Sooner 隐私政策

更新日期：2026 年 10 月 24 日

本政策适用于 Sooner（开发者：四川无限变量科技有限公司）及 Sooner 自托管 API 服务。

我们处理的信息

• 账户信息：Sooner 用户名、你提供的邮箱地址（验证状态会单独记录）以及 Apple 或 Google 登录标识。密码以加盐哈希保存；登录令牌以哈希保存。Apple 和 Google 身份令牌只在验证登录时短暂处理。
• 事件信息：事件标题、日期、类型及提醒设置保存在本机；登录并启用同步后，这些事件元数据会同步到 Sooner API。
• AI 导入：仅在你选择内容并单独同意本次上传后，图片或文字才会经 Sooner API 发送给服务器配置的多模态 AI 服务进行事件识别；此授权与私人内容备份独立。Sooner 不将识别图片写入数据库、对象存储或请求日志，也不将其设置为事件照片；为额度统计和失败重试，保存请求编号、内容摘要、状态及识别结果。AI 服务端的保留政策由部署方配置的服务提供方决定，部署方应使用不保留图片的服务配置。
• 私人内容：备注、记忆正文、照片和 Live Photo 的静态图片及视频默认留在本机。除你单独同意的本次 AI 识别外，只有你明确启用私人内容备份后，这些内容才会上传到 Sooner API 和私有对象存储。
• 推送信息：只有在你同意本政策并主动开启“服务器提醒”后，Sooner 才会初始化推送 SDK。极光（JPush）SDK 会从设备读取 Android ID、GAID、OAID、UAID、AAID、Boot ID 等设备标识符，以及设备型号、操作系统和网络信息，用于生成设备标识、注册并送达提醒；在小米设备上，小米推送通道还会处理设备厂商、型号、运营商、内存、系统和 SDK 版本、通知设置、网络类型及推送消息内容。Google 渠道使用 Firebase Cloud Messaging，SDK 会生成 Firebase 安装标识（FID）并处理推送注册标识和必要的应用、SDK 配置信息。SDK 由设备直接采集必要信息并通过网络发送给对应推送服务商。推送内容仅含通知标题、正文和事件标识，不含私人备注、记忆正文或照片。
• 购买信息：为验证和恢复 Pro 权益，我们处理商店商品标识、交易或订单标识、购买令牌及验证状态。支付卡号和银行账户信息由 Apple、Google、支付宝或微信支付处理，Sooner 不保存这些付款凭据。
• 兑换码信息：服务器仅保存兑换码的 SHA-256 哈希、套餐、核销账户和核销时间，用于一次性核销及 Pro 权益验证；不会保存兑换码明文。
• 广告信息：免费用户在 iOS 或 Android 时间轴可能看到 AdMob 原生广告。只有在你同意本政策后，Sooner 才会运行 Google UMP 取得适用的广告隐私选择，并在 UMP 允许请求广告时初始化 Google Mobile Ads SDK。该 SDK 会收集 IP 地址、设备及广告标识符、广告展示和互动信息、应用互动以及诊断和性能数据，用于广告投放、衡量、分析和反欺诈；IP 地址可能用于估算大致位置。Pro 有效期间不会请求广告。
• 服务运行信息：API 可能记录请求时间、请求路径、响应状态和网络连接元数据，用于提供、诊断和保护服务。

信息如何使用和交给服务提供方

Sooner 使用上述信息提供账户、同步、提醒、媒体备份、购买验证、广告和安全功能。Apple 和 Google 处理其登录与商店交易；Google Mobile Ads 提供广告，Google UMP 管理广告隐私选择；深圳市和讯华谷信息技术有限公司提供极光 JPush 推送服务，北京小米移动软件有限公司提供小米推送通道，Google LLC 提供 Firebase Cloud Messaging；七牛云保存你选择备份的私有媒体；七相、支付宝和微信支付处理中国大陆渠道的订单；邮件服务商传递邮箱验证码。服务提供方仅在提供相应服务所需的范围内处理信息。

Sooner 不通过设备定位权限收集精确位置，也不使用通讯录或麦克风。

你可以在“设置 → 隐私授权管理”中查看并撤回在线功能授权；撤回后应用停止账户、同步、推送和广告等在线处理，设备上的本地记录和提醒仍可使用。你也可以在设置中分别关闭服务器提醒、同步和私人内容备份，并通过 UMP 管理广告隐私选择。

保存、安全与删除

设备上的本地内容由你的设备保存。确认删除账户后，服务器账户及关联记录会安排在 3 天后自动删除；这段时间账户无法登录或同步。私有媒体随后进入可重试清理队列；媒体存储暂时不可用时，清理任务每 5 分钟重试，直到存储确认删除，服务故障期间没有固定的最长清理期限。用于确认删除结果并安全处理重试的回执只保存令牌哈希，不含账户资料或私人内容，并在 30 天后自动删除。账户删除不会自动删除设备上的本地副本，也不会取消 Apple 或 Google Play 中的订阅；如需停止续费，请在对应商店取消订阅。

