KKBookkeep Privacy Protection Policy

Last updated: June 7, 2026 Effective date: June 7, 2026

Introduction

This Privacy Protection Policy (the “Policy”) applies to the KKBookkeep / 羊阳记账 iOS client (the “App”). The App is a local-first bookkeeping tool. By default, it stores ledger data on your device. Only after you actively configure file backup or sync will the App write related data to your selected iCloud Drive or WebDAV file location.

Please read this Policy carefully before using the App. Key points include:

1. The App currently does not use developer-operated cloud servers as a ledger sync path and does not provide a developer-operated account system. Your ledger, accounts, categories, transactions, and preferences are stored locally by default.
2. If you enable WebDAV or iCloud Drive backup/sync, the App writes necessary data files to the file location you choose or configure. The WebDAV server address, account, password, or access token is provided by you. The developer does not actively obtain, host, or store these credentials.
3. You can manage related data, permissions, and backup settings through the App or iOS Settings. Deleting the App or clearing local data may cause unrecoverable loss of data that has not been backed up.

1. How We Process Information

The App processes the following information depending on the features you use.

1.1 Ledger and Bookkeeping Data

When you add, edit, delete, or view bookkeeping entries, the App stores and processes ledger data locally, including but not limited to:

• transaction amount, type, date, note, category, account, and transfer account;
• account name, account type, balance, icon, color, default account, and related settings;
• category name, hierarchy, icon, color, order, archived status, or deletion status;
• budget, report, and analysis data;
• local operation logs, operation time, device identifier, sequence number, and globally unique operation identifiers needed for sync, backup, auditing, and recovery.

This information is used for bookkeeping, balance display, reports, account/category management, local recovery, and file backup/sync. At this stage, the App stores this information locally by default and does not upload it to developer-operated cloud servers.

1.2 Profile and Preference Settings

When you maintain profile information or preferences in the App, the App may store your nickname, email, avatar, bookkeeping preferences, notes, interface language, theme, app lock, Live Activity settings, and sync configuration. This information is used for local display, offline access, security protection, interface preferences, and file backup/sync that you actively enable.

The App currently does not provide developer-operated account registration, login, logout, or third-party login. Therefore, your profile is not uploaded to developer servers through an account system.

1.3 File Backup and Sync Information

When you actively configure and enable file backup or sync, the App writes related data to iCloud Drive or a WebDAV file directory according to your settings.

WebDAV backup/sync may involve:

• the WebDAV server URL you enter;
• WebDAV username, password, access token, or other transport credentials;
• backup file encryption password or local key material used for encryption;
• profile backup files;
• incremental JSONL operation logs for accounts, categories, transactions, templates, and budgets;
• information needed for connection testing, deduplication, import cursors, backup status, and last backup time.

WebDAV passwords, access tokens, and backup file encryption passwords are stored only in secure system storage such as iOS Keychain. They are not written to ordinary configuration files, sync JSON, logs, or source code. WebDAV credentials are used only for transport authentication and are not used as ledger file encryption keys.

1.4 System Permissions and Information You Provide

When you use specific features, the App may process the following information:

• Location: The App requests location permission only when you actively choose to record the current location or batch-set the current location. It saves the location name, address, coordinates, and capture time to the relevant transaction. You may skip location entry or disable location permission in iOS Settings.
• Photos or images: When you actively choose an avatar image, the App reads the selected image, compresses it, and stores it in your local profile. It may also be written to your selected backup/sync location if you enable that feature. The App does not actively access your entire photo library and does not upload your avatar to developer servers.
• Biometrics: When you enable Face ID or Touch ID for app lock, the App only invokes local iOS authentication. It does not obtain, store, or upload biometric templates.
• Clipboard, import/export, and manual files: When you actively paste, import, export, or select files, the App may process text, JSON, JSONL, images, or other content you provide to complete quick entry, import, backup recovery, or troubleshooting.

1.5 External Links and Third-Party Services

The App may provide external links or third-party capabilities, including:

• privacy policy, user agreement, feedback, and open-source repository links opened in the system browser or in-app browser;
• Apple Maps or other installed map apps, such as Amap, when you choose to open a transaction location;
• Apple iCloud Drive when you enable iCloud Drive backup/sync;
• your configured WebDAV service when you enable WebDAV backup/sync.

The privacy and data-processing practices of these services are governed by their respective providers. Except for features you actively choose, the App does not upload ledger data to developer-operated servers.

1.6 Device and Runtime Information

To support local storage, backup deduplication, incremental sync, error diagnosis, and App operation, the App may process necessary device and runtime information locally, such as a locally generated stable deviceId, app version, operation time, sync status, import cursors, backup task status, and error messages.

