为实现登录、付款等功能，Numable 集成了下列第三方 SDK，或在服务端使用下列第三方服务。我们按「最小必要」原则使用它们。下表列出每一项的提供方、用途、涉及的个人信息、所在的客户端，以及它们各自的隐私政策。第三方如何处理其收集的信息，以其隐私政策为准。Numable 未集成任何崩溃上报、统计分析或广告 SDK；推送方面，只有 Android 的 Google Play 版集成了 Firebase Cloud Messaging，仅用于服务器通知（见第 2 节）；iPhone、iPad、Mac 上使用的 Apple 推送通知服务（APNs）是 Apple 的系统服务，列在第 3 节。清单变化时我们会同步更新本页。
To provide sign-in, payment and similar features, Numable integrates the third-party SDKs below or uses the listed third-party services on its servers, on a data-minimization basis. Each entry lists the provider, purpose, personal information involved, the clients it appears in, and its privacy policy; how a third party handles information it collects is governed by its own policy. Numable integrates no crash-reporting, analytics or advertising SDK; for push, only the Google Play version of Android integrates Firebase Cloud Messaging, used solely for server notifications (section 2), while the Apple Push Notification service (APNs) used on iPhone, iPad and Mac is a system service from Apple, listed in section 3. We update this page whenever the list changes.
| SDK | 提供方 | 使用目的 | 涉及的个人信息 | 所在端 | 隐私政策 |
|---|---|---|---|---|---|
| 微信 OpenSDK | 深圳市腾讯计算机系统有限公司 | 微信授权登录；国内 Android 与 HarmonyOS 版另用于拉起微信完成付款（微信支付） | 登录时由您在微信内授权，我们获得：微信 unionid（账号唯一标识）、昵称、头像；付款时向微信传递本次订单的预支付信息（不含您的支付账户信息）。SDK 在设备上自行处理的信息以其个人信息处理规则为准 | iOS / iPadOS（仅登录，不含支付模块；macOS 版不集成）、Android、HarmonyOS | https://support.weixin.qq.com/cgi-bin/mmsupportacctnodeweb-bin/pages/RYiYJkLOrQwu0nb8 |
| Google Play 结算库（Google Play Billing Library，含其依赖的 Google Play 服务基础库） | Google LLC | Google Play 版的会员购买、恢复购买 | 购买由 Google Play 处理：商品、订单与购买凭证、Google 账号；我们只收到购买凭证并交服务器向 Google 核验，服务器只保存其哈希，不保存您的支付账户信息 | Android | https://policies.google.com/privacy |
| ZXing Android Embedded | 开源（JourneyApps） | 扫描二维码：用手机扫码登录另一台设备、添加同步设备、连接桌面端编辑器 | 相机画面在设备上实时识别，不保存、不上传；从相册选一张图识别时只读取选中的那一张 | Android | 开源库，不收集个人信息 |
| Glide、Coil | 开源（Bumptech / Coil Contributors） | 加载与缓存组件里的图片 | 加载图片时向图片所在网站发起网络请求（对方会看到您的 IP 地址）；图片缓存在设备本地 | Android | 开源库，不收集个人信息 |
| AndroidX Browser、AndroidX Security | Google（开源） | 在系统浏览器里完成 Google / GitHub 登录；把登录令牌加密保存在设备上 | 登录令牌（只在设备本地加密保存） | Android | 开源库，不收集个人信息 |
Firebase Cloud Messaging（FCM，com.google.firebase:firebase-messaging） | Google LLC | 仅在您开启服务器通知后使用：接收我们的服务器经 FCM 发来的服务器通知 | SDK 默认不启动，您为某个工具点了「允许」后才初始化并获取注册令牌；之后 SDK 向 Google 发送：FCM 注册令牌、SDK 生成的 Firebase 安装标识（FID）、应用与包名信息、送达消息所需的设备与系统基本信息；通知文字经 Google 送达设备。我们的服务器保存 FCM 注册令牌，不保存通知内容（见《隐私政策》§3.4）。未启用 Google Analytics for Firebase | Android（仅 Google Play 版；中国大陆发行的 Android 版不含） | https://policies.google.com/privacy · https://firebase.google.com/support/privacy |
WeChat OpenSDK (Shenzhen Tencent Computer Systems Co., Ltd.): WeChat sign-in; in the Android (China) and HarmonyOS versions also used to open WeChat to complete a WeChat Pay payment. When you authorize in WeChat we receive your WeChat unionid (account identifier), nickname and avatar; for a payment we pass WeChat the prepay information for that order (never your payment-account details). What the SDK itself processes on the device is governed by its rules. Clients: iOS / iPadOS (sign-in only, no payment module; not in the macOS version), Android, HarmonyOS. Google Play Billing Library (with the Google Play services base library it depends on; Google LLC): buying and restoring membership in the Google Play version. Google Play handles the purchase (product, order and purchase token, your Google account); we receive the purchase token only to have our server verify it with Google, and our server stores only a hash of it — never your payment details. Client: Android. ZXing Android Embedded (open source): scanning QR codes to sign in on another device, add a sync device or connect the desktop editor; camera frames are decoded on the device and never stored or uploaded; when you pick an image, only that one is read. Glide, Coil (open source): loading and caching images shown in widgets; the image's website sees your IP address when the image is fetched; the cache stays on the device. AndroidX Browser, AndroidX Security (Google, open source): Google / GitHub sign-in in the system browser; encrypting the login token stored on the device. Firebase Cloud Messaging (com.google.firebase:firebase-messaging; Google LLC): receiving server notifications, only after you turn them on; Google Play version of Android only — the Android version distributed in mainland China does not include it. The SDK does not start by default: it initializes and obtains a registration token only after you tap Allow for a tool, then sends Google the FCM registration token, a Firebase installation ID (FID) it generates, app and package information and the basic device and OS information needed to deliver messages; the notification text reaches your device through Google. Our server keeps the FCM registration token but not notification content (Privacy Policy §3.4). Google Analytics for Firebase is not enabled. Privacy: policies.google.com/privacy and firebase.google.com/support/privacy. Open-source libraries collect no personal information themselves.
