Novi
隱私權政策
「Novi」（以下稱本 App）是一款以離線為主的個人記事工具。我們的原則很簡單：你的記錄只存在你的手機上，我們看不到、也不會收集。唯一的例外是你自己打開的「AI 秘書」（Novi Pro 訂閱的功能），下面會寫清楚傳了什麼、傳給誰。
我們收集什麼資料
開發者不保存你的任何資料。本 App 沒有帳號、沒有分析工具、沒有廣告，也沒有任何第三方 SDK。你輸入的作業、考試、行程、待辦、記帳與聊天訊息，全部只儲存在你裝置本機的資料庫中。只有在你打開「AI 秘書」時，才會有資料經過我們的伺服器（見下方「AI 秘書」）。
資料儲存在哪裡
所有資料儲存在你的 iPhone 上，由 iOS 的沙盒保護。如果你有開啟 iCloud 裝置備份，這些資料會跟著 iOS 備份一起備份到你自己的 iCloud 帳號；我們無法存取該備份。
通知
本 App 使用 iOS 的「本機通知」提醒作業截止、考試與行程。提醒是在你的裝置上排程的，不會經過任何伺服器。你可以隨時在 iOS 設定中關閉通知。
網路連線
「新聞」頁和附有新聞頭條的自訂簡報，會連線到新聞媒體的公開 RSS（法廣、中央社、鉅亨網、BBC 中文等）讀取標題；簡報的頭條可能由 iOS 在背景先抓好。點開文章時由 app 內的 Safari 瀏覽該媒體網站。這些連線由你的裝置直接發出，本 App 不會在中間經手，也不會傳送你的任何記錄。
備份檔和「記錯了」紀錄都存在手機上，只有你自己用分享功能傳出去時才會離開手機。
手機內建 AI
在支援 Apple Intelligence 的 iPhone 上，Novi 會用 Apple 內建在手機裡的語言模型理解比較難的句子、陪你聊天，聊天時也會參考你接下來幾天的行程。這些處理全部在你的手機上完成，句子和行程不會離開手機。你可以在「一般設定 → AI」關閉。
AI 秘書（雲端，訂閱才有，預設關閉）
AI 秘書是 Novi Pro 訂閱方案的功能，預設關閉；沒有訂閱或沒有打開時，Novi 不會把任何內容傳到雲端。在「一般設定 → AI」打開並同意說明後，Novi 會把你剛輸入的那一句話、未完成事項的標題（用來對應「改時間、完成、刪除」）、最近幾則對話、你選的語氣與暱稱，以及接下來 7 天的作業、考試、行程標題與時間和今明兩天的課表，透過 Novi 架在 Cloudflare 上的伺服器，交給 Anthropic 的 Claude 判斷、回話、排計畫或寫自訂簡報的建議。
為了確認訂閱有效，App 會附上 Apple 簽署的訂閱證明，伺服器只當下驗證、不保存。為了確認請求來自真正的 Novi，App 使用 Apple 的 App Attest，伺服器會保存這次安裝的公開金鑰，裡面沒有任何個人資料。
AI 秘書可以記住你在聊天中提到、之後還用得到的事（例如「數學是最弱的科目」，或你說「記住：…」的內容），最多 30 則。這些記憶只存在你的手機裡，聊天和寫簡報時才一起送出；在「設定 → 秘書記得的事」可以逐則刪除或全部清除。
Novi 的伺服器不保存這些內容，也不記錄在日誌中；為了計算每天的使用次數上限，只會用一個隨機產生、與你身分無關的安裝代碼計數，兩天後自動刪除。Anthropic 依其商業條款處理這些請求，不會拿來訓練模型，並可能為了防止濫用保留最多 30 天。你隨時可以關掉 AI 秘書或取消訂閱，之後就不會再傳送。
天氣與位置
只有在你於「自訂簡報」打開天氣時，App 才會要求定位，並把四捨五入到約 1 公里的座標傳給 Apple 的 WeatherKit 查預報。這個請求不含姓名、帳號或你的記錄。App 只在手機上保留預報和地名，不保存座標。不開天氣就不會有這個連線。
如何刪除資料
在 App 內可以逐筆刪除。要刪除全部資料，直接從 iPhone 移除本 App 即可，所有資料會一併刪除。
兒童隱私
本 App 不保存任何人的個人資料，包括 13 歲以下的兒童。AI 秘書預設關閉，需要訂閱並由使用者自己打開、同意。
政策變更
若本政策有更新，會在本頁公告並更新生效日期。
聯絡我們
有任何問題，請來信：jerrytai8888@gmail.com
Privacy Policy
Novi (the "App") is an offline-first personal note-taking tool. The principle is simple: your records stay on your phone. We cannot see them and we do not collect them. The one exception is the AI secretary, a Novi Pro subscription feature you turn on yourself; what it sends, and to whom, is set out below.
