一、我们提供的服务

步点点帮助你把愿望拆成可执行的行动路线，并提供步骤细化、每周推荐、行动打卡和进度记录。应用不要求注册账号即可使用基础功能。

二、我们处理哪些信息

• 你主动填写的内容：愿望、目标、步骤反馈、卡点说明、打卡文字，以及你在小步上写下的记录文字。这些内容用于生成路线、细化行动、分析当前行动是否有帮助，并作为后续步骤的参考。
• 记录本中的照片：你为小步添加的照片只保存在本机，不会上传到服务器。应用只在你点击“拍照 / 选图”时请求相机或相册权限，拒绝授权不影响其他功能。
• 留言：你在“我的 → 留言”里主动发送的文字，会连同语言、应用版本、平台和当前愿望标题一起保存在我们的服务器上，仅用于阅读反馈和改进产品，不保存网络地址。
• 匿名使用统计：为了知道哪一步卡住了人，应用会上报一小组固定名称的事件：打开与退到后台、进入和离开某个界面及停留时长、提交愿望、生成路线成功或失败、打开阶段或记录本、在小步页开始写字（只记有没有动笔，不含所写内容）、完成小步、记一笔、分享、发送留言、清除数据；应用自己判定的“卡住”（连续失败、表单反复未通过、同一步来回跳、长时间无操作）；可恢复错误和崩溃信息（只有错误类型和程序给出的简短错误消息）；以及本同意说明出现过几次、你是否先关闭过、从第一次打开到同意隔了多久——这几条在你同意之前只记在本机，不会上传，你同意之后才随其他数据一起上报，你一直不同意就永远留在手机上。每条只包含事件名称、发生时间、所在界面的固定代号、时长、应用版本、平台、界面语言、本次启动的随机会话标识，以及一串本机随机生成、与你身份无关的安装标识（服务器会再做一次哈希后保存）。不包含愿望内容、记录文字、照片、步骤原文，也不保存网络地址、姓名、邮箱、手机号、广告标识符或位置。这些数据保存在我们自己的腾讯云服务器上，只用于统计各功能的使用情况和发现让人卡住的环节，不用于广告，不与第三方共享。上报只在你同意本政策之后开始；你可以在“我的 → 关于 → 匿名使用统计”里随时关闭，关闭后本机排队未发送的数据会被清空。
• 设备本地数据：路线、步骤完成状态、记录本（文字与照片）、贴纸摆放位置、新手引导是否看过和语言选择会保存在设备本地，以便应用在下次打开时恢复。备份码和备份文件由你自行导出和保管。
• 服务运行信息：AI 服务会收到请求内容、语言和步骤数据。服务器可能处理网络地址、请求时间和错误信息，用于限流、防滥用、排查故障和保障服务稳定性。
• 首发免费说明：首个公开版本不展示广告，也不提供应用内购买；愿望路线生成和步骤细化均可免费使用。
• 未处理的信息：本版本不申请麦克风、定位或通讯录权限；相机与相册仅在你主动添加照片时使用；本地提醒仅在你开启时由系统在本机触发。应用不读取广告标识符，不进行跨应用跟踪，也不采集用于广告的设备标识；匿名使用统计不用于广告，也不与任何第三方共享。iOS 客户端只会在你同意本政策后向 Apple 申请一次匿名的广告归因凭证（见第五节），用于统计安装是否来自 Apple Search Ads。

三、信息如何使用

我们使用这些信息来生成和改进你当前请求的路线、保存你的进度，并保障服务稳定。应用首次打开时不会为了推荐内容自动发送你的愿望或步骤数据；当你第一次主动使用云端 AI 生成、细化或分析功能时，应用会说明数据去向并征求同意。若你暂不同意，仍可使用不联网的示例路线。

我们不会把你的愿望内容出售给广告主，也不会用愿望内容推断敏感身份属性。公开资料链接来自路线生成结果，点击后会跳转到对应的第三方网站，其隐私规则由该网站负责。

四、保存与删除

本地路线和进度数据会保留在你的设备上。你可以在应用内依次进入“我的 → 关于 → 清除本机数据”，也可以删除应用，以移除这些本地记录（包括记录本里的文字和照片）。记录本中的单条记录可以随时在小步页面或记录本里删除。发送给 AI 服务的请求只为完成当前功能而处理；匿名使用统计和服务运行日志按维护需要保留，并在不再需要时删除或去标识化。你也可以联系支持邮箱申请说明、删除或更正与你有关的服务记录，包括你发送过的留言。

