安心经伴 隐私政策 · Privacy Policy
Last updated: 2026-10-25
中文
一句话
安心经伴是为了陪伴你读经、默想和祷告。你的收藏、日记、祷告事项和阅读记录只保存在你的手机上，我们看不到，也不会上传。
只保存在你手机上的内容
你可以选填的称呼（昵称）、收藏和分类、收藏经节及你写的笔记、日记（包括还没点“保存”的文字，只用来在应用意外关闭后帮你恢复）和祷告事项、阅读位置和最近读过的章、最近播放过的录音、"最近 7 天来读过几天"的计数、提醒时间、字号等设置。这些不会发送给我们或任何人。你自己点"导出"时，才会通过系统分享发出，由你选择发给谁。删除应用即删除这些内容；也可以在「我的 → 本机数据与备份 → 清除本机数据」中随时清除。
默认版本不收集个人数据
不登录也可以使用全部阅读、聆听、收藏和日记功能。应用不含广告、不含第三方统计或崩溃收集工具，也不追踪你。读取经文和音频时，应用会向内容服务器发出普通的网络请求（和打开任何网页一样），我们不用它来识别你。
开启"创作者与社群"功能后（仅部分版本）
只有当你主动使用以下功能时，才会有数据发送到我们的服务器（托管在 Supabase）：
| 功能 | 保存的数据 | 用途 | 保存多久 |
|---|---|---|---|
| 创作者登录与申请 | 电子邮箱（用一次性验证码登录）、显示名称、可选的教会与简介 | 账号与创作者资料 | 直到你删除账号 |
| 创作者撰写卡片 | 你写的卡片、草稿、审核意见 | 审核与发布 | 直到你删除账号 |
| 积分与里程碑 | 因发布卡片而记录的积分（只是一种感谢，不是现金） | 创作者的记录 | 直到你删除账号 |
| 举报内容 | 举报原因、可选说明；为防止滥用，保存一个加盐处理过的网络地址摘要（无法还原成地址） | 内容安全 | 随被举报内容的处理而保留 |
| 阅读小组 | 小组名称、邀请码、每个小组里一个随机成员编号、每天的"已读"标记，以及带领者可选填的讨论题（最多 140 字）。不含姓名、邮箱或设备编号 | 显示"今天几个人读了" | 小组 90 天无人加入或打卡即删除；已读标记保留 60 天；防滥用的地址摘要只保留 1 天 |
| 圣经问答提问（仅部分版本，默认关闭） | 你的电子邮箱（用一次性验证码登录）、你写的问题（标题、内容，最多 5000 字）、主题、可选的经文出处、是否愿意将来公开的偏好（默认不公开，选择偏好本身不会公开任何内容）；另有一个只含账号编号和时间的提交计数 | 让你提出并管理自己的问题；限制滥发（每小时最多 5 个） | 直到你删除这个问题或删除账号。已登录的审核人员（审核员、牧者审核员、管理员）可以通过有记录的审核队列读取待处理的问题，系统会记录哪位人员在什么时候打开了哪个问题；只有你选择"可匿名公开"、牧者审核通过、并且你逐字同意之后，才会把改写后的匿名版本公开，你随时可以撤回 |
| 意见反馈（仅部分版本，默认关闭；无需登录） | 你写的内容（3 到 2000 字）、你选的类别、应用版本和系统（iOS 或 Android）。你单独打开时才会加上：设备信息（系统版本、手机或平板、字号档位、语言、是否开启"减少动态效果"、你是从哪个页面发出的）；以及用于回复的电子邮箱（单独勾选同意）。不含账号、设备编号，也不含你的日记、祷告事项、收藏或阅读记录。为限制滥用，保存一个加盐处理过的网络地址摘要（无法还原成地址） | 改进应用；只有你留了邮箱并同意时，才会回复你 | 处理完毕（已解决或已关闭）的反馈由管理员清理，且至少保留 30 天后才可删除；保留期限由房主确定后在此写明。邮箱只有管理员能看到。尚未发送的草稿只存在你的手机上，"清除本机数据"会删除 |
|---|
小组里，其他人只能看到"今天几个人读了"，看不到谁读了，也看不到你读了什么或写了什么。组长可以看到成员的随机编号和加入日期，并可以移出成员；组长看不到成员是谁。
“最近更新”（仅部分版本，默认关闭）只读取我们已发布的公告，用的是公开的读取权限；我们不记录你看过或关闭了哪一条。
我们如何使用
只用于上表所列的用途：让功能运作、审核和发布内容、保护使用者安全。不出售、不用于广告、不用于追踪。
谁会处理这些数据
- Supabase：托管服务器和数据库（数据处理方）。
- 电子邮件服务商：Google，仅用于向员工发送审核通知。
你的选择
- 删除账号：在 我的 → 成为创作者 里的创作者资料页，点“删除账号”即可删除账号。会删除你的资料、申请、里程碑、所有卡片（包括已发布的）、审核记录和积分记录，不保留任何个人信息。已发布的卡片会随你一起从读者那里消失。（审核人员与管理员的账号因审核决定属于审计记录，需联系我们处理。）
- 退出阅读小组：在小组里点"退出"，会删除你的已读标记。
- 日记等本机内容：你随时可以在应用里删除，或删除应用。
- 其他请求：发邮件到 tsctinc@gmail.com，我们会回复。
儿童
本应用面向一般读者，不会有意向儿童收集个人数据。
变更
政策有变化时，会在此页更新日期，并在重要变化时在应用里说明。
联系我们
tsctinc@gmail.com
English
In one line
安心经伴 (Anxin Word Along) helps you read, reflect and pray. Your favourites, journal, prayer items and reading records stay on your phone. We cannot see them and nothing is uploaded.
