儿童与家庭共用设备的应用安装规则
2026 儿童与共用 iPhone 安装规则：购买前询问、屏幕使用时间、白名单，以及意外下载后的应急。
Reading series · 2/5
阅读系列 · 2/5
Family Sharing & surprise charges
家庭共享与意外扣费
Control shared purchases, Ask to Buy, Screen Time, and dispute paths.
管控共享购买、购买前询问、屏幕使用时间与争议路径。
Series hub 系列枢纽- 1 Family Sharing Purchase Safety for iPhone and iPad iPhone 和 iPad 家庭共享购买安全
- 2 App Install Rules for Child and Shared Family Devices 儿童与家庭共用设备的应用安装规则
- 3 Screen Time Purchase Controls That Actually Reduce Surprise Charges 真正能减少意外扣费的屏幕使用时间购买控制
- 4 Family Sharing, Ask to Buy, and Unexpected Charges on Shared Cards 家庭共享、购买前询问与共享卡意外扣费
- 5 How to Handle Shared Payment Method Disputes in Family Sharing 家庭共享中如何处理共用付款方式争议
Define who can approve purchases
Turn on Ask to Buy for child accounts and make sure the organizer receives requests on a device they actually use. An approval path that nobody sees is not a control.
先定义谁能批准购买
为儿童账号开启购买前询问，并确保组织者在常用设备上接收请求。没人看得到的审批路径不算控制。
Separate free downloads from paid risk
A free install can still lead to trials, subscriptions, or high-privilege permissions. Require a short review of monetization and privacy before approving any new app on a child device.
区分免费下载与付费风险
免费安装仍可能导致试用、订阅或高权限。批准儿童设备上的新应用前，要求快速检查变现模式和隐私。
Use Screen Time as a hard boundary
Limit in-app purchases, account changes, and deleting apps where appropriate. Combine restrictions with a passcode the child does not know. Soft reminders are not enough for aggressive game stores.
用屏幕使用时间作为硬边界
在合适场景限制 App 内购买、账户更改和删除应用，并配合孩子不知道的密码。对激进的游戏商店，软提醒不够。
Create an allowed-app shortlist
Households move faster when common education, messaging, and media apps are pre-approved, while unknown utilities and game clones require research. A shortlist reduces decision fatigue and accidental installs.
建立允许应用短名单
当常用教育、通讯和媒体应用被预批准，而未知工具与游戏克隆需要研究时，家庭决策会更快。短名单能降低决策疲劳和误装。
Review monthly, not only after incidents
Once a month, review installed apps, active subscriptions, permission lists, and Screen Time reports. Remove abandoned apps and cancel unused trials before they become recurring costs or privacy residue.
按月复查，而不是出事才查
每月复查已安装应用、有效订阅、权限列表和屏幕时间报告。在它们变成周期成本或隐私残留前，清理废弃应用并取消无用试用。
Teach a simple no-install rule
Agree that unknown free apps with aggressive ads, unclear developers, or unnecessary permissions are automatic no. Children and shared users need a rule they can apply without waiting for a long debate.
教一条简单的禁止安装规则
约定：广告激进、开发者不清或不必要权限过多的未知免费应用，默认禁止。儿童和共用用户需要一条不用长篇讨论就能执行的规则。
Household install policy template
Write who may install, which categories need adult approval, maximum weekly spend, and whether trials are allowed. Enable Ask to Buy, set Screen Time app limits, and keep the payer Apple ID off child devices. Review the installed app list weekly for the first month of any new device.
家庭安装策略模板
写明谁可安装、哪些类别需成人批准、每周消费上限、是否允许试用。启用购买前询问，设屏幕使用时间限制，付款人 Apple ID 不登儿童设备。新设备首月每周复查已装列表。
Talking to kids about paid buttons
Explain that colorful buttons can spend real money even in free games. Practice a pause rule: leave the pay sheet and find an adult. Celebrate reporting accidental taps early instead of hiding them. Pair technical controls with this social rule so neither stands alone.
和孩子讨论付费按钮
说明即使免费游戏里，彩色按钮也可能花真钱。练习暂停规则：离开付款页找成人。鼓励尽早报告误点而不是隐瞒。技术控制与这套社交规则并用，缺一不可。
Incident response for surprise child purchases
Freeze further installs, screenshot the charge, cancel any new subscription, and file Report a Problem with the organizer account. Then tighten Ask to Buy and review which apps still allow storefront access. Hold a short family review focused on process fixes, not only blame.
