SuperLeo 隐私政策

生效日期：2026 年 11 月 11 日

SuperLeo 是一个自托管 AI 助手的 iPhone、iPad 和 Apple Watch 客户端。本应用不连接开发者运营的账户系统，开发者也不收集你的个人数据。应用只和你自己配对的 SuperLeo 服务器通信，这台服务器是你在自己的电脑或服务器上运行的。

我们不收集的

• 没有注册和登录，开发者那里没有你的账户。
• 没有广告，没有统计分析 SDK，不跟踪你在其他应用和网站上的行为。
• 开发者不出售、不共享你的任何数据。

发送到你自己服务器的内容

以下内容只发送到你配对的服务器，由你自己保管：

• 你发出的消息，以及服务器回复的内容。
• 语音：按住说话或通话时，录音会发给你的服务器。设备上的实时转写由 Apple 的语音识别完成。
• 健康数据：只在你于「更多 › 健康」里开启后才读取。读取范围是睡眠、心率、心率变异性（HRV）和活动，每天汇总一次后发给你的服务器。健康数据不会用于广告，不会存进 iCloud，开发者不会收到。
• 推送令牌：用于让你的服务器把闹钟和提醒推送到这台设备。

你的服务器可能会把对话发给你在服务器上自己配置的 AI 模型服务商。那一步由你的服务器和你选择的服务商之间的约定决定，不经过开发者。

中转服务

如果手机和服务器不在同一个网络里，连接可以经过开发者运营的中转（relay.superleo.app 或 relay.superleo.cn）。连接使用端到端 TLS，证书由应用按指纹校验，中转只转发加密后的数据，看不到内容，也不保存内容。

设备权限

• 相机：只用来扫描配对二维码，不拍照，不保存画面。
• 麦克风和语音识别：只在你按住说话或开始通话时使用。
• 本地网络：用来连接你在同一 Wi-Fi 里运行的服务器。
• 闹钟（AlarmKit）和通知：按你设定的时间提醒你。

以上权限都可以随时在 iOS「设置」里关闭。

删除数据

在应用里解除配对，设备上保存的服务器地址和令牌就会被清除。你的对话和其他数据保存在你自己的服务器上，可以在那里直接删除。卸载应用会删除设备上的全部数据。

儿童

本应用不面向 13 岁以下儿童，也不会有意收集儿童的信息。

变更与联系

本政策如有变更，会更新本页并修改上方的生效日期。如有问题，请在 GitHub 提交 issue。

---

SuperLeo Privacy Policy

Effective date: November 11, 2026

SuperLeo is an iPhone, iPad and Apple Watch client for a self-hosted AI assistant. The app has no accounts with the developer, and the developer does not collect your personal data. The app talks only to the SuperLeo server you pair it with, which you run on your own computer or server.

What we do not collect

• No sign-up or sign-in. The developer holds no account for you.
• No ads, no analytics SDKs, and no tracking across other apps or websites.
• The developer does not sell or share any of your data.

What goes to your own server

The following is sent only to the server you paired, and stays in your keeping:

• The messages you send and the replies your server gives.
• Voice: when you hold to talk or start a call, the recording goes to your server. Live on-device transcription is done by Apple's speech recognition.
• Health data: read only after you turn it on under More › Health. It covers sleep, heart rate, heart rate variability (HRV) and activity, summarised once a day and sent to your server. Health data is never used for advertising, never stored in iCloud, and never received by the developer.
• A push token, so your server can deliver alarms and reminders to this device.

Your server may send conversations to an AI model provider you configured on that server. That step is between your server and the provider you chose; it does not pass through the developer.

Relay

When your phone and your server are not on the same network, the connection can pass through a relay run by the developer (relay.superleo.app or relay.superleo.cn). The connection uses end-to-end TLS with a certificate the app checks by fingerprint, so the relay forwards only encrypted data. It cannot read the content and does not store it.

Device permissions

• Camera: only to scan the pairing QR code. No photos are taken or saved.
• Microphone and speech recognition: only while you hold to talk or are in a call.
• Local network: to reach a server running on the same Wi-Fi.
• Alarms (AlarmKit) and notifications: to remind you at the times you set.

You can turn any of these off at any time in iOS Settings.

Deleting your data

Unpairing in the app clears the server address and token stored on the device. Your conversations and other data live on your own server, where you can delete them directly. Deleting the app removes all of its data from the device.

Children

The app is not directed at children under 13 and does not knowingly collect information from them.

Changes and contact

If this policy changes, this page and the effective date above will be updated. For questions, open an issue on GitHub.