ZoneFoundry 隐私政策
Privacy Policy

1. 我们处理哪些数据 · What data we process

为提供服务，我们可能处理以下数据：

• 账号信息：当你用 Apple、Google 或邮箱登录时产生的账号标识、邮箱、以及登录令牌（用于保持登录状态）。
• 语音录音：当你使用语音功能时，麦克风录音会被采集并发送到云端进行语音识别（详见第 2 节）。
• 指令与转写文本：你说出或输入的命令、转写后的文本、以及助手的回复。
• 对话记录：为保持上下文连贯，最近的助手对话轮次会被保存。
• 家居配置：房间/设备名称、场景、收藏、定时任务、桥接配对信息。
• 音乐服务授权：当你连接 Apple Music、Spotify、QQ 音乐或网易云音乐时的授权令牌（仅用于代你控制播放）。
• 新闻/广播偏好：你选择的内容语言与相关设置。
• 位置（可选）：仅当你启用「离家/回家」等自动化时，才会使用设备位置触发规则；可随时关闭。
• 设备与技术信息：设备令牌、以及为安全执行请求所需的最小日志。

We may process: account identifiers/email and session tokens (Apple/Google/email sign-in); voice recordings when you use voice; your commands, transcribed text and the assistant's replies; recent conversation turns (for context); home setup (room/device names, scenes, favorites, schedules, bridge pairing); music-service authorization tokens (Apple Music, Spotify, QQ Music, NetEase) used only to control playback on your behalf; news/broadcast language preferences; device location only if you enable home/away automation (you can turn it off); and device tokens plus the minimum logs needed to run requests safely.

2. 语音、AI 与音频如何处理 · How voice, AI & audio are handled

当你使用语音控制时：

• 麦克风录音会被发送到第三方云端语音识别服务，转换成文本。也就是说，语音音频会离开你的设备进行处理。
• 转写后的文本（以及你输入的命令）会被发送到第三方 AI 语言模型（目前为 DeepSeek）来理解你的意图。app 在首次使用相关功能时会请求你同意。
• 助手的语音回复与新闻广播由第三方云端语音合成（TTS）服务生成；生成的音频会在我们的 relay 上临时缓存约 5 分钟，让你的 Sonos 音箱拉取播放，之后自动删除。

我们仅将这些数据用于完成你请求的功能。第三方处理商对其接收的数据另受其自身条款与隐私政策约束。

When you use voice control: your microphone recording is sent to a third-party cloud speech-recognition service to convert it to text — i.e. voice audio leaves your device for processing. The transcribed text (and typed commands) is sent to a third-party AI language model (currently DeepSeek) to understand intent; the app asks for your consent before first use. Spoken replies and news briefings are produced by a third-party cloud text-to-speech service; the resulting audio is cached on our relay for about 5 minutes so your Sonos can fetch it, then automatically deleted. We use this data only to fulfill your request; third-party processors handle received data under their own terms and policies.

3. 为什么处理这些数据 · Why we process it

这些数据仅用于：控制 Sonos 及关联音乐服务、理解并执行你的语音/文字指令、创建提醒与新闻广播、广播后恢复原播放、跨设备同步你的家居资料、诊断故障，以及保护服务免受滥用。我们不会出售你的个人数据，也不用于第三方广告或跨 app 追踪。

We use the data only to control Sonos and linked music services, understand and execute your voice/text commands, create reminders and briefings, restore playback after a broadcast, sync your home data across devices, diagnose issues, and protect the service from abuse. We do not sell your personal data and do not use it for third-party advertising or cross-app tracking.