What stays on your phone
An optional nickname (set under 我的 > 我的同行空间, never sent anywhere and not linked to any account), favourites and categories, saved verses and the notes you write on them, journal (including text you have not saved yet, kept only so it can be restored if the app closes unexpectedly) and prayer items, reading position, recently read chapters and recently played recordings, the "days you read in the last 7" count, reminder time, text size and other settings. None of it is sent to us or anyone else. It leaves the phone only when you tap export and choose where to send it. Deleting the app deletes it, and you can clear it at any time under Settings → Data and backup → Clear data on this phone.
The default app collects no personal data
Reading, listening, favourites and the journal all work without an account. The app has no advertising, no third-party analytics or crash-reporting tools, and does not track you. Fetching Scripture text and audio is ordinary network traffic to our content host, as with any web page; we do not use it to identify you.
With the creator and community features (some builds only)
Data reaches our server (hosted by Supabase) only when you use these features:
| Feature | Data stored | Purpose | Kept |
|---|---|---|---|
| Creator sign-in and application | Email address (one-time code sign-in), display name, optional church and bio | Account and creator profile | Until you delete your account |
| Writing cards | Your cards, drafts and review notes | Review and publication | Until you delete your account |
| Credit and milestones | Credit recorded for published cards (recognition only, not cash) | The creator's own record | Until you delete your account |
| Reports | Reason, optional note; a salted hash of the network address (cannot be turned back into an address) to limit abuse | Content safety | With the handling of the reported content |
| Reading groups | Group name, invite code, one random member id per group, daily "read" marks, and the leader's optional discussion question (up to 140 characters). No name, email or device id | Showing "how many read today" | Group deleted after 90 days with no join or read mark; read marks kept 60 days; the abuse-limit hash kept 1 day |
| Bible questions (some builds only, off by default) | Your email (sign-in by one-time code), the question you write (title and body, up to 5,000 characters), its topic, an optional passage, and a preference about future public display (private by default; the preference publishes nothing). A submission counter holds only your account id and the time | Letting you ask and manage your own questions; limiting abuse (5 per hour) | Until you delete the question or your account. Signed-in staff (reviewer, pastor reviewer, admin) can read pending questions through a logged review queue that records which staff member opened which question and when. A question is made public only as a redacted, anonymous wording, after a pastor reviewer has approved it and you have agreed to that exact wording; you can withdraw it at any time |
| Feedback (some builds only, off by default; no account needed) | What you type (3 to 2,000 characters), the category you pick, the app version and platform (iOS or Android). Only if you switch each on separately: device details (OS version, phone or tablet, a text-size level, language, whether Reduce Motion is on, which screen you sent it from), and an email address for a reply (with its own consent). No account, no device identifier, and none of your journal, prayers, favourites or reading history. To limit abuse, a salted hash of the network address (cannot be turned back into an address) | Improving the app; you are replied to only if you gave an email and agreed | Feedback that is resolved or closed is deleted by an admin, and only after at least 30 days; the exact period will be set by the owner and written here. Only admins can see the email. An unsent draft stays on your phone and is removed by 清除本机数据 (Clear data on this phone) |
|---|
In a group, others see only how many people read today, not who read, and not what anyone read or wrote. The group's leader can see members' random ids and join dates and can remove a member; the leader cannot see who anyone is.
What's New (some builds only, off by default) only reads announcements we have published, with the public read key; we do not record which one you saw or closed.
How we use it
Only for the purposes in the table: making the features work, reviewing and publishing content, and keeping people safe. We do not sell it, use it for advertising, or track you.
Who processes it
- Supabase: hosting for the server and database (a data processor).
- Email provider: Google, used only to send staff review notices.
Your choices
- Delete your account: 我的 (My Space) → Become a Creator → your creator profile → Delete account. It deletes your profile, applications, milestones, every card (published ones too), review records and credit records, and keeps nothing personal. A published card disappears from readers with you. (Reviewer and admin accounts are audit records and are handled by contacting us.)
- Leave a reading group: tap Leave in the group; your read marks are deleted.
- On-device content: delete it in the app, or delete the app, at any time.
- Anything else: email tsctinc@gmail.com.
Children
The app is for a general audience and does not knowingly collect personal data from children.
Changes
We will update the date on this page, and say so in the app for important changes.
Contact
tsctinc@gmail.com
Checks before publishing (not part of the public text)
1. Fill the contact email, the email provider name and the date. 2. Every row above matches docs/APP_PRIVACY_ANSWERS.md Build B; if the release is Build A (creator flag off), publish the "default app" sections only, and the creator and community table can wait. 3. The feedback and survey rows were written on 2026-10-31 from supabase/migrations/20261102000000_growth_loop.sql. Before any build turns EXPO_PUBLIC_FEEDBACK_ENABLED on: the owner sets the retention period for resolved feedback and a routine that runs admin_purge_feedback; decides whether survey answers need a deletion routine; and docs/APP_PRIVACY_ANSWERS.md is updated to match. 3. Retention numbers match docs/READING_GROUPS.md (90 days idle, 60 days of marks, 1 day of address hashes). 4. Account deletion has been verified on the hosted project. 5. The same URL goes into App Store Connect and into the app's Settings if a link is added.