最后更新：2026 年 9 月 5 日Last updated: September 5, 2026
为妈妈做的小帮手，也要把数据交代清楚。原图在本机识别，确认后的购物记录可通过 Apple 登录同步；后台更新的设备登记另行说明。A little helper for Mom should explain its data practices clearly. Original photos are recognized on-device; confirmed shopping records can sync after Apple sign-in. Background-update device registration is explained separately.
本政策说明 Hitup Tennis 提供的开市省钱（wincos）iPhone App 及其产品网页如何处理信息。网球 App 的球员身份、赛程和账号删除条款不适用于开市省钱。This policy describes information handling by the wincos iPhone app and its product web pages, provided by Hitup Tennis. Tennis-app player identity, match data and account-deletion terms do not apply to wincos.
隐私联系邮箱：hituptennis@gmail.com。请在主题中注明“开市省钱隐私”。Privacy contact: hituptennis@gmail.com. Please include “wincos Privacy” in the subject.
你主动拍摄或选择的小票、商品包装和价签照片，使用 Apple Vision 在设备上识别文字。App 不把这些原图或完整 OCR 识别原文上传至我们的服务器或云端 AI 服务。关注商品的照片保存在 App 本机存储中。Photos of receipts, packaging and price signs that you take or select are recognized on-device using Apple Vision. The app does not upload those original images or full OCR text to our servers or a cloud AI service. Watchlist product photos are saved in local app storage.
你核对并确认后的购物记录、关注列表、语言和提醒偏好保存在本机。不登录时，这些购物与关注记录不会进行账号云同步。相册中原有的照片以及系统备份由你和设备系统另行管理。Confirmed purchase records, watchlists, language and reminder preferences are stored locally. Without sign-in, shopping and watchlist records do not use account cloud sync. Existing photo-library images and system backups are managed separately by you and your device.
浏览优惠不要求注册。选择“通过 Apple 登录”后，我们处理 Apple 提供的稳定账号标识及验证令牌，为你建立同步账号；不会接收 Apple 密码。登录会话凭据保存在设备钥匙串中。Browsing offers does not require registration. If you choose Sign in with Apple, we process Apple’s stable account identifier and verification tokens to create a sync account. We do not receive your Apple password. Session credentials are stored in the device Keychain.
登录后，确认保存的关注商品和购买记录会与我们的 AWS 后台同步。关注记录包括记录编号、查询词、商品编号、标识类型和创建时间；购买记录包括记录编号、商品名称、商品编号、实付价格、购买日期、门店名称及购买渠道（仓库或网上）。后台还处理更新时间和删除标记，以协调多设备更改。When signed in, confirmed watchlist and purchase records sync with our AWS backend. Watchlist fields include record ID, query, item number, identifier type and creation time. Purchase fields include record ID, item title, item number, paid price, purchase date, warehouse name and purchase channel (warehouse or online). The backend also processes update times and deletion markers to coordinate changes between devices.
原图不上传，不代表所有购物信息都留在本机：上述结构化记录会与同步账号关联。我们不要求 Costco 会员账号、密码、完整会员卡号或支付卡凭据。Keeping original photos on-device does not mean all shopping information stays local: the structured records above are linked to the sync account. We do not require a Costco member account, password, full membership number or payment-card credentials.
App 联网获取公开优惠、活动更新与商品资料。名称搜索在本地索引中进行；按商品编号请求补充资料时，该编号会发送至后台。访问服务或加载远程商品图片时，托管服务及图片来源会处理 IP 地址等基本连接信息。The app fetches public offers, campaign updates and item details online. Name search uses a local index; an item number is sent to the backend when requesting additional details for that item. Hosting services and remote image sources process basic connection information such as an IP address when serving requests.
服务运行可能产生请求标识、错误和安全日志，用于故障排查、同步可靠性与防滥用。网站使用本地存储记住中英文选择；网站托管服务也会处理正常访问所需的请求信息。Service operation may generate request identifiers, error and security logs for troubleshooting, reliable sync and abuse prevention. The website uses local storage to remember Chinese or English, and its host processes request information needed to serve visits.
显示提醒需要你授权通知，可在 App 或 iOS 通知设置中关闭。后台优惠更新使用 Apple Push Notification service（APNs）和 AWS SNS，处理设备推送令牌、推送环境及对应的推送端点和订阅。Visible reminders require notification permission and can be turned off in the app or iOS notification settings. Background offer updates use Apple Push Notification service (APNs) and AWS SNS, which process a device push token, push environment, endpoint and subscription.
这项设备登记可以在未登录时发生，当前不与购物同步账号关联，但它仍是设备相关标识，不能视为完全匿名。关闭可见提醒或删除同步账号，不一定移除独立的后台推送登记。如需处理该登记，请联系隐私邮箱。This device registration can occur without sign-in. It is currently separate from the shopping sync account, but remains a device-related identifier, not fully anonymous data. Turning off visible reminders or deleting a sync account does not necessarily remove the separate background-push registration. Contact our privacy email for requests about that registration.
我们用这些信息提供优惠查询、关注列表、购买记录、可能的退差价提示、可选云同步与更新提醒，并回应支持请求、维护服务安全。不会出售购物记录，或将其用于定向广告和跨 App 广告跟踪。We use this information to provide offer lookup, watchlists, purchase records, possible price-adjustment prompts, optional cloud sync and update reminders, and to respond to support requests and protect the service. We do not sell shopping records or use them for targeted advertising or cross-app ad tracking.
