跳到正文Skip to content
OpenMousse
完整的文档索引见llms.txt。在网址后加.md可以拿到 Markdown 版本；本页的 Markdown 版本是privacy.zh-CN.md。
法律

隐私政策

关于本地服务器数据存储、模型服务商、转写服务与账号数据的条款说明。

最后更新：2026 年 10 月 19 日

OpenMousse 是开源软件，运行在你自己的服务器上。OpenMousse iPhone app 是该服务器的客户端，由 Leo Zhou 发布；你的服务器同时提供同一客户端的网页版。本页说明你的数据如何被处理。

概览

  • •你的对话、记忆与健康数据汇总均保存在你自己的服务器上，由你控制，我们无法获取。
  • •TestFlight 版本的 app 会要求你使用邮箱登录。账号仅记录你的邮箱、可选的称呼以及你连接过的服务（claw）列表。网页版与自行构建的版本不设账号。
  • •没有广告，app 内不包含任何统计或追踪 SDK。

客户端发送至你服务器的数据

  • •对话内容：你在对话中发送的消息、照片、文件与语音。
  • •Apple 健康数据：每日汇总指标（活动、睡眠、心率类指标等），仅在你授权后同步。app 仅读取健康数据，从不写入，也不申请生殖健康类数据。OpenMousse 不会将健康数据用于广告，也不会分享给任何第三方。
  • •推送令牌：用于在回复生成后向你的设备发送通知。
  • •界面语言：服务器据此使用对应的语言回复。

按设计会离开你服务器的数据

  • •模型服务商：每一轮对话发往你所选的模型服务（如 Anthropic、OpenAI、Google，含备用模型），内容为该轮消息与回答所需的记忆，使用你自己的账号或 API 密钥，并适用对应服务商的条款。
  • •推送通知：经由 Expo 推送服务与 Apple 推送服务（APNs）发送。单条通知包含简短标题与预览（对话回复的通知内容为对话名称及回复的前 140 个字符）。
  • •语音转写：由服务器配置的转写服务处理，默认为 OpenAI，也可替换为你自己的 Whisper 兼容服务。
  • •世界树（可选）：若你将 Claude.ai、ChatGPT、Gemini 或 Notion 接入世界树，这些服务会通过你配置的专属地址读写世界树。
  • •连接器（可选）：若你在「设置 → 连接器」中接入了 Notion 等外部应用，其登录令牌保存在你的服务器上，系统经由你的服务器读写该应用。
  • •营养查询：记录饮食时，若某项食物不在你本地的食物库中，服务器会使用食物名称或条码向 Open Food Facts 与 USDA FoodData Central 发起查询。请求仅包含食物名称或条码，不含任何个人信息；查询结果缓存在你的服务器上。
  • •分享与好友（可选）：分享链接会将你选中内容的快照展示给持有链接的人，住址、家人姓名等隐私信息会遮盖为灰条。添加好友后，你的服务器与好友的服务器之间直接收发附带签名、端到端加密的消息。若服务器无公网地址，消息经由 OpenMousse 中继（relay.openmousse.ai，运行于 Cloudflare）转发；中继仅能获取收件服务器地址、数据大小与发送时间，看不到消息内容，也不保存任何消息。Cloudflare 可能会保留常规访问日志（如 IP 地址）。

账号与云端服务

  • •TestFlight 版账号：从 TestFlight 安装的 app 会向你的邮箱发送 6 位验证码以完成登录。账号保存你的邮箱、可选的称呼，以及连接过的服务列表（助手名称、服务器地址、类型与名称、最近在线时间），从不保存令牌、对话、记忆、健康数据与连接器凭据。账号数据存储于 Supabase 欧盟区（爱尔兰），验证码邮件由 Resend 发送；Supabase 会保留登录时间与 IP 地址等常规日志。账号数据将保留至你主动删除为止。
  • •托管专属云服务器：如果你使用我们托管的专属云服务器，只有你为排查问题明确授权时，运维人员才会登录，并留下你能查看的记录。
  • •托管服务等候名单：在 openmousse.ai 加入等候名单时，我们会保存你的邮箱、页面语言与加入时间，仅用于在托管服务开放时通知你。数据由 Supabase 保存在欧盟区（爱尔兰）。
  • •其他客户端服务：app 会向 Expo 更新服务查询新版本代码（仅包含 app 与系统版本信息，不含个人内容）。若使用 TestFlight 版本，Apple 可能会按其条款将崩溃报告与你主动提交的反馈分享给开发者。
  • •演示服务器：供 Apple 审核使用的演示服务器不保存任何个人数据，对话由不带工具的演示助手回答，相关内容在审核结束后删除。

你的控制权与联系方式

  • •你可以随时在 iOS 设置中关闭 Apple 健康授权。
  • •你可以将语音转写换成自己的转写服务，或者不使用语音输入。
  • •你可以在 app 内删除对话、日志与记忆，或直接删除服务器的数据目录。
  • •你可以在 app 中通过「设置 → 账号 → 删除账号」删除账号及连接列表（你服务器上的数据不受影响），或致信 [email protected] 获取、删除我们在等候名单或账号中保存的信息。
  • •OpenMousse 不面向 13 岁以下儿童。本页的修改记录保存在网站代码仓库中。
最后更新于 2026-10-19这一页有帮助吗？
For a complete index of the docs, see llms.txt. Append .md to any URL for the Markdown version; this page's Markdown is at privacy.md.
Legal

Privacy Policy

Terms regarding local server data storage, model providers, transcription services, and account data.

