Oh Pi App 隐私政策

生效日期：2026 年 9 月 7 日 · English below

Oh Pi App 是连接你自建 ohpi-gateway 和 AI 服务的远程客户端。开发者不运营数据中转服务器，也不会通过 App 自动收集你的对话、账号或使用数据。为了提供你主动请求的功能，App 会把数据发送到你配置的服务器；服务器上的 pi 还可能把相关内容发送给你选择的 AI 提供商。

1. 开发者处理的信息

Oh Pi App 没有自有账号系统、广告或分析 SDK，不使用 IDFA 或跨 App 跟踪技术，也不会向开发者发送对话内容、使用统计或广告数据。

如果你主动通过电子邮件联系我们，我们会收到你的邮件地址、邮件内容以及你选择提供的诊断信息，并仅将这些信息用于回复和处理支持请求。请勿在支持邮件中发送密码、访问令牌、私钥或不必要的敏感信息。

2. 数据存储位置

• 服务器和连接配置：网关地址和 SSH 主机等连接信息保存在你的设备上。在 iOS 上，网关访问令牌、SSH 密码和托管的 SSH 私钥保存在系统钥匙串中，不写入 UserDefaults。
• 对话与工作区：会话、消息、文件和工具状态主要保存在你配置的 ohpi-gateway 与 pi 工作区中。开发者不运营或访问这些服务器。
• 本地缓存：App 会在设备的私有目录中缓存部分会话内容和状态，以改善加载速度和恢复体验。
• AI Provider 凭据：当你登录或配置模型提供商时，相关凭据可能由你服务器上的 pi 保存，并可能在认证过程中发送给相应提供商。开发者不会收到这些凭据。

3. AI 提供商与远程工具

当你发送消息或使用模型功能时，你服务器上的 pi 可能把完成请求所需的数据发送给你选择的 AI 提供商，例如提示词、对话上下文、你选择的图片或文件、工具输出，以及请求所需的技术元数据。AI 提供商可能依照其自己的条款和隐私政策处理、保留或使用这些数据。开发者无法控制 AI 提供商的处理方式；请在使用前查看相应提供商的政策，并避免提交不希望其处理的敏感信息。

在 iOS 上，App 会在首次经由某个已配置服务器向特定 AI 提供商发送内容前，显示原生提示并取得你的明确授权。授权选择仅保存在当前设备上；你可以在“设置 → 关于 → AI 数据授权”中重置，重置后 App 会在下次发送前再次询问。

你授权的远程工具可能读取或修改远程服务器上的文件、执行命令或访问其他资源。工具结果可能显示在对话中，并可能作为后续上下文发送给所选 AI 提供商。这些操作发生在你控制的远程服务器上，而不是在 iOS 设备上执行。

在 iOS 上创建或编辑启用中的定时任务、启用任务或立即运行任务前，App 会单独请求 AI 数据发送授权，并保存授权时显示的具体模型。启用的任务可能在 App 关闭后按计划或 HTTP 触发器继续运行。请在定时任务页暂停或删除任务来停止后续自动运行；重置聊天授权不会停止服务器上的任务。

4. 系统权限与外部链接

• 本地网络：用于连接你在局域网中的 ohpi-gateway 或 SSH 主机。
• 照片：只有在你选择图片或主动保存聊天图片时，App 才会读取你通过系统照片选择器提供的项目或向照片图库写入内容。你发送的图片可能经由自建服务器交给所选 AI 提供商处理。
• 网页与外部链接：iOS App 仅在内置网页视图中显示 localhost、回环 IP 和 .localhost 的页面。其他链接交给系统默认浏览器，其数据处理受目标网站和浏览器的隐私政策约束。

5. 数据传输与安全

App 直接连接你配置的服务器，数据不经过开发者控制的中转服务。SSH 隧道由 SSH 加密；HTTPS/WSS 连接由 TLS 加密。HTTP/WS 连接不提供传输加密，只应在可信网络中使用。你负责维护服务器、证书、账号、访问令牌和备份的安全。

6. 保留、删除与卸载

• 你可以在设置中删除服务器配置，并单独删除保存的 SSH 密钥。
• 删除会话时，App 会请求你配置的服务器删除相应会话；实际删除结果和备份保留取决于你的服务器配置。
• 卸载 App 通常会删除 App 容器中的配置和缓存，但 iOS 可能保留系统钥匙串中的项目。若要完整移除本地凭据，请先在 App 设置中删除相关服务器配置和 SSH 密钥，再卸载 App。
• AI 提供商收到的数据按其自己的保留与删除政策处理；如需删除，请使用相应提供商提供的控制方式。

7. 第三方服务

除你配置的服务器和 AI 提供商外，App 不集成广告、行为分析或数据经纪服务。本隐私政策页面由 GitHub Pages 托管；访问该页面时，GitHub 可能依照其隐私声明处理 IP 地址和常规网络日志。外部网站和系统浏览器也适用其各自政策。

8. 儿童隐私

本 App 不面向 13 岁以下儿童。开发者不会有意收集儿童的个人信息。

9. 政策更新

如本政策发生变化，我们将在本页面更新内容和生效日期。重大变化也可能通过版本说明或 App 内提示告知。

10. 联系我们

如有隐私或支持问题，请发送邮件至：yearsyan@hotmail.com

Oh Pi App Privacy Policy

Effective date: September 7, 2026

Oh Pi App is a remote client that connects to your self-hosted ohpi-gateway and AI services. The developer does not operate a data relay server and does not automatically collect your conversations, account information, or app-usage data. To provide features you request, the app sends data to servers you configure, and pi on those servers may send relevant content to the AI provider you select.