儿童意外购买的应急响应
暂停继续安装，截图扣费，取消新订阅，由组织者账号 Report a Problem。然后收紧购买前询问，复查哪些应用仍可进商店。开短家庭复盘，聚焦流程修复而不只是责备。
Age-banded install policy you can actually enforce
Write three bands: under 10, 10–13, and 14–17, even if your household only uses two. Under 10: allowlist only, no free-text App Store browsing alone, Ask to Buy on, free downloads still require approval if you choose that Screen Time option. 10–13: short allowlist plus supervised category trials with a one-week review. 14–17: broader catalog with purchase locks and a weekly subscription check with the teen present. Publish the band rules where the child can read them; secret policies feel arbitrary and get bypassed. Revisit bands on birthdays, not only after incidents. Pair each band with a maximum number of new installs per week so novelty-seeking does not become an all-evening App Store session.
真正执行得了的分龄安装策略
写出三档：10 岁以下、10–13、14–17，即使你家只用两档。10 岁以下：仅白名单，禁止独自自由逛商店，开启购买前询问，若你在屏幕使用时间中选择，则免费下载也需批准。10–13：短白名单加受监督的类别试用，一周后复盘。14–17：目录更宽，但保留购买锁，并与青少年当面做每周订阅检查。把分档规则贴在孩子能读到的地方；秘密政策显得专断，更容易被绕过。生日时复盘分档，而不是出事才改。每档限制每周新装上限，避免猎奇变成整晚逛商店。
Free is not safe: install-time checklist for parents
Before approving any install, check age rating, in-app purchases list, privacy labels for tracking and contact data, and whether the app wants notifications, contacts, photos, or precise location on first launch. Search the developer name for clone patterns. Prefer apps that work without an account for child use cases. If the app is a thin web wrapper or pushes external payment, deny by default. Keep approval sessions short and scheduled—for example Sunday review—so children are not negotiating at 11 p.m. when parents are tired. Storewise-style listing research helps, but the parent still makes the binary approve/deny call and records it in a shared note.
免费不等于安全：家长安装时清单
批准任何安装前检查：年龄分级、内购列表、隐私标签中的跟踪与联系人数据，以及首启是否索要通知、通讯录、照片或精确位置。搜索开发者名是否山寨。儿童场景优先无需账号的应用。若是单薄网页套壳或导向外部支付，默认拒绝。把审批安排在短而固定的时段——例如周日复盘——避免深夜父母疲惫时被谈判。研究工具 类上架研究有帮助，但批准/拒绝的二元决定仍由家长做出，并记入共享笔记。
72-hour incident response after a bad install
Hour 0–2: remove the app, revoke permissions, change Screen Time passcode if the child learned it, and screenshot purchase history. Hour 2–24: cancel any trial, file Report a Problem if money moved, and talk through what rule failed without only punishing curiosity. Day 2–3: tighten the band policy, update the allowlist, and run a full subscription audit on the organizer account. If strangers messaged the child inside the app, treat it as a safety event: preserve evidence, block contacts, and consider platform reporting. Write one improvement so the same vector is closed. Incident response that only deletes the icon teaches nothing; response that changes controls reduces repeat rate.
不良安装后的 72 小时应急
0–2 小时：删除应用、收回权限、若孩子知道屏幕使用时间密码则更换，并截图购买记录。2–24 小时：取消试用，若已扣费则 Report a Problem，并讨论哪条规则失效，而不是只惩罚好奇。第 2–3 天：收紧分档策略、更新白名单，并对组织者账号做完整订阅审计。若应用内有陌生人私信，按安全事件处理：留证、拉黑、考虑平台举报。写下一则改进以关闭同一向量。只删图标的应急什么也教不会；改控制的应急才能降低复发。
Sunday approval clinic
Batch child install requests weekly. Score age rating, IAP list, privacy rows, and job-to-be-done. Cap new installs. Mid-week asks wait unless school-required so nights stay quiet.
周日审批门诊
儿童安装请求每周集中批。看年龄分级、内购、隐私行与用途。限制新装。周中请求除非学校要求否则等待，换取夜晚安静。
Age-banded install policy you can enforce
Write three bands: young kids (allowlist only), teens (broader catalog with purchase locks), shared family iPad (highest bar). Each band has a weekly new-install cap and a named approver. Secret policies get bypassed. Publish beside Wi-Fi passwords. Revisit on birthdays and after new devices join. Caps without approvers become arguments; approvers without caps become rubber stamps.
