BarkAgent Privacy Policy
Version 1.0 · Effective 2026-05-27
Canonical: https://barkagent.we2.xyz/privacy

1. Who we are
   Open-source project. No analytics, ads, attribution, crash-reporting, or third-party SDKs.

2. Data we process
   - On device: APNs token, server addresses + keys, optional AES key (Keychain), AgentTask/AgentStep, cached push images. App Group: group.com.barkagent.shared.
   - On server (Cloudflare KV): device:<key> -> APNs token only. No push bodies logged. No payload persistence.
   - In transit: HTTPS to (a) your configured Bark servers, (b) image URLs in push payloads, (c) Apple APNs. No other destinations.

3. We do NOT collect
   name, email, phone, contacts, calendar, location, IDFA, device fingerprint, browsing history, microphone, camera, health, biometric data.

4. Encryption
   AES-128/192/256 end-to-end (CBC/ECB/GCM). Keys live in iPhone Keychain only. Server transports ciphertext only. APNs JWT signed locally with ES256.

5. Sharing
   We do not sell, rent, or share data. Only third parties seeing traffic: Apple (push), Cloudflare (Worker host), operator of any Bark server you added.

6. Your rights
   - Delete registration: DELETE /register/:device_key
   - Delete local data: uninstall the App
   - Self-host: open-source Server code
   - Audit: source code is public

7. Children
   Not directed to children under 13.

8. Contact
   Open an issue at the project repository.

--- 中文 ---

BarkAgent 隐私政策
版本 1.0 · 生效 2026-05-27

1. 我们是谁:开源项目,无分析/广告/归因/崩溃上报/第三方 SDK。
2. 数据处理:
   - 设备本地:APNs token、服务器配置、可选 AES key (Keychain)、AgentTask/AgentStep、推送图片缓存。位于 App Group group.com.barkagent.shared。
   - 服务器 KV:仅 device:<key> -> APNs token。不记录推送内容,不持久化 payload。
   - 传输:HTTPS 至(a) 您配置的 Bark 服务器、(b) 推送内嵌的图片 URL、(c) Apple APNs。
3. 不收集:姓名、邮箱、电话、通讯录、日历、位置、IDFA、指纹、浏览历史、麦克风、相机、健康或生物特征。
4. 加密:AES-128/192/256 端到端,密钥只在 iPhone Keychain。服务器仅转密文。APNs JWT 本地 ES256 签名。
5. 共享:不售卖、不出租、不共享。仅 Apple、Cloudflare、您添加的服务器运营者会接触到流量。
6. 权利:调用 DELETE /register/:device_key、卸载清本地、可自部署、源代码可审计。
7. 儿童:不面向 13 岁以下。
8. 联系:项目仓库 issue。