统——建账号就意味着把这份名单交给服务器保管。

会把你的内容发出去的功能

这几项默认全部关闭。不开的话,这个 App 不会把你的任何内容送出手机。 开了之后,只在你用到这些功能的时候发:按下「润色 / 翻译 / 回复 / 指令 / 朗读」, 开着「英文反馈」时每说完一句,打开「复习」页时把要朗读的句子先合成好。除此之外没有任何上传。

这些内容是怎么来的:录音来自你按下录音键之后、停止之前那一段, 由系统麦克风采集,转写完即从内存释放。文字来自你这一次要处理的那一段: 刚说完的话;键盘上当前这一个输入框里的文字(用键盘的润色、翻译、指令时, 键盘会读光标前后这一个输入框里的字);或者你复制来要回复的那条消息 (「推荐回复」会读剪贴板)。为了听得准、改得对,还会附上词表里相关的几个词、 输入框里光标前的几句,以及你在「让 AI 对我有些了解」里写的那段话(写了才有)。 我们不在后台采集;键盘只在你按下这些功能时读当前这一个输入框, 不读别的 App 里的内容,也不记录你的击键。

这几项要你自己在设置里打开,打开时界面会写明这次的内容会发到哪一家。 你随时可以再关掉,关掉之后立刻停止发送。

发出去之前会先问你一次。第一次发送之前会单独弹出一屏,写明这次要发的是什么、 发给哪一家、拿去做什么、不同意会失去什么,你按「同意」才会开始发送。 录音和文字分成两档——愿意让模型改错别字,不等于愿意交出自己的声音; 换了服务商要重新同意一次(换了服务商就是换了收件人);同意可以随时在 「AI 功能设置 → 数据去向」里逐条撤回,撤回之后就不再发送。 不同意时 App 仍然完整可用:说话出字走本机模型,飞行模式下就能验证。 用到哪一项就在哪儿问。iPhone 版在主 App 里弹出这一屏,在键盘里用到时, 键盘上会直接摆出同一份同意书,而且中英对照;Mac 版和安卓版用各自的对话框问同样的问题。

三端都有这一屏——iPhone 版从 1.0.1 起,Mac 版和安卓版从 build 684 起 (2026 年 9 月 9 日发布)。此前那两端确实还没有:Mac 629 和安卓 436 在设置里打开对应开关时会写明收件人,但没有单独的同意确认, 所以这一页在那几天里是这么写的。比它们更早的版本请更新一次。

键盘扩展也走同样的路。你开了增强识别之后,可以直接在键盘里录音, 音频从键盘发往上面那个识别服务(这样就不用每次跳回主 App)。 没开的话,键盘里不会发生任何外发。

不带你的内容的两个请求

这两个一直开着,都是只读的 GET:

这两个请求都可以失败——没有网络时 App 照常使用。

关于键盘扩展

「卡皮语音」键盘需要开启「允许完全访问」。这一点值得说清楚,因为输入法要这个权限 历来令人不安。

第三方

没有广告,没有分析工具,没有崩溃统计,没有任何第三方 SDK。 我们不会把你的任何信息出售或出租给任何人。

你打开增强识别或 AI 那几项时,相应的内容会送到上面点名的那些服务商—— 那是这些功能本身要做的事,不是我们另外拿去做了别的。 我们送出去的就是上面列的这些,不附带设备标识、位置或通讯录,因为我们本来也不知道你是谁。 如果你在「让 AI 对我有些了解」里写了名字或城市,那段话会跟着发出去—— 所以那里只写你愿意让服务商看到的内容。

关于这些服务商的保护义务:我们只接入公开承诺 「API 提交的内容不用于训练模型」的服务商,并要求其对这些内容提供 与本政策同等或更高的保护。这些内容仅用于返回这一次的结果, 不用于识别你的身份、不用于广告、不出售给任何人。 各家的具体条款以其自身隐私政策为准: OpenAI、 火山引擎、 DeepSeek、 Kimi。 你自己填的 key 走的是你和服务商之间的账号, 那份内容一个字节都不经过我们。

儿童

这个 App 不面向儿童设计,也不会有意收集任何人的信息,包括儿童的。

政策变更

如果将来功能变化导致这份政策需要修改,我们会更新本页,并在这一节里说明改了什么。 如果有一天需要收集任何数据,我们会在 App 内明确告知并征得同意, 不会靠悄悄改这一页来完成。

联系

有任何疑问,欢迎联系:yunfeilu@thebcec.org.uk


Privacy Policy (English)

Capi Voice Input (卡皮语音输入法) has no account system and does not know who you are. By default, what you say, the text it produces and the words you add stay on your device. A few features send content to third-party services. They are all off by default, and nothing is sent until you allow it on an in-app consent screen.

Speech and text

Your own words

Your word list, saved phrases and quick replies are stored only on your device. They are not uploaded or synced to any server.

Features that send your content to third parties

All of these are off by default. Before the first time any of them sends anything, the app shows a consent screen (in Chinese and English) stating what is sent, who receives it, what it is used for and what you lose if you decline. Nothing is sent unless you tap “Allow”. Audio and text are agreed separately, and each recipient is agreed separately; changing to a different provider asks again. You can withdraw at any time in Settings (设置) → AI Settings (AI 功能设置) → Where your data goes (数据去向); nothing is sent after that. If you decline, the app remains fully usable with on-device speech recognition. On iPhone, the consent screen appears where the feature is used — in the app, or directly inside the keyboard when a feature is used from the keyboard. The Mac and Android versions ask the same questions in their own dialogs.

How the content is collected: audio is the recording you make after pressing the record button; text is what you ask a feature to process — what you just dictated, the text in the current text field (when you use the keyboard's polish, translate or instruction features, the keyboard reads the text around the cursor in that one field), or a message you copied to reply to (Reply suggestions read the clipboard). To improve accuracy, requests may also include a few related words from your word list, a few sentences before the cursor, and your “Let AI know about me” (让 AI 对我有些了解) note, if you wrote one. We do not collect anything in the background, and the keyboard does not read other apps or log keystrokes.

Requests that carry none of your content

Keyboard extension

The keyboard needs “Allow Full Access” to read the storage it shares with the app (your words and phrases) and, only if you use the features above, to send the content described there. It does not log, upload or analyze your keystrokes, and it does not go online unless you use one of those features. Without Full Access the keyboard still types.

Third parties

No ads, no analytics, no crash reporting, no third-party SDKs. We never sell or rent your information. Content you choose to send goes only to the providers named above, only to produce the result you asked for. It includes no device identifiers, location or contacts; if you wrote names in your “Let AI know about me” note, that note is included, so write only what you are comfortable sharing with the provider.

Protection by these providers: we only integrate providers that publicly commit not to use API content to train their models, and we require them to protect this content to the same or a greater degree than this policy. Their own terms apply: OpenAI, Volcano Engine, DeepSeek, Kimi. When you use your own key, the content goes directly between you and that provider and never passes through us.

Children

This app is not directed at children and does not knowingly collect information from anyone, including children.

Changes and contact

If features change in a way that affects this policy, we will update this page. If we ever need to collect data, we will tell you in the app and ask for your consent first. Questions: yunfeilu@thebcec.org.uk