Apple 提供登录验证、设备端文字识别和推送传输；AWS 提供 API 托管、账号验证（Cognito）、数据存储（DynamoDB）与推送基础设施（SNS）。云服务部署在美国；根据你所在地区，使用服务可能涉及跨境处理。Apple provides sign-in verification, on-device text recognition and push delivery. AWS provides API hosting, account authentication (Cognito), data storage (DynamoDB) and push infrastructure (SNS). Cloud services are deployed in the United States, which may involve cross-border processing depending on your location.
你主动打开 Costco、品牌返利活动或其他第三方网页时，对方会按自己的隐私政策处理访问和你直接提交的信息。App 不会代你向商家提交小票或申请退款。开市省钱与 Costco 无隶属、赞助或背书关系。When you open Costco, brand rebate or other third-party pages, those services handle your visit and information you submit under their own policies. The app does not submit receipts or refund requests to retailers on your behalf. wincos is not affiliated with, sponsored by or endorsed by Costco.
相机只在你选择拍照功能时使用；系统照片选择器只提供你选择的照片。拒绝相机或通知权限不会阻止浏览公开优惠，也可以手动添加记录。The camera is used when you choose a capture feature; the system photo picker provides the photos you select. Declining camera or notification permission does not prevent browsing public offers, and records can be added manually.
不想同步购物资料，可以不登录。退出登录停止当前账号会话，但不是删除账号，也不会自动清除已同步资料或本机记录。You can stay signed out if you do not want shopping-data sync. Signing out ends the current account session; it is not account deletion and does not automatically erase previously synced data or local records.
本机记录保留至你在 App 中删除，或通过系统完整删除 App 及其数据。“卸载 App”以保留文稿的系统选项不等于删除数据。App 外的相册照片和系统备份需另行管理。Local records remain until you remove them in the app or fully delete the app and its data through the system. Offloading an app while retaining its documents is not data deletion. Photo-library images outside the app and system backups must be managed separately.
已登录用户可在“设置 → 账号与换机 → 删除账号和同步资料”中操作，并确认“永久删除账号和同步资料”。后台删除该同步账号下的关注和购买记录及登录账号；操作成功后，当前设备也清理相关本机记录与关注商品照片。仅删除单条记录时，后台可能保留删除标记，以通知其他设备同步删除。Signed-in users can open Settings → Account & device transfer → Delete account and synced data, then confirm the permanent deletion action. The backend deletes the account’s watchlist and purchase records and authentication account. After success, the current device also clears related local records and watchlist photos. Deleting an individual record may leave a server-side deletion marker so other devices can synchronize the removal.
删除不会立即抹除其他离线设备上的副本、独立的推送端点、你自己保留的图片或系统备份。云恢复副本和安全日志可能在其恢复或保留周期内继续存在；我们不承诺所有备份即时擦除，也不会将这些保留副本用于广告。Deletion does not immediately erase copies on other offline devices, independent push endpoints, images you keep separately or system backups. Cloud recovery copies and security logs may remain during their recovery or retention periods. We do not promise instant erasure from every backup, and do not use retained copies for advertising.
当前测试实现中，其他仍持有有效登录会话的设备可能再次同步记录。建议先退出其他设备上的账号，再发起删除；如删除后记录重现，请联系隐私邮箱核查。这是当前多设备删除流程的限制。In the current test implementation, another device with a still-valid login session may sync records again. We recommend signing out on other devices before requesting deletion. Contact our privacy email if records reappear after deletion. This is a limitation of the current multi-device deletion flow.
无法使用 App，或需要访问、更正、导出、删除资料及处理推送登记时，请联系 hituptennis@gmail.com，说明所用 App 与请求。我们可能要求提供确认数据归属所必需的信息，但不会索要 Apple/Costco 密码、验证码或完整支付卡号。If you cannot use the app, or want access, correction, export, deletion or help with push registration, email hituptennis@gmail.com with the app name and request. We may ask for information necessary to verify ownership, but never an Apple/Costco password, verification code or full payment-card number.
网络请求使用 HTTPS，登录凭据使用系统安全存储，后台数据存储使用云服务的加密机制。任何系统都不能保证绝对安全。请保护自己的设备和 Apple 账号。Network requests use HTTPS, login credentials use secure system storage, and backend data storage uses cloud-service encryption. No system can guarantee absolute security. Please protect your device and Apple account.
你主动通过邮件发送的文字、照片或附件会由我们和邮件服务处理，用于回应你的问题；这不属于 App 的本机识别流程。发送截图前请遮盖会员号、支付信息及其他不必要的个人信息。支持邮件仅在处理请求、跟进问题或满足必要留存要求期间保留。Text, photos and attachments you choose to email are processed by us and our email service to answer your request; this is separate from on-device recognition in the app. Redact membership numbers, payment information and other unnecessary personal details before sending screenshots. Support emails are retained as needed to handle requests, follow up or meet necessary retention obligations.
开市省钱是面向家庭购物的通用工具，不以儿童为目标。如果你认为儿童向我们提交了不应保留的个人信息，请联系隐私邮箱处理。wincos is a general household-shopping tool and is not directed at children. If you believe a child submitted personal information that should not be retained, contact our privacy email.
功能或数据处理方式发生变化时，我们会更新本页日期与说明；需要额外授权的功能会另行说明并取得相应授权。本政策最近更新于 2026 年 9 月 5 日。When features or data practices change, we update this page and its date. Features requiring additional permission will be explained and the applicable permission requested. This policy was last updated September 5, 2026.