Privacy Policy
Last updated: November 6, 2026
This policy covers the Submorrow iOS app and its home-screen widgets, published by GUANYU LAB. Submorrow is a subscription and payment-reminder organizer; it is not a banking app. You do not need to create an account to use it.
1. Information you enter
Subscription names, amounts, currencies, exchange rates, renewal periods, billing dates, categories, payment-method notes, budgets, and preferences are stored in the app's private storage on your device. The app does not connect to your bank account or read card transactions.
2. Optional iCloud sync
If you turn on automatic iCloud sync or start a manual sync, a copy of your ledger is stored in the private CloudKit database of your own Apple Account. Apple operates iCloud. Your ledger is never sent to a server operated by the developer, and the developer cannot read it. Turning off sync does not delete data already saved in iCloud.
3. Optional encryption and backup files
If you turn on ledger encryption, your ledger is encrypted on the device, and the recovery files you export are protected with a password you choose. The password is never stored by the app, written to logs, or sent anywhere; if you forget it, the files cannot be decrypted. Older plain JSON backups and the summary shown in widgets are not covered by this encryption. Backup files are saved only where you choose.
4. Pro purchases and offer codes
Pro subscriptions, lifetime purchases, renewals, refunds, purchase restoration, and offer-code redemption are handled by Apple through the App Store. Submorrow reads Apple-verified entitlement information, such as which plan you hold, its price, and its renewal or expiry date, only on your device to unlock Pro features and show your plan. The developer never asks for your Apple Account password, card number, or payment details.
5. Reminders and widgets
Billing reminders, if you enable them, are scheduled as local notifications on your device. Widgets use on-device data shared between the app and its own widget extension. You can manage notification permission in the app and in iOS Settings.
6. Screenshot import
When you choose “Import image,” Submorrow opens the system photo picker and processes only the screenshot or photo you select; it does not request access to your entire photo library. Image decoding and text recognition run on your device, without sending the image to a developer-operated server or third-party recognition service. The app does not retain the original image, full recognized text, email addresses, postal addresses, or full order numbers.
Only after you review and save the result does the app add the confirmed subscription fields, receipt dates and amounts, and import metadata to your ledger. Where a receipt identifier can be recognized, the app may retain a keyed HMAC fingerprint to identify repeated receipts rather than the full identifier. The fingerprint key is stored in the device’s Keychain; if you enable iCloud sync, it may also be stored in encrypted fields in your private CloudKit database for use on your other devices. Saved import data follows the same storage, sync, backup, and deletion rules as other ledger records. Importing an image does not give the app access to your Apple Account, email, bank account, or payment transactions.
7. Keeping and deleting your data
You can edit or delete records in the app and export a backup at any time. Deleting the app removes its local data, so export a backup first if you want to keep it. If you used iCloud sync, a private copy may remain in your iCloud after you turn off sync or delete the app; you can remove it in your Apple Account's iCloud storage settings.
8. Analytics and tracking
Submorrow's only network request of its own is a once-a-day anonymous download of public currency exchange rates from ExchangeRate-API (open.er-api.com), used to convert amounts into your base currency. It sends no ledger data, account, or device identifiers. Submorrow contains no advertising, behavioral analytics, or cross-app tracking SDKs, and the developer runs no server that collects your data. Apple and its services may independently process network, diagnostic, account, and transaction information under Apple's own policies.
9. Contact and changes
For questions about this policy, contact GUANYU LAB at 30501813@qq.com, or see our support page. If the way the app handles data changes materially, this page will be updated.
隐私政策
最近更新：2026 年 11 月 6 日
本政策适用于 GUANYU LAB 发布的 Submorrow iOS 应用及其桌面小组件。Submorrow 是订阅与扣费提醒管理工具，不是银行服务应用。使用本应用无需注册账号。
一、您输入的账单数据
订阅名称、金额、货币、汇率、周期、扣费日期、分类、付款方式备注、预算及个人偏好，均保存在设备上的应用私有空间内。应用不会连接银行账户，也不会读取银行卡交易。
二、可选的 iCloud 同步
开启自动 iCloud 同步或手动发起同步后，账本副本会保存在您个人 Apple 账户的 CloudKit 私有数据库中。iCloud 由 Apple 提供。账本内容不会发送到开发者的任何服务器，开发者也无法读取。关闭同步不会删除已保存在 iCloud 中的数据。
三、可选的加密与备份文件
开启账本加密后，账本在设备上加密保存，您导出的恢复文件由您自行设定的密码保护。密码不会被应用保存、写入日志或发送到任何地方；遗忘密码将无法解密文件。旧版未加密的 JSON 备份及小组件显示的摘要不在加密范围内。备份文件只保存在您选择的位置。
四、Pro 购买与兑换码
Pro 订阅、永久买断、续订、退款、恢复购买及兑换码兑换，均由 Apple 通过 App Store 处理。Submorrow 仅在您的设备上读取经 Apple 验证的权益信息（例如所持会员类型、价格、续订或到期日期），用于解锁 Pro 功能和展示您的会员状态。开发者不会要求您提供 Apple 账户密码、银行卡号或支付信息。
五、本机提醒与小组件
开启扣费提醒后，通知由 iOS 在本机安排。桌面小组件使用本应用与其小组件扩展共享的本机数据。您可以在应用和 iOS 设置中管理通知权限。
六、截图导入
点击「从图片导入」后，Submorrow 会打开系统照片选择器，仅处理您主动选择的截图或照片，不请求访问整个相册。图片解码和文字识别均在您的设备上完成，不会把图片发送到开发者服务器或第三方识别服务。应用不会留存原图、完整识别文本、邮箱、邮寄地址或完整订单编号。
只有在您复核并保存后，应用才会将确认的订阅字段、账单日期和金额及导入来源信息写入账本。能够识别凭证编号时，应用可能保存用于识别重复凭证的 基于密钥计算的 HMAC 凭证指纹，而不保存完整编号。指纹密钥存放在设备的 Keychain 中；开启 iCloud 同步时，也可能通过您个人 CloudKit 私有数据库的加密字段保存，以供其他设备使用。保存的导入数据遵循与其他账本记录相同的存储、同步、备份及删除规则。导入图片不会让应用获得您的 Apple 账户、邮件、银行账户或支付流水的访问权限。
七、数据保留与删除
您可以随时在应用中编辑或删除记录并导出备份。删除应用会移除其本机数据，如需保留请先导出备份。如果使用过 iCloud 同步，关闭同步或删除应用后，私人 iCloud 副本可能仍会保留，可在 Apple 账户的 iCloud 储存空间设置中删除。
八、分析与跟踪
Submorrow 自身唯一的网络请求，是每天一次匿名获取公开的货币汇率（来自 ExchangeRate-API，open.er-api.com），用于把不同币种的金额折算为您的主币种；该请求不包含任何账本数据、账户或设备标识。Submorrow 没有集成任何广告、行为分析或跨 App 跟踪 SDK，开发者也没有运营收集您数据的服务器。Apple 及其服务可能根据其自身政策处理网络、诊断、账户和交易相关信息。
九、联系与更新
如对本政策有疑问，请通过 30501813@qq.com 联系 GUANYU LAB，或查看支持页面。如果数据处理方式发生重大变化，我们会更新本页面。