FooCloud
iOS App 隐私说明iOS App Privacy

FooCloud 隐私政策

FooCloud Privacy Policy

FooCloud 是连接您所选择 FSCloud Gateway 的文件上传客户端。本政策说明 App 在设备本地处理哪些信息、向 Gateway 发送哪些信息，以及 FooCloud 开发者不会收集哪些信息。

FooCloud is a file-upload client that connects to the FSCloud Gateway you choose. This policy explains what the App handles locally, what it sends to that Gateway, and what the FooCloud developer does not collect.

生效日期：2026 年 8 月 25 日 Effective date: August 25, 2026 版本：1.0 Version: 1.0

1. 适用范围与责任边界

1. Scope and Responsibility

本政策适用于 bundle ID 为 cn.keevol.fscloud.ios.app 的 FooCloud iPhone/iPad App 及其系统分享扩展。

FooCloud 不提供固定的中央存储服务。App 只连接您手动输入、通过配置链接选择或由组织提供的 FSCloud Gateway。该 Gateway 可能由您自行托管，也可能由您的组织或第三方运营。

This policy applies to the FooCloud iPhone/iPad App with bundle ID cn.keevol.fscloud.ios.app and its system Share Extension.

FooCloud does not use a fixed central storage service. The App connects only to an FSCloud Gateway that you enter, select through a configuration link, or receive from your organization. That Gateway may be self-hosted or operated by your organization or another third party.

重要区别Important distinction Gateway 运营者决定服务端数据的存储位置、保留期限、访问控制和删除方式。这些服务端行为应以该 Gateway 运营者提供的隐私政策和服务条款为准。 The Gateway operator determines server-side storage location, retention, access control, and deletion. Those practices are governed by the Gateway operator's privacy policy and terms.

2. FooCloud 开发者不收集的数据

2. Data the FooCloud Developer Does Not Collect

FooCloud App 不包含广告、analytics、跨 App tracking 或 crash-reporting SDK。

  • App 不向 FooCloud 开发者控制的分析或广告端点发送使用行为。
  • App 不出售个人数据，也不使用您的文件训练广告或 AI 模型。
  • App 不访问位置、通讯录、日历、麦克风或相机。
  • App 仅在您使用系统文件选择器或分享菜单明确选择文件后读取该文件。

The FooCloud App contains no advertising, analytics, cross-app tracking, or crash-reporting SDK.

  • The App sends no usage analytics to endpoints controlled by the FooCloud developer.
  • The App does not sell personal data or use your files for advertising or AI model training.
  • The App does not access location, contacts, calendars, microphone, or camera.
  • The App reads a file only after you explicitly choose it in the system file picker or Share sheet.

3. App 向所选 Gateway 发送的信息

3. Information Sent to Your Selected Gateway

为完成登录、目录发现和文件上传，App 会把以下信息直接发送到您选择的 Gateway。这些信息不会被另行发送到 FooCloud 开发者的 analytics 或广告服务。

To sign in, discover folders, and upload files, the App sends the following information directly to your selected Gateway. It is not separately sent to analytics or advertising services operated by the FooCloud developer.

信息Information 发送时机When sent 目的Purpose
邮箱、密码Email and password 您主动登录时When you sign in 由 Gateway 验证账号Gateway authentication
访问令牌、刷新令牌Access and refresh tokens 已登录请求与会话刷新时Authorized requests and session refresh 保持会话并授权操作Session continuity and authorization
随机安装 ID、平台“iOS”Random installation ID and platform “iOS” 发现默认上传目录时When discovering the default destination 设备发现与默认目录解析Device discovery and default destination resolution
账号 profile 与头像请求Profile and avatar requests 登录后的界面刷新时When refreshing the signed-in interface 显示当前账号与头像Display the current account and avatar
所选文件内容、文件名、大小、分块哈希、Merkle root 与目标目录Selected file contents, filename, size, chunk hashes, Merkle root, and destination 您确认上传后After you confirm an upload 分块上传、去重、校验和创建文件Chunk upload, deduplication, integrity checking, and file creation

4. 设备本地保存的信息

4. Information Stored on Your Device

  • Keychain：访问令牌和刷新令牌保存在 iOS Keychain，并限制为本设备使用。
  • App Group 偏好：Gateway 地址、账号邮箱、会话到期时间、随机安装 ID、最近上传目录和分享扩展上下文保存在 App 与扩展共享的系统容器中。
  • 上传队列：文件名、大小、目标目录、状态、进度和错误等任务信息保存在共享容器中，以支持后台上传和失败重试。
  • 暂存文件：您确认上传或从分享扩展提交的文件会复制到共享容器，供后台上传读取。

上传成功或您移除任务后，对应暂存文件会被删除。失败任务可能继续保留，以便重试；App 提供“清理失败任务”入口，用于清理符合条件的旧失败任务及其暂存文件。

  • Keychain: Access and refresh tokens are stored in iOS Keychain and marked for use on this device only.
  • App Group preferences: The Gateway address, account email, session expiry, random installation ID, recent destination, and Share Extension context are stored in the system container shared by the App and extension.
  • Upload queue: Task details such as filename, size, destination, state, progress, and errors are stored in the shared container to support background upload and retry.
  • Staged files: Files that you confirm for upload or submit through the Share Extension are copied to the shared container for background transfer.