真正执行得了的分龄安装策略
写三档：低龄（仅白名单）、青少年（目录更宽但保留购买锁）、家庭共用 iPad（最高门槛）。每档有每周新装上限与具名批准人。秘密政策会被绕过。贴在 Wi-Fi 密码旁。生日与新设备加入时复盘。无批准人的上限会变争吵；无上限的批准人会变橡皮图章。
Sunday approval clinic (20 minutes)
Batch child install requests once a week. For each app score age rating, IAP honesty, privacy rows, developer history, and one-line job. Approve at most a fixed number. Mid-week asks wait unless school-required with the school name written down. Clinics remove midnight negotiation from the threat model. Keep a short reject reason so kids learn the pattern.
周日审批门诊（20 分钟）
儿童安装请求每周集中批。每个应用打分：年龄分级、内购诚实度、隐私行、开发者历史、一句话用途。最多批准固定数量。周中请求除非学校要求并写下校名否则等待。门诊把深夜谈判移出威胁模型。写简短拒绝理由，让孩子学会模式。
Case: school app exception abused as free-for-all
A school-required app exception becomes “any free game is educational.” Fix: exceptions need school name, review date after term, and still respect purchase locks. Free is not safe. After term, remove the exception. Document who granted it. Exceptions without end dates become permanent holes. Re-check the exception on the first Sunday after term ends.
案例：学校应用例外被滥用成敞开
学校应用例外变成“任何免费游戏都是教育”。修复：例外要校名、学期后复查日，且仍尊重购买锁。免费不等于安全。学期结束后移除例外。记录谁批准。无结束日的例外会成永久漏洞。学期结束后第一个周日复查例外。
Free-is-not-safe install-time checklist
Before Get: developer identity, privacy density, IAP list, update cadence, and one-star billing themes. Two red cells means do not install today. Screenshot the listing. On shared devices, free downloads should require adult presence even when price is zero. Teach teens the same card so substitutes do not invent softer rules.
免费不等于安全的安装时清单
点获取前：开发者身份、隐私密度、内购列表、更新节奏、一星扣费主题。两个红格今天不装。截图上架页。共用设备上即使零元也要成人在场。教青少年同一张卡，避免代管人发明更软规则。
Talking points that are not lectures
Say: buttons that look free can still charge; ask first; we review on Sunday; surprise charges freeze free downloads for everyone. Keep it short. Consistency beats eloquence. If a child was socially engineered, treat safety first, billing second. Practice once so both adults say the same lines.
不是说教的沟通要点
说：看起来免费的按钮仍可能扣费；先问；我们周日批；意外扣费会冻结所有人免费下载。保持简短。一致性胜过口才。若儿童被社工，先安全后账单。演练一次，让两个成人说同样的话。
Grandparent weekend mode
Before a child stays with relatives, switch the shared device into a stricter mode: free downloads off or Ask to Buy on, Screen Time purchase passcode confirmed with you not the child, and a written list of allowed apps. Tell relatives not to install from chat links. After return, run the purchase-day list even if they say nothing happened.
祖辈周末模式
孩子去亲戚家前，把共用设备调更严：关闭免费下载或开启购买前询问，确认屏幕使用时间购买密码在你而不是孩子那里，并写允许应用列表。告知亲戚不要从聊天链接安装。回来后即使他们说没事也跑购买日清单。
Exit condition for this guide
You are done when you have one written decision, one verification date, and one control or inventory change. Reading without those three is not completion. Put them in an adult note before closing the tab. If money moved, match bank to Purchase History within twenty-four hours.
本指南退出条件
当你有一个书面决策、一个验证日、一项控制或台账变化时才算完成。没有这三样只是阅读。关标签前放进成人笔记。若已扣费，二十四小时内把银行对齐购买记录。
Allowlist maintenance without endless meetings
Review the allowlist monthly: remove unused apps, re-check privacy and IAP for keepers, and add at most a fixed number of new titles. Children can propose apps into a waiting list for Sunday clinic. Waiting lists teach delay. Infinite same-day approvals teach pressure.
不靠无穷会议维护白名单
每月审白名单：移除不用应用，复查保留项的隐私与内购，新标题最多加固定数量。孩子可把应用提案放进等待列表等周日门诊。等待列表教延迟。无限当日批准教施压。
Hard-no categories for shared family devices
Default no for unknown VPNs, cleaners needing broad privacy access, aggressive IAP games with weak identity, config-profile apps, and chat-link installs. Write the list. Exceptions require organizer initials and an end date. Hard-no lists prevent every weekend becoming a negotiation.
家庭共用设备的硬拒绝类别
默认否：不明 VPN、需广泛隐私权限的清理、身份弱的激进内购游戏、配置描述文件应用、聊天链接安装。写清单。例外需要组织者签名与结束日。硬拒绝清单避免每个周末都变成谈判。
IAP education for kids in one page
Explain that free can still sell gems, that face-looking prompts can spend money, and that asking first is the rule even when friends already installed. Keep examples concrete. Revisit after any incident without shame spirals. Education without gates fails; gates without education create workarounds.