4. 第三方服务 · Third-party services

ZoneFoundry 会与以下类别的第三方交互，仅限完成你请求的功能所必需：

• 云端 AI / 语音处理商：语音识别、AI 语言模型（DeepSeek）、语音合成 —— 处理你的语音与文本指令。
• 音乐与音箱：Sonos、Apple Music、Spotify、QQ 音乐、网易云音乐 —— 通过你的授权代你控制播放。
• 登录：Apple、Google —— 用于账号登录。
• 可选即时通讯渠道：如 Telegram、QQ、微信机器人 —— 仅当你主动连接时。

使用这些服务时，你同时也受其各自的条款与隐私政策约束。

ZoneFoundry interacts with these categories of third parties, only as needed to fulfill your request: cloud AI / voice processors (speech recognition, the DeepSeek language model, speech synthesis); music & speakers (Sonos, Apple Music, Spotify, QQ Music, NetEase Cloud Music) controlled on your behalf via your authorization; sign-in providers (Apple, Google); and optional messaging channels (e.g. Telegram, QQ, WeChat bots) only if you connect them. Your use of these services is also subject to their own terms and policies.

5. 数据共享与保留 · Sharing & retention

除上述为执行你的请求所必需的第三方处理外，我们不会共享你的个人数据，也不出售数据。我们按最小化原则保留数据：语音音频仅在转写期间传输处理；TTS 音频缓存约 5 分钟后自动清除；对话记录与家居/账号资料在你使用服务期间保留，用于上下文连贯与可靠性；执行与安全日志仅保留排障所需的最短时间。删除账号会移除你的账号及关联家居数据（见第 6 节）。

Apart from the third-party processing above that is necessary to carry out your request, we do not share or sell your personal data. We retain data on a data-minimization basis: voice audio is only transmitted for transcription; TTS audio is auto-evicted after about 5 minutes; conversation and home/account data are kept while you use the service for continuity and reliability; execution and security logs are kept only as long as needed to troubleshoot. Deleting your account removes your account and associated home data (see §6).

6. 你的权利与账号删除 · Your rights & account deletion

你可以随时在 app 内删除账号：More（更多）→ Account（账号）→ 删除账号。删除后，我们会移除你的账号标识、登录令牌、以及与该账号关联的家居资料。你也可以断开任何已连接的音乐服务或即时通讯渠道，或撤销相关权限。如需查询或更正你的数据，请通过下方方式联系我们。

You can delete your account anytime in the app: More → Account → Delete account. This removes your account identifiers, session tokens and the home data tied to that account. You can also disconnect any linked music service or messaging channel and revoke its permissions. To access or correct your data, contact us below.

7. 本地与云端连接 · Local vs cloud connection

ZoneFoundry 支持「本地连接」（通过你家中的 ZoneFoundry Bridge，在局域网内控制）与「云端连接」两种路径。请注意：连接路径由你在设置中选择；当 Bridge 离线时，处于同一 Wi-Fi 并不会自动切换为直连 Sonos，需要你手动更改连接方式。

ZoneFoundry offers a "Local Connection" (via your in-home ZoneFoundry Bridge on your LAN) and a "Cloud Connection." The path is chosen by you in settings; if the Bridge goes offline, being on the same Wi-Fi does not automatically switch to direct Sonos control — you change the route manually.

8. 数据安全 · Security

登录令牌等敏感凭证存储在 iOS Keychain；数据在传输中使用 TLS 加密。没有任何方法能保证绝对安全，但我们采取与风险相称的合理措施保护你的数据。

Sensitive credentials such as session tokens are stored in the iOS Keychain; data in transit is encrypted with TLS. No method is perfectly secure, but we take reasonable measures proportionate to the risk.

9. 国际数据传输 · International transfer

我们的服务器与部分第三方处理商可能位于你所在国家/地区以外。使用本服务即表示你理解你的数据可能在其他地区被处理。

Our servers and some third-party processors may be located outside your country or region. By using the service you understand your data may be processed in other regions.

10. 儿童隐私 · Children

ZoneFoundry 并非面向 13 岁以下儿童设计，我们不会有意收集儿童的个人数据。

ZoneFoundry is not directed to children under 13, and we do not knowingly collect personal data from children.

11. 政策变更与联系方式 · Changes & contact

我们可能会更新本政策；重大变更会更新下方「最后更新」日期。如对本政策或你的数据有任何疑问，请联系：support@zonefoundry.dev。

We may update this policy; material changes update the "Last updated" date below. Questions about this policy or your data: support@zonefoundry.dev.