1. Information handled by the developer

Oh Pi App has no first-party account system, advertising, or analytics SDKs. It does not use IDFA or cross-app tracking and does not send conversation content, usage analytics, or advertising data to the developer.

If you voluntarily contact us by email, we receive your email address, message, and any diagnostic information you choose to include. We use it only to respond to and handle your support request. Do not send passwords, access tokens, private keys, or unnecessary sensitive information in support email.

2. Where data is stored

• Server and connection settings: connection details such as gateway addresses and SSH hosts are stored on your device. On iOS, gateway access tokens, SSH passwords, and managed SSH private keys are stored in the system Keychain and are not written to UserDefaults.
• Conversations and workspaces: sessions, messages, files, and tool state are primarily stored by the ohpi-gateway and pi workspace you configure. The developer does not operate or access those servers.
• Local cache: the app caches some conversation content and state in its private on-device directory to improve loading and recovery.
• AI provider credentials: when you sign in to or configure a model provider, credentials may be stored by pi on your server and may be sent to that provider during authentication. The developer does not receive those credentials.

3. AI providers and remote tools

When you send a message or use model features, pi on your server may send data needed to fulfill the request to the AI provider you select. This may include prompts, conversation context, images or files you select, tool output, and technical metadata needed for the request. AI providers may process, retain, or use this data under their own terms and privacy policies. The developer does not control an AI provider's processing. Review the relevant provider's policy before use and avoid submitting sensitive information you do not want that provider to process.

On iOS, before content is first sent to a particular AI provider through each configured server, the app displays a native disclosure and obtains your explicit permission. The permission choice is stored only on the current device. You can reset it under Settings → About → AI data permissions, after which the app asks again before the next send.

Remote tools you authorize may read or modify files, run commands, or access other resources on your remote server. Tool results may appear in the conversation and may be included as context sent to the selected AI provider. These actions take place on a remote server you control, not on the iOS device.

On iOS, creating or editing an enabled scheduled task, enabling a task, or running it immediately requires a separate AI data-sharing approval. The task saves the specific model shown in the disclosure. Enabled tasks may continue on their schedule or HTTP trigger while the app is closed. Pause or delete tasks to stop future automatic runs; resetting chat permissions does not stop tasks on your server.

4. System permissions and external links

• Local network: used to connect to an ohpi-gateway or SSH host on your local network.
• Photos: the app accesses items you provide through the system photo picker or writes to your photo library only when you choose an image or save a chat image. Images you send may be passed through your self-hosted server to the selected AI provider for processing.
• Web pages and external links: on iOS, the in-app web view is limited to pages using localhost, a loopback IP address, or a .localhost domain. Other links open in the system's default browser, where the destination website's and browser's privacy policies apply.

5. Data transmission and security

The app connects directly to servers you configure; data does not pass through a relay service controlled by the developer. SSH tunnels are encrypted by SSH, and HTTPS/WSS connections are encrypted with TLS. HTTP/WS connections are not transport-encrypted and should be used only on trusted networks. You are responsible for the security of your servers, certificates, accounts, access tokens, and backups.

6. Retention, deletion, and uninstalling

• You can delete server configurations in Settings and separately delete stored SSH keys.
• When you delete a session, the app asks your configured server to delete that session. The actual deletion result and backup retention depend on your server configuration.
• Uninstalling the app normally removes settings and cache in the app container, but iOS may retain items stored in the system Keychain. To fully remove local credentials, delete the relevant server configurations and SSH keys in the app before uninstalling it.
• Data received by an AI provider is retained and deleted under that provider's policies. Use the controls provided by the relevant provider to request deletion.

7. Third-party services

Other than servers and AI providers you configure, the app does not integrate advertising, behavioral analytics, or data-broker services. This privacy-policy page is hosted by GitHub Pages. When you visit it, GitHub may process IP addresses and standard network logs under its Privacy Statement. External websites and system browsers are also governed by their own policies.

8. Children's privacy

The app is not directed to children under 13. The developer does not knowingly collect personal information from children.

9. Policy changes

If this policy changes, we will update this page and its effective date. Material changes may also be communicated in release notes or in the app.

10. Contact us

For privacy or support questions, email: yearsyan@hotmail.com