给孩子的一页内购教育
解释免费仍可能卖宝石、看起来像面容的提示仍可能花钱、即使朋友已装也要先问。例子要具体。事故后复盘但不羞辱螺旋。没有闸门的教育会失败；没有教育的闸门会催生绕过。
When school devices and family devices differ
School-managed devices may hide controls or force apps. Do not fight MDM with Screen Time guesses. Write what the school manages versus what the family manages. Home rules still apply to family Apple IDs used after school. Confusion between the two surfaces creates false confidence.
学校设备与家庭设备不同时
学校受管设备可能隐藏控件或强制应用。不要用屏幕使用时间猜测对抗 MDM。写清学校管什么、家庭管什么。放学后使用的家庭 Apple ID 仍适用家庭规则。两个界面混淆会制造虚假信心。
One-page field card for this decision
Compress into one page: goal, Apple ID identity, device, money or permission at stake, action today, verification tomorrow, control change this week. Screenshot into an adult note. If you cannot fill the card, you are reading ahead of acting. Share with the household payer when money is involved. Revisit in seven days and mark kept, cancelled, or escalated. Boring cards stop repeat incidents better than rereading long guides under stress. This card is the exit condition that turns research into operations.
该决策的一页现场卡
压成一页：目标、Apple ID 身份、设备、金钱或权限、今天动作、明天验证、本周控制变化。截图进成人笔记。填不满说明读得比做得快。涉及金钱与付款人共享。七天后标记保留、取消或升级。压力下重读长文不如无聊现场卡更能阻止重复事故。这张卡是把研究变成运营的退出条件。
Seven-day verification loop
After you act, verify on a schedule: same day for cancels and permission changes, seven days for installs and trials, thirty days for family policy. Each loop checks one artifact only. Missing artifact means incomplete action. Put the next date in the same note as the decision. Share dates when Family Sharing money is involved so two adults do not hold partial facts. Verification loops are how households stop relearning the same expensive lesson.
七日验证环
行动后按计划验证：取消与权限变更看当天，安装与试用看七天，家庭策略看三十天。每次只核一份工件。工件缺失=动作未完成。把下一日期写在与决策同一笔记。家庭共享涉及金钱时共享日期，避免两人各握半份事实。验证环让家庭停止重学同一昂贵教训。
Waiting list UX for kids
Provide a simple note or shared list where kids add app names during the week. Sunday clinic processes the list. Visible process reduces secret installs. If the list is ignored for weeks, kids invent workarounds—keep the clinic sacred.
给孩子的等待列表体验
提供简单笔记或共享列表让孩子周中写下应用名。周日门诊处理列表。可见流程减少秘密安装。若列表数周被无视，孩子会发明绕过——让门诊成为神圣习惯。
When a child uses a parent phone temporarily
Handing a parent phone is a high-risk event. Enable Guided Access, remove free-download capability, or sign out of the paying media account when possible. After return, check Purchase History the same hour. Temporary access without gates creates permanent charges.
孩子临时用家长手机时
把家长手机交给孩子是高风险事件。启用引导式访问、去掉免费下载能力，或在可能时退出付款媒体账号。归还后同一小时查购买记录。没有闸门的临时访问会制造永久扣费。
Measuring success over sixty days
Success is fewer surprise installs, zero unexplained family Apple charges, and kids using the waiting list without secret workarounds. Track those metrics monthly. If secret installs rise, tighten free-download gates before adding more lectures. Metrics keep policy honest.
六十天如何衡量成功
成功是意外安装更少、家庭 Apple 扣费零无法解释、孩子使用等待列表而无秘密绕过。每月跟踪这些指标。若秘密安装上升，先收紧免费下载闸门再加说教。指标让政策诚实。
Parent handoff card for travel days
When parents travel, leave a one-page handoff: allowlist, free-download state, who approves, Screen Time passcode holder, and emergency cancel path. Travel days without handoff create open gates. Review the card on return. Short handoffs beat long verbal instructions that get forgotten.
出行日的家长交接卡
父母出行时留一页交接：白名单、免费下载状态、谁批准、屏幕使用时间密码持有人、紧急取消路径。没有交接的出行日会打开闸门。返回后复查卡片。短交接胜过容易被忘的长口头说明。
Next in this series · 3/5
本系列下一篇 · 3/5
Screen Time Purchase Controls That Actually Reduce Surprise Charges
真正能减少意外扣费的屏幕使用时间购买控制
Keep the same research path so related decisions stay consistent.
沿同一研究路径继续，相关决策会更连贯。