1. Who we are一、我们是谁
TripHipo is an iPhone app made by an independent developer. This policy covers the app and this website. Contact: [email protected].TripHipo 是一款由独立开发者制作的 iPhone 应用。本政策适用于该 App 和本网站。联系方式：[email protected]。
2. What stays on your device二、留在你设备上的数据
All of the following is stored only in the app's own storage on your iPhone. We cannot see it, and it is not backed up to us:以下所有内容只存放在你 iPhone 上 App 自己的存储空间里。我们看不到，也不会备份到我们这里：
- Trips, daily plans, places, dates and travel companions you add你添加的行程、每日安排、地点、日期和同行人
- Expenses, budgets and currency settings支出、预算和币种设置
- Saved guides and the links or text you pasted in收藏的攻略，以及你粘贴进来的链接或文案
- Bookings, vouchers, passport and document photos, and emergency notes预订、凭证、证件照片和紧急信息
- Your conversations with the hippo planner你和河马规划师的对话记录
Document photos are additionally protected by Face ID or your passcode. If your iPhone backs up to iCloud, this data may be included in that backup — that is Apple's backup, under your Apple Account, not ours.证件照片额外受 Face ID 或密码保护。如果你的 iPhone 开启了 iCloud 备份，这些数据可能被包含在该备份中——那是苹果的备份，在你自己的 Apple 账户下，与我们无关。
3. What the AI planner sends, and where三、AI 规划师发送什么、发到哪
When you send a message to the hippo planner, the following goes out over an encrypted connection:当你给河马规划师发消息时，以下内容会通过加密连接发出：
- The message you typed or dictated, and the recent messages in that conversation你输入或口述的那条消息，以及该对话中最近的几条消息
- Only if you turn on "Use my trip": a summary of that trip — its name, destination, dates and the plans already on it仅当你打开「带上我的行程」时：该行程的概要——名称、目的地、日期，以及已有的安排
- When you ask the planner to change a trip, the details of the change it proposes当你让规划师修改行程时，它所提议的改动内容
The request passes through our own relay server, hosted on Supabase in Singapore, and on to the language model provider, Volcano Engine Ark (Beijing Volcano Engine Technology Co., Ltd.), whose servers are in mainland China. The relay exists so that no API key has to be stored on your phone. It forwards the request and the reply; it does not keep a copy of your conversation.请求会先经过我们自己的中转服务器（部署在 Supabase 新加坡区域），再转发给语言模型服务商火山方舟（北京火山引擎科技有限公司），其服务器位于中国大陆。设中转的目的，是让 API 密钥不必存放在你的手机上。它只负责转发请求和回复，不保存你的对话副本。
Because your message is processed by that provider, please don't type anything into the planner you wouldn't want a third party to process — passport numbers, card numbers, or other people's personal details. The app never sends your expenses, document photos, contacts, or precise location to the planner.由于你的消息会由该服务商处理，请不要在规划师里输入你不希望第三方处理的内容——护照号、卡号，或其他人的个人信息。App 不会把你的账本、证件照片、通讯录或精确位置发给规划师。
If you paste your own Ark key into Settings, the app talks to Volcano Engine directly and our relay is not involved.如果你在设置里粘贴了自己的方舟 Key，App 会直连火山引擎，不经过我们的中转。
4. Microphone and speech四、麦克风与语音
Speaking to the planner uses Apple's on-device speech recognition. The audio never leaves your iPhone and we never receive a recording. The resulting text is then handled exactly like anything you typed — including the clean-up pass described in section 3, which sends the transcript to the language model to fix misheard words.对河马说话使用的是苹果的端上语音识别。录音不会离开你的 iPhone，我们也拿不到任何录音。识别出的文字随后与你手打的文字一视同仁——包括第三节描述的纠错处理，即把转写文本发给语言模型修正听错的词。
The microphone is also used for face-to-face conversation translation, which follows the same rule.麦克风同样用于面对面的对话翻译，规则相同。
5. Camera, photos and location五、相机、照片与位置
- Camera and photo library: used to capture or pick images for translation, guides and vouchers. Images are processed on your device. Text translation may use Apple's on-device translation, or — if that language isn't available offline — the text is sent to the planner as described in section 3. The image itself is never uploaded.相机与相册：用于拍摄或选取图片，做翻译、存攻略和凭证。图片在你的设备上处理。文字翻译优先使用苹果的端上翻译；若该语言无法离线翻译，则按第三节的方式把文字发给规划师。图片本身不会被上传。
- Location: used only while you're using the app, to find places near you and to open navigation. Your location is handled by Apple Maps on your device and is not sent to us or stored.位置：仅在你使用 App 时用于查找附近地点和发起导航。位置由设备上的苹果地图处理，不会发给我们，也不会被存储。
6. What we do not do六、我们不做的事
- No account, no sign-up, no password不要账号、不用注册、没有密码
- No advertising, and no sale or sharing of data with advertisers or data brokers没有广告，不向广告商或数据经纪商出售、共享任何数据
- No third-party analytics or attribution SDKs, and no tracking across other apps or websites不接入任何第三方统计或归因 SDK，不跨 App、跨网站追踪
- No profile of you, and no use of your content to train any model不建立关于你的画像，不用你的内容训练任何模型
7. This website七、本网站
This site is hosted on Cloudflare Pages. It sets no cookies and runs no analytics. Cloudflare processes standard request data (such as IP address) to serve pages and block abuse; see Cloudflare's own privacy documentation. The language toggle stores your choice in your browser only.本站托管在 Cloudflare Pages。不设置 Cookie，不运行任何统计。Cloudflare 会处理标准的请求数据（如 IP 地址）以提供服务和防止滥用，详见 Cloudflare 自己的隐私说明。语言切换只把你的选择存在你自己的浏览器里。
8. Children八、儿童
TripHipo is not directed at children under 13, and we do not knowingly collect information from them. Since the app collects no personal information at all, there is nothing for us to hold.TripHipo 不面向 13 岁以下儿童，我们也不会有意收集他们的信息。由于 App 本身不收集任何个人信息，我们手上也不存在可持有的数据。
9. Your choices九、你的选择
- Delete everything: delete the app. Because all your content is local, removing TripHipo removes it.删除全部数据：删除 App。所有内容都在本地，卸载即清除。
- Revoke a permission: iOS Settings → TripHipo. Turning off the microphone, camera, photos or location disables those features but keeps everything else working.撤回权限：系统设置 → TripHipo。关闭麦克风、相机、照片或位置只会停用对应功能，其余照常使用。
- Skip the planner: if you never open the hippo planner, nothing is sent anywhere.不用规划师：只要你不打开河马规划师，就不会有任何内容发出。
- Ask us anything: to request access, correction or deletion, or to exercise rights under GDPR, CCPA or China's PIPL, write to [email protected]. We'll reply within 30 days.任何问题都可以问：如需查询、更正或删除，或行使 GDPR、CCPA、《个人信息保护法》下的权利，写信到 [email protected]，我们会在 30 天内回复。
10. Changes十、政策变更
Features that would change any of the above — cloud sync, sharing a trip with someone else, an account — are not in the app yet. Before any of them ships, this policy will be updated and the date at the top will change. Material changes will also be announced in the app.会改变上述任何一点的功能——云同步、把行程分享给别人、账号体系——目前都还不在 App 里。在它们上线之前，本政策会先更新，页首日期会随之变化。重大变更也会在 App 内公告。
Questions about this policy: [email protected]关于本政策的疑问：[email protected]