2.1 不涉及个人信息的开源库 / Open-source libraries that process no personal information
这些库只在设备本地运行，不收集、不上传个人信息。/ These run locally on the device and collect or upload no personal information.
以下是操作系统自带的能力，不是另行集成的第三方 SDK，列出以便您了解。
| 能力 | 提供方 | 使用目的 | 涉及的个人信息 | 所在端 | 隐私政策 |
|---|---|---|---|---|---|
| 通过 Apple 登录（Sign in with Apple） | Apple | Apple 账号登录 | Apple 用户标识、邮箱（可为隐藏邮箱）、姓名（仅首次授权） | iOS / iPadOS / macOS | https://www.apple.com/legal/privacy/ |
| 华为账号服务（Account Kit） | 华为 | 华为账号登录 | 华为账号 UnionID；昵称与头像（仅在您授权时）；OpenID 不保存 | HarmonyOS | https://consumer.huawei.com/cn/privacy/privacy-policy/ |
| StoreKit（App 内购买） | Apple | 会员购买、恢复购买、管理订阅 | 购买由 App Store 处理；我们收到交易标识（originalTransactionId）用于核验与关联账号，不接触您的支付账户信息 | iOS / iPadOS / macOS | https://www.apple.com/legal/privacy/ |
| Apple 推送通知服务（APNs，系统服务） | Apple | 仅在您开启服务器通知后使用，把通知送到您的设备 | Apple 会处理设备推送令牌与通知文字；我们的服务器保存设备推送令牌，不保存通知内容（见《隐私政策》§3.4） | iOS / iPadOS / macOS | https://www.apple.com/legal/privacy/ |
| AVFoundation / Vision（扫码） | Apple | 扫描二维码（同上三种用途） | 相机画面与所选图片在设备上识别，不保存、不上传 | iOS / iPadOS | https://www.apple.com/legal/privacy/ |
| 统一扫码服务（Scan Kit） | 华为 | 扫描二维码（同上三种用途） | 同上 | HarmonyOS | https://consumer.huawei.com/cn/privacy/privacy-policy/ |
| 系统钥匙串 / 凭据管理器 / 关键资产存储 | Apple / Microsoft / 华为 | 保存登录令牌与您添加的第三方凭证 | 登录令牌、第三方凭证（只在设备本地） | iOS / iPadOS / macOS、Windows、HarmonyOS | 各系统隐私政策 |
These are built into the operating system, not separately integrated SDKs: Sign in with Apple (Apple ID sign-in; Apple user id, email which may be a relay address, name on first authorization only; iOS / iPadOS / macOS); HUAWEI Account Kit (HUAWEI ID sign-in; your UnionID, plus nickname and avatar if you authorize them, and the OpenID is not stored; HarmonyOS); StoreKit (in-app purchase, restore and subscription management; the App Store handles payment and we receive the transaction identifier to verify it and link it to your account; iOS / iPadOS / macOS); the Apple Push Notification service (APNs), a system service (used only after you turn on server notifications, to deliver them to your device; Apple handles the device push token and the notification text, and our server keeps the push token but not notification content; iOS / iPadOS / macOS); AVFoundation / Vision and Huawei Scan Kit (QR scanning on the device, nothing stored or uploaded; iOS / iPadOS and HarmonyOS); the system Keychain / Credential Manager / Asset Store Kit (login token and your third-party credentials, on the device only).
