Wield 隐私政策

1. 本机数据 / On-device data

主机配置、对话、计划、证据和回执保存在设备上的加密数据库中。SSH 密码、私钥口令和模型 API 密钥仅保存在 iOS Keychain 或 Android Keystore 支持的安全存储中，不会进入聊天、证据、回执或生产遥测。

Host profiles, conversations, plans, evidence and receipts are stored in an encrypted database on the device. SSH passwords, private-key passphrases and model API keys are kept only in secure storage backed by iOS Keychain or Android Keystore. They are not placed in chat, evidence, receipts or production telemetry.

2. 直接连接 / Direct connections

SSH 主机

当你添加并授权主机后，设备通过 SSH 直接连接该主机。Wield 不代理连接，也不在开发者服务器上保存主机、用户名、命令或输出。手动终端始终由用户控制，并且不会作为 AI 工具使用。

After you add and authorize a host, the device connects to it directly over SSH. Wield does not proxy that connection or store hosts, usernames, commands or output on a developer server. The manual terminal remains user-controlled and is never exposed as an AI tool.

自选模型服务 / User-selected model service

只有在你配置模型并发起 AI 请求时，Wield 才会向该 HTTPS 端点发送完成请求所需的数据。这可能包括你的提示、服务器别名或用户名、固定操作的脱敏结果，以及你明确要求读取的文件内容。模型密钥仅作为发送给该端点的认证信息使用。该服务可能依照自己的条款和隐私政策处理或保留数据。

Only when you configure a model and initiate an AI request does Wield send the data needed for that request to the selected HTTPS endpoint. This may include your prompt, a server alias or username, redacted results from fixed operations, and file content you explicitly ask Wield to read. The model key is used only to authenticate to that endpoint. The provider may process or retain data under its own terms and privacy policy.

公开网页 / Public web

研究浏览器直接打开 HTTPS 网页并始终保持可见。它与 SSH 终端隔离。Wield 不运营网页代理，也不建立跨站浏览档案。

The visible research browser opens HTTPS pages directly and is isolated from SSH. Wield does not operate a web proxy or build a cross-site browsing profile.

3. 不收集的内容 / What Wield does not collect

• 没有 Wield 账号、团队云同步或后台机器人。
• 没有广告 SDK、跨 App 追踪、分析或崩溃遥测 SDK。
• 当前商店版本不选择或上传照片、视频、音频、通讯录或位置。
• 生产日志不记录主机、用户名、路径、命令、终端输出、模型密钥、密码或私钥。

• No Wield account, team cloud sync or background robot.
• No advertising SDK, cross-app tracking, analytics or crash telemetry SDK.
• The current store build does not select or upload photos, video, audio, contacts or location.
• Production logs exclude hosts, usernames, paths, commands, terminal output, model keys, passwords and private keys.

4. 保留与删除 / Retention and deletion

本机数据保留到你在“设置 → 隐私与本地存储”中选择“清除全部本地数据”、清除系统 App 数据或卸载 Wield。清除本机数据不会删除远端服务器上的文件或恢复副本。模型提供商保留的数据受该提供商的规则约束。

On-device data remains until you choose Settings → Privacy & local storage → Clear all local data, clear the app's system data, or uninstall Wield. Clearing local data does not delete remote server files or recovery copies. Data retained by a model provider is governed by that provider.

5. 安全 / Security

Wield 使用 SSH 或 TLS 加密传输，固定并验证 SSH 主机指纹，将凭据保存在设备安全存储中，并对支持的远端变更执行目标绑定、冲突检查、恢复动作和结果验证。任何软件都无法保证绝对安全。

Wield uses SSH or TLS in transit, pins and verifies SSH host fingerprints, protects credentials with device secure storage, and applies target binding, conflict checks, recovery actions and outcome verification to supported remote changes. No software can guarantee absolute security.

6. 联系与变更 / Contact and changes

运营者：LIU CHENLONG。隐私问题可联系 spawnlauplay@gmail.com。重大变更会在本页更新生效日期；需要额外同意时，Wield 会在收集前请求。

Operator: LIU CHENLONG. For privacy questions, contact spawnlauplay@gmail.com. Material changes update the effective date above; when additional consent is required, Wield requests it before collection.