隐私政策
最近更新：2026-10-13
PathToUS（以下简称“本应用”）由个人开发者 aaron du运营，帮助用户练习美国入籍面试。我们只收集提供服务所必需的信息，不投放广告，不做跨应用追踪，不出售任何数据。
我们处理哪些信息
1. 匿名账号
首次打开时，本应用自动生成一个匿名用户 ID（例如 PT-8F3K2A）和一个随机密钥，保存在你设备的钥匙串里。不需要注册，也不收集你的姓名、手机号或邮箱。服务器保存：用户 ID、密钥的哈希值、用于关联应用内购买的随机标识、剩余免费次数、购买的面试通行证（Apple 交易号、剩余场数、到期时间）。
2. 使用和购买记录
服务器记录：赠送免费次数、每次开始模拟面试（类型和时间）、购买和退款（商品、Apple 交易号、时间）。付款由 Apple 处理，我们收不到你的银行卡或 Apple 账号信息。
3. 你的资料和 N-400 信息
你填写的居住州、出生日期、绿卡日期、N-400 递交日期，以及你填写或从 N-400 PDF 读取的 N-400 信息，只保存在你的设备上。读取 N-400 PDF 在你的设备上完成，PDF 文件不会上传。本应用不收集 A 号（外国人登记号）、社会安全号等证件号码。
4. 回答的判断
- 公民考试：本地判分拿不准时，会把题目、官方答案和你这一题的回答文字发送到我们的服务器复核，不含任何个人资料。
- N-400 问答和完整模拟面试：每答一题，会把这道题、你的回答文字，以及 N-400 中和这道题相关的那一项信息发送到我们的服务器，用于判断回答是否答到点上、是否和表格一致、是否需要追问。
这些内容由人工智能模型处理（Anthropic 的 Claude 模型，通过 Amazon Web Services 的 Amazon Bedrock 服务提供）。处理完成后，我们的服务器不保存这些内容，也不写入日志。
5. 语音
你用语音回答时，语音由设备系统的语音识别功能转成文字（iPhone 上由 Apple 处理，安卓上由设备的语音服务处理，适用各自的隐私政策）。本应用不把你的录音上传到我们的服务器。移民官的声音是预先录制好的，或由设备系统朗读。
6. 社区
你在社区发帖或回复时，我们保存你起的昵称、帖子和回复的内容、发布时间。帖子和回复是公开的，所有人都能在 App 和我们的网站上看到（网站上不显示你的用户 ID）。发布前，内容会交给人工智能模型（同上，通过 Amazon Bedrock）检查是否违反社区规则，检查后不另外保存。你举报的内容和举报理由会保存给管理员处理。你可以随时删除自己的帖子和回复。
社区账号。社区账号和 App 的练习账号分开，由一个随机的 ID 和密钥组成：在手机上保存在我们几个 App 共用的系统钥匙串里（同一台手机上的 PathToUS 系列 App 用同一个社区账号），在网站上保存在浏览器的一个 Cookie 里（只用来保持登录，不用于广告或跟踪）。你可以用关联码让网站和手机用同一个账号。你可以选填邮箱注册社区账号：我们只用它发登录验证码（通过 Amazon SES 发送），不公开、不发广告、不给任何人。没注册邮箱的，换手机或清除浏览器数据后社区账号无法找回。删除社区账号时，帖子、回复和邮箱会一起删除；用同一个社区账号的其他 App 和网站也会一起受影响。
7. 技术信息
为防止接口被滥用，服务器会在内存中短时间记录请求的 IP 地址用于频率限制，不做长期保存。
我们使用的服务商
- Amazon Web Services：服务器托管（Amazon Lightsail）、数据库（Amazon DynamoDB）、人工智能模型（Amazon Bedrock）、发送邮件（Amazon SES）
- Cloudflare：域名解析、网站人机验证（Turnstile）
- Apple：应用内购买；Apple 和 Google：设备上的语音识别
这些服务商只为提供本应用的功能处理数据。
保存期限和删除
账号和使用记录保存到你删除为止。你可以随时在应用的“我的资料”页面点击“删除我的数据”，删除服务器上的账号和使用记录，以及设备上的资料和 N-400 信息；也可以发邮件到 bestdu+citizenx@gmail.com 申请删除。为处理退款、防止购买凭证被滥用和财务对账，Apple 交易号及其关联的用户 ID 会在删除后继续保留。买过面试通行证的，删除后可以用同一个 Apple ID 恢复购买（还在有效期内、还有剩余场数的才能继续用）。
儿童
本应用不面向 13 岁以下儿童，我们不会有意收集儿童的信息。
政策更新和联系我们
本政策如有更新，会在本页面公布。任何问题请联系 bestdu+citizenx@gmail.com。
Privacy Policy
Last updated: 2026-10-13
PathToUS ("the App") is operated by individual developer aaron du and helps users practice the U.S. naturalization interview. We collect only what is needed to provide the service. We show no ads, do no cross-app tracking, and never sell data.
