隐私协议 Privacy Policy
更新于 2026 年 10 月 20 日 Updated October 20, 2026
Sill 坚持本地优先：暂存内容留在您的 Mac 上，核心功能无需账号或网络连接。Sill 不提供账号或登录。App Store 分发与付款、RevenueCat 购买验证及 Sentry 崩溃诊断可能连接第三方服务；本政策说明相关处理与您的选择。
Sill is local-first: stashed content stays on your Mac and core features work without an account or network connection. Sill does not offer account registration or sign-in. App Store distribution and payments, RevenueCat purchase validation, and Sentry crash diagnostics may connect to third-party services. This policy explains those practices and your choices.
1. 你的数据存储在哪里 1. Where Your Data Lives
暂存在 Sill 中的文件、图片、便签文本和网页链接都留在您的 Mac 上。文本、链接、小文件和直接从剪贴板加入的图片会保存在应用沙盒中；较大的文件默认留在原位置，Sill 仅保存 macOS 安全范围书签及本地元数据，以便之后再次访问。置顶或锁定条目时，Sill 可能按您发起的操作在沙盒中创建本地副本。Sill 不会将您的暂存内容上传到购买或诊断服务。
Files, images, snippets, and URLs placed on Sill remain on your Mac. Text, links, small files, and images captured directly from the clipboard are stored in the app sandbox. Larger files remain at their original location by default; Sill stores only a macOS security-scoped bookmark and local metadata so it can access them again. Pinning or locking an item may create a local sandbox copy as part of the action you requested. Sill does not upload your stashed content to purchase or diagnostic services.
2. 购买身份与试用 2. Purchase Identity and Trial
Sill 无需注册或登录。试用、购买与恢复由 Apple App Store 处理；RevenueCat 使用匿名 App User ID 关联权益，并处理商品标识、原始交易日期和购买状态。Sill 不收集登录姓名、邮箱或第三方登录令牌。本机 Keychain 保存试用计时记录，防止修改系统时间重新激活已到期试用。
Sill requires no registration or sign-in. Apple handles trials, purchases, and restoration. RevenueCat associates access with an anonymous App User ID and processes product identifiers, original transaction dates, and purchase status. Sill does not collect sign-in names, email addresses, or third-party login tokens. The local Keychain stores trial timing records to prevent system clock changes from reactivating an expired trial.
3. App Store 与应用内购买 3. App Store Purchases
Sill Pro 的交易由 Apple App Store 处理；我们不会接触或保存您的信用卡号、银行账户等支付凭据。Sill 使用 RevenueCat 验证和同步购买权益，RevenueCat 可能处理应用用户标识、产品标识、购买状态和收据相关信息。该信息只用于提供、恢复和支持您购买的功能，不用于广告。
Sill Pro transactions are processed by Apple through the App Store. We do not see or store payment credentials such as card or bank details. Sill uses RevenueCat to validate and synchronize purchase entitlements. RevenueCat may process an app user identifier, product identifiers, purchase status, and receipt-related information solely to provide, restore, and support purchased features, not for advertising.
4. 剪贴板访问机制 4. Clipboard Access
默认只在您主动粘贴、使用快捷键或点击抓取命令时读取剪贴板。Pro 用户可选择开启剪贴板历史：开启后在后台记录文本、网址和图片，历史在本机加密保存，不会上传。可排除应用、设置 1、7 或 30 天保留期限、随时清空或选择退出时清空。关闭记录、Pro 到期或 Mac 睡眠时停止采集；恢复后不会追溯采集停用期间的内容。
By default, Sill reads the clipboard when you paste, use a shortcut, or choose a capture command. Pro users can enable clipboard history to record text, URLs, and images in the background. History is encrypted on this Mac and is not uploaded. Exclude apps, choose retention of 1, 7, or 30 days, clear history at any time, or clear it on quit. Capture stops when disabled, when Pro access expires, or when the Mac sleeps; resuming does not collect values from the inactive period.
分享导入与文字识别Share Import and Text Recognition
从其他应用选择“分享至 Sill”时，分享扩展仅接收您选中的内容，并通过本机加密收件箱交给 Sill 导入。处理过程中可能产生临时文件，完成或取消后清理。主动分享不会授权 Sill 浏览来源应用的其他内容。
When you choose to share to Sill from another app, the share extension receives the selected content and passes it to Sill through an encrypted inbox on your Mac. Temporary files used during processing are cleaned up after completion or cancellation. Sharing does not authorize Sill to browse other content in the source app.
