隐私政策Privacy Policy

1. 适用范围与责任方1. Scope and responsible party

本政策适用于个人开发者 Mustundead 提供的无限蹬蹬 macOS、iOS、iPadOS、watchOS 应用及产品网站。Mac 负责采集你授权的本机统计；其他设备读取你主动同步的摘要。隐私问题或删除请求请联系 m@mustundead.com。

This policy covers the TokenBell macOS, iOS, iPadOS and watchOS apps and product website provided by individual developer Mustundead. The Mac collects authorized local statistics; other devices read summaries you choose to sync. Contact m@mustundead.com for privacy questions or deletion requests.

2. 应用处理的数据2. Data processed by the app

在你分别明确授权后，应用会从所选 .codex 文件夹提取额度窗口、重置时间、Token 与模型计数，也可从 .claude 文件夹、Gemini CLI 官方本地遥测、OpenCode JSON 导出或 Grok Build 官方任务完成记录（updates.jsonl，兼容 usage.json）提取时间、模型与 Token 等统计字段。

After separate explicit authorization, the app extracts quota windows, reset times, token and model counts from the selected .codex folder, and may extract timestamps, model names, and token counters from a .claude folder, Gemini CLI local telemetry, an OpenCode JSON export, or Grok Build completed-task metadata (updates.jsonl, with usage.json compatibility).

应用不会提取、展示、保留或传输对话正文、项目文件内容、邮箱、账户令牌或密码，也不会估算数据源未提供的订阅剩余额度。建议关闭 Gemini CLI prompt 遥测，并使用 OpenCode 的 --sanitize 导出。开发者不会通过应用接收上述统计数据。

The app does not extract, display, retain, or transmit conversation text, project-file contents, email addresses, account tokens, or passwords, and does not estimate subscription capacity a source does not expose. Gemini CLI prompt logging should be disabled, and sanitized OpenCode exports are recommended. The developer does not receive the statistics processed by the app.

Antigravity CLI 通过你主动启用的本机状态栏采集器生成统计快照。采集器仅保留采集时间、模型额度、重置时间与当前会话输入、输出 Token，不保存邮箱、项目路径、对话标识或正文。应用仅请求对专用 ration 统计文件夹的只读访问（仅读取 antigravity-status.json）；可在连接中心撤销授权。此快照可用于小组件，并在你开启同步后进入 iCloud 摘要

3. 文件与系统权限3. File and system permissions

无限蹬蹬 运行在 macOS App Sandbox 中。对 .codex、.claude、Gemini CLI 遥测、OpenCode 导出或 Grok Build 用量文件的访问必须由你分别通过系统文件选择器主动授予，且应用请求的是用户所选文件的只读权限。

TokenBell runs inside the macOS App Sandbox. Access to .codex, .claude, Gemini CLI telemetry, OpenCode exports, or Grok Build usage files must be granted separately through the system file picker, and the app requests read-only access to user-selected files.

如启用通知或登录时启动，相关权限分别由 macOS 通知设置和登录项设置管理。你可以随时在系统设置或应用的“数据与隐私”页面撤销权限。

If you enable notifications or launch at login, those permissions are managed by macOS notification and login-item settings. You may revoke access at any time in System Settings or the app's Data & Privacy settings.

4. 本地存储与 iCloud4. Local storage and iCloud

额度历史、Token 周期基线、授权书签和设置默认保存在 Mac。小组件与悬浮窗读取本机摘要。主动开启 iCloud 同步后，应用把六种来源的可用额度、Token、模型与推理强度汇总、重置和采集时间、有效期与统计范围，以及首选工具、语言、强调色保存到你的 CloudKit 私有数据库；随机生成的安装标识用于区分 Mac 的摘要记录。不会同步原始日志、文件路径、对话正文、项目内容、邮箱或凭证。

Quota history, token-cycle baselines, access bookmarks and preferences are stored on your Mac by default. Widgets and the floating panel read local summaries. Opt-in iCloud sync stores available quotas, token, model and reasoning-effort summaries, reset and capture times, validity and statistical scope for six sources, plus preferred tool, language and accent color in your private CloudKit database. A randomly generated installation identifier distinguishes each Mac’s summary record. Raw logs, file paths, conversation text, project contents, emails and credentials are not synced.

断开此 Mac 会停止后续同步并保留本机统计，不会退出系统 Apple 账户，也不会删除已保存的云端记录；已被 CloudKit 接收的请求可能仍会完成。清除 无限蹬蹬 的本地数据不会删除任何来源工具的对话、项目或遥测文件。

Disconnecting this Mac stops future sync and preserves local statistics; it does not sign out the system Apple Account or delete existing cloud records. Requests already accepted by CloudKit may still finish. Clearing local TokenBell data does not delete any source tool's conversations, projects, or telemetry files.

当前版本不提供应用内删除云端摘要的入口。如需永久移除，请先断开同步，再前往“系统设置 → Apple 账户 → iCloud → 管理”，选择无限蹬蹬并从 iCloud 删除数据。系统名称可能因 macOS 版本不同而略有变化；此操作会删除该 App 的 iCloud 数据且无法撤销。

The current version does not include an in-app control for deleting cloud summaries. To remove them permanently, disconnect sync first, then open System Settings → Apple Account → iCloud → Manage, select TokenBell, and delete its data from iCloud. Labels can vary by macOS version. This removes the app's iCloud data and cannot be undone.

