Your financial records

Hxmy Asset stores your ledger on your device by default. Personal iCloud Sync and sharing are optional. There is no developer-operated account system or server for your ledger.

The app contains no advertising, cross-app tracking, or behavioral analytics SDK. We do not sell your personal information.

Information stored on your device

• Your accounts, balances, transactions, holdings, recorded dividends, categories, recurring rules, assets, and settings are stored in the app’s local database or device preferences.
• Payment text and selected screenshots are processed on your device. Recognition creates an editable draft, not a ledger entry. Original payment text is discarded; structured draft fields and a duplicate-detection digest are retained. The app does not automatically record a payment, monitor other apps’ notifications, or read your message inbox.
• Photos are accessed through images you choose or capture. Saved icons, card images, and attachments stay on the device unless you enable a feature that syncs them. Selecting a screenshot for recognition does not delete the original from your photo library.
• Optional full card numbers are encrypted with a key stored in the device’s Keychain. The app normally displays the last digits and uses system authentication before revealing the full number. Full card numbers and this key are excluded from personal and family CloudKit sync.
• The app shares a net-worth snapshot, currency, and update time with its widget through an App Group on the same device. Sensitive widget values use Apple’s privacy controls; display behavior also depends on your device and system settings.

Personal iCloud Sync and shared spaces

Personal iCloud Sync is off by default. When you enable it, your accounts, transactions, assets, holdings, recorded dividends, categories, recurring rules, payment drafts, and saved images are synchronized through your private CloudKit database to devices using the same Apple Account. Full card numbers, original payment text, security keys, and device permissions are not included.

Shared spaces are separate. Only the accounts you select and the associated data included in that space are made available to invited participants through Apple CloudKit. Member names and identifiers support membership permissions and show who recorded an entry. Enabling personal sync does not automatically share your whole ledger with family members.

The app uses CloudKit encrypted fields for financial payloads. Apple provides the service’s transport, storage, and account protections; the applicable protections depend on Apple’s service and your account configuration. The developer does not operate a server to receive these financial records.

Turning personal sync off retains both local and iCloud data. Pausing or ending a shared space stops subsequent sharing under that space’s rules; it does not guarantee removal of copies another participant already retains. Changing Apple Accounts pauses the linked ledger’s personal sync to avoid mixing accounts.

Network services

The app uses the following services. Market-data requests do not contain your account balances, holding quantities, or transaction history. Service providers can receive connection information such as your IP address.

Encrypted backups and exports

You can export transactions as CSV or save an encrypted .hxbak database backup to a location you choose. If you choose iCloud Drive or another cloud provider, that provider stores the exported file under its own terms.

Backups use AES-256-GCM with a passphrase you choose. Restoring requires that passphrase; the developer has no passphrase-recovery or backup-decryption service. A database backup may contain already-encrypted card-number fields, but the device-only card key is not exported, so those fields may not be readable on another device. Original payment text is removed from database backups.

A database backup is distinct from personal iCloud sync. Files you export are not automatically deleted when records are later changed or deleted in the app.

Permissions and integrations

• Face ID, Touch ID, and device authentication: used for App Lock and protected information. Apple performs authentication; the app does not receive biometric templates.
• Camera and selected photos: used only when you choose to capture or import an image for an app feature.
• Notifications: due-date, expiration, and renewal reminders are scheduled locally. CloudKit change notifications are separate from these reminders.
• Siri and Shortcuts: can prefill a form or save a payment draft. You review, correct, and confirm a draft before it becomes a ledger entry.

You can manage system permissions in your device’s Settings or System Settings.

Retention and your choices

You control the records you enter, sync, share, export, and delete. Unprocessed drafts remain in your inbox for you to confirm or ignore. Processed draft records and duplicate-detection digests may remain stored to synchronize their status and prevent repeated imports. Export, backup, and viewing are not restricted by the free-entry quota.

Deleting the app does not automatically delete data in iCloud, other participants’ copies, or files you exported. Local app storage, App Group data, and Keychain items are subject to the operating system’s removal and retention rules. Manage cloud data through the relevant Apple account controls and delete exported backups from their saved locations when you no longer need them.

This page and support

This HTML page includes no advertising or analytics scripts and loads no external fonts or scripts. It can remember your language preference locally in your browser. The website hosting provider and email provider may process their normal connection or delivery logs.

If you contact support, we use the email address and information you send to respond to your request. Please avoid sending passwords, full card numbers, backup passphrases, or unnecessary financial records.

Children

The app is not directed to children under 13. If you believe a child has sent personal information to the developer through support, contact us so that the request can be addressed.

Changes and contact

We will update the effective date when this policy changes materially. For privacy questions or support, contact hyzdreamstudio@gmail.com.