启用 Pro 的图片与 PDF 文字搜索后，Sill 在本机提取文字并保存加密搜索索引，不向云端发送文件或识别文本。敏感内容不参与索引；PDF 最多处理前 20 页，过大或不支持的文件可能跳过。您可以在设置中关闭识别或重建索引。
When Pro text search in images and PDFs is enabled, Sill extracts text locally and stores an encrypted search index. Files and recognized text are not sent to a cloud service. Sensitive items are excluded; at most the first 20 PDF pages are processed, and oversized or unsupported files may be skipped. You can disable recognition or rebuild the index in Settings.
联网工具与授权Connected tools and permissions
翻译会将你主动提交的文字与语言信息发送给所选服务。默认 MyMemory 无需 API Key，提交文字会作为 HTTPS 请求查询参数发送。DeepL、Microsoft Translator、Google Cloud 与 OpenAI-compatible 服务使用你配置的凭据；使用模型服务时还会发送所选模型与翻译指令。API 凭据保存在本机 Keychain，服务按其 API 隐私政策处理数据，并可能保留提交文本或单独收费。 若选择 DeepL API Free，其 API 隐私条款允许在有限期间处理提交文本与译文，用于模型训练；这不代表 DeepL API Pro 或其他服务采用相同政策。天气默认使用 Apple Weather，将所选地点的近似坐标发送给 Apple。若你主动选择 Open-Meteo，Sill 会将近似坐标和你配置的商业 Customer API Key 直接发送给 Open-Meteo；Key 保存在本机 Data Protection Keychain，不通过 iCloud 同步。两种模式的城市搜索都使用 Apple 地理编码。使用当前位置时，macOS 会请求定位授权，Sill 以约 3 公里的精度请求位置。文件工具仅访问你选定的本地文件夹。
Translate sends submitted text and language information to your chosen service. The default MyMemory service needs no API key and receives the text in an HTTPS query parameter. DeepL, Microsoft Translator, Google Cloud, and OpenAI-compatible services use credentials you configure. Model services also receive the selected model and translation instructions. Credentials are stored in the local Keychain; providers process data under their API privacy policies and may retain submitted text or charge separately. If you choose DeepL API Free, its API privacy terms allow submitted text and translations to be processed for a limited period for model training. This does not imply the same policy for DeepL API Pro or other services. Weather uses Apple Weather by default and sends the selected location’s approximate coordinates to Apple. If you explicitly choose Open-Meteo, Sill sends approximate coordinates and your configured commercial Customer API key directly to Open-Meteo. The key is stored in the local Data Protection Keychain and is not synced through iCloud. City search uses Apple geocoding in both modes. Choosing Current Location requests macOS permission, and Sill requests location with about three-kilometer accuracy. Files accesses selected local folders.
5. 数据删除与自动清理 5. Data Retention and Deletion
您可以随时单项删除条目；普通删除会先移入“最近删除”并保留 7 天。Free 与 Pro 都可在删除后立即撤销，也可确认后永久删除；Free 与 Pro 都可在保留期内稍后恢复，并可为未固定内容启用 1 至 365 天的自动清理。恢复后会重新计算保留期限。Sill 不提供账号；本机内容和剪贴板历史由您分别管理，Apple 的购买记录不随本机内容删除而删除。
You can delete individual items at any time; normal deletion first moves them to Recently Deleted for 7 days. Free and Pro can both undo immediately or permanently delete after confirmation. Free and Pro can also restore items later during the retention window and enable automatic cleanup for unpinned items after 1 to 365 days. Restoring restarts the retention period. Sill does not offer accounts. You manage local content and clipboard history separately; deleting local content does not delete purchase records held by Apple.
6. 崩溃与性能诊断 6. Crash and Performance Diagnostics
为发现和修复崩溃、无响应以及严重存储故障，配置了诊断服务的 Sill 发布版本会使用 Sentry 自动发送最小化诊断数据。数据可能包括崩溃堆栈、错误类型和代码、应用版本与构建号、macOS 版本、设备架构、会话状态、性能与卡顿指标，以及不包含内容的操作事件。崩溃发生后，报告可能先保存在设备上，并在下次启动时发送。网络传输过程中，Sentry 也会处理连接所必需的 IP 地址。
To find and fix crashes, hangs, and serious storage failures, Sill release builds configured for diagnostics use Sentry to send minimized diagnostic data automatically. This may include crash stack traces, error types and codes, app version and build, macOS version, device architecture, session state, performance and hang metrics, and content-free operation events. After a crash, a report may be stored on the device and sent the next time Sill starts. Sentry also processes the IP address needed to establish the network connection.