本机额度历史按设置的保留周期清理（默认 90 天，可选 30、90、180 或 365 天）；周期基线、偏好和授权书签不等同于历史记录，可通过应用设置及移除本地容器清除。云端保留每台 Mac 的最新摘要，不会在断开同步时自动删除。其他设备可能保留已下载的摘要缓存；移除本机缓存不等于删除 iCloud 数据。

5. App 内购买5. In-app purchases

月度订阅、免费试用和终身购买由 Apple StoreKit 与你的 Apple 账户处理。应用读取 Apple 签名的购买权益，以决定是否解锁 Pro 功能。

Monthly subscriptions, free trials, and lifetime purchases are processed by Apple StoreKit and your Apple account. The app reads Apple-signed purchase entitlements to determine whether Pro features are unlocked.

开发者不会接收或保存你的银行卡号、完整账单信息或 Apple 账户密码。购买记录的保留、退款和订阅管理遵循 Apple 的条款与隐私政策。

The developer does not receive or store your card number, complete billing information, or Apple account password. Purchase history, refunds, and subscription management are governed by Apple's terms and privacy policy.

6. 分享与导出6. Sharing and export

分享长图与 CSV、JSON 文件在本机生成。只有当你主动选择保存位置或系统分享目标时，这些内容才会离开应用。接收方如何处理内容由你选择的服务及其政策决定。

Share cards and CSV or JSON files are generated on-device. They leave the app only when you choose a save location or destination in the system share sheet. Handling by a recipient is governed by the service you choose and its policies.

7. 第三方服务与跟踪7. Third-party services and tracking

当前版本不包含广告、行为分析、第三方跟踪或第三方崩溃上报 SDK，也不使用跨 App 或网站的跟踪标识符。Apple 为 App Store、购买与主动开启的 iCloud 同步提供服务；主动使用系统分享时，所选接收方也会获得你分享的内容。

The current version includes no advertising, behavioral analytics, third-party tracking, or third-party crash-reporting SDKs, and uses no identifiers for tracking across apps or websites. Apple provides App Store, purchase, and opt-in iCloud services. A destination you choose in the system share sheet also receives the content you share.

本网站仅在浏览器本地保存语言和主题偏好，不加载行为分析或广告脚本。访问线上网站时，托管服务可能处理 IP 地址、请求时间和浏览器信息等必要访问日志。主动联系支持时，邮件服务会处理你提供的邮箱、邮件内容和附件；请勿发送原始日志、对话或凭证。

This website stores language and theme preferences locally in your browser and loads no behavioral analytics or advertising scripts. When you visit the hosted site, the hosting service may process necessary access logs such as IP address, request time, and browser information. If you contact support, email services process the address, message, and attachments you provide. Do not send raw logs, conversations, or credentials.

8. 你的选择与控制8. Your choices and controls

• 在“设置 → 数据与隐私”中分别重新选择或撤销六种数据源访问。
• 在“设置 → 通用”中开启 iCloud 同步或断开此 Mac。
• 清除 无限蹬蹬 保存的本地统计与周期基线。
• 在 macOS 系统设置中关闭通知、登录项或管理 Apple 账户。
• 在 Apple 账户的订阅管理中查看、变更或取消订阅。
• 通过卸载应用及删除其本地容器移除本机数据。

• Reselect or revoke any of the six data sources separately in Settings → Data & Privacy.
• Enable iCloud Sync or disconnect this Mac in Settings → General.
• Clear local statistics and cycle baselines saved by TokenBell.
• Disable notifications or the login item, or manage the Apple Account, in macOS System Settings.
• Review, change, or cancel a subscription in your Apple account.
• Remove on-device data by uninstalling the app and deleting its local container.

应用没有开发者运营的账户或服务器；可选同步数据位于用户自己的 CloudKit 私有数据库，开发者不会通过应用接收这些数据。

The app has no developer-operated account or server. Optional sync data remains in the user's private CloudKit database, and the developer does not receive it through the app.

9. 儿童隐私9. Children's privacy

无限蹬蹬 是一款开发者工具，并非专门面向儿童。应用不建立账户，也不故意收集儿童的个人数据。如你认为存在相关问题，请通过下方邮箱联系我们。

TokenBell is a developer utility and is not directed specifically to children. It creates no account and does not knowingly collect children's personal data. Contact us below if you believe there is an issue.

10. 政策变更与联系10. Policy changes and contact

当应用的数据实践发生实质变化时，我们会更新本页面、生效日期以及适用版本；必要时也会在应用更新说明中提示。问题、请求或投诉请发送至 m@mustundead.com。

If the app's data practices materially change, we will update this page, its effective date, and the applicable version, and will note the change in release information when appropriate. Send questions, requests, or complaints to m@mustundead.com.

开发者：Mustundead · 联系邮箱：m@mustundead.comDeveloper: Mustundead · Contact: m@mustundead.com