1What the app is这个 App 是什么

Amble is a native iPhone client for Paseo, a daemon that you install and run on your own computer. The daemon runs the coding agents; Amble is a remote control for them. Amble is an unofficial third-party client and is not affiliated with the Paseo project.

Amble 是 Paseo 的原生 iPhone 客户端。Paseo 是一个由你自己安装、在自己电脑上运行的 daemon，负责运行编码 agent；Amble 是它的遥控器。Amble 是非官方第三方客户端，与 Paseo 项目没有关联。

2What stays on your device保存在你设备上的内容

Amble keeps its state on the iPhone. Nothing in this list is uploaded to the developer or to anyone else.

Amble 的状态都保存在 iPhone 上。下面这些内容不会上传给开发者，也不会给任何其他人。

• Hosts. The address, port and TLS setting of every host you add are stored in the app's own container, in Application Support/Paseo/hosts.json.
• Passwords. A host password is stored in the iOS Keychain, with the protection class AfterFirstUnlockThisDeviceOnly. It is never written to hosts.json and never logged.
• Cached conversations. The last list of conversations and the last window of each timeline are cached in Library/Caches/InboxSnapshots/ and Library/Caches/Timelines/ so a cold start shows rows before the daemon answers. These files hold titles, statuses and message text, never host addresses or passwords. iOS may delete them at any time, and Settings → Clear Cache deletes them on request.
• Read and unread marks, and app preferences. Stored in the app's UserDefaults.
• Messages waiting to be sent. If a host is offline, queued messages are kept in Application Support/Paseo/MessageQueues/ until you send, edit or delete them.
• Usage figures for the widget. Provider usage snapshots are written to the app's shared App Group container so the Amble home-screen widget can show them.

• Host。你添加的每个 host 的地址、端口和 TLS 设置，保存在 App 自己的容器中：Application Support/Paseo/hosts.json。
• 密码。host 密码保存在 iOS Keychain 中，保护级别为 AfterFirstUnlockThisDeviceOnly。密码不会写进 hosts.json，也不会进日志。
• 对话缓存。最近一次会话列表和每个时间线的最后一屏，缓存在 Library/Caches/InboxSnapshots/ 和 Library/Caches/Timelines/，让冷启动先显示行、再等 daemon 回应。这些文件只含标题、状态和消息文本，不含 host 地址和密码。iOS 随时可能删除它们；设置 → 清除缓存 也会按你的要求删除。
• 已读标记和偏好设置。保存在 App 的 UserDefaults 中。
• 待发送消息。host 离线时，排队中的消息保存在 Application Support/Paseo/MessageQueues/，直到你发送、编辑或删除。
• Widget 用的用量数据。服务商的用量快照写入 App 的 App Group 共享容器，供 Amble 主屏幕小组件显示。

3What the app sends, and whereApp 发送什么、发到哪里

Amble opens a WebSocket to the one address you type in Add Host: a ws:// or wss:// address on your local network, a VPN such as Tailscale, or a domain you control. Amble connects nowhere else. The developer operates no server, and the app contains no endpoint that the developer could read. For wss:// hosts, TLS certificate checks stay on.

Amble 只打开一条 WebSocket，连到你在「添加 Host」里填写的地址：局域网、Tailscale 之类的 VPN，或你自己的域名，协议是 ws:// 或 wss://。除此之外不连接任何地方。开发者没有运行任何服务器，App 里也没有开发者能读取的地址。对 wss:// 的 host，TLS 证书校验保持开启。

Over that socket Amble sends:

通过这条连接，Amble 发送：

• Requests for the project, conversation, timeline and usage lists.
• The messages and prompts you write, the photos you pick (up to 6, scaled to a 2048 px long edge and encoded as JPEG), and the files you choose (up to 50 MB).
• Your answers to permission cards and question forms, model, thinking and mode choices, and stop or interrupt commands.