The App does not collect IDFA for advertising and does not actively upload device identifiers, ledger data, or usage behavior to developer-operated cloud servers. If crash analytics, statistics, or third-party SDKs are introduced in the future, we will explain the relevant details in this Policy or a third-party information list.

1.7 Legal Exceptions

Where permitted by applicable laws and regulations, we may process relevant personal information without separately obtaining your consent in circumstances such as:

• where necessary to perform legal obligations or statutory duties;
• where necessary to enter into or perform a contract to which you are a party;
• where necessary to respond to public health emergencies or protect life, health, or property safety in emergencies;
• where processing is conducted within a reasonable scope for information you have disclosed yourself or that has otherwise been lawfully disclosed;
• other circumstances provided by laws and regulations.

2. Information Storage

2.1 Storage Location

By default, the App stores ledger data and App settings on your iOS device, including the App sandbox, App Support directory, UserDefaults, Keychain, and local SQLite database.

When you enable WebDAV backup/sync, related backup files are stored in the WebDAV directory you configure. This directory is chosen and managed by you and may be located on a home NAS, cloud drive, enterprise server, or third-party WebDAV service. Please review and comply with the privacy policy and storage rules of the corresponding provider.

When you enable iCloud Drive backup/sync, related backup files are stored in iCloud Drive associated with your Apple ID. iCloud Drive storage, sync, access, and cross-border transfer rules are governed by Apple and its related terms.

2.2 Storage Period

The App retains local ledger data and related settings while you continue using the App. You may manage related data by deleting it in the App, clearing local data, deleting remote backup files, or uninstalling the App. Deleting local data may not automatically delete existing WebDAV or iCloud Drive backup files, and deleting remote backup files may not automatically delete local data.

2.3 Cross-Border Transfer

If you use WebDAV backup/sync, the storage region depends on the WebDAV server URL you configure. If you use a WebDAV service located outside your country or region, related data may be transmitted to and stored in that country or region. Please evaluate the data protection and cross-border transfer risks of that service yourself.

If you use iCloud Drive backup/sync, data storage and synchronization are managed by Apple. Please refer to Apple’s privacy policy and iCloud terms for cross-border transfer rules.

3. How We Protect Your Information

3.1 The App uses reasonable security measures, including but not limited to:

• storing ledger data in local SQLite and the App sandbox;
• storing sensitive credentials such as WebDAV passwords, access tokens, and backup file encryption passwords in iOS Keychain;
• supporting AES-GCM encryption for backup file contents;
• not writing WebDAV credentials, access tokens, or backup file encryption passwords into source code, ordinary configuration files, sync JSON, or logs;
• not transmitting your ledger data to developer-operated cloud servers.

3.2 You understand that no information system can be absolutely secure. Please protect your device, Apple ID, WebDAV credentials, encryption password, and related file service accounts, and regularly confirm that backup files remain available.

4. Your Rights

You may exercise the following rights through the App or iOS Settings:

• access, correct, or delete your ledger, accounts, categories, budgets, templates, and profile;
• choose whether to enable location, avatar selection, biometric unlock, Live Activities, iCloud Drive, or WebDAV backup/sync;
• disable or adjust file backup/sync settings;
• delete local data or delete remote backup files in WebDAV or iCloud Drive yourself;
• contact us through the feedback method provided by the App.

Because the App currently does not provide a developer-operated account system, your data is primarily managed by you on your device and in your selected file services. If you need to contact us regarding personal information protection matters, please use the contact information at the end of this Policy.

5. App Store Privacy Notes

To help you understand the App’s App Store privacy labels, the App may process the following data types:

• Financial Information: your transactions, account balances, budgets, and reports;
• Contact Info: email address you actively enter;
• User Content: nickname, avatar, notes, templates, categories, accounts, and other content you actively enter;
• Location: only when you actively record location for a transaction;
• Identifiers and Diagnostics-related information: locally generated deviceId, sync operation identifiers, import cursors, and necessary runtime status.

The above data is stored locally by default. It is written to your selected file storage location only after you actively enable iCloud Drive or WebDAV backup/sync. The App does not use this data to track you and does not use it for third-party advertising.

6. Children’s Privacy

The App is not specifically directed to children under 14. If you are under 14, please use the App under the guidance and consent of a parent or guardian. If future feature changes create additional requirements for children’s personal information protection, we will take necessary measures in a timely manner.

7. Policy Updates

We may update this Policy due to feature changes, laws and regulations, or review requirements. After an update, we will notify you through in-app pages, documentation pages, or other reasonable means. Unless otherwise stated, the updated Policy takes effect from the effective date shown on the page.

8. Contact Us

If you have any questions, comments, or suggestions about this Policy, the App’s data processing, or personal information protection matters, please contact us through:

• Email: support@ksuser.cn
• Website: https://www.ksuser.cn