训练数据，留在你手里。
Setune 是一款本地优先的训练工具。下面说明 iPhone、Apple Watch、端侧 AI，以及你主动选择的第三方 AI 服务如何处理数据。
不要求 Setune 账户，不运营保存训练资料的自建服务器，不包含广告或跨 App 追踪。远程 AI 只在你主动配置、同意并发起请求后使用。
Setune 隐私政策
适用范围
本政策适用于 Setune iPhone 与 Apple Watch App。Setune 是本地优先的训练工具，不要求注册 Setune 账户，也不使用开发者自建服务器保存你的训练资料。
保存在设备上的数据
个人资料、目标、训练偏好与限制、计划、训练记录、AI 对话与操作审计默认保存在你的设备上。AI API Key 与 OAuth 凭据保存在系统 Keychain，不写入训练数据库、诊断导出或普通设置。Apple Watch 与 iPhone 会为训练伴随功能同步必要的训练状态。
Apple 端侧 AI
选择 Apple Intelligence 时，模型推理由系统在设备上处理，Setune 不会为该模式把你的提示或训练上下文发送到第三方 AI 服务。
你选择的第三方 AI
只有在你主动添加远程 AI 配置并同意披露后，Setune 才会连接你选择的 OpenAI 或兼容服务。为完成你发起的请求，App 可能发送提问、相关个人资料、目标、偏好、限制、计划、训练历史与结果、有限的健康或健身摘要，以及你主动附加的照片。请求会直接发往配置中显示的服务和域名；第三方可能依其政策保留或处理请求与回复。Setune 不会把这些数据用于广告、营销或数据交易。
健康与健身数据
经你授权后，Setune 可读取训练所需的 Apple 健康数据，并写入你主动开始的训练。原始心率样本和 HealthKit 标识符不会进入 AI 上下文；相关请求最多使用有限的训练摘要，例如平均或最高心率、活动能量和训练时长。健康与健身数据不用于广告或营销。
照片、相机与位置
相机与照片只在你主动拍摄或选择图片时使用。远程 AI 仅在你把图片附加到请求时接收该图片。位置权限只用于你启用的短时后台训练处理；Setune 不保存位置历史，也不把位置发送给 AI 服务。
诊断与导出
诊断文件只在设备上生成，并由你决定是否导出和分享。诊断不会包含完整 API Key 或 OAuth 凭据，但可能包含模型配置、AI 请求状态、对话片段和训练上下文，请在分享前自行确认接收方。
保留、删除与撤回同意
本机数据会保留到你在 App 内删除或卸载 App。你可以删除单个远程配置、清除 Keychain 凭据，或在隐私中心撤回第三方 AI 同意；撤回后再次添加相应配置前必须重新确认。删除本机个人数据会清空个人资料、训练数据、AI 内容、模型配置和凭据。第三方已经收到的数据适用其自己的保留与删除规则。
广告、追踪与儿童
Setune 不包含广告 SDK，不跨 App 或网站追踪用户，也不出售个人数据。Setune 面向能够自行管理训练与设备权限的用户，并非专门面向儿童。
联系与变更
如对本政策或数据处理有疑问，请使用 App Store 产品页上的开发者支持联系方式。本政策有重大变化时，App 会更新政策文本与日期；需要新的数据用途时，会再次征求同意。
Setune Privacy Policy
Scope
This policy applies to the Setune apps for iPhone and Apple Watch. Setune is a local-first training tool. It does not require a Setune account or use a developer-operated server to store your training data.
Data stored on your devices
Your profile, goals, training preferences and constraints, plans, workout history, AI conversations, and action audit are stored on your devices by default. AI API keys and OAuth credentials are stored in the system Keychain, not in the training database, diagnostics exports, or ordinary settings. Apple Watch and iPhone synchronize the training state needed for companion workouts.
On-device Apple AI
When Apple Intelligence is selected, the system processes model inference on device. Setune does not send your prompt or training context to a third-party AI service for this mode.
Third-party AI you choose
Setune connects to OpenAI or a compatible service only after you add a remote AI profile and accept the disclosure. To complete a request you initiate, the app may send your prompt, relevant profile, goals, preferences, constraints, plans, workout history and results, bounded health or fitness summaries, and photos you explicitly attach. Requests go directly to the service and domain shown in the profile. That provider may retain or process requests and responses under its own policy. Setune does not use this data for advertising, marketing, or data brokerage.
Health and fitness data
With your permission, Setune can read Apple Health data needed for workouts and write workouts you start. Raw heart-rate samples and HealthKit identifiers are excluded from AI context. A relevant request may use only a bounded workout summary, such as average or maximum heart rate, active energy, and duration. Health and fitness data is never used for advertising or marketing.
Photos, camera, and location
Camera and photo access occurs only when you take or select an image. Remote AI receives an image only when you attach it to a request. Location permission is used only for short background workout processing that you enable. Setune does not store location history or send location to an AI service.
Diagnostics and exports
Diagnostics are generated on device and exported or shared only when you choose. They exclude complete API keys and OAuth credentials, but may contain model settings, AI request state, conversation excerpts, and training context. Review the recipient before sharing.
Retention, deletion, and withdrawal
Local data remains until you delete it in the app or uninstall the app. You can delete a remote profile, clear its Keychain credential, or withdraw third-party AI consent in Privacy Center. After withdrawal, the app asks again before adding that type of profile. Delete Personal Data clears your profile, training data, AI content, model settings, and credentials. Data already received by a provider is governed by that provider's retention and deletion rules.
Advertising, tracking, and children
Setune contains no advertising SDK, does not track people across apps or websites, and does not sell personal data. Setune is intended for people able to manage their own training and device permissions and is not directed specifically to children.
Contact and changes
For privacy or data-handling questions, use the developer support contact shown on Setune's App Store product page. Material changes will update this text and its date. Setune will request consent again before introducing a new data use that requires it.