A staged copy is deleted after successful upload or when you remove the task. Failed tasks may remain available for retry. The App provides a “Clean Up Failed Tasks” action for eligible older failures and their staged files.

5. 网络连接与安全边界

5. Network Connections and Security Boundary

  • 公网或其它非本地 Gateway 地址必须使用 HTTPS。
  • 为支持自托管局域网部署，App 允许 localhost、局域网和私有地址使用 HTTP。
  • 使用 HTTP 时，传输内容不具备 HTTPS 的链路加密保护；是否启用安全反向代理、VPN 或其它传输保护由 Gateway 部署者负责。
  • App 不声称为文件提供端到端加密；服务端静态加密能力取决于您所连接 Gateway 的实际部署。
  • Public and other non-local Gateway addresses must use HTTPS.
  • To support self-hosted local deployments, the App permits HTTP for localhost, local-network, and private addresses.
  • HTTP traffic does not receive HTTPS transport encryption. The Gateway deployer is responsible for a secure reverse proxy, VPN, or other transport protection.
  • The App does not claim end-to-end file encryption. Server-side encryption at rest depends on the actual Gateway deployment.

6. 第三方、Apple 系统服务与数据共享

6. Third Parties, Apple System Services, and Sharing

App 不集成第三方 analytics、广告、tracking 或 crash-reporting SDK。

  • 系统文件选择器和分享菜单由 iOS 提供，您通过这些系统界面决定要交给 FooCloud 的文件。
  • 后台上传使用 Apple 提供的 URLSession 与后台任务机制。
  • App 只把业务请求发送到您所选择的 Gateway；Gateway 运营者是否使用托管、对象存储或其它处理方，不由 App 决定。

The App integrates no third-party analytics, advertising, tracking, or crash-reporting SDK.

  • The system file picker and Share sheet are provided by iOS; you decide which files to provide through those interfaces.
  • Background transfers use URLSession and background task mechanisms provided by Apple.
  • The App sends service requests only to your selected Gateway. Whether that Gateway operator uses hosting, object storage, or other processors is outside the App's control.

7. 您的控制、保留与删除

7. Your Controls, Retention, and Deletion

  • 您可以随时退出登录；App 会清除本地访问令牌、刷新令牌、账号邮箱和会话信息，同时保留已选择的 Gateway 地址，便于以后重新登录。
  • 更换 Gateway 时，App 会退出旧会话并切换到新的 Gateway。
  • 您可以移除队列任务，或使用清理入口删除符合条件的旧失败任务与暂存文件。
  • 卸载 App 会移除其普通本地容器数据；iOS 对 Keychain 项目的卸载保留行为由系统管理。
  • 删除 Gateway 上的账号、文件、版本或服务端日志，请使用该 Gateway 提供的功能或联系其运营者。
  • You may sign out at any time. The App clears local access and refresh tokens, account email, and session information while retaining the selected Gateway address for future sign-in.
  • Changing Gateway signs out of the old session and switches the App to the new Gateway.
  • You may remove queue tasks or use the cleanup action for eligible older failed tasks and staged files.
  • Uninstalling the App removes its ordinary local container data. iOS controls whether Keychain items survive app removal.
  • To delete an account, file, version, or server log held by a Gateway, use that Gateway's controls or contact its operator.

8. 本隐私政策页面

8. This Privacy Policy Website

本页面不包含 analytics、广告或 tracking 脚本。页面只在浏览器本地存储 foocloud_lang 语言偏好，不把该偏好发送给 FooCloud。

This page contains no analytics, advertising, or tracking scripts. It stores only the foocloud_lang language preference in your browser and does not send that preference to FooCloud.

9. 政策变更与联系方式

9. Policy Changes and Contact

如果 App 的数据处理方式发生实质变化，我们会更新本页面的版本和生效日期。关于 FooCloud App 本身的隐私问题，请通过以下邮箱联系我们；关于服务端数据，请优先联系您所使用 Gateway 的运营者。

If the App's data practices change materially, we will update the version and effective date on this page. Contact us below for privacy questions about the FooCloud App itself. For server-side data, contact your Gateway operator first.

FooCloud Privacy
[email protected]