私隱Privacy
Cantalkie Meetings · 最後更新 2026 年 8 月 29 日 —— 新增「Ajuby 自己持有啲乜」、保留期、你嘅權利同投訴途徑。個 App 嘅行為冇改變過。 Cantalkie Meetings · last updated 29 August 2026 — added what Ajuby itself holds, retention periods, your rights and how to complain. Nothing about the app's behaviour changed.
你嘅錄音、逐字稿同會議紀錄，由頭到尾淨係喺你部 Mac 度。 冇任何一個情況之下佢哋會俾人寄去 Ajuby 或者任何第三方。 Your recordings, your transcripts and your minutes stay on your Mac. There is no circumstance in which any of them is sent to Ajuby or to anyone else.
呢點值得講清楚點解咁緊要：一個會議入面有其他人講嘅嘢。 佢哋冇裝過呢個 App，冇睇過呢一頁，亦都冇答應過任何嘢。所以個 App 由設計上就冇一條路 可以將會議內容送出去 —— 唔係「預設關咗」，係根本冇呢個功能。 It is worth saying why that matters so much. A meeting contains other people's words. They did not install this app, they have not read this page, and they have agreed to nothing. So there is no path in the app by which meeting content can be sent anywhere — not a setting that defaults to off, but no such feature at all.
邊三樣嘢會用到網絡The three things that use the network
除咗以下三樣，個 App 完全唔會上網。你可以喺飛機上面錄音同寫紀錄。 Apart from these three, the app does not use the network at all. You can record and write up a meeting on a plane.
| 幾時When | 去邊Where | 寄啲乜What is sent |
|---|---|---|
| 第一次設定First-run setup | huggingface.co github.com |
冇。淨係下載語音同寫作模型（約 4 GB）。下載完之後永遠唔使再上網。 Nothing. It downloads the speech and writing models (about 4 GB). After that they are never fetched again. |
| 每日一次Once a day | updates.cantalkie.com | 攞一個靜態 XML 檔，睇下有冇新版本。冇寄任何關於你嘅嘢， 亦冇戶口、冇追蹤編號。 It fetches one static XML file to see whether a newer version exists. Nothing about you is sent; there is no account and no tracking id. |
| 你撳「寄出」嗰陣Only when you press Send | reports.cantalkie.com | 一份問題報告。詳情見下面。 A problem report. See below. |
| 啟用授權嗰陣When you activate a licence | api.polar.sh | 你嘅授權 key 同你部機嘅名（例如「Richard 嘅 MacBook Pro」）， 用嚟認證。Polar 係我哋嘅付款商戶。 Your licence key and your Mac's name (e.g. "Richard's MacBook Pro"), to check the key. Polar is our merchant of record. |
回報問題嗰陣究竟寄啲乜What a problem report contains
個 App 有時會靜靜哋出錯 —— 例如咪高峰喺會議中途停咗、 或者份紀錄出咗嚟係空白。呢啲情況唔會 crash，所以我哋喺呢邊完全睇唔到。 「回報問題」就係俾你將個 log 交返俾我哋嘅唯一途徑。 The app can fail quietly — the microphone stopping mid-meeting, or a document coming back empty. Neither crashes, so neither is visible from our side. Reporting a problem is the only way that log reaches us.
- 永遠唔會自己寄。每一次都係你撳「寄出」先會寄。 It never sends by itself. You press Send, every time.
- 寄之前會將全部內容俾你睇。你睇到嗰段字， 就係一模一樣會寄出去嗰段字。 You see all of it first. What is shown on screen is character-for-character what leaves.
- 唔會夾帶錄音、逐字稿或者會議紀錄。 冇 tick box，冇「進階選項」，冇例外。 It never includes the recording, the transcript or the minutes. There is no tick box, no advanced option and no exception.
- 個 log 寄之前會過濾：會議標題、出席者名、你自己個名、 同埋你揀嘅資料夾路徑，全部會換走。 The log is filtered before it is shown or sent: meeting titles, attendee names, your own name and the path of the folder you chose are all replaced.
