隐私说明
生效日期：2026 年 10 月 22 日。PairSay · 近言（“本应用”）用于面对面双语字幕：将一方说的语音识别为文字，并翻译成另一种语言，仅显示文字、不播放声音。发布主体为 OLAP DATABASE PTE. LTD.。本文说明我们处理哪些数据、为什么处理、与哪些第三方共享、保留多久，以及你的权利。
我们处理的数据
- 安装标识与访问令牌：每次安装生成一个随机标识，并由服务器核对该标识、签发短期访问令牌，用于计量免费体验时长和核对订阅。该标识虽非姓名或账号，在适用法律下仍可能构成个人信息。
- 麦克风音频：在实时对话进行期间（你已启动并同意后），麦克风音频会被发送到语音识别服务以生成字幕。暂停、结束或离开页面会停止采集与上传。PairSay 本身不保留原始音频。
- 你输入或修正的文字：打字交流或修正原文时，对应文本会发送到翻译服务。
- 语言偏好、一次性同意记录与订阅状态：用于提供对应语言对、避免每次开始都打断，以及确认你是否为订阅用户。
- 崩溃与错误诊断：应用崩溃、卡顿或页面脚本出错时，会把诊断信息发送到我们自己的服务器，用于修复问题：错误类型、调用栈、出错的文件与页面路径、应用与系统版本、设备型号。诊断信息不包含音频、字幕、翻译或你输入的文字，不关联安装标识或访问令牌，也不交给第三方。
- 安装来源（苹果搜索广告）：在 iPhone 上，本应用使用苹果的 AdServices 获取一次本次安装是否来自苹果搜索广告；如果是，会和安装标识一起记录广告系列、广告组和关键词的编号以及国家或地区，用于了解哪些广告带来了用户。这些信息不含你的姓名、联系方式或设备广告标识符，不用于跨应用或跨网站跟踪你，因此不需要、也不会请求“允许跟踪”授权。
- 对话字幕（只在本机）：对话产生的字幕会保存在这台手机上，方便你关闭应用后再回来看。
对话字幕只保留在这台手机上，直到你删除它们；不会上传给我们，也不会用于分析。你可以在应用的「以往对话」里删除某一次对话，或者删除全部对话，也可以关掉「在这台手机上保留对话」。本机最多保留最近 100 次对话或 90 天（以较少者为准），超出的会自动删除最早的。只有你主动「保存文字记录」时，才会另外生成一份可分享的文字文件。
处理目的
我们处理上述数据，是为了提供实时语音转写与翻译字幕、计量有限免费体验、核验订阅资格，以及运营与保障服务安全。
第三方处理
为提供服务，部分内容会经云端发送到处理方。云端处理并不等于各处理方均不保留数据。
- Soniox（实时语音识别）在对话进行期间接收麦克风音频。隐私政策：https://soniox.com/policies/privacy-policy
- OpenRouter 将翻译请求路由至 Google Gemini（OpenRouter 是路由方，并非 Google 本身）。OpenRouter 隐私政策：https://openrouter.ai/privacy；Google 隐私政策：https://policies.google.com/privacy
- RevenueCat 用于核对订阅权限。隐私政策：https://www.revenuecat.com/privacy
- Apple App Store 处理购买与订阅扣款。隐私政策：https://www.apple.com/legal/privacy/
上述处理方各自遵循其隐私政策，并可能在其处理链条中保留数据。我们不承诺第三方不保留数据，也不承诺识别或翻译结果始终准确。字幕仅用于辅助交流，不能替代专业口译；重要信息请当场确认。
保留期限
PairSay 不保留原始音频。对话字幕只保留在这台手机上，直到你删除它们或超出本机保留上限；我们的服务器不保存对话记录。安装账本中的安装标识与剩余免费时长，以及完成计量、核验订阅所需的记录，会按提供服务所需保留。安装来源记录与安装账本一并保留。崩溃与错误诊断会保留到排查和修复问题所需的时间。购买与账单相关记录由 Apple 与 RevenueCat 按其政策及法律规定保留。你可以通过下方联系方式申请删除与你相关且我们能关联的数据。
你的权利
在适用法律范围内，你有权访问、更正或删除与你相关的个人信息。我们能关联的数据有限，但会尽力处理你的请求。
联系我们
如需隐私相关请求或疑问，请发送邮件至 hi@andynote.app，并在邮件主题中注明 PairSay。
Privacy
Effective date: October 22, 2026. PairSay (“the App”) provides face-to-face bilingual captions: it transcribes one person’s speech and translates it into another language, showing text only and never playing audio. The publisher is OLAP DATABASE PTE. LTD. This notice describes what data we process, why, which third parties we share it with, how long we keep it, and your rights.
