隐私政策
生效日期：2026年9月27日
栗栗（“我们”）是一个提醒应用。我们只处理让功能运转所必需的最少数据，不做广告、不做跨应用追踪、不出售任何数据。
保存在你设备上的数据
你的计划、完成记录、设置和使用统计保存在你的 iPhone 上（与桌面小组件共享的应用组容器内）。你保存的“常用地点”（家、公司、学校）只保存在本机，用于系统在你到达或离开时触发提醒，位置不会上传。
iCloud 同步（可关闭）
开启后，你的计划会通过 Apple 的 iCloud 键值存储保存在你自己的 iCloud 账户中，用于备份和多设备同步。我们无法访问这些数据。常用地点和使用统计不会同步。
语音
语音识别优先在设备端完成。若设备不支持端上识别，由 Apple 的语音识别服务处理，受 Apple 隐私政策约束。我们不接收、不保存任何录音。
AI 解读（可关闭，需你同意）
仅当手机无法理解某句话、且你已同意使用 AI 时，这一句话的文字、当前本地时间和时区会发送到我们的服务器，再转交给 AI 服务（Anthropic 的 Claude，经 OpenRouter）用于解读。我们不保存这句话，也不发送录音或其他计划。为防滥用，请求会附带一个随机生成的安装标识，用于频率限制。
家人提醒（仅在你使用时）
使用“家人”功能时，你的手机会获得一个家人码和只保存在本机的密钥。你给家人设的提醒（标题、时间、重复规则、你的称呼）会暂存在我们的服务器上，直到对方手机收取后立即删除内容；为发送“已完成”等回执，提醒标题最多保留 30 天。开启推送时，我们会保存你设备的推送令牌，仅用于发送家人提醒通知。我们的服务器托管于 Supabase。
匿名使用统计（默认关闭，需你开启）
只有在你开启“匿名分享使用统计”后，App 才会上传按天汇总的次数，例如设了几条提醒、完成了几件、看过几次 Plus 介绍，附带一个随机安装标识。不包含任何提醒内容、名字或位置，可随时在设置里关闭。
订阅
栗栗 Plus 通过 Apple 的 App 内购买完成，付款信息由 Apple 处理，我们无法获取。
数据删除
在“设置 → 帮助与你的数据”中可导出或清除全部本机数据，清除时会同时删除 iCloud 中的副本。家人数据在对方收取后即删除，未收取的内容 30 天后自动删除。如需删除服务器上与你家人码相关的任何数据，请联系我们。
儿童
栗栗不面向 13 岁以下儿童，也不会有意收集儿童的个人信息。
联系我们
Privacy Policy
Effective September 27, 2026
Lili is a reminder app. We process only what the features need. No ads, no cross-app tracking, no selling of data.
On your device
Plans, check-ins, settings and usage counts are stored on your iPhone. Saved places (Home, Work, School) stay on the device and are used only by iOS to trigger arrive/leave reminders; your location is never uploaded.
iCloud sync (optional)
When on, plans are kept in your own iCloud (key-value storage) for backup and sync. We cannot access it. Places and usage counts are not synced.
Voice
Speech is recognized on the device when possible; otherwise Apple's speech service processes it under Apple's privacy policy. We never receive or keep recordings.
AI reading (optional, with your consent)
Only when the phone can't read a sentence and you have allowed AI help, the text of that one sentence, your local time and time zone are sent to our server and passed to an AI service (Anthropic's Claude via OpenRouter). We don't store the sentence. A random install identifier is sent for rate limiting.
Family reminders (only if you use them)
Your phone gets a family code and a secret that stays on the device. Plans you send to family (title, time, repeat, your name) are held on our server until their phone picks them up, then deleted; titles are kept up to 30 days for done/skip receipts. With notifications on, we store your device's push token only to deliver family notifications. Our server runs on Supabase.
Anonymous usage counts (off unless you turn them on)
Only if you turn on "Share anonymous usage counts", Lili uploads daily counts, such as how many plans you set and checked off and how often you viewed Lili Plus, with a random install identifier. Never plan text, names or locations. Turn it off anytime in Settings.
Subscriptions
Lili Plus is sold through Apple's In-App Purchase. Apple handles payment; we never see payment details.
Deleting data
Settings → Help & your data exports or clears all data on the device (and the iCloud copy). Family items are deleted when delivered, or after 30 days. To delete anything on our server tied to your family code, contact us.
Children
Lili is not directed to children under 13.