客户端与 API 使用 HTTPS 传输。密码和登录令牌不会以明文形式保存在 API 数据库中；私有媒体使用受访问控制的存储和有时限的下载链接。

若要保留账户并只删除部分内容，请参阅数据删除说明。你可以在 Sooner“设置 → 注销账户”中验证身份并删除账户；无法使用应用时，可按外部账户删除说明提交请求。

联系我们

隐私或数据请求：hina@last-remote.xyz

Sooner Privacy Policy

Last updated: October 22, 2026. This policy applies to Sooner (developer: 四川无限变量科技有限公司) and the Sooner self-hosted API.

Information we process

• Account information: Sooner username, the email address you provide (its verification state is stored separately), and Apple or Google account identifiers. Passwords are stored as salted hashes; session tokens are stored as hashes. Apple and Google identity tokens are processed temporarily to verify sign-in.
• Event information: event title, date, type, and reminder settings stay on your device unless you sign in and enable sync, in which case event metadata is sent to the Sooner API.
• Private content: notes, memory text, photos, and Live Photo still/video assets stay on your device by default. They are uploaded to the Sooner API and private object storage only after you explicitly enable private-content backup.
• Push information: the push SDK is initialized only after you accept this policy and enable server reminders. JPush reads device identifiers such as Android ID, GAID, OAID, UAID, AAID, and Boot ID, plus device model, operating-system, and network information to register the device and deliver reminders. On Xiaomi devices, Xiaomi Push may also process the device manufacturer, model, carrier, memory, OS and SDK versions, notification settings, network type, and push-message content. Google distribution uses Firebase Cloud Messaging, which generates a Firebase Installation ID (FID) and processes push-registration identifiers and necessary app and SDK configuration information. The SDK collects necessary information from the device and sends it to the relevant push provider. Push payloads contain only the notification title, body, and event identifier, not private notes, memory text, or photos.
• Purchase information: store product, transaction/order identifiers, purchase token, and verification state, used to verify and restore Pro entitlements. Apple, Google, Alipay, or WeChat Pay handle payment credentials; Sooner does not store card or bank-account credentials.
• Redemption-code information: the server stores only a SHA-256 hash, plan, redeeming account, and redemption time for one-time redemption and Pro entitlement verification; it does not store the code in plaintext.
• Advertising information: free users may see AdMob native ads in the iOS or Android timeline. After you accept this policy, Sooner runs Google UMP to obtain applicable advertising choices and initializes Google Mobile Ads only when UMP allows ad requests. Google Mobile Ads may collect IP address, device and advertising identifiers, ad impressions and interactions, app interactions, and diagnostic and performance data for ad delivery, measurement, analytics, and fraud prevention; IP address may be used to estimate general location. Ads are not requested while Pro is active.
• Service-operation information: the API may log request time, request path, response status, and network connection metadata to provide, diagnose, and protect the service.

Use and service providers

Sooner uses this information for accounts, sync, reminders, media backup, purchase verification, advertising, and security. Apple and Google process sign-in and store transactions; Google Mobile Ads provides ads and Google UMP manages advertising privacy choices; Shenzhen Hexun Hegu Information Technology Co., Ltd. provides JPush, Beijing Xiaomi Mobile Software Co., Ltd. provides the Xiaomi push channel, and Google LLC provides Firebase Cloud Messaging; Qiniu stores private media you choose to back up; Qixiang, Alipay, and WeChat Pay process mainland China orders; and an email provider delivers verification codes. Providers process information only as needed to provide their services.

You can review and withdraw online-service consent under Settings → Privacy authorization management. After withdrawal, account, sync, push, advertising, and other online processing stop while local records and reminders remain available. You can also disable sync, server reminders, and private-content backup separately, and manage advertising choices through UMP.

Sooner does not collect precise location through device location permissions and does not use contacts or microphone data.

Retention, security, and deletion

Local content is stored on your device. After account-deletion confirmation, the server account and associated records are scheduled for automatic deletion after three days. During that period, account access is disabled. Private-media cleanup retries every five minutes after deletion until the storage provider confirms deletion; there is no fixed maximum cleanup period during a provider outage. A receipt used to confirm deletion and handle retries safely stores only a token hash, not account details or private content, and is automatically deleted after 30 days. Account deletion does not erase local device copies or cancel App Store or Google Play subscriptions; cancel those in the relevant store to stop renewal.

App-to-API traffic uses HTTPS. Passwords and session tokens are not stored in plaintext in the API database. Private media uses access-controlled storage and time-limited download links.

To keep your account and delete selected content, follow the data-deletion instructions. Delete your account in Sooner under Settings → Delete account after reauthentication. If you cannot use the app, submit a request using the external account-deletion instructions.

Contact

Privacy and data requests: hina@last-remote.xyz