中文（默认） · English below
拍菜记是一款餐饮单据识别与记账应用。我们的原则是：账单数据属于你，默认保存在你的设备上；我们只在提供识别服务所必需的范围内处理最少量的数据。
你的账单（商家、日期、金额、菜品、标签、备注）和单据照片保存在你设备的本地数据库中。应用没有账号体系，你无需注册即可使用全部记账功能。
使用官方 AI 识别时，应用先在你的设备上通过 Apple Vision 完成文字识别（OCR），然后将识别出的文本（不含照片）与目标语言、应用版本一起发送到我们的服务器，由服务器调用大语言模型完成结构化识别。我们的服务器不保存你的 OCR 文本、单据照片或识别结果正文；仅记录匿名用量数据（随机设备标识、时间、Token 数量、耗时、成功状态与错误码），用于额度计量与服务质量分析。
Pro 用户可配置自己的第三方 AI 服务（如 DeepSeek、OpenAI 等）。此时 OCR 文本（若开启图像识别，还包括单据照片）由应用直接发送到你选择的第三方服务，不经过我们的服务器；你的 API Key 仅保存在设备钥匙串中。第三方服务对数据的处理适用其各自的隐私政策。
应用生成一个随机设备标识（UUID，保存在设备钥匙串，与广告无关），用于免费识别额度计量。订阅 Pro 时，Apple 的签名交易信息（订单标识、产品、到期时间）会发送到我们的服务器用于验证订阅有效性；支付由 Apple 完成，我们不接触你的付款信息。
识别到外币单据时，应用会向我们的服务器请求对应日期的参考汇率；该请求不包含你的账单内容。
删除应用即删除全部本地账单数据与照片。服务器上的匿名用量记录可通过邮件申请删除（提供应用内“开发者选项/关于”中的设备标识）。订阅记录按法律与财务要求保留。
本应用不面向 13 周岁以下儿童。
政策更新时，我们会修改本页面并更新生效日期；重大变更会在应用内提示。
中文在上方 · English
PaiCaiJi is a receipt-scanning and food-expense tracking app. Our principle: your records belong to you and stay on your device by default; we process only the minimum data needed to provide recognition.
Your records (merchant, date, amounts, items, tags, notes) and receipt photos are stored in a local database on your device. There are no accounts and no sign-up.
With official AI recognition, text is first extracted on-device using Apple Vision (OCR). The extracted text (not the photo), plus your display language and app version, is sent to our server, which calls a large language model to structure it. Our server does not store your OCR text, photos, or recognition results; it keeps only anonymous usage records (random device identifier, timestamp, token counts, latency, success status, error codes) for quota metering and service quality.
Pro users may configure a third-party AI service (e.g. DeepSeek, OpenAI). In that mode OCR text (and, if you enable image recognition, the photo) is sent by the app directly to the provider you choose and never passes through our server. Your API key is stored only in the device Keychain. The provider's own privacy policy applies.
The app generates a random UUID (stored in the Keychain, unrelated to advertising) to meter the free recognition quota. When you subscribe, Apple's signed transaction (order identifier, product, expiry) is sent to our server to verify entitlement. Payment is handled entirely by Apple; we never see your payment details.
For foreign-currency receipts the app requests a reference exchange rate for the receipt date from our server. That request contains no receipt content.
Deleting the app deletes all local records and photos. You may request deletion of the anonymous server-side usage records by email (include the device identifier shown in the app's About section). Subscription records are retained as required by law and accounting.
The app is not directed at children under 13.
We will update this page and its effective date when the policy changes; material changes will be announced in the app.
Email: snailsohi@gmail.com