更新日期：2026 年 10 月 22 日
本政策适用于 Sooner（开发者：四川无限变量科技有限公司）及 Sooner 自托管 API 服务。
功能模式与信息处理
事件标题、日期、类型和提醒设置默认保存在你的设备上。登录并开启同步后，这些事件元数据会同步到 Sooner API。备注、记忆正文、照片以及 Live Photo 的静态图片和视频默认留在设备上；只有你明确开启私人内容备份后，这些内容才会上传到 Sooner API 和受访问控制的私有对象存储。
- 账户信息：Sooner 用户名、你提供的邮箱及其验证状态、Apple 或 Google 登录标识。密码以加盐哈希保存，登录令牌以哈希保存；Apple 和 Google 身份令牌仅在验证登录时短暂处理。
- 推送信息：只有在你同意本政策并主动开启“服务器提醒”后，Sooner 才会初始化推送 SDK。推送消息只包含通知标题、正文和事件标识，不包含私人备注、记忆正文或照片。
- 购买信息：商品、交易或订单标识、购买令牌和验证状态，用于验证或恢复 Pro 权益。付款凭据由 Apple、Google、支付宝或微信支付处理，Sooner 不保存银行卡号或银行账户信息。
- 兑换码信息：服务器仅保存兑换码的 SHA-256 哈希、套餐、核销账户和核销时间，用于一次性核销和 Pro 权益验证，不保存兑换码明文。
- 服务运行信息：API 可能记录请求时间、请求路径、响应状态和网络连接元数据，用于提供、诊断和保护服务。
第三方 SDK 与服务
极光 JPush SDK 6.2.1
在你同意本政策并开启服务器提醒后，JPush 会从设备读取 Android ID、GAID、OAID、UAID、AAID、Boot ID 等设备标识符，以及设备型号、操作系统和网络信息，用于注册设备及送达提醒。查看极光隐私政策。
小米推送通道
在你同意本政策并开启服务器提醒后，小米设备上的推送通道会处理设备厂商、型号、运营商、内存、系统和 SDK 版本、通知设置、网络类型及推送消息内容，用于消息推送。查看小米推送合规指南。
Firebase Cloud Messaging
Google 渠道在你同意本政策并开启服务器提醒后使用 Firebase Cloud Messaging。SDK 会生成 Firebase 安装标识（FID），并处理推送注册标识及必要的应用和 SDK 配置信息，用于设备注册和推送。查看 Firebase 隐私说明。
Google Mobile Ads SDK 9.1.0 与 UMP
iOS 或 Android 的免费用户可能在时间轴看到 AdMob 原生广告。你同意本政策后，Sooner 才会运行 Google UMP 获取适用的广告隐私选择；仅当 UMP 允许广告请求时，才会初始化 Google Mobile Ads SDK。该 SDK 可能处理 IP 地址、设备及广告标识符、广告展示和互动、应用互动、诊断和性能信息，用于广告投放、衡量、分析和反欺诈；IP 地址可能用于估算大致位置。Pro 有效期间不会请求广告。查看 Google 隐私政策。
其他服务提供方
你明确开启私人内容备份后，七牛云为私人媒体提供存储服务（七牛云隐私政策）。Apple 和 Google 处理对应的登录与商店交易；七相、支付宝和微信支付处理中国大陆渠道订单；邮件服务商传递邮箱验证码。服务提供方仅在提供相应服务所需范围内处理信息。
你的选择与权利
你可以在“设置 → 隐私授权管理”中查看或撤回在线功能授权。撤回后，应用停止账户、同步、推送、广告等在线处理；设备上的本地记录和提醒仍可使用。你也可以分别关闭服务器提醒、同步和私人内容备份，并通过 UMP 管理广告隐私选择。
Sooner 不通过设备定位权限收集精确位置，也不使用通讯录或麦克风。广告服务商可能使用 IP 地址估算大致位置。
保存、安全与删除
客户端与 API 使用 HTTPS 传输。密码和登录令牌不会以明文形式保存在 API 数据库中；私人媒体使用受访问控制的存储和有时限的下载链接。确认删除账户后，服务器账户及关联记录会安排在 3 天后自动删除；此期间账户无法登录或同步。私人媒体清理会每 5 分钟重试，直至存储服务确认删除；存储服务故障期间没有固定的最长清理期限。用于确认删除和安全重试的回执只保存令牌哈希，不含账户资料或私人内容，并在 30 天后自动删除。账户删除不会自动删除设备上的本地副本，也不会取消 Apple 或 Google Play 订阅；如需停止续费，请在相应商店取消订阅。
如需保留账户并删除部分内容，请查看数据删除说明。你也可以在 Sooner“设置 → 注销账户”中验证身份并删除账户；无法使用应用时，可查看外部账户删除说明。
联系我们
隐私或数据请求：hina@last-remote.xyz
Sooner Privacy Policy
Last updated: October 22, 2026. This policy applies to Sooner, developed by 四川无限变量科技有限公司, and the self-hosted Sooner API.