| 服务 | 提供方 | 使用目的 | 共享 / 处理的个人信息 | 隐私政策 |
|---|---|---|---|---|
| Cloudflare(Workers / D1 / R2) | Cloudflare, Inc. | 托管我们的后端：工具的分发、账号、反馈、会员、多设备同步等 | 《个人信息收集清单》中由服务端保存的全部信息（同步内容为您设备上加密后的密文，我们与 Cloudflare 都无法解密）；访问我们服务时的 IP 地址等网络信息 | https://www.cloudflare.com/privacypolicy/ |
| Anthropic API（Claude 模型） | Anthropic, PBC（美国） | 一句话建盘：从组件目录挑选组件、填写参数（中国大陆不提供） | 您输入的那句话、App 语言、当前仪表盘还能放几个组件、同一次建盘上一轮的组件清单；不含账号信息。不用于训练模型，Anthropic 为安全审查最多保留 30 天 | https://www.anthropic.com/legal/privacy |
| 微信开放平台（登录接口） | 深圳市腾讯计算机系统有限公司 | 用您授权后得到的临时凭据换取账号标识与资料 | 微信 unionid、昵称、头像 | 同上表「微信 OpenSDK」 |
| 微信支付 | 财付通支付科技有限公司 | 国内 Android、HarmonyOS 与 Windows 版的会员付款（Windows 为扫码付款）、查询订单、退款 | 我们向微信支付发送：商户订单号、商品描述、金额；微信支付返回：支付结果、微信支付订单号、支付时间。我们不接收您的银行卡等支付账户信息，也不保存付款人的微信标识 | https://www.tenpay.com/v3/helpcenter/low/privacy.shtml |
| App Store Server API | Apple | 核验 App Store 购买、接收续费 / 退款等订阅状态通知 | 交易标识、商品、订阅状态与到期时间 | https://www.apple.com/legal/privacy/ |
| Google Play Developer API、Google Cloud Pub/Sub | Google LLC | 核验 Google Play 购买、确认交付、接收订阅状态通知 | 购买凭证（只用于当场查询，服务器只存哈希）、商品、订阅状态与到期时间 | https://policies.google.com/privacy |
| Google / GitHub 登录（OAuth） | Google LLC / GitHub, Inc. | 在系统浏览器里完成 Google / GitHub 登录 | 我们获得：用户标识、邮箱、名称或用户名、头像 | https://policies.google.com/privacy · https://docs.github.com/site-policy/privacy-policies |
Cloudflare (Workers / D1 / R2; Cloudflare, Inc.) hosts our backend — tool distribution, accounts, feedback, membership and multi-device sync — and so processes everything our servers keep (sync content is ciphertext encrypted on your device that neither we nor Cloudflare can decrypt) plus network data such as your IP address when you reach our services. Anthropic API (Claude model; Anthropic, PBC, United States) is used for building a dashboard from a sentence (not offered in mainland China) — picking widgets from the widget catalog and filling in their settings: we send the sentence you type, the App language, how many more widgets the current dashboard can hold and, within the same session, the previous round's widget list, never your account details; Anthropic does not use it to train models and keeps it for up to 30 days for safety review. WeChat Open Platform (Tencent) exchanges the one-time code from your authorization for your unionid, nickname and avatar. WeChat Pay (Tenpay Payment Technology Co., Ltd.) handles membership payments in the Android (China), HarmonyOS and Windows (QR code) versions, order queries and refunds: we send the order number, product description and amount; WeChat Pay returns the payment result, its transaction number and the payment time. We do not receive your bank card or other payment-account details and do not keep the payer's WeChat identifier. App Store Server API (Apple) and Google Play Developer API / Cloud Pub/Sub (Google) verify purchases and deliver renewal and refund notifications (transaction identifier or hashed purchase token, product, status and expiry). Google / GitHub OAuth sign-in gives us your user id, email, name or username and avatar.
组件展示的数据由 Numable 在您的设备上直接向工具声明的第三方网站获取（例如行情、天气接口），不经过我们的服务器，我们也不向这些网站提供您的任何个人信息。但与访问任何网站一样，对方服务器会看到您的 IP 地址以及该工具发出的请求内容（例如您关注的股票代码、城市名）；若您为某个工具绑定了第三方凭证，凭证只会随请求发往该工具声明的网站。每个工具会访问哪些网站，在安装面板上逐一列出，装不装由您决定。这些网站如何处理信息，以其各自的隐私政策为准。
Widget data is fetched by Numable directly from your device from the third-party websites a tool declares (e.g. market or weather APIs); it does not pass through our servers and we give those websites none of your personal information. As with visiting any website, the other server sees your IP address and what the tool asks for (e.g. the ticker or city you follow); a credential you bind to a tool is sent only to the websites that tool declares. The install sheet lists every website a tool will reach before you install it. Those websites' own privacy policies apply.