隐私政策
最后更新：2026-09-14
简版：mdpeek Pro 是一款本地优先（local-first）应用。我们不收集、不传输、不出售你的任何数据。没有账号、没有遥测、没有数据分析、没有崩溃上报。
1. mdpeek Pro 收集什么
什么都不收集。
mdpeek Pro 不会收集、记录、传输或分享：
- 你的文档或笔记（它们只保存在你 Mac 上你打开的文件夹里）
- 文件名、目录结构或文件内容
- 个人信息（姓名、邮箱、位置、设备标识符）
- 使用统计、遥测或崩溃报告
- 广告标识符
本应用没有账号系统，无需注册。
2. 哪些数据保存在你的 Mac 上（本地存储）
mdpeek Pro 只把以下数据保存在你的设备上，位于其 App Sandbox 容器内：
| 数据 | 位置 | 用途 |
|---|
| 应用设置（主题、字号、视图模式等） | ~/Library/Containers/com.aimoai.app.mdpeek.pro/Data/Library/Application Support/mdpeek-pro/config.json | 记住你的偏好 |
| 阅读历史 / 最近文件 | 同一容器目录 | 恢复上次阅读位置 |
| 安全作用域书签 | 同一容器目录 | 记住你授权访问过的文件夹 |
| AI API 密钥（如果你配置了） | 同一容器目录 | 让 AI 功能无需重复输入密钥 |
你可以随时删除本应用、或删除上述容器目录来清除所有数据。
3. 网络访问
mdpeek Pro 默认离线。只有当你主动启用相关功能时才会产生网络请求：
| 功能 | 何时联网 | 传输什么 |
|---|
| AI 写作助手 / 全库问答（Pro） |
仅当你在设置中配置了自己的 AI API 地址与密钥后 |
你明确要求 AI 处理的文本（如选中的待改写内容，或问答所需的文档文本），通过 HTTPS 发送到你自己配置的端点（如 OpenAI、DeepSeek 或你自建的服务）。你的 API 密钥仅作为鉴权发送到同一个端点。 |
| 更新检查 |
无。mdpeek Pro 不会联网检查更新 —— 更新通过 Mac App Store 分发。 |
— |
默认状态：所有联网功能均为关闭。在未配置 AI 端点的情况下，mdpeek Pro 除了从 127.0.0.1（仅本机回环）加载自己的界面外，不会发出任何网络请求 —— 回环通信永远不会离开你的 Mac。
4. 本地回环服务（写给技术读者）
为渲染界面，mdpeek Pro 会在 127.0.0.1（回环地址）的随机端口上运行一个受每次启动随机令牌保护的小型 HTTP 服务。该服务：
- 只能从你的 Mac 本机访问 —— 局域网与外网均不可达
- 只为应用提供界面资源，并对接你授权过的本地文件 API
- 应用退出时即关闭
没有任何数据通过该服务离开你的 Mac。
5. 文件访问（macOS App Sandbox）
mdpeek Pro 运行在 macOS App Sandbox 中，只能读写：
- 你在打开 / 保存对话框中主动选择的文件与文件夹（系统授予一次性权限，可选通过安全作用域书签记住）
- 它自己的沙盒容器（设置、历史、密钥）
它永远不会在后台扫描你的磁盘。
6. 儿童隐私
mdpeek Pro 是一款效率工具，不面向 13 岁以下儿童。我们不收集任何人的数据，包括儿童。
7. 政策变更
如本政策发生变更，更新版本将发布在本页面并更新"最后更新"日期。重大变更也会体现在 App Store 的版本更新说明中。
8. 联系我们
对隐私有任何疑问，欢迎联系：
Privacy Policy
Last updated: 2026-09-14
Short version: mdpeek Pro is a local-first app. We do not collect, transmit, or sell any of your data. There is no account, no telemetry, no analytics, and no crash reporting.
1. What mdpeek Pro collects
Nothing.
mdpeek Pro does not collect, log, transmit, or share:
- Your documents or notes (they stay on your Mac, in the folders you open)
- File names, folder structures, or file contents
- Personal information (name, email, location, device identifiers)
- Usage analytics, telemetry, or crash reports
- Advertising identifiers
The app has no account system and does not require registration.
2. What stays on your Mac (local storage)
mdpeek Pro stores the following only on your device, inside its App Sandbox container:
| Data | Location | Purpose |
|---|
| App settings (theme, font size, view mode, etc.) | ~/Library/Containers/com.aimoai.app.mdpeek.pro/Data/Library/Application Support/mdpeek-pro/config.json | Remembering your preferences |
| Reading history / recent files | Same container directory | Restoring your last reading position |
| Security-scoped bookmarks | Same container directory | Remembering folders you granted access to |
| AI API keys (if you configure them) | Same container directory | Letting the AI features work without re-entering the key |
You can delete all of this at any time by deleting the app, or by removing the container folder above.
3. Network access
mdpeek Pro is offline-first. Network activity only happens when you explicitly enable it:
| Feature | When network is used | What is sent |
|---|
| AI writing assistant / Document Q&A (Pro) |
Only after you configure your own AI API endpoint & key in Settings |
The text you explicitly ask the AI to process (e.g. selection to rewrite, or the document text for Q&A), sent over HTTPS to the endpoint you configured (e.g. OpenAI, DeepSeek, or your own server). Your API key is sent only to that same endpoint, as your authentication. |
| Update checks |
None. mdpeek Pro does not phone home for updates — updates come through the Mac App Store. |
— |
Default state: all network features are off. With no AI endpoint configured, mdpeek Pro makes zero network requests other than serving its own UI from 127.0.0.1 (loopback only — this never leaves your Mac).
4. Local loopback server (for the technically curious)
To render its interface, mdpeek Pro runs a small HTTP server bound to 127.0.0.1 (loopback) on a random port, protected by a per-launch random token. This server:
- is reachable only from your own Mac — never from the network
- serves the app's UI resources and talks to the local file APIs you authorized
- shuts down when the app exits
No data ever leaves your Mac through this server.
5. File access (macOS App Sandbox)
mdpeek Pro runs inside the macOS App Sandbox. It can only read/write:
- Files and folders you explicitly pick in the open/save dialogs (the system grants one-time permission), optionally remembered via security-scoped bookmarks
- Its own sandbox container (settings, history, keys)
It never scans your disk in the background.
6. Children
mdpeek Pro is a productivity tool and is not directed at children under 13. We do not knowingly collect any data from anyone, including children.
7. Changes to this policy
If this policy changes, the updated version will be posted at this URL with a new "last updated" date. Material changes will also be reflected in the App Store release notes.
8. Contact
Questions about privacy? Reach us at:
- Email: support@mdpeek.app
- GitHub Issues: https://github.com/maskkid/mdpeek_pro/issues