Features and information we process
Event titles, dates, types, and reminder settings stay on your device by default. If you sign in and enable sync, event metadata is synchronized with the Sooner API. Notes, memory text, photos, and Live Photo still/video assets also stay on-device unless you explicitly enable private-content backup; backed-up content is uploaded to the API and access-controlled private object storage.
- Account information: Sooner username, the email address you provide and its verification state, and Apple or Google sign-in identifiers. Passwords and session tokens are stored as hashes; identity tokens are processed temporarily to verify sign-in.
- Push information: Push SDKs initialize only after you accept this policy and enable server reminders. Push payloads contain only a notification title, body, and event identifier, not private notes, memory text, or photos.
- Purchase information: Product, transaction/order identifiers, purchase token, and verification state are processed to verify or restore Pro entitlements. Apple, Google, Alipay, or WeChat Pay handle payment credentials; Sooner does not store card or bank-account credentials.
- Redemption codes: The server stores only a SHA-256 hash, plan, redeeming account, and redemption time. It does not retain the code in plaintext.
- Service-operation information: The API may log request time, path, response status, and network connection metadata to provide, diagnose, and protect the service.
Third-party SDKs and providers
JPush SDK 6.2.1
After you accept this policy and enable server reminders, JPush reads device identifiers such as Android ID, GAID, OAID, UAID, AAID, and Boot ID, plus device model, operating-system, and network information to register the device and deliver reminders. JPush privacy policy.
Xiaomi Push
After you accept this policy and enable server reminders, the Xiaomi push channel may process device manufacturer, model, carrier, memory, OS and SDK versions, notification settings, network type, and push-message content to deliver messages. Xiaomi Push compliance guide.
Firebase Cloud Messaging
Google distribution uses Firebase Cloud Messaging after you accept this policy and enable server reminders. The SDK generates a Firebase Installation ID (FID) and processes push-registration identifiers and necessary app and SDK configuration information. Firebase privacy information.
Google Mobile Ads SDK 9.1.0 and UMP
Free users may see AdMob native ads in the iOS or Android timeline. After you accept this policy, Sooner runs Google UMP to obtain applicable advertising choices and initializes Google Mobile Ads only when UMP allows ad requests. The SDK may process IP address, device and advertising identifiers, ad impressions and interactions, app interactions, diagnostic and performance information for ad delivery, measurement, analytics, and fraud prevention; IP address may be used to estimate general location. Ads are not requested while Pro is active. Google privacy policy.
Other providers
Qiniu stores private media only when you enable private-content backup (Qiniu privacy policy). Apple and Google process their sign-ins and store transactions; Qixiang, Alipay, and WeChat Pay process mainland China orders; an email provider delivers verification codes. Providers process information only as needed to provide their services.
Your choices and rights
Review or withdraw online-service consent under Settings → Privacy authorization management. After withdrawal, account, sync, push, advertising, and other online processing stop while local records and reminders remain available. You can also disable server reminders, sync, and private-content backup separately, and manage advertising choices through UMP.
Sooner does not collect precise location through device location permissions and does not use contacts or microphone data. An advertising provider may estimate general location from IP address.
Retention, security, and deletion
App-to-API traffic uses HTTPS. Passwords and session tokens are not stored in plaintext in the API database. Private media uses access-controlled storage and time-limited download links. After account-deletion confirmation, the server account and associated records are scheduled for automatic deletion after three days; account access is disabled during that period. Private-media cleanup retries every five minutes until the storage provider confirms deletion; there is no fixed maximum cleanup period during a provider outage. A receipt used to confirm deletion and handle retries stores only a token hash, not account details or private content, and is deleted after 30 days. Account deletion does not erase local device copies or cancel App Store or Google Play subscriptions; cancel those in the relevant store to stop renewal.
To keep your account and delete selected content, see the data-deletion instructions. You can delete your account in Sooner under Settings → Delete account after reauthentication or use the external account-deletion instructions if you cannot use the app.
Contact
Privacy and data requests: hina@last-remote.xyz