• 项目、会话、时间线和用量列表的读取请求。
• 你写的消息和提示词，你选择的照片（最多 6 张，长边缩放到 2048 px，编码为 JPEG），以及你选择的文件（最大 50 MB）。
• 你对权限卡片和问题表单的回答，模型、思考、模式的切换，以及停止或打断命令。

The daemon and the computer it runs on are yours. What the daemon stores, and for how long, is described by the Paseo project, not by this policy.

daemon 和运行它的电脑都属于你。daemon 保存什么、保存多久，由 Paseo 项目说明，不由本政策说明。

4Microphone and speech recognition麦克风与语音识别

Amble uses the microphone and Apple's Speech framework only when you tap the microphone button in the composer. The recognized text is written into the message draft. Amble does not record, keep, or upload audio, and it never receives the audio itself: recognition is performed by iOS and, depending on the language and the device settings, may take place on the device or on Apple's servers under Apple's privacy policy.

只有你在输入框点击麦克风按钮时，Amble 才使用麦克风和 Apple 的 Speech 框架。识别出的文字写进消息草稿。Amble 不录音、不保存、不上传音频，也拿不到音频本身：识别由 iOS 完成，视语言和设备设置，可能在设备上处理，也可能按 Apple 隐私政策 在 Apple 的服务器上处理。

5Photos and files照片与文件

Amble reads your photo library or files only for the items you pick for an attachment. It does not scan, index, or upload anything on its own.

只有你为附件挑选的内容，Amble 才会读取。它不会自行扫描、索引或上传任何东西。

6Local network本地网络

Amble asks for local network access because the daemon is usually a computer on the same network. The permission only lets the app reach devices on a network you have already joined.

Amble 申请本地网络权限，因为 daemon 通常就在同一网络中的一台电脑上。这个权限只允许 App 访问你已经加入的网络里的设备。

7No tracking, no ads, no third parties没有跟踪、广告和第三方

• No analytics, advertising, crash-reporting or attribution SDK. Amble links only Apple system frameworks.
• No advertising identifier, no App Tracking Transparency prompt, no cookies, no web views.
• No data is sold, shared, or used to train anything.
• The privacy manifest shipped with the app declares no tracking and no collected data types.

• 没有统计、广告、崩溃上报或归因 SDK。Amble 只链接 Apple 系统框架。
• 不读取广告标识符，不弹 App Tracking Transparency 提示，不使用 Cookie，没有内嵌网页。
• 不出售、不共享任何数据，也不用数据做训练。
• App 随包的隐私清单声明：不做跟踪，不收集任何数据类型。

8Children儿童

Amble is a developer tool and is not directed at children under 13. It collects no personal data from anyone.

Amble 是开发者工具，不面向 13 岁以下儿童。它不收集任何人的个人数据。

9Your choices你的选择

• Settings → Hosts removes a host and its Keychain password.
• Settings → Clear Cache deletes the cached conversation lists and timelines. Hosts, passwords and queued messages stay.
• Deleting the app removes its files. iOS may keep Keychain items after an app is deleted; on the next launch Amble deletes any password item that no saved host uses.
• There is no data for the developer to hand over or delete, because the developer holds none.

• 设置 → Hosts 删除一个 host 及其 Keychain 密码。
• 设置 → 清除缓存 删除缓存的会话列表和时间线。host、密码和排队中的消息保留。
• 删除 App 会删除它的文件。iOS 可能在删除 App 后仍然保留 Keychain 条目；下次启动时，Amble 会删除没有对应 host 的密码条目。
• 开发者没有可提供或删除的数据，因为开发者手上没有数据。

10Changes to this policy政策变更

If a change in the app changes how it handles data, this page changes and the effective date at the top changes. A material change is also listed in the App Store release notes.

如果 App 的数据处理方式发生变化，本页会更新，顶部的生效日期也会更新。重大变化同时会写进 App Store 的版本说明。

11Contact联系方式

Questions about this policy: e13lau@gmail.com.

关于本政策的问题：e13lau@gmail.com。