Executive Summary

Key numbers

There are four. The first two mark how long the feature took to reach China and what makes it appear; the last two mark the regulatory step that opened the door and the gap still standing after that step.

Sources: TheNextWeb (2026-10-31) · CGTN (2026-10-31) · Caixin (2026-07-16)

They are Siri, Writing Tools and Visual Intelligence. When Siri takes a request its own model cannot process, it calls on Qwen's broader knowledge and answers on the spot. Writing Tools gains a new entry called Compose with Qwen, which produces original text and images on any subject. The features opening alongside them include live translation in Messages, FaceTime and phone calls, Genmoji, Clean Up for taking distractions out of photos, mail summaries, priority ordering for notifications, and question-and-answer over photos and PDFs.

What is missing is just as clear. The next-generation Siri that Apple showed at WWDC this year is not part of this update. What users in China receive in December is the earlier generation of the Apple Intelligence feature set. iPad and Mac have not finished the approval process and have no date at all, so this release covers the iPhone only. The features ship switched off, and the user has to turn them on. Turning them on means signing in with an Apple Account or the user's own Qwen account, and the system asks for consent each time before a question, a file or an image is passed to Qwen.

Two paths lead to the feature. Either the Apple Intelligence-capable iPhone was bought in China, or the device location and the country or region on the Apple Account are both set to China. On either path, Siri and the device language have to be English or Simplified Chinese. It is less a feature for people who live in China than a feature that appears when the device came from China or stands at coordinates registered there. Nowhere is there a field asking for the user's nationality or address. The supported models are iPhone 15 Pro and Pro Max, every iPhone 16 and later, iPhone Air and iPhone Duo.

Apple Intelligence was unveiled at WWDC in June 2024 and switched on first in the US that October, but on the Chinese mainland the launch itself was blocked. China's Interim Measures for the Management of Generative AI Services require anyone offering a generative AI service to the general public in China to pass a government review and register, and Apple's cloud model sat outside that gate. What Apple needed urgently, then, was not a better model but a local one already through the gate.

The search did not end on the first try. December 2024 brought reports that Apple was in talks with Tencent and ByteDance. Work with Baidu, which had started earlier, ran aground on data. Baidu wanted to collect and analyze iPhone user queries to improve its own models, and Apple's privacy policy would not allow that collection, as reporting at the time explained. The two also differed on how an answer gets made. Baidu wanted to answer out of training data, while Apple wanted answers shaped by the context of that person's iPhone use. Further reports said other candidates including DeepSeek were considered, and none of those pairings came together.

Those two years sit behind the fact that the no-training sentence appeared in the front row of this announcement, right next to the feature descriptions. Baidu, though, is not out of the picture. The main model seat went to Alibaba, and Baidu is reported to have stayed on for search and vision.

The gate opened in July 2026. The notice published by the Cyberspace Administration of China on July 15 carried seven generative AI services built into mobile phones, Apple Intelligence among them. Handset AI from Huawei, Xiaomi, OPPO, vivo, Samsung and Nubia was on the same list. Coverage described it as the first time the regulator cleared a batch of AI models built for phones. That is a different procedure from the one that had been screening apps and cloud services. Rather than a door opening for Apple alone, the procedure for handling AI embedded in a handset had only then settled into place. Laying the published dates end to end shows the shape of the gap.

From the start, the Chinese version of Apple Intelligence was drawn around two local companies. The October 31 announcement is the Qwen side of that taking shape first. Which features each company handles, though, has not been disclosed by Apple, by Alibaba or by Baidu. The account that Qwen handles language and multimodal generation while Baidu handles search and vision comes out of industry analysis and reporting, and neither party has confirmed that division. The opacity this article turns to later does not hang on data handling alone.

The basic design of Apple Intelligence is the same everywhere. Solve it on the device first, and pass to the cloud only what the device cannot manage. Where that handoff lands is not the same in every country. Outside China, Google Gemini holds the spot. Apple signed a custom model licensing deal with Google in January 2026 to replace OpenAI, reported at around a billion dollars a year. From iOS 27 on, settings let a user pick ChatGPT, Gemini or Claude as the default AI.

In China, Qwen and Baidu fill that spot. Reports that Apple trained its own model for China and reports that Qwen powers Siri look like they contradict each other, but the two sit at different layers. The model that receives a request at the base and decides where to send it is Apple's; when Siri gets something past its own range, such as general knowledge, long-form writing or image generation, it calls Qwen. The role Gemini plays outside China is the role Qwen plays inside it.

The state of the Chinese market is part of the background to this announcement. By IDC's count, smartphone shipments in China came to 57.9 million units in the third quarter of 2026, a sixth consecutive quarterly decline, and while the market as a whole fell 15.4 percent, Apple's drop stopped at 4.3 percent. That leaves Apple second on 17.8 percent, behind Huawei on 21 percent. All the while Apple was selling iPhones in China, Apple Intelligence could not be used on them, and the six other services cleared in the July notice were handset AI from rival manufacturers.

Assessments of how large an event this is arrived with the announcement. Wang Xiaojie, a professor at Beijing University of Posts and Telecommunications, told Xinhua that this is the first case of a top-tier consumer hardware maker adopting a Chinese large model as the core AI foundation of its system in the Chinese market, and treated it as a milestone for the commercialization of Chinese large models. The scope of that assessment is bounded by the Chinese market. The models Apple uses elsewhere are unchanged.

