隐私政策
更新日期：2026 年 10 月 20 日。本政策适用于由 Detailsoft 提供的闪卡（TwinklingCard / WinkNotes）iPhone、iPad、Mac 版本及配套服务。下文说明各功能处理的信息、服务方，以及您的选择。
账号、设备与购买
App 内的「闪卡 AI」即你在用户中心的共享账号（闪卡账号），用于登录、点数及优质朗读、AI 制卡等 AI 功能。登录闪卡 AI 不会把你的卡片同步到我们的服务器；只有使用优质朗读、AI 制卡等功能时，相关文字或图片才按下文说明发送。
用户中心使用账号编号或 Apple 登录标识识别共享账号，并保存昵称、登录身份和会话。Apple 登录目前不请求姓名或邮箱。未正式登录时，App 也会使用钥匙串生成的设备标识建立临时账号，处理设备名称、型号、App 版本及会话 IP、User-Agent，用于提供服务、账号安全和诊断。
会员核验会提交 Apple 签名交易、商品、原始交易编号和有效期等购买记录；积分余额、流水、兑换权益和赠与记录用于管理账号资产。Apple 购买不会向我们提供银行卡资料。
使用统计和诊断
自建统计记录创建、进入单词卡等产品交互、时间、页面或模板信息，并携带稳定的同步身份。服务器保存事件及 IP、User-Agent 的哈希，用于分析产品使用；稳定标识和哈希不代表完全匿名。
请求状态、耗时、路由、错误及其他诊断资料用于运行服务、排查问题和分析；部分记录可关联账号、设备、同步身份或请求编号。你主动发送反馈或导出日志时，我们会处理其中的内容，请先检查是否含敏感信息。
图片制卡
你选取的照片或截图、语言及认证信息会发送至我们的 AI 网关，再交由阿里云百炼的千问图像模型处理，返回生成正文。认证包含设备和同步身份，会员用户还可能携带原始交易编号及有效期，用于核验资格与用量；请求及生成内容可能关联身份。网关也记录用量、耗时和异常。
百炼国内版会存储模型、应用调用产生的数据，未经授权不用于模型训练。当前调用数据的准确留存字段和期限尚未确认，我们不承诺处理后立即删除。请在上传前检查图片，不要提供无权上传的他人信息。
本机、iCloud 与外部服务
卡片、学习记录和附件主要保存在本机。使用照片、拍摄或录音功能时，App 请求对应系统权限；你可以在系统设置中管理。开启 iCloud 同步后，卡片和附件通过 Apple 的 CloudKit 私有数据库在你的设备间同步；我们对该数据库的实际可访问范围仍在核查。
朗读默认使用优质朗读（在线合成语音）：要朗读的卡片文字和语言会发送至我们的 AI 网关，再交由阿里云百炼的千问语音模型合成，并按字数扣除积分；请求携带账号凭据，用于核验登录状态和积分。合成的音频保存在七牛云存储，相同文字再次朗读时直接取用，也会缓存在你的设备上。没有优质音色的语言，单词卡的单词和例句下载预生成的单词音频。
粤语、日语、韩语、德语、法语、西班牙语、葡萄牙语、意大利语和印尼语的优质朗读由微软 Azure 语音服务合成：要朗读的卡片文字、语言和所选声音经我们的 AI 网关发送给微软（Microsoft Corporation），不含账号凭据和设备标识。按微软公布的语音合成数据说明，实时合成不保存所提交的文字和生成的音频，也不写入微软日志。微软的联系方式为隐私申请页 aka.ms/privacyresponse，或微软隐私声明中的「如何联系我们」。请不要在需要用这些语言朗读的卡片里写身份证号、手机号等个人信息。合成的音频与中文朗读一样保存在七牛云存储，相同文字再次朗读时直接取用，此时不再发送给微软。
你可以在朗读设置中关闭优质朗读，改用设备系统语音；未登录或积分不足时也使用系统语音。在 Mac 上主动连接外部 AI 客户端时，你授权读取的卡片文字、图片等会交给所选客户端及其服务方；图片挖空可能提供未遮盖的原图。请阅读其政策，不需要时断开连接。
在线查词、网页与 Cookie
查词、候选建议和发音下载会向词服务发送单词、关键词、语言或音频标识。关键词也受本政策保护。发现页、拼词等业务网页和第三方词典会收到网页请求、网络信息，并可能使用 Cookie 维持状态或记录访问。自有词站和网页的完整日志、Cookie 及留存期限仍在核查，不承诺请求后立即删除。
我们的业务网页适用本政策，第三方页面另有自身政策。你可以停止访问，或通过浏览器可用设置管理 Cookie；禁用后部分功能可能无法使用。
共享、存储和保留
我们仅为上述功能、安全、诊断和分析向相应服务方传递所需信息，也可能按适用法律或有权机关要求披露。我们未将这些数据用于跨公司定向广告追踪。
百炼当前接入国内服务；上述语言的优质朗读由微软 Azure 处理。iCloud 及你选择的第三方服务的存储地域取决于其服务规则。我们无法保证所有资料都只存于一个地域。账号、交易、资产、流水、审计、统计、查询、日志及备份的确切保留期限尚未全部确认；你可以联系我们了解和申请处理。
注销与您的选择
设置 → 闪卡 AI → 注销闪卡 AI（即注销共享账号）会使共享账号退役、解除已绑定登录身份并撤销会话，影响使用同一账号的其他 App。积分、兑换权益和赠与不能通过重新注册恢复。注销不等于立即物理删除全部服务器资料，核心账号、交易、资产、流水和审计记录仍会保留。
注销不会删除本机卡片、学习记录、iCloud 数据或 Apple 购买归属，也不会取消 Apple 自动续费；请另行到 Apple 订阅管理中取消。退出登录也不会删除历史服务端记录。
你可以选择登录方式、修改昵称、退出或注销账号，管理权限、iCloud 同步，并选择是否使用在线图片处理和外部 AI。你可以联系我们申请查阅、复制、更正、删除信息或撤回同意；我们会核验身份并说明不能删除的范围及原因。撤回后，依赖这些信息的功能可能无法继续提供。
联系与更新
请保护设备和登录凭据。若监护人发现未成年人信息被不当提供，请联系我们处理。我们采取安全措施，但联网服务无法保证绝对安全。
