1. 处理哪些数据

• 你在应用内主动录制的语音
• 由语音生成的转写文本，包括你最近的几条转写（最多 8 条），用来帮助理解新的一句话
• 识别出的日程或待办（标题、时间和补充说明）
• 你授权后的日历与提醒事项：前后几天的日程，以及未完成和最近完成的提醒，用于判断时间、发现时间冲突；较早的日程只在本机用于学习你常用的名字
• 你对转写或标题所做的修改
• 一个随机生成的设备标识，只用于统计用量和防止滥用
• 你主动导出或恢复的本地备份

2. 如何使用

• 把语音转写为文字
• 判断是日程还是待办，提取标题和时间（参考你最近的几条转写，以及前后几天的日程和提醒）
• 写入 Calendar 或 Reminders：有把握时直接写入并给出可撤销的回执；不太确定时照样写入，但标上「待核对」；听不懂或缺少关键信息时，先等你确认
• 学习你的修改，让改过的名字下次就认得
• 按你的要求导出、恢复或删除本地数据

3. 发送到云端的内容

语音识别和意图解析需要云端服务。Krono 只发送完成这一次请求所必需的内容，经 Krono 运营的代理服务转发：

• 录音，以及你常用的专有名词 → Deepgram（语音转写）
• 转写文本、你最近的几条转写（最多 8 条），以及前后几天日程和提醒的标题和时间 → Fireworks AI（美国，运行开源 DeepSeek 模型，做意图解析）
• 转写前后的修改对比 → Fireworks AI（提取你常用的专有名词）

Fireworks 在美国、日本、英国、德国或冰岛的服务器上处理，不保存请求内容，不用它训练模型，数据不发送给 DeepSeek 公司，也不经过中国。

录音时的实时字幕由 Apple 语音识别提供，按 Apple 的隐私政策处理。

Deepgram 的每个请求都退出了它的模型改进计划，录音只在处理时保留；Fireworks 对开源模型默认不保存请求内容。两家都不用你的数据训练模型。

第一次使用语音功能前，Krono 会先说明这些并征得你的同意，没同意之前不发送任何内容；可以随时在设置的「云端识别与解析」中撤回。

代理服务不保存录音、转写、日历或提醒事项内容，只按设备标识记录每天的用量（如转写秒数、请求次数）和运行指标。为了防止接口被滥用，代理还会按 IP 地址（IPv6 按网段）统计当天的请求次数，只记次数、不记内容，最多两天后自动删除。

4. 本地存储与控制

写入记录、录音、识别纠错数据和学到的名字都存储在设备本地。录音默认一直保留，可在设置里打开「自动清理旧录音」只保留最近 30 天。

• 查看已写入的内容：在系统日历 / 提醒事项中进行
• 修改或撤销最新一条：使用写入后的回执
• 删除全部本地数据、导出或恢复备份：在应用设置中操作
• 随时在系统设置中关闭任一权限

5. 欧洲经济区、英国和瑞士用户（GDPR）

• 数据控制者：Enhua Yan（个人开发者），地址 上海市宝山区联杨路 1078 弄 3 号 1104 室，邮箱 [email protected]
• 处理依据：转写、解析和写入是履行你请求的服务所必需（第 6(1)(b) 条）；按设备统计用量、限流和防滥用基于正当利益（第 6(1)(f) 条），只记用量、不记内容；读取日历和提醒事项基于你在 iOS 中授予的权限，可随时撤回
• 跨境传输：第 3 节的服务商在欧洲经济区以外处理数据，传输依据与各服务商签订的数据处理协议及欧盟标准合同条款
• 保存期限：设备上的数据保存到你删除为止，打开「自动清理旧录音」后录音只留 30 天；代理的每日用量记录约 13 个月后自动删除，防滥用的 IP 计数最多保留两天；两家 AI 服务商不保留请求内容
• 你的权利：访问、更正、删除、限制或反对处理、获得数据副本。设备上的数据可在 App 设置里导出或全部删除；代理上的用量记录请发邮件申请访问或删除。你也有权向所在国的数据保护监管机构投诉

