Ponko 隐私政策

应用名称：Ponko　|　开发者：TSE, Hok Sung
生效日期：2026 年 10 月 15 日　|　最近更新：2026 年 10 月 15 日

本应用不收集任何个人信息，所有数据仅存储在本地设备。

一、我们收集哪些信息

Ponko 是一款在设备本地离线运行的 AI 工具应用。我们不收集任何个人信息，具体而言：

无需注册、无需登录，不索取姓名、手机号、邮箱、身份证件等任何身份信息；
不读取、不上传设备标识符（如 IMEI、Android ID、MAC 地址、广告标识符）；
不读取通讯录、短信、通话记录、精确定位、相册列表等敏感信息；
不包含任何统计、埋点、崩溃上报或广告组件，不记录您的使用行为；
不将任何数据发送给开发者，也不发送给任何第三方服务器。

二、您的数据存储在哪里

所有数据仅存储在您的本地设备上，包括：

您自行导入的 AI 模型文件；
您与模型的对话记录；
您生成或编辑的图片；
应用的各项设置与偏好。

上述数据保存在应用的私有目录中，其他应用无法读取。开发者无法访问、收集或恢复这些数据。 卸载本应用会一并删除上述全部本地数据。

三、关于网络连接

本应用的全部 AI 推理均在本机完成，正常使用不需要网络。仅在以下两种由您主动触发的可选情形下，应用才会访问网络：

情形	说明
下载 LoRA 加速模型	由您手动点击触发，仅从模型托管站点 `huggingface.co` 或其镜像 `hf-mirror.com` 下载模型文件。除下载模型本身外，不传输任何其他数据；不使用时不会发起任何请求。
局域网接口（默认关闭）	可选的进阶功能，需您手动开启。开启后，应用在本机某一端口提供 OpenAI 兼容接口，供同一局域网内由您指定的客户端调用（手机负责推理，客户端仅作界面）。该功能不会主动向外部发送数据，关闭后即停止监听。

四、应用申请的权限及用途

为实现上述功能，本应用申请以下权限，均仅用于下列用途，不作他用：

权限	用途
网络访问 `INTERNET`、`ACCESS_NETWORK_STATE`	仅用于上述可选的 LoRA 模型下载；不用于上传任何数据。
存储（仅 Android 9 及以下） `WRITE_EXTERNAL_STORAGE`	仅用于把生成的图片保存到相册。Android 10 及以上通过系统媒体库写入，无需该权限。
前台服务与通知 `FOREGROUND_SERVICE`、`POST_NOTIFICATIONS` 等	仅用于「局域网接口」开启时，保持服务在后台运行并显示常驻通知（通知内容为服务状态与监听地址）。无该功能需求时不会产生任何通知。
保持唤醒、Wi-Fi 状态 `WAKE_LOCK`、`ACCESS_WIFI_STATE` 等	仅用于「局域网接口」开启时避免设备休眠导致服务中断；不用于读取网络内容或位置。

本应用不申请摄像头、麦克风、通讯录、短信、通话记录、定位、日历、传感器等权限。

五、第三方组件

本应用为开源软件，内置若干第三方开源组件用于本机推理与界面渲染（如 LiteRT-LM、llama.cpp、 stable-diffusion.cpp、ggml、ONNX Runtime、Markwon、PDFBox-Android 等），这些组件均在本机运行。

本应用未集成任何广告、统计分析、用户画像或社交分享类 SDK，不存在为商业目的而收集或共享个人信息的行为。各组件的完整清单与许可证详见开源仓库中的 NOTICE 文件。

六、未成年人保护

本应用不面向儿童作为主要用户群体，也不会有意收集未成年人的个人信息。由于本应用不收集任何个人信息，不存在针对未成年人的个人信息处理行为。建议未成年人在监护人指导下使用本应用的 AI 生成功能。

七、您的权利

依据个人信息保护相关法律法规，您对自己的个人信息享有知情、决定、查阅、复制、更正、删除等权利。就本应用而言：

查阅与复制：您的全部数据都存放在本机，可直接在应用内查看，或通过设备文件管理查看应用私有目录；
更正与删除：对话记录、历史图片、已导入的模型均可在应用内逐项删除；在系统设置中清除应用数据，或直接卸载本应用，即可彻底删除全部本地数据；
撤回同意：关闭「局域网接口」开关即可撤回相关授权；不使用「下载 LoRA」功能即不会产生任何网络请求；
关于个人信息删除请求：由于本应用不收集、不存储、不传输您的任何个人信息，开发者处不存在您的个人信息，因此无需另行提交删除申请。如需行使上述权利，请直接在设备上操作。

如您对上述内容有疑问，或认为本应用存在侵犯您个人信息权益的情形，可通过下方联系方式与我们联系，我们将在 15 个工作日内答复。

八、本政策的变更

若本应用的功能发生可能影响个人信息处理的变更（例如新增需要联网的功能），我们会同步更新本政策，更新后的版本将发布在同一网址，并更新页面顶部的「最近更新」日期。重大变更会在应用内以显著方式提示。

九、联系我们

如对本政策或个人信息保护有任何疑问、意见或投诉，可通过以下方式联系我们：
开发者：TSE, Hok Sung
联系邮箱：visitor257.1@gmail.com
开源仓库：https://github.com/visitor257/Ponko

Ponko · 本页面为静态页面，无需登录即可访问。
应用名称 Ponko，开发者 TSE, Hok Sung。
最后更新：2026 年 10 月 15 日

Ponko Privacy Policy

App name: Ponko | Developer: TSE, Hok Sung
Effective date: October 15, 2026 | Last updated: October 15, 2026

This page provides both the Chinese and the English versions of the Ponko privacy policy. Both versions describe the same practices; in case of any discrepancy, the Chinese version prevails.