Last updated: October 19, 2026

OpenMousse is open-source software that runs on your own server. The OpenMousse iPhone app is a client for that server, published by Leo Zhou; your server also serves a web app version of the same client. This page explains how your data is handled.

Overview

  • •Your conversations, memories, and health data summaries are stored on your own server under your control; OpenMousse has no access to them.
  • •The TestFlight build of the app asks you to sign in with your email address. Your account records only your email address, an optional display name, and the list of services (claws) you have connected. The web app and self-built versions have no account system.
  • •There are no ads, and the app contains no analytics or tracking SDKs.

Data Sent from the Client to Your Server

  • •Conversation content: Messages, photos, files, and voice recordings you send in conversations.
  • •Apple Health data: Daily summary metrics (activity, sleep, heart-rate metrics, and similar), synced only after you grant permission. The app only reads health data, never writes to Apple Health, and never requests reproductive health data. OpenMousse never uses health data for advertising and never shares it with any third party.
  • •Push token: Used to send notifications to your device after a reply is generated.
  • •Interface language: Used by the server to reply in the corresponding language.

Data That Leaves Your Server by Design

  • •Model providers: Each turn of conversation is sent to your chosen model provider (such as Anthropic, OpenAI, or Google, including fallback models), containing that turn's message and the memories needed to answer, using your own account or API key and governed by that provider's terms.
  • •Push notifications: Sent via the Expo Push Service and Apple Push Notification service (APNs). Each notification contains a short title and preview (for conversation replies, the notification contains the conversation name and the first 140 characters of the reply).
  • •Voice transcription: Processed by the transcription service configured on your server—OpenAI by default, or replaceable with your own Whisper-compatible service.
  • •Memory tree (optional): If you connect Claude.ai, ChatGPT, Gemini, or Notion to the memory tree, those services read and write the memory tree through the dedicated URL you configured.
  • •Connectors (optional): If you connect external apps such as Notion in Settings → Connector, their login tokens are stored on your server, and the system reads and writes those apps through your server.
  • •Nutrition lookup: When logging meals, if a food item is not in your local food database, your server queries Open Food Facts and USDA FoodData Central using the food name or barcode. Requests contain only the food name or barcode and no personal information; query results are cached on your server.
  • •Sharing and friends (optional): A share link shows a snapshot of your selected content to anyone holding the link, with private details such as home addresses and family members' names masked as gray bars. After you add a friend, your server and your friend's server exchange signed, end-to-end encrypted messages directly. If neither server has a public address, messages are forwarded through the OpenMousse relay (relay.openmousse.ai, running on Cloudflare); the relay sees only the recipient server address, payload size, and timestamp, cannot read message content, and stores no messages. Cloudflare may retain standard access logs (such as IP addresses).

Accounts and Cloud Services

  • •TestFlight account: The app installed from TestFlight sends a 6-digit verification code to your email address to sign in. Your account stores your email address, an optional display name, and your list of connected services (assistant name, server URL, type and name, and last online time); it never stores tokens, conversations, memories, health data, or connector credentials. Account data is stored in Supabase's EU region (Ireland), and verification emails are sent via Resend; Supabase retains standard logs such as sign-in time and IP address. Account data is retained until you delete it.
  • •Hosted dedicated cloud server: If you use a dedicated cloud server hosted by OpenMousse, operations staff log in only when you explicitly authorize access for troubleshooting, and leave an audit log you can inspect.
  • •Hosted service waitlist: When you join the waitlist on openmousse.ai, we store your email address, page language, and signup time solely to notify you when the hosted service opens. This data is stored by Supabase in the EU region (Ireland).
  • •Other client services: The app queries the Expo Updates service for new code bundles (sending only app and OS version information, with no personal content). If you use the TestFlight build, Apple may share crash reports and feedback you actively submit with the developer under Apple's terms.
  • •Demo server: The demo server provided for Apple App Review stores no personal data, answers conversations using a demo assistant with no tools attached, and deletes all related content after review is complete.

Your Controls and Contact Information

  • •You can turn off Apple Health permissions at any time in iOS Settings.
  • •You can switch voice transcription to your own transcription service, or choose not to use voice input.
  • •You can delete conversations, journals, and memories inside the app, or delete the data directory on your server directly.
  • •You can delete your account and connection list in the app via Settings → Account → Delete account (data on your server is unaffected), or email [email protected] to request or delete the information stored in the waitlist or your account.
  • •OpenMousse is not directed to children under 13. The revision history of this page is maintained in the website code repository.
Last updated 2026-10-19Was this page helpful?

这一页给 agent 读的版本：在网址后加 .md 就是下面这份纯文本，和给人看的那页由同一份内容生成。Agent-readable version of this page: append .md to the URL to get the plain text below, generated from the same source as the human view.