Information we process
- Anonymous account. On first launch the App creates an anonymous user ID and a random secret stored in your device keychain. No sign-up, name, phone number or email is collected. Our server stores the user ID, a hash of the secret, a random token linking in-app purchases to the account, your remaining free sessions and the Interview Passes you bought (Apple transaction ID, sessions left and expiry date).
- Usage and purchases. We record free sessions granted, each mock interview started (type and time), and purchases and refunds (product, Apple transaction ID, time). Payment is handled by Apple; we never receive card or Apple Account details.
- Your profile and N-400 information. Your state, dates, and the N-400 information you enter or read from an N-400 PDF are stored only on your device. N-400 PDFs are read on your device and never uploaded. The App does not collect A-Numbers or Social Security numbers.
- Answer evaluation. For civics, when on-device scoring is unsure, the question, official answers and your answer text are sent to our server, with no personal information. In N-400 practice and the full mock interview, each question, your answer text and the one related item from your N-400 are sent to our server to check whether you answered the question, whether it matches your form, and whether to ask a follow-up. This content is processed by an AI model (Anthropic's Claude, provided through Amazon Bedrock by Amazon Web Services). Our server does not store or log this content.
- Voice. Speech is converted to text by your device's speech recognition (Apple on iPhone, your device's speech service on Android). The App does not upload your recordings to our server.
- Community. When you post or reply in the Community, we store your nickname, the content and the time. Posts and replies are public and can be seen by anyone in the App and on our website (your user ID is not shown). Before publishing, the content is checked against the community rules by an AI model (through Amazon Bedrock) and not stored for that purpose. Reports you submit are kept for moderators. You can delete your own posts and replies at any time.
- Community account. Your community account is separate from your practice account and consists of a random ID and secret. On your phone it is stored in a system keychain shared by our apps (PathToUS apps on the same phone use the same community account); on our website it is stored in a browser cookie that only keeps you signed in and is not used for ads or tracking. You can use a link code to share one account between the website and your phone. You may optionally register an email address: we use it only to send sign-in codes (through Amazon SES) and never show it publicly, use it for marketing or share it. Without a registered email, a community account cannot be recovered after you switch phones or clear browser data. Deleting your community account deletes its posts, replies and email, including for our other apps and the website that use it.
- Technical data. IP addresses are held briefly in memory for rate limiting and are not stored long-term.
Service providers
Amazon Web Services (Amazon Lightsail hosting, Amazon DynamoDB, Amazon Bedrock, Amazon SES email), Cloudflare (DNS and the Turnstile human check on our website), Apple (in-app purchase) and Apple/Google (on-device speech recognition), solely to provide the App's features.
Retention and deletion
Account and usage records are kept until you delete them. Tap "删除我的数据" (Delete my data) on the "我的资料" (My profile) screen, or email bestdu+citizenx@gmail.com. Apple transaction IDs and the user IDs linked to them are retained after deletion to handle refunds, prevent misuse of purchases and for accounting. If you bought an Interview Pass, you can restore it with the same Apple ID while it is still valid and has sessions left.
Children
The App is not directed to children under 13.