1. Data Krono processes

• Voice recordings you make in the app
• Transcripts generated from them, including your most recent transcripts (up to 8), used to help understand the next one
• The events and to-dos recognised from them (title, time and any details)
• With your permission, Calendar and Reminders: events in the surrounding days and your open and recently completed reminders are used to place times and spot time conflicts; older events are used on this device only, to learn the names you use
• Corrections you make to transcripts or titles
• A randomly generated device identifier, used only to meter usage and prevent abuse
• Backups you choose to export or restore

2. How it is used

• To transcribe speech
• To tell whether you meant an event or a to-do, and extract its title and time (using your recent transcripts and the surrounding days' events and reminders as context)
• To write to Calendar or Reminders: directly with an undoable receipt when Krono is confident; still written but marked for you to check when it is less sure; held for your confirmation when it can't understand you or a key detail is missing
• To learn from your corrections so names you've corrected come out right next time
• To export, restore or delete local data when you ask

3. What is sent to the cloud

Speech recognition and intent parsing run in the cloud. Krono sends only what one request needs, through a proxy operated by Krono:

• The recording and the proper nouns you use → Deepgram (transcription)
• The transcript, up to 8 of your recent transcripts, and the titles and times of events and reminders in the surrounding days → Fireworks AI (US; runs the open-source DeepSeek model for intent parsing)
• Before/after pairs of your corrections → Fireworks AI (learning your proper nouns)

Fireworks processes requests on servers in the US, Japan, the UK, Germany or Iceland, does not store them or train on them, and does not send them to DeepSeek or to China.

The live caption shown while you speak comes from Apple speech recognition and is handled under Apple's privacy policy.

Every request to Deepgram opts out of its Model Improvement Program, so recordings are kept only while they are processed; Fireworks does not store requests for open models. Neither trains models on your data.

Before you first use voice input, Krono shows this and asks for your consent; nothing is sent until you agree, and you can withdraw consent at any time under "Cloud recognition" in settings.

The proxy does not store recordings, transcripts, calendar or reminder content. It keeps only per-device daily usage counts (such as seconds transcribed and request counts) and operational metrics. To prevent abuse it also counts each day's requests per IP address (IPv6 by network prefix); only the count is kept, never content, and it is deleted within two days.

4. Storage and your controls

Records, recordings, corrections and learned names are stored on your device. Recordings are kept until you delete them, or for 30 days if you turn on "Auto-delete old recordings" in settings.

• View entries in the system Calendar / Reminders apps
• Edit or undo the latest entry from its receipt
• Delete all local data, export or restore a backup in the app's settings
• Turn off any permission in iOS Settings at any time

5. Users in the EEA, UK and Switzerland (GDPR)

• Controller: Enhua Yan, individual developer, Room 1104, No. 3, Lane 1078, Lianyang Road, Baoshan District, Shanghai, China, [email protected]
• Legal basis: transcription, parsing and writing are necessary to provide the service you request (Art. 6(1)(b)); per-device usage metering, rate limiting and abuse prevention rely on our legitimate interest (Art. 6(1)(f)) and record usage only, never content; Calendar and Reminders access relies on the permission you grant in iOS, which you can withdraw at any time
• International transfers: the providers in section 3 process data outside the EEA under data processing agreements and the European Commission's Standard Contractual Clauses
• Retention: data on your device stays until you delete it (recordings for 30 days if you turn on auto-delete); the proxy's daily usage records are deleted automatically after about 13 months, and per-IP abuse counters within two days; the two AI providers do not keep request content
• Your rights: access, rectification, erasure, restriction, objection and portability. Export or delete on-device data from the app's settings; email us to access or delete the proxy's usage records for your device. You may also complain to your local data protection authority