Aurmo 无账号体系，不含第三方广告、第三方行为分析或崩溃统计 SDK，不进行跨 App 追踪。录音不会进入 Aurmo backend 或大模型服务；录音和其他指定内容会通过你的 CloudKit private database 同步。插嘴录音的转写文字会短暂经过 Aurmo backend 和配置的大模型服务做自动纠错，但 Aurmo PostgreSQL 不保存该正文。
Aurmo has no account system, third-party advertising, third-party behavioral analytics, or crash-reporting SDKs, and does not track you across apps. Recording files never enter Aurmo's backend or an LLM provider. Specified content, including recordings, syncs through your CloudKit private database. Interject transcript text temporarily passes through Aurmo's backend and the configured LLM provider for automatic correction, but its body is not stored in Aurmo's PostgreSQL database.
欢迎使用 Aurmo（以下简称“本应用”或“我们”）。本应用由个人开发者周德建开发并运营。我们按照最小必要原则处理信息，并通过本政策说明数据的真实去向和你的选择。
本应用没有用户注册或登录体系，不要求你提供姓名、手机号、电子邮箱或身份证件等身份信息。
| 信息 | 场景与用途 | 实际去向 |
|---|---|---|
| 随机设备标识符（UUID） | 区分设备、统计每日活跃、计算免费用量、关联 Premium 状态、响应删除请求 | Keychain；随业务请求进入 Aurmo 境内 backend，并写入设备维度记录 |
| Apple 交易凭证与购买状态 | 验证和恢复购买 | StoreKit；交易 JWS 发送至 Aurmo backend 验签，保存状态、到期时间和原始交易 ID |
| 公开播客信息与全文转写 | 你主动触发全集转写 | 公开 RSS 信息与 device ID 进入 Aurmo backend；公开音频由服务端获取，转写作为共享播客内容保存在境内 PG |
| 公开播客文字上下文 | 生成火花 AI 摘要 | 经 Aurmo backend 发送给当前配置的大模型服务 |
| 插嘴录音的转写文字 | 自动纠正同音字、专名和口语转写 | 经 Aurmo backend 发送给当前配置的大模型服务；Aurmo PG 不保存输入或输出正文 |
| 每日活跃、聚合时长与功能使用次数 | 统计有效使用、核心功能采用率、执行免费配额、结合 Premium 状态做匿名设备分群与维持服务运行 | App 前台连续使用至少 2 秒或成功保存标记 / 插嘴后，backend 按 device ID 和北京时间日期保存日活、首次见到与最近活跃时间；另按日累计前台使用秒数、实际播放秒数、每日标记、插嘴、转写、摘要和标注次数。核心行为与时长记录不含 Feed、单集、播放位置、文字或录音 |
| 匿名播客热度事件 | 发现页热度榜和产品改进 | 不带 device ID 的 Feed 级聚合计数 |
| 反馈、删除请求与审计记录 | 处理反馈、执行并证明删除 | 境内 backend；删除请求与必要审计记录会保留 |
| 网络信息 | 安全、限流和基础设施运行 | IP 可能短暂用于限流并出现在安全 / 访问日志中，不用于广告、画像或位置推断 |
随机设备标识符不是 IDFA 或 IDFV，不用于广告或跨 App 追踪。它保存在 iOS Keychain 中，可能在卸载重装后继续存在。“重置应用数据”会保留该标识符，以便恢复购买和维持设备维度服务。
Aurmo 使用一个 ModelContainer 和两个存储配置：
audioData / CKAsset）、Topic、关注播客清单、播放进度、播放历史。CloudKit private database 默认仅当前 iCloud 用户可访问，内容归该用户所有，生产 private records 不会在开发者门户中显示。Aurmo backend 不接收或读取这些 CloudKit records。CloudKit 由 Apple 运营；中国大陆 iCloud 由云上贵州（GCBD）运营，适用相应 iCloud 条款。
本应用不专门面向不满 14 周岁的儿童。未满 14 周岁者请在监护人指导和同意下使用。
重大变更会通过 App 内提示或本页面公布等方式告知，并在需要时重新征求同意。隐私问题或 backend 数据查询 / 删除请求请联系 support@aurmoapp.com。
Welcome to Aurmo (the “App,” “Aurmo,” or “we”), developed and operated by individual developer Dejian Zhou. We process information only when reasonably necessary and explain its actual destination and your choices below.
Aurmo has no account registration or login system and does not require your name, phone number, email address, or government ID.
| Information | Scenario and purpose | Actual destination |
|---|---|---|
| Random device identifier (UUID) | Distinguish a device, measure daily activity, calculate free quotas, associate Premium status, and respond to deletion requests | Keychain; sent with business requests to Aurmo's China-mainland backend and stored in device-scoped records |
| Apple transaction receipt and purchase status | Verify and restore purchases | StoreKit; transaction JWS is verified by Aurmo's backend, which stores status, expiration, and original transaction ID |
| Public podcast information and full transcripts | Process a full-episode transcription you request | Public RSS information and device ID go to Aurmo's backend; the server fetches public audio and stores the shared transcript in a China-mainland PostgreSQL database |
| Public podcast text context | Generate an AI summary for a Spark | Sent through Aurmo's backend to the currently configured LLM provider |
| Transcript of your interject recording | Automatically correct homophones, names, and speech-recognition errors | Sent through Aurmo's backend to the configured LLM provider; Aurmo's PostgreSQL database stores neither input nor output body |
| Daily activity, aggregate duration, and feature usage counts | Measure effective usage and core-feature adoption, enforce free quotas, combine with Premium status for anonymous device cohorts, and operate the service | After at least two foreground seconds or a successfully saved mark / interject, daily activity, first-seen time, and latest-active time are stored by device and Beijing-calendar day, plus daily aggregate foreground seconds, actual playback seconds, mark, interject, transcription, summary, and annotation counts. Core-action and duration records contain no feed, episode, playback position, text, or recording |
| Anonymous podcast popularity events | Discovery rankings and product improvement | Feed-level aggregate counters without device ID |
| Feedback, deletion requests, and audit records | Process feedback and perform and demonstrate deletion | China-mainland backend; deletion requests and necessary audit records are retained |
| Network information | Security, rate limiting, and infrastructure operation | IP may be used temporarily for rate limiting and appear in security / access logs; never used for advertising, profiling, or location inference |
The random device identifier is not IDFA or IDFV and is never used for advertising or cross-app tracking. Because it is stored in iOS Keychain, it may survive app deletion and reinstallation. “Reset App Data” keeps it so purchases can be restored and device-scoped services can continue.
Aurmo uses one ModelContainer with two storage configurations:
audioData / CKAsset, Topics, followed podcast list, playback progress, and playback history.By default, a CloudKit private database is accessible only to the current iCloud user, its content is owned by that user, and production private records are not visible in the developer portal. Aurmo's backend does not receive or read those records. CloudKit is operated by Apple; iCloud in China mainland is operated by GCBD under the applicable iCloud terms.
Aurmo is not specifically directed to children under 14. If you are under 14, use Aurmo only with your guardian's guidance and consent.
We will announce material changes in the App or on this page and request renewed consent when required. For privacy questions or backend data access / deletion requests, email support@aurmoapp.com.