- 報告會夾住一個隨機產生嘅安裝編號，令同一部機寄嘅幾份報告可以夾埋一齊睇。 佢唔係由任何硬件識別碼計出嚟，亦都認唔到你係邊個。 A report carries a randomly generated installation id so several reports from one Mac can be read together. It is not derived from any hardware identifier and does not identify you.
- 報告存放喺一個非公開嘅 Cloudflare R2 儲存空間， 90 日之後自動刪除。 Reports are stored in a private Cloudflare R2 bucket and are deleted automatically after 90 days.
你部機上面有啲乜What sits on your Mac
- 會議紀錄、逐字稿同錄音：喺你自己揀嗰個資料夾。要刪就自己刪， 個 App 唔會郁佢哋。 Minutes, transcripts and audio: in the folder you chose. Delete them whenever you like — the app does not touch them again.
- 模型同工作檔案：
~/Library/Application Support/CantalkieMeetings。 Models and working files:~/Library/Application Support/CantalkieMeetings. - Log：
~/Library/Logs/CantalkieMeetings.log。 The log:~/Library/Logs/CantalkieMeetings.log. - 如果你開咗「記住聲線」，個 App 會留低幾秒鐘嘅聲音特徵， 令下次開會可以自動認返啲名。可以喺設定度一次過刪走。 If you leave voice memory on, a few seconds of voice characteristics are kept so later meetings can name people automatically. Settings clears them in one go.
你嘅日曆Your calendar
如果你俾權限，個 App 會讀你日曆入面接近而家嗰個會議， 攞佢個標題、時間同出席者去填表。淨係讀，唔會寫，亦都唔會寄去任何地方。 唔俾都用得，自己打就得。 If you grant permission, the app reads the meeting nearest to now in your calendar and uses its title, time and attendees to fill in the form. It reads only, never writes, and none of it is sent anywhere. Refusing is fine — you can type them instead.
「螢幕同系統音訊錄製」呢個權限 The "Screen & System Audio Recording" permission
macOS 將呢個權限叫做「螢幕同系統音訊錄製」，聽落好嚇人。 個 App 用佢淨係為咗錄你部機播緊嘅聲 —— 即係會議另一邊嗰啲人把聲。 畫面由頭到尾冇擷取過，亦都冇任何 code 去做。 macOS calls this permission "Screen & System Audio Recording", which sounds alarming. The app uses it only to record the sound your Mac is playing — the other people in the call. Nothing on your screen is ever captured, and there is no code in the app that could.
Ajuby 自己持有啲乜What Ajuby itself holds
上面講嘅係個 App 喺你部機做啲乜。呢一段講另一半 —— Ajuby 呢間公司 作為資料控制者，實際上手上有啲乜嘢。入面一樣會議內容都冇。 Everything above is about what the app does on your Mac. This section is the other half: what Ajuby, as a company, actually holds about you as a data controller. No meeting content appears in it.
| 持有乜What | 點解Why | 留幾耐How long |
|---|---|---|
| 姓名、電郵、帳單國家同稅務資料 Name, email, billing country and tax status | 賣授權俾你同開單。法律依據：履行合約。經 Polar 收集，佢係 merchant of record。 To sell you a licence and issue a receipt. Lawful basis: performance of a contract. Collected by Polar as merchant of record. | 交易後 6 年 —— 英國稅務法例要求保留 Six years after the transaction, as UK tax law requires |
| 授權碼，同你啟用嗰部 Mac 嘅名（例如「Richard 的 MacBook Pro」） Licence key, and the name of the Mac you activated on (e.g. "Richard's MacBook Pro") | 執行兩部機嘅限制，以及俾你自己睇用咗邊部。法律依據：履行合約。 To enforce the two-machine limit and to let you see which machines are in use. Lawful basis: performance of a contract. | 授權有效期內，加之後 12 個月 The life of the licence, plus 12 months |
| 問題報告：經過遮蔽嘅 log，加一個隨機安裝編號 Problem reports: a redacted log and a random installation id | 修正你踩到嘅 bug。法律依據：同意 —— 你每次都要親手撳 Send。 To fix the bug you hit. Lawful basis: consent — you press Send, every time. | 90 日，然後自動刪除 90 days, then deleted automatically |
| 你寄嚟嘅電郵Emails you send us | 覆返你，同埋記低講過啲乜。法律依據：正當利益。 To answer you and to keep a record of what was said. Lawful basis: legitimate interests. | 最後一次通訊之後 24 個月 24 months after the last message |
我哋永遠唔會持有錄音、逐字稿、會議紀錄、你嘅日曆內容， 或者聲音特徵檔案。呢啲嘢冇一樣離開過你部 Mac。 We never hold recordings, transcripts, minutes, calendar content or voice profiles. None of it leaves your Mac.
