Shellcove Privacy Policy

Shellcove 完全在你自己的设备上运行——iPhone 和你配对的那台 Mac。数据只在两者之间通过你本地的 Wi-Fi 网络传输，全程 TLS 加密。我们没有云端服务器、没有账号系统、不收集统计数据。除非你主动通过邮件联系我们，否则我们看不到任何关于你使用 Shellcove 的信息。

Shellcove runs entirely on your own devices — your iPhone and the paired Mac. Data only flows between the two over your local Wi-Fi network, end-to-end encrypted with TLS. We have no cloud server, no account system, and collect no analytics. Unless you proactively contact us by email, we have no visibility into your use of Shellcove.

Shellcove 不收集、存储或传输任何用户个人信息。使用本应用无需注册账号或登录，我们不会收集你的姓名、电子邮件、位置信息或任何其他个人身份信息。本应用没有任何第三方分析、广告或追踪 SDK。

Shellcove does not collect, store, or transmit any personal information. No account registration or sign-in is required. We do not collect your name, email address, location, or any other personally identifiable information. The app contains no third-party analytics, advertising, or tracking SDKs.

所有 Shellcove 收发的内容（你按下的键、说出的话、Mac 屏幕的实时投屏画面、剪贴板）都只在你的 iPhone / iPad 和配对 Mac 之间传输，通过你本地的 Wi-Fi 网络，使用自签 TLS 证书 + 证书钉扎加密。这些内容不会经过任何外部服务器或云端服务，也不会写入到任何第三方存储。

语音听写使用苹果系统提供的 Speech 框架，并强制启用了 on-device 模式（requiresOnDeviceRecognition = true），意味着音频从不离开你的 iPhone。识别完成后只把文本发给配对的 Mac。

Everything Shellcove sends or receives — keystrokes you tap, words you dictate, the live mirror of the Mac screen, the clipboard — moves only between your iPhone / iPad and the paired Mac, over your local Wi-Fi network, encrypted with a self-signed TLS certificate and certificate pinning. None of it ever passes through any external server or cloud service, and nothing is written to any third-party storage.

Voice dictation uses Apple's Speech framework with on-device recognition forced on (requiresOnDeviceRecognition = true), meaning audio never leaves your iPhone. Only the resulting transcribed text is forwarded to the paired Mac.

• 相机：仅用于扫描 Mac 上显示的配对二维码。除了扫描那一刻，相机不会启动。
• 麦克风 + 语音识别：仅在你长按麦克风按钮时启动。语音在本机识别，文本发给 Mac，音频不上传。
• 本地网络：用于与配对的 Mac 建立 TLS 连接。这是 Shellcove 的核心功能必须的权限。

Shellcove 不请求位置、通讯录、相册、健康、运动、蓝牙、Face ID 或任何其他敏感权限。

• Camera: only used to scan the pairing QR code shown on your Mac. Outside that moment, the camera is not active.
• Microphone + Speech Recognition: only active while you hold the mic button. Speech is transcribed on-device, the resulting text is sent to the Mac, audio is not uploaded.
• Local Network: required to establish the TLS connection to the paired Mac. Core functionality depends on this.

Shellcove does not request location, contacts, photos, health, motion, Bluetooth, Face ID, or any other sensitive data.

Shellcove 在 iPhone 上只保存一项数据：你配对过的 Mac 的连接信息（设备名、IP 地址、端口和证书指纹），写在系统标准的 UserDefaults 里。在 iOS 设置里点击"Forget Device"会立即删除这条记录。

Mac 端在 ~/Library/Application Support/Shellcove/ 目录下保存自签 TLS 证书（PEM 格式的公钥和私钥）。删除该目录或在 Mac 端重置即可让所有 iPhone 重新配对。

On the iPhone, Shellcove stores a single piece of data: the connection info for your paired Mac (device name, IP, port, certificate fingerprint), written to the standard system UserDefaults. Tapping "Forget Device" in iOS Settings immediately removes this record.

On the Mac, the self-signed TLS certificate (PEM-formatted public and private keys) lives in ~/Library/Application Support/Shellcove/. Deleting that directory or resetting from within the Mac app forces every paired iPhone to re-pair.

Shellcove 不面向 13 岁以下儿童，不会有意收集儿童数据。鉴于本应用不收集任何用户数据，对各年龄段用户均无数据相关风险。

Shellcove is not directed at children under 13 and does not knowingly collect data from children. Since the app collects no user data at all, this poses no data-related risk to any age group.

如果本隐私政策有变更，我们会更新本页顶部的"生效日期"。如果变更涉及数据处理方式的实质改变，新版本发布时会在更新说明中明确告知。

If this privacy policy changes, we update the "Effective date" at the top of this page. Substantive changes to how data is handled will be highlighted in the corresponding app release notes.

对隐私问题有任何疑问，请发邮件到 [email protected]。

Privacy questions: [email protected].