This app does not collect any personal information. All data is stored solely on your local device.

1. Information We Collect

Ponko is an AI utility app that runs entirely offline on your device. We do not collect any personal information. Specifically:

No registration and no sign-in are required. We never ask for your name, phone number, email address, ID documents, or any other identifying information.
We do not read or upload device identifiers (such as IMEI, Android ID, MAC address, or advertising ID).
We do not read your contacts, SMS messages, call logs, precise location, or photo library listings.
The app contains no analytics, tracking, crash-reporting, or advertising components, and does not record how you use it.
No data is ever sent to the developer or to any third-party server.

2. Where Your Data Is Stored

All data is stored only on your local device, including:

AI model files that you import yourself;
Your conversations with the model;
Images you generate or edit;
App settings and preferences.

This data is kept in the app's private storage directory, which other apps cannot read. The developer cannot access, collect, or recover this data. Uninstalling the app deletes all of this local data.

3. Network Connections

All AI inference runs on your device, and normal use requires no network connection. The app accesses the network only in the following two optional cases, and only when you explicitly trigger them:

Case	Details
Downloading a LoRA acceleration model	Triggered only by your manual tap. The app downloads a model file solely from the model hosting site `huggingface.co` or its mirror `hf-mirror.com`. Nothing other than the model file itself is transmitted, and no request is made unless you use this feature.
LAN API (off by default)	An optional advanced feature that you must enable manually. When enabled, the app exposes an OpenAI-compatible endpoint on a port on this device for clients on the same local network that you designate (the phone performs the inference; the client is only a front end). It never pushes data outward, and stops listening as soon as you turn it off.

4. Permissions and Their Purposes

To provide the features described above, the app requests the following permissions. Each is used only for the purpose stated here, and for nothing else:

Permission	Purpose
Network access `INTERNET`, `ACCESS_NETWORK_STATE`	Used only for the optional LoRA model download described above; never for uploading data.
Storage (Android 9 and below only) `WRITE_EXTERNAL_STORAGE`	Used only to save generated images to your photo gallery. On Android 10 and above the system media store is used, which requires no such permission.
Foreground service and notifications `FOREGROUND_SERVICE`, `POST_NOTIFICATIONS`, etc.	Used only while the LAN API is enabled, to keep the service running in the background and show a persistent notification (the notification shows the service status and listening address). No notification appears unless you use that feature.
Wake lock and Wi-Fi state `WAKE_LOCK`, `ACCESS_WIFI_STATE`, etc.	Used only while the LAN API is enabled, to prevent the device from sleeping and interrupting the service. Never used to read network content or your location.

The app does not request access to the camera, microphone, contacts, SMS, call logs, location, calendar, or sensors.

5. Third-Party Components

This app is open-source software and includes several third-party open-source components used for on-device inference and interface rendering (such as LiteRT-LM, llama.cpp, stable-diffusion.cpp, ggml, ONNX Runtime, Markwon, and PDFBox-Android). All of these components run locally on your device.

The app integrates no advertising, analytics, user-profiling, or social-sharing SDKs, and does not collect or share personal information for commercial purposes. The full list of components and their licenses is in the NOTICE file in the open-source repository.

6. Protection of Minors

This app does not target children as its primary audience and does not knowingly collect personal information from minors. Because the app collects no personal information at all, there is no processing of minors' personal information. Minors should use the app's AI generation features under the guidance of a guardian.

7. Your Rights

Under applicable personal-information protection laws, you have the right to be informed, to decide, to access, to copy, to correct, and to delete your personal information. As applied to this app:

Access and copy: All of your data is on your own device. You can view it directly in the app, or browse the app's private directory through your device's file manager.
Correct and delete: Conversation records, past images, and imported models can each be deleted inside the app. Clearing the app's data in system settings, or simply uninstalling the app, removes all local data completely.
Withdraw consent: Turn off the "LAN API" switch to withdraw that authorization. Not using the "Download LoRA" feature means no network request is ever made.
Deletion requests: Because the app does not collect, store, or transmit any of your personal information, the developer holds none of your personal information, and no separate deletion request is needed. To exercise these rights, simply act on your own device.

If you have questions about the above, or believe this app has infringed your personal-information rights, please contact us using the details below. We will reply within 15 business days.

8. Changes to This Policy

If the app's features change in a way that may affect the handling of personal information (for example, adding a feature that requires network access), we will update this policy accordingly. The updated version will be published at the same URL, and the "Last updated" date at the top of the page will be revised. Significant changes will also be highlighted prominently inside the app.

9. Contact Us

If you have any questions, comments, or complaints about this policy or about personal-information protection, please contact us:
Developer: TSE, Hok Sung
Contact email: visitor257.1@gmail.com
Source repository: https://github.com/visitor257/Ponko

Ponko · This page is static and can be viewed without signing in.
App name: Ponko. Developer: TSE, Hok Sung.
Last updated: October 15, 2026