仲有邊個掂到Who else is involved
我哋用三個服務供應商，佢哋淨係代我哋處理上面表格入面嘅嘢： Polar（merchant of record，處理付款同授權）、 Cloudflare（網站寄存同問題報告儲存）、 Resend（有新報告時通知我哋）。 部分服務嘅伺服器喺美國，佢哋各自有自己嘅跨境傳輸保障機制。 Three providers process the items in the table above on our behalf: Polar (merchant of record, payments and licensing), Cloudflare (website hosting and report storage) and Resend (notifying us when a report arrives). Some are US-based and rely on their own international transfer safeguards.
你嘅權利Your rights
就住上面表格嗰啲資料，你有權要求查閱、更正、刪除、限制處理、 索取可攜副本，亦可以反對我哋處理，或者隨時撤回同意。電郵 hello@cantalkie.com 就得，我哋會喺一個月內回覆。 唔使畀錢。 For anything in the table above you can ask to see it, correct it, delete it, restrict how it is used, receive a portable copy, object to our using it, or withdraw consent at any time. Email hello@cantalkie.com and we will reply within one month. There is no charge.
如果你唔滿意我哋點處理，你可以投訴：英國係 資訊專員辦公室（ICO）； 香港係個人資料私隱專員公署（PCPD）。 你唔使先問過我哋。 If you are unhappy with how we have handled it you can complain — in the UK to the Information Commissioner's Office, and in Hong Kong to the Office of the Privacy Commissioner for Personal Data. You do not have to come to us first.
邊個負責Who is responsible
上面表格嗰啲資料嘅控制者係 Ajuby International Limited， 喺英格蘭及威爾斯註冊，公司編號 14645913， 註冊地址 61 Bridge Street, Kington, Herefordshire, HR5 3DJ, United Kingdom。 私隱事宜請電郵 hello@cantalkie.com。 The controller for the data in the table above is Ajuby International Limited, registered in England and Wales, company number 14645913, registered office 61 Bridge Street, Kington, Herefordshire, HR5 3DJ, United Kingdom. For privacy matters, email hello@cantalkie.com.
至於會議內容本身：因為錄音、逐字稿同紀錄從來冇離開過你部機， Ajuby 對嗰啲內容既唔係控制者亦唔係處理者 —— 責任喺用緊個 App 開會嗰個機構身上。 保安頁寫得更詳細，方便你交俾對方合規同事睇。 For meeting content itself, Ajuby is neither controller nor processor — the recordings, transcripts and minutes never reach us, so that responsibility sits with the organisation running the app in its own meetings. The security page sets this out in the form a compliance team will ask for.
呢版改咗嘅話Changes to this page
頁頂有最後更新日期。如果我哋改動咗實質內容 —— 例如新增一樣持有嘅資料、 或者改咗保留期 —— 會喺更新日期旁邊寫明改咗乜，唔會靜靜雞換咗算數。 The date at the top is the last update. If anything material changes — a new category of data, or a different retention period — we will say what changed beside that date rather than quietly swapping the wording.
有問題搵我哋Getting in touch
電郵 hello@cantalkie.com。 如果你想知我哋收咗你邊份報告、或者想我哋刪走佢，寄報告嗰陣個 App 會俾你一個參考編號， 引返嗰個編號我哋就搵得返。 Email hello@cantalkie.com. If you want to know what we hold from a report, or want it deleted, the app gives you a reference number when you send one — quote it and we can find it.