隐私协议
一句话版本：你的代码不经过我们。下面写清楚我们到底收什么、为什么收、留多久。
你的代码不属于我们
仓库和文件始终留在你的 Mac 上，agent 也在你的 Mac 上运行。手机与 Mac 之间的消息经加密连接（TLS）传输；中转服务器为了离线送达会暂存会话消息，你删除会话即随之删除。我们不读取、不分析这些内容，更不会用它训练模型。
会收集的东西
配对信息：匿名的账号标识与设备记录（设备名称、类型）—— 没有邮箱，也没有密码。推送令牌：用来把「等你授权」这类通知送到你的手机。订阅状态：来自 App Store 的凭据校验结果。诊断信息：崩溃日志和匿名的功能使用计数，可在设置里关闭。
为什么需要这些
仅用于：把你的设备认成同一个人、把通知送到正确的手机、校验订阅、修崩溃。不用于画像、不用于广告、不出售给任何第三方。
通知里有什么
推送必须经过 Apple 的服务器。为避免内容外泄，通知正文默认只写「有一个授权在等你」这类提示，具体内容在你打开应用后再从你的 Mac 拉取。
第三方
我们使用 Apple 推送服务（送达通知）、App Store（订阅计费）和云服务器（消息中转与暂存）。除此之外不与任何第三方共享数据。
留多久
配对与设备记录在配对存续期间保留，解除配对或移除设备后删除。诊断日志最长保留 90 天。会话消息在服务器暂存至你删除该会话；结束并删除会话会同时删除其全部消息。
你的权利
你可以随时查看、导出或删除账号数据，撤销任一设备的授权，或在设置里关闭诊断上报。注销账号会一并删除配对关系与订阅绑定。需要协助请写信到 runlineapp@gmail.com，我们在 30 天内答复。
对本文有疑问，写信到 runlineapp@gmail.com。
Privacy Policy
The short version: your code does not pass through us. Below is exactly what we collect, why, and for how long.
Your code is not ours
Repositories and files stay on your Mac, where the agent runs. Messages between your phone and your Mac travel over encrypted connections (TLS); our relay stores session messages so they can be delivered while a device is offline, and deleting a session deletes them. We do not read or analyse this content, and we never use it to train models.
What we do collect
Pairing data: an anonymous account identifier and device records (name, type) — no email, no password. Push tokens: used to deliver notifications like "an approval is waiting". Subscription status: the result of validating your App Store receipt. Diagnostics: crash logs and anonymous feature counters, which you can turn off in settings.
Why we need it
Only to recognise your devices as one person, deliver notifications to the right phone, validate subscriptions and fix crashes. Never for profiling, never for advertising, and never sold to third parties.
What notifications contain
Push must travel through Apple’s servers. To avoid leaking content, notification bodies by default say only something like "an approval is waiting" — the details are fetched from your Mac after you open the app.
Third parties
We use Apple Push Notification service (delivery), the App Store (billing) and a cloud server (message relay and temporary storage). Nothing is shared with anyone else.
How long we keep it
Pairing and device records are kept while the pairing exists and deleted when you unpair or remove a device. Diagnostic logs are kept for at most 90 days. Session messages stay on the relay until you delete the session; ending and deleting a session deletes all of its messages.
Your rights
You can view, export or delete your account data at any time, revoke any device, or turn off diagnostics in settings. Closing your account also removes pairings and subscription links. Write to runlineapp@gmail.com for help; we respond within 30 days.
Questions about this document? Write to runlineapp@gmail.com.