隐私问题、信息权利申请和投诉，可通过 App 设置中的联系方式，或邮件 winkcard@qq.com 联系我们。本政策随功能和核查结果更新，重大变更会通过 App 或官网说明；涉及新的授权时另行征求同意。
Privacy Policy
Updated October 20, 2026. This policy covers TwinklingCard / WinkNotes for iPhone, iPad and Mac and its supporting services, provided by Detailsoft. It explains the information processed by each feature, the providers involved and your choices.
Accounts, devices and purchases
“WinkNotes AI” in the app is your shared account in the user center (your WinkNotes account), used for sign-in, points and AI features such as Premium Voice and AI Cards. Signing in to WinkNotes AI does not sync your cards to our servers; text or images are sent only when you use features such as online read-aloud or AI Cards, as described below.
The user center identifies shared accounts using an account ID or Apple sign-in identifier, and stores nicknames, login identities and sessions. Apple sign-in currently requests neither name nor email. Even without formal sign-in, the app uses a device identifier generated in Keychain to establish a temporary account. Device name, model, app version, session IP and User-Agent support service delivery, account security and diagnostics.
Membership verification submits Apple-signed transactions, products, original transaction IDs and validity periods. Points balances, ledger entries, redeemed benefits and grants support account asset management. Apple purchases do not give us your bank card details.
Usage analytics and diagnostics
Our analytics records interactions such as creating or opening word cards, timestamps, page or template information and a stable sync identity. The server stores events and hashes of IP and User-Agent for product usage analysis. Stable identifiers and hashes do not make data fully anonymous.
Request status, duration, routes, errors and other diagnostic information support service operation, troubleshooting and analysis. Some records can be linked to an account, device, sync identity or request ID. When you send feedback or exported logs, we process their contents; please review them for sensitive information first.
Creating cards from images
Your selected photo or screenshot, language and authentication information are sent to our AI gateway, then processed by Alibaba Cloud Model Studio’s Qwen image model to return generated text. Authentication includes device and sync identities and may include a member’s original transaction ID and validity period to verify eligibility and usage. Requests and generated content may be linked to identity. The gateway also records usage, duration and errors.