Data we process
- Installation identifier and access token: each install gets a random identifier; the server issues a short-lived token for metering the free experience and checking subscription status. The identifier is not a name or account, but it may still be personal data under applicable law.
- Microphone audio: while a live session is running and you have consented, microphone audio is sent to a speech-recognition service to produce captions. Pausing, ending, or leaving the page stops capture and upload. PairSay itself does not retain raw audio.
- Text you type or correct: typed messages and corrections are sent to a translation service.
- Language preference, a one-time consent record, and subscription status: to serve the right language pair without interrupting you each time, and confirm whether you are a subscriber.
- Crash and error diagnostics: when the app crashes, hangs or hits a script error, diagnostic data is sent to our own server so we can fix the problem: the error type, call stack, the file and page path where it happened, the app and OS version, and the device model. Diagnostics contain no audio, captions, translations or text you typed, are not linked to the installation identifier or access token, and are not shared with third parties.
- Install source (Apple Search Ads): on iPhone, the App uses Apple’s AdServices once to learn whether this installation came from an Apple Search Ads ad. If it did, the campaign, ad group and keyword numbers and the country or region are recorded with the installation identifier, so we can see which ads bring users. This contains no name, contact details or device advertising identifier, is not used to track you across other apps or websites, and therefore does not need, and never asks for, tracking permission.
- Conversation captions (on this phone only): the captions a conversation produces are kept on this phone so you can read them again after closing the app.
Conversation captions are kept on this phone until you delete them. They are never uploaded to us and never used for analytics. You can delete one conversation, or all of them, under “Past conversations” in the app, and you can turn “Keep conversations on this phone” off entirely. This phone keeps at most the 100 most recent conversations or 90 days, whichever is smaller; anything beyond that is deleted oldest first. A separate shareable text file is created only when you actively choose to export it.
Why we process it
To provide live speech-to-text and translation captions, to meter the limited free experience, to verify subscription eligibility, and to operate and secure the service.
Third parties (cloud processing)
To deliver the service, some content is sent to processors over the internet. Cloud processing is not a guarantee that every processor retains nothing.
- Soniox (real-time speech recognition) receives live microphone audio while a session is running. Privacy policy: https://soniox.com/policies/privacy-policy
- OpenRouter routes translation requests to Google Gemini (OpenRouter is the routing service, not Google itself). OpenRouter privacy policy: https://openrouter.ai/privacy; Google privacy policy: https://policies.google.com/privacy
- RevenueCat is used to verify subscription entitlements. Privacy policy: https://www.revenuecat.com/privacy
- Apple App Store handles purchases and subscription billing. Privacy policy: https://www.apple.com/legal/privacy/
Each processor follows its own privacy policy and may retain data in its own processing chain. We do not promise that processors retain nothing, and we cannot guarantee that recognition or translation is always accurate. Captions are an aid to conversation, not a substitute for professional interpretation; confirm important information in person.
Retention
PairSay does not retain raw audio. Conversation captions are kept on this phone until you delete them or the on-device limits prune them; our servers keep no conversation record. The installation ledger (installation identifier and remaining free time) and records needed to meter usage and verify subscription status are kept as needed to provide the service. The install-source record is kept with the installation ledger. Crash and error diagnostics are kept for as long as needed to investigate and fix problems. Purchase and billing records are retained by Apple and RevenueCat under their policies and applicable law. You can ask us to delete data we can associate with you via the contact below.
Your rights
To the extent applicable law provides, you may access, correct, or request deletion of personal information relating to you. We can associate limited data, but we will do our best to act on your request.
Contact
For privacy requests or questions, email hi@andynote.app and put PairSay in the subject line.