Privacy Policy 隐私政策

1. Data we collect 1. 收集的数据

Puffy is a paid app, not a data business. No ads, no analytics, no tracking, no telemetry, in the app or on this site. Everything you put into Puffy (files, recordings, transcripts, notes, your whole library) is processed and stored on your own Mac and never uploaded to us. Watch it with a firewall if you like: apart from the license traffic listed below, it stays silent. Puffy 是付费软件，不做数据生意。应用里和这个官网上都没有广告、没有分析、没有追踪、没有遥测。你放进 Puffy 的一切（文件、录音、转写、笔记、整个资料库）都在你自己的 Mac 上处理和存储，从不上传给我们。欢迎用防火墙观察：除了下面列出的授权流量，它保持静默。

AI chats included: local models run entirely on your Mac, and with your own API key the app talks straight to that vendor. We do not host or relay AI, so no chat has a path to our servers. AI 对话也一样：本地模型全程在你的 Mac 上跑；用自己的 API key 时，应用直连那家厂商。我们不托管也不中转 AI，对话没有任何路径能到我们这儿。

Here is the complete list of what our servers ever receive. 以下是我们服务器会收到的全部内容。

• Buying or restoring a purchase购买或恢复购买 Your email and order number. The card itself goes to the payment processor, Lemon Squeezy, and never reaches us. 你的邮箱和订单号。银行卡信息直接进支付商 Lemon Squeezy，到不了我们这里。
• Keeping your license active维持授权有效 A random device code that Puffy generates. It is tied to nothing on your Mac. 一个由 Puffy 生成的随机设备码，和你 Mac 上的任何信息都不挂钩。
• Restore attempts恢复购买尝试 A hash of the request's network address, that day's attempt count, the hardware model (MacBookPro18,3, say), and an 8-character one-way hash prefix of the email entered. Never the bare IP, never the email itself. All of it exists to stop license theft. The review alert we receive carries no plaintext email and no bare IP; to confirm a purchase we look up the order at Lemon Squeezy and reply to the email on that order. 请求网络地址的哈希、当日尝试次数、设备型号（比如 MacBookPro18,3），以及所输邮箱的 8 位单向哈希前缀。不存裸 IP，也不含邮箱原文。这些只为防授权被盗。我们收到的审核提醒里没有明文邮箱和裸 IP；要确认一笔购买，是拿订单号去 Lemon Squeezy 后台查那笔订单、给订单上的邮箱回信。
• Error reports错误报告 Sent only when you press the report button. They carry the technical details of that one failure and nothing else. 只在你主动点上报按钮时发送，只带那一次故障的技术细节。
• Update checks更新检查 The app downloads a version file. Nothing about you is attached. 应用只下载一个版本文件，不附带任何关于你的信息。

2. How we use data 2. 数据用途

Data is used to deliver what you bought, answer support, stop license theft, and meet legal obligations. It is never sold, never shared, and never used to profile you. 数据用于交付你买到的东西、处理支持请求、拦住盗用授权和满足法律要求。不出售，不共享，也不拿来给你画像。

3. Retention and deletion 3. 保留与删除

Order and license records are kept as long as accounting and tax rules require. Restore-attempt logs are kept only as long as they are useful against license theft, then discarded. To have your records deleted, write to support@nxsio.com and we confirm by email once it is done. 订单与授权记录按财务和税务要求保留。恢复尝试日志只保留到不再对拦截盗用有用为止，之后清除。要删除你的记录，写信到 support@nxsio.com，处理完我们发邮件确认。

4. Your rights 4. 你的权利

You can ask us for a copy of what we hold about you, correct it, delete it, restrict what we do with it, take it elsewhere, or object to a particular use. One email to support@nxsio.com covers any of these, and we reply within 30 days. 你可以要求我们提供一份所持数据的副本、更正它、删除它、限制我们对它的使用、把它带走，或者对某一项用途提出异议。这些都发一封信到 support@nxsio.com 就够，我们 30 天内回复。

If you live in the EU or the UK, those rights come from law rather than from us, and you can also complain to your national data protection authority. Our grounds for holding anything at all: delivering the license performs our contract with you, the restore-attempt logs rest on our legitimate interest in stopping license theft, and the order records meet a legal obligation. 如果你住在欧盟或英国，这些权利来自法律而不是我们给的，你也可以向所在地的数据保护机构投诉。我们持有这些数据的依据：交付授权是履行与你的合同，恢复尝试日志基于拦截盗用授权的合法利益，订单记录是法律义务。

5. Verify it yourself 5. 欢迎自行验证

You do not have to take this page's word for any of it. Install a network monitor like Little Snitch, run Puffy for a day, and watch what actually goes out. Downloads go straight from your Mac to whichever platform you pull from. Your library, transcripts, and notes never show up on the wire, and with local models neither do your AI chats. 这一页说的话，你都不必直接信。装个 Little Snitch 之类的网络监控，开着 Puffy 用一天，看看它到底发了什么。下载是你的 Mac 直连对应平台。资料库、逐字稿和笔记不会出现在网络上，用本地模型的话，AI 对话也一样。

6. Children 6. 未成年人

Puffy is not made for anyone under 16, and we do not knowingly collect a child's personal information. If you think a child's details have reached us, write to support@nxsio.com and we will check and delete them. Puffy 不面向 16 周岁以下的人群，我们也不会主动收集未成年人的个人信息。如果你认为有未成年人的信息到了我们这里，写信到 support@nxsio.com，我们会核实并删除。

7. Changes to this policy 7. 政策变更

The date at the top changes every time we update this policy. If a change materially affects data we already hold, we email the address on your order before the new version takes effect. 每次更新这份政策，顶部的日期都会变。如果某项变更实质影响到我们已经持有的数据，我们会在新版本生效前发邮件到你下单时用的邮箱。