A sentence saying customer data will not go into model training can be written into any set of terms. The question is what holds the sentence up. Outside China, Apple answered that question with Private Cloud Compute. Once a request has been processed nothing is retained; that property is enforced in technology rather than in operating policy; not even Apple's own staff can reach the data through privileged access; code cannot be aimed at a particular user; and the code running on the servers is published for independent experts to inspect. A Pebblous report from June went through this structure once before, and an ACM conference paper in June 2026 verified the claims from the outside.

In China those servers drop out of the path. Private Cloud Compute plays no part there, and a cloud query raised by a user in China goes to Alibaba's infrastructure rather than through an Apple server, according to coverage of this announcement. The query is processed on that infrastructure, and the company operating it carries a legal duty under China's National Intelligence Law to cooperate with government requests for data. No other AI partner of Apple's sits under that condition. Nothing public explains where queries are processed between Apple and Alibaba, how long they are kept, or on what terms a government can reach them, and reporting notes that no outside audit of data handling between the two companies has been published. The output side follows the local system too. Responses from the Chinese version of Apple Intelligence are filtered to local standards, from Qwen and from Apple's own model alike, according to reporting.

Lay the two paths against each other item by item and the difference shows. The table below is one this article built.

Which model goes into an iPhone is not for Pebblous to decide. The reason for looking into this announcement lies in the shape of the design. Apple put a separate data path for each country inside one product, and drew the line between them not at the user's nationality but at coordinates: where the device was bought, and the device location together with the account country. Any team that has to ship a service into markets with different demands about data, China or Europe among them, will meet a design of the same shape before long.

This design reaches straight through to anyone putting an app on top of the iPhone. The same app, built from the same code, gets an answer from a different model in China the moment it calls a system AI feature. The app does not pick which model. The device, its location and the Apple Account region pick it. The tone of the answer, the grounds for a refusal and the country where the data stays all split without the app knowing. For anyone standing on a layer where the platform swaps the model underneath, it means checking how your own product behaves region by region.

When the paths split, the policy documents have to split with them. If one feature has a different processor, a different storage location and a different governing law in each region, a one-page privacy policy cannot hold all of the facts. Three things are worth checking first when writing down the terms for handling data.

• How far the data covered by the no-training sentence reaches. The sentence in this announcement points at user requests and the responses generated for them. Whether uploaded files, the records left behind during use, and anything derived from them sit inside the same fence is not settled by the sentence alone
• Whether the means of confirming the promise is written down beside it. What separates a declaration from a state of affairs is which of these the contract carries: an outside audit, technical enforcement of a structure that keeps no records, or disclosure of where data is stored and who it is passed along to
• Whether a different answer comes back in each country. If the same question draws different answers, that difference belongs in the policy document, and a user should be able to tell which one is in use

What Apple has shown outside China is closer to pulling the proof inside the product. What it has chosen in China is to accept the local processing the regulation demands and leave the data guarantee to another company's promise. Which approach is right will be settled by markets and regulators, but the two guarantees plainly do not carry the same weight. And for a user, which path a question takes right now comes down to where that device was bought and two fields on a settings screen.

Thanks for reading this far. The announcement itself, the feature range, the conditions for switching it on, the November 4 beta and December iOS 27.3 dates, and Alibaba's statement about not training were confirmed in TheNextWeb, The Apple Post, CGTN and SCMP, all carrying Apple's China newsroom announcement. The regulatory gap and the data disagreement with Baidu come from reporting in December 2024, the list of seven that went up with the July 15 notice from Caixin, the third-quarter China market figures from coverage of IDC's count, and Wang Xiaojie's assessment from CGTN carrying Xinhua. The five properties of Private Cloud Compute are set out on Apple's security research blog and in the Pebblous report from June. The split of roles between Qwen and Baidu has not been disclosed by the parties, so it follows industry analysis and reporting, as do the note that no independent audit has been published and the local filtering of output. The table in section 4 that divides the guarantee in China from the guarantee outside it, and the three checks in section 5, are this article's interpretation. If you are already running a design that hands data to a different model depending on the region, we would like to hear how you wrote that difference into your policy documents.

Pebblous Data Communication Team
November 2, 2026

Announcement Coverage

• 1.TheNextWeb. (2026). "Apple confirms its AI features reach China in December, with Qwen."
• 2.CGTN. (2026). "Alibaba's Qwen to integrate into Apple Intelligence in landmark deal."
• 3.Joseppi, D. (2026). "Apple Intelligence finally coming to China in December with iOS 27.3." The Apple Post.
• 4.South China Morning Post. (2026). "China approves Alibaba AI models for use in iPhone Duo and other Apple handsets."
• 5.Global Times. (2026). "Alibaba, Apple partner to bring Qwen to Apple Intelligence for users in China."

Regulatory and Market Background

• 6.TechCrunch. (2026). "Apple Intelligence approved for launch in China with Alibaba and Baidu."
• 7.Caixin Global. (2026). "China Clears Mobile AI Models, Paving Way for Apple Intelligence."
• 8.Reuters. (2024). "Apple in talks with Tencent, ByteDance to roll out AI features in China, sources say." Malay Mail.
• 9.TechNode. (2026). "Huawei grows as China's smartphone shipments fall 15.4% in third quarter."

Data Guarantees and Verifiability

• 10.Apple. (2024). "Private Cloud Compute: A new frontier for AI privacy in the cloud." Apple Security Research.
• 11.Tech Times. (2026). "China Cleared Apple Intelligence, but Cloud Queries Go to Alibaba Under China's Spy Law."
• 12.The New Stack. (2026). "Apple's new AI split means your iOS app could behave differently in China."