五、第三方服务

步点点通过自有腾讯云后端调用 DeepSeek AI 服务生成和细化路线，客户端不嵌入 DeepSeek SDK，也不保存 DeepSeek API Key。iOS 客户端仅包含 Capacitor 与 Cordova 运行框架，用于承载界面、访问 HTTPS 服务、读取系统语言和调用系统分享面板；本版本不包含广告、推送、支付或第三方登录 SDK；匿名使用统计由我们自己的腾讯云后端接收，不使用任何第三方统计 SDK。为了解广告投放效果，iOS 客户端会在你同意本政策后向 Apple 申请一次匿名的广告归因凭证（Apple AdServices），我们的后端用它向 Apple 查询这次安装是否来自 Apple Search Ads 广告及所属的广告系列和关键词。该凭证不含你的身份信息、不使用广告标识符，也不会用于跨应用追踪；结果只与匿名安装标识关联，用于统计各广告的转化。

六、未成年人

步点点面向普通用户提供目标规划工具。未成年人使用涉及出行、金钱、健康、法律或公共安全的目标时，应在监护人或专业人士指导下进行。应用不会要求未成年人提交身份证件或支付信息。

七、联系我们

如对本政策有疑问、希望行使数据请求权，或需要报告隐私问题，请联系：420987231@qq.com。

使用服务还需遵守《步点点用户协议》。

StepDots Privacy Policy (English)

Effective 8 August 2026 · Last updated 24 September 2026. The Chinese text above is the governing version; this is a faithful summary.

1. What the app does

StepDots turns a wish into a route of milestones and small actions. No account is needed.

2. What we process

• What you type: your wish, feedback on steps, obstacle notes, check-in text and the notes you write under a small step. They are sent to our server to generate and refine routes and to judge whether an action helped.
• Photos in the Logbook: stored on your device only, never uploaded. Camera or photo access is requested only when you tap to add a photo.
• Messages you send us (About → Message): the text plus language, app version, platform and the title of your current wish, stored on our server to read your feedback. No network address is stored.
• Anonymous usage statistics: a fixed set of named events — app launch and background, screen enter/leave with time spent, wish submitted, route generated or failed, stage or logbook opened, started writing on a step (only that you started, never what you wrote), step completed, note saved, share, message sent, data cleared; a "stuck" signal the app derives itself (repeated failures, a form rejected repeatedly, bouncing between two screens, a long idle); recoverable errors and crashes (error type and the short message produced by the program); and how many times this consent notice appeared, whether you dismissed it first, and how long it took from first opening the app until you accepted — these last few are kept on your device only and are sent, together with everything else, after you accept; if you never accept they stay on the phone. Each event carries only the event name, time, a fixed screen code, duration, app version, platform, interface language, a random per-launch session id and a random install identifier generated on your device (hashed again on the server). It never contains your wish, notes, photos, step text, network address, name, email, phone number, advertising identifier or location. The data lives on our own server, is used only to see how features are used and where people get stuck, is not used for advertising and is not shared with third parties. Reporting starts only after you accept this policy, and you can turn it off at any time under About → Anonymous usage stats.
• On-device data: routes, progress, the Logbook, sticker positions, tour state and language stay on your device. Backups are exported and kept by you.
• Service operation: the AI service receives the request text, language and step data; the server may process network addresses, request times and error details for rate limiting, abuse prevention and troubleshooting.
• Not collected: no microphone, location or contacts permission; no advertising identifier; no cross-app tracking; no ads, purchases, push or third-party login SDKs in this version.

3. How it is used

To generate and improve the route you asked for, keep your progress and keep the service stable. Cloud generation only starts after you give consent in the app; the offline sample route works without it. We do not sell your wishes or infer sensitive attributes from them. Links in a route lead to third-party sites governed by their own policies.

4. Retention and deletion

Local data can be removed under About → Clear local data, or by deleting the app. Requests to the AI service are processed only to complete the current function; anonymous statistics and service logs are kept as long as needed for maintenance and then deleted or de-identified. You may email us to ask about, correct or delete server records related to you, including messages you sent.

5. Third parties

Routes are generated through our own Tencent Cloud backend calling the DeepSeek AI service; the app embeds no DeepSeek SDK or key. The iOS app contains only the Capacitor/Cordova runtime. Usage statistics are received by our own backend; no third-party analytics or attribution SDK is used. After you accept this policy, the iOS app asks Apple once for an anonymous Apple Search Ads attribution token; our own server exchanges it with Apple to learn whether this install came from an Apple Ads campaign and which campaign or keyword. No advertising identifier is read and nothing is used to track you across apps.

6. Minors

Goals involving travel, money, health, law or public safety should be pursued under the guidance of a guardian or professional. The app never asks minors for identity documents or payment details.

7. Contact

Questions or data requests: 420987231@qq.com. Use of the service is also subject to the Terms of Use.