你的财务记录

Hxmy Asset 默认将账本保存在你的设备上。个人 iCloud 同步与共享均为可选功能。开发者不运营用于接收账本的账号系统或服务器。

App 不包含广告、跨 App 追踪或行为分析 SDK。我们不出售你的个人信息。

设备上保存的信息

• 你录入的账户、余额、流水、持仓、已记录的分红、分类、周期规则、资产和设置，保存在本机数据库或设备偏好中。
• 支付文字和你选择的截图在本机处理，识别后生成可编辑草稿，不直接入账。识别原文会被丢弃，仅保留结构化草稿字段和用于识别重复内容的摘要。App 不会自动记入支付，不监听其他 App 的通知，也不读取你的短信收件箱。
• App 只使用你选择或拍摄的图片。保存的图标、卡面和附件默认留在本机；当你开启包含这些图片的同步功能后，它们也会同步。选择支付截图进行识别，不会删除照片图库里的原图。
• 可选填写的完整卡号使用设备钥匙串中的密钥加密保存。界面默认显示尾号，查看完整卡号前使用系统身份验证。完整卡号与该密钥不纳入个人及家庭 CloudKit 同步。
• App 通过同一设备上的 App Group 向小组件提供净资产快照、币种和更新时间。敏感金额使用 Apple 的隐私显示控制，具体表现也受设备和系统设置影响。

个人 iCloud 同步与共享空间

个人 iCloud 同步默认关闭。开启后，账户、流水、资产、持仓、已记录的分红、分类、周期规则、支付草稿和已保存图片会通过你的 CloudKit 私有数据库，同步到登录相同 Apple 账户的设备。完整卡号、支付原文、安全密钥和设备权限不包含在内。

共享空间与个人同步相互独立。只有你选入共享空间的账户及该空间所包含的关联数据，才会通过 Apple CloudKit 提供给受邀参与者。成员姓名和标识用于成员权限管理，并标明流水记录者。开启个人同步不会自动把整个账本分享给家庭成员。

App 使用 CloudKit 加密字段存放财务载荷。传输、存储和账户保护由 Apple 服务提供，具体保护取决于 Apple 服务及你的账户配置。开发者不运营接收这些财务记录的服务器。

关闭个人同步会保留本机与 iCloud 中的数据。暂停或停止共享会按该空间的规则停止后续共享，但不保证撤回参与者已经保留的副本。切换 Apple 账户时，原账本的个人同步会暂停，避免不同账户的数据混合。

联网服务

App 使用以下服务。行情请求不包含你的账户余额、持仓数量或流水历史。服务提供者可能收到 IP 地址等正常连接信息。

加密备份与导出

你可以将流水导出为 CSV，或将加密的 .hxbak 数据库备份保存到自己选择的位置。如果选择 iCloud 云盘或其他云盘，该服务会按其自身条款保存导出的文件。

备份采用 AES-256-GCM 加密，口令由你设置。恢复需要该口令；开发者不提供口令找回或备份解密服务。数据库备份可能包含已加密的卡号字段，但不会导出仅保存在原设备上的卡号密钥，因此这些字段在另一台设备上可能无法读取。支付原文会从数据库备份中移除。

数据库备份与个人 iCloud 同步是不同功能。你在 App 中修改或删除记录，不会自动删除之前导出的文件。

权限与系统集成

• 面容 ID、触控 ID 和设备身份验证：用于应用锁及受保护的信息。验证由 Apple 系统完成，App 不会收到生物特征模板。
• 相机与所选照片：只用于你主动选择拍摄或导入图片的功能。
• 通知：还款日、到期、续订等提醒在本机安排；CloudKit 数据变更通知与这些提醒分开处理。
• Siri 与快捷指令：可以预填表单或保存支付草稿。只有经过你的核对、修改和确认，草稿才会记入账本。

你可以在设备的“设置”或“系统设置”中管理系统权限。

保存期限与你的选择

你决定录入、同步、共享、导出和删除哪些记录。未处理草稿在收件箱中供你确认或忽略。为跨设备同步处理状态并防止重复导入，已处理草稿的结构化记录与去重摘要可能继续保留。导出、备份和查看功能不受免费新增额度限制。

卸载 App 不会自动删除 iCloud 中的数据、其他参与者的副本或你已导出的文件。本机 App 存储、App Group 数据与钥匙串项目遵循操作系统的移除和保留规则。你可以通过相应 Apple 账户管理入口管理云端数据，并在不再需要时，从保存位置删除导出的备份。

本页面与支持服务

本 HTML 页面不包含广告或统计脚本，不加载外部字体或脚本；浏览器可以在本地记住你的语言选择。网站托管服务与邮箱服务可能处理正常访问或邮件投递日志。

如果你联系支持，我们会使用你提供的邮箱和内容来回复请求。请避免发送密码、完整卡号、备份口令或不必要的财务记录。

儿童

本 App 不面向 13 岁以下儿童。如果你认为有儿童通过支持渠道向开发者提供了个人信息，请联系我们处理。

政策变更与联系

政策发生实质变化时，我们会更新生效日期。隐私问题或支持请求，请联系 hyzdreamstudio@gmail.com。