What we collect
We keep none of your data. The App has no accounts, no analytics, no ads and no third-party SDKs. The homework, exams, events, to-dos, spending and chat messages you enter are stored only in a database on your device. Data passes through our server only if you turn on the AI secretary (see "AI secretary" below).
Where your data lives
All data is kept on your iPhone, protected by the iOS app sandbox. If you have iCloud device backup turned on, this data is included in your own iOS backup; we have no access to that backup.
Notifications
The App uses iOS local notifications to remind you of due dates, exams and events. Reminders are scheduled on your device and never pass through a server. You can turn them off at any time in iOS Settings.
Network
The News page, and custom briefs with headlines, connect to the publishers' public RSS feeds (BBC, CBC, CNA, Focus Taiwan, RFI and others) to read headlines; iOS may fetch a brief's headlines in the background ahead of time. Articles open in an in-app Safari view on the publisher's own site. Those connections go directly from your device; the App does not relay them and sends none of your records.
Backup files and the wrong-sentence log stay on your phone. They leave it only when you share them yourself.
On-device AI
On iPhones with Apple Intelligence, Novi uses Apple's language model built into the phone to read harder sentences and to chat, looking at your plans for the next few days while it does. All of this runs on your phone; your sentences and plans never leave it. You can turn it off in General Settings → AI.
AI secretary (cloud, subscription only, off by default)
The AI secretary comes with the Novi Pro subscription and is off by default; without the subscription, or with it switched off, Novi sends nothing to the cloud. If you turn it on in General Settings → AI and agree, Novi sends the sentence you just typed, the titles of your open items (to match "move", "done" and "delete"), the last few messages, the tone and nickname you chose, and the titles and times of your homework, exams and events for the next 7 days plus today's and tomorrow's classes, through Novi's server on Cloudflare to Anthropic's Claude, which reads it, replies, plans your week or writes advice for a custom brief.
To confirm the subscription is active, the App includes Apple's signed proof of it, which the server checks on the spot and does not keep. To confirm requests come from the real Novi, the App uses Apple's App Attest; the server keeps that install's public key, which contains no personal information.
The AI secretary can remember things you mention in chat that will matter later (such as "math is my weakest subject", or anything you say after "remember:"), up to 30 items. These are stored only on your iPhone and sent along only with chat and brief requests. Delete them one by one or all at once in Settings → What the secretary remembers.
Novi's server does not store this content or write it to its logs. To count each day's usage limit it keeps only a random install ID that is not linked to you, deleted after two days. Anthropic handles these requests under its commercial terms, does not use them to train models, and may keep them for up to 30 days to prevent abuse. Turn off the AI secretary or cancel the subscription at any time and nothing more is sent.
Weather and location
Only if you turn on weather in a custom brief, the App asks for your location and sends coordinates rounded to about one kilometre to Apple's WeatherKit for the forecast. That request contains no name, account or records of yours. The App keeps only the forecast and place name on your phone, not the coordinates. Without weather turned on, this connection never happens.
Deleting your data
Items can be deleted one by one inside the App. To delete everything, remove the App from your iPhone; all of its data is deleted with it.
Children's privacy
The App keeps no personal information about anyone, including children under 13. The AI secretary is off by default and needs a subscription, turning on and agreeing to.
Changes
Any update to this policy will be posted on this page with a new effective date.
Contact
Questions? Email jerrytai8888@gmail.com