The mainland China Model Studio service stores data generated by model and application calls and does not use it for model training without authorization. The precise retained fields and retention periods for current calls are not confirmed; we do not promise immediate deletion. Review images before upload and do not provide others’ information without permission.
Your device, iCloud and external services
Cards, study records and attachments are primarily stored on your device. Photo, camera and recording features request the relevant system permissions, which you can manage in system settings. If enabled, iCloud sync uses Apple’s CloudKit private database to sync cards and attachments between your devices. Our actual access to that database is still being checked.
Read-aloud uses Premium Voice (online speech synthesis) by default: the card text and language to be read are sent to our AI gateway, then synthesized by Alibaba Cloud Model Studio’s Qwen speech model, and points are deducted by length. Requests carry your account credential to verify sign-in status and points. Synthesized audio is stored in Qiniu Cloud storage and reused when the same text is read again, and is also cached on your device. For languages without Premium Voice, word-card words and example sentences use pre-generated word audio.
Premium Voice for Cantonese, Japanese, Korean, German, French, Spanish, Portuguese, Italian and Indonesian is synthesized by the Microsoft Azure Speech service: the card text, language and selected voice are sent to Microsoft (Microsoft Corporation) through our AI gateway, without your account credential or device identifiers. According to Microsoft’s text to speech data documentation, real-time synthesis does not store the submitted text or the generated audio, and neither is written to Microsoft logs. Microsoft can be reached through its privacy request page aka.ms/privacyresponse or the “How to contact us” section of the Microsoft Privacy Statement. Please do not put ID numbers, phone numbers or other personal information in cards you have read aloud in these languages. As with Chinese read-aloud, synthesized audio is stored in Qiniu Cloud storage and reused when the same text is read again, in which case nothing is sent to Microsoft.
You can turn off Premium Voice in the read-aloud settings to use your device’s system speech; system speech is also used when you are not signed in or lack points. If you connect an external AI client on Mac, card text, images and other content you authorize it to read are passed to that client and its providers. Image cloze may expose the unmasked original. Read their policies and disconnect when no longer needed.
Online word lookup, web pages and cookies
Word lookup, suggestions and pronunciation downloads send words, keywords, language or audio identifiers to the word service. Keywords are covered by this policy. Business pages such as discovery and word games, and third-party dictionaries, receive web requests and network information and may use cookies for state or access records. Full logs, cookies and retention periods of our word service and pages are still being checked; immediate deletion is not promised.
Our business pages are covered here; third-party pages have their own policies. You may stop visiting or manage cookies through available browser settings. Disabling cookies may prevent some features from working.
Sharing, storage and retention
We pass the information needed for the features above, security, diagnostics and analytics to the relevant providers. Disclosure may also be required by applicable law or competent authorities. We do not use this data for cross-company targeted advertising tracking.
Model Studio currently uses the mainland China service; Premium Voice for the languages listed above is processed by Microsoft Azure. iCloud and selected third-party services determine storage regions under their own terms. We cannot guarantee a single storage region for all data. Exact retention periods for account, transaction, asset, ledger, audit, analytics, query, log and backup records are not all confirmed. Contact us for details or processing requests.
Account deletion and your choices
Settings → WinkNotes AI → Delete WinkNotes AI (deletes the shared account) retires the shared account, unlinks login identities and revokes sessions, affecting other apps using the same account. Points, redeemed benefits and grants cannot be recovered by registering again. Deletion does not immediately erase all server data: core account, transaction, asset, ledger and audit records remain.
Deletion does not remove local cards, study records, iCloud data or Apple purchase ownership, and does not cancel Apple auto-renewal. Cancel subscriptions separately with Apple. Signing out does not delete historical server records.
You can choose a login method, change your nickname, sign out or delete your account, manage permissions and iCloud sync, and choose online image processing or external AI. Contact us to request access, copies, correction, deletion or withdrawal of consent. We will verify identity and explain any records that cannot be deleted and why. Withdrawal may prevent dependent features from being provided.
Contact and updates
Protect your device and credentials. Guardians may contact us about a minor’s information provided improperly. We take security measures, but no network service can guarantee absolute security.
For privacy questions, rights requests or complaints, use the contact details in the app’s Settings or email winkcard@qq.com. This policy is updated as features and verification results change. Material changes will be explained in the app or on our website; new authorization will be requested separately.