我们不会有意向 Sentry 发送您的暂存文本、剪贴板内容、文件内容、文件名、完整文件路径、网页地址、邮箱、账号 ID、访问令牌或支付凭据。Sill 禁用了 Sentry 的默认个人信息、网络请求记录、会话重放、截图、应用日志和性能链路追踪；普通业务失败只作为经过筛选的诊断线索附随于相关错误报告。诊断数据用于产品稳定性分析，不用于广告、跨应用跟踪或用户画像。
We do not intentionally send stashed text, clipboard content, file contents, file names, full file paths, web addresses, email addresses, account IDs, access tokens, or payment credentials to Sentry. Sill disables Sentry's default personal information, network request recording, session replay, screenshots, application logs, and performance tracing. Routine operational failures are retained only as filtered diagnostic context attached to a relevant error report. Diagnostic data is used for product stability, not advertising, cross-app tracking, or user profiling.
7. 服务提供商与跨境处理 7. Service Providers and International Processing
我们仅在提供相关功能所需的范围内与服务提供商共享数据：Apple 处理应用分发和付款，RevenueCat 提供试用及购买权益验证，Sentry 提供崩溃与性能诊断。相关数据可能由这些提供商在您所在国家或地区之外处理，并受其合同、安全措施和适用法律约束。我们不出售您的个人信息，也不向广告网络共享数据。
We share data with service providers only as needed for the relevant feature: Apple for app distribution and payments, RevenueCat for trial and purchase entitlement validation, and Sentry for crash and performance diagnostics. These providers may process data outside your country or region subject to their contractual safeguards, security measures, and applicable law. We do not sell personal information or share it with advertising networks.
8. 网站数据 8. Website Data
本展示网站不使用广告跟踪器或第三方分析 Cookie。网站仅在您的浏览器本地保存语言偏好。演示视频使用 YouTube 的隐私增强嵌入模式，点击播放后才连接 YouTube。播放时，YouTube 可能按其隐私政策处理 IP 地址、设备信息及播放操作。托管服务提供商仍可能为安全和可靠性目的处理常规服务器日志，例如 IP 地址、请求时间和浏览器信息。
This marketing website does not use advertising trackers or third-party analytics cookies. It stores only your language preference locally in your browser. Demo videos use YouTube privacy-enhanced embeds and connect to YouTube only after you choose to play. During playback, YouTube may process your IP address, device information, and playback interactions under its privacy policy. Our hosting provider may still process ordinary server logs, such as IP address, request time, and browser information, for security and reliability.
9. 保存期限与您的权利 9. Retention and Your Rights
本地内容按第 5 节所述由您控制。购买与诊断记录仅在提供服务、履行法律义务、维护安全或解决争议所需期间保留，随后删除或匿名化，具体期限也可能受各服务提供商和法定义务影响。根据适用法律，您可以请求访问、更正、删除或限制处理您的个人信息，也可以提出异议或撤回同意。有关数据权利的请求可联系支持；我们可能需要先验证请求身份。
You control local content as described in Section 5. Purchase and diagnostic records are retained only as long as needed to provide the service, meet legal obligations, maintain security, or resolve disputes, and are then deleted or anonymized; exact periods may also depend on provider settings and legal requirements. Depending on applicable law, you may request access, correction, deletion, or restriction of your personal information, object to certain processing, or withdraw consent. Contact support for data-rights requests; we may first need to verify your identity.
10. 政策变更与联系我们 10. Changes and Contact
我们可能更新本政策，并在本页面标注新的更新日期。重大变更将在合理可行的情况下通过网站、应用内提示或其他适当方式说明。如果您对本政策或个人信息处理有任何疑问或请求，请联系 support@sill-app.com。
We may update this policy and will post the revised date on this page. Where reasonably practical, material changes will be communicated through the website, an in-app notice, or another appropriate method. For questions or requests about this policy or our handling of personal information, contact support@sill-app.com.