隐私权政策

1. 适用范围与责任主体

本隐私权政策适用于由 Elliot Shi（以下简称“开发者”） 提供的 Evermark 应用及其相关版本。本政策说明 Evermark 如何访问、处理、存储、 分享和删除与用户有关的数据。

Evermark 当前不提供在线账号系统，也不运营用于接收用户记录的后端服务器。 因此，本政策中的“处理”主要指在用户设备上完成的本地处理。

2. Evermark 访问和处理的数据

Evermark 允许你主动创建、导入或选择以下内容。这些内容可能包含你自愿填写的个人信息， 但默认只保存在你的设备上，不会传输给开发者。

开发者不收集的数据

当前版本不向开发者或开发者控制的服务器发送个人数据、设备标识符、广告标识符、 精确或大致位置、联系人、浏览记录、诊断数据或使用情况数据。Evermark 不使用广告、 第三方分析或跨应用追踪 SDK。

3. 本地数据的使用目的

• 创建、展示、搜索和更新痕迹及其状态时间线；
• 创建成长路径、里程碑、投入时间和进度统计；
• 安排用户设置的回访日期并生成本地年度概览；
• 保存语言、主题和隐私偏好；
• 验证 App 锁密码并保护应用内内容；
• 按照用户指令创建、分享或恢复本地备份和导出文件。

Evermark 不会将用户数据用于广告、营销、信用评估、自动化画像或出售数据。

4. 数据共享与第三方

开发者不会出售、出租或向第三方共享你的应用内记录。以下情况完全由你的主动操作触发：

• 系统分享：当你点击分享时，操作系统会把你选择的内容交给你指定的应用、 联系人或服务。接收方如何处理数据由其自身隐私政策约束。
• 导出与加密备份：你可以将文件保存到设备、外部存储或所选云盘。 开发者不会接收这些文件，也无法访问你的备份密码。
• 应用商店与操作系统：Google Play、Apple App Store 或设备操作系统 可能基于其自身条款处理安装、购买、崩溃或商店访问相关数据； 这些处理独立于 Evermark 的本地数据处理。

5. 设备权限与文件访问

Evermark 使用操作系统提供的文件选择器和分享面板。应用只能访问你在选择器中明确选择的文件， 不会扫描你的整个相册或文件系统。

当前 Android 正式版本不请求联系人、设备定位、相机、麦克风或广泛存储访问权限。 你填写的“地点”是普通文字字段，并非来自设备定位服务。

6. 数据安全

• 痕迹和成长数据保存在应用的本地数据库中；
• Android 系统自动备份已关闭，以减少本地数据被意外复制的风险；
• App 锁只保存带随机盐的加密校验值，并使用操作系统安全存储保护相关配置；
• 用户创建的备份使用用户提供的密码在设备上加密；该密码不会被应用保存；
• 应用不会把用户记录传输到开发者服务器。

尽管我们采取合理的安全措施，但任何本地设备或存储方式都无法保证绝对安全。 请为设备设置系统锁屏，并妥善保管导出文件、备份文件及其密码。

7. 数据保留与删除

你的记录会一直保留在设备上，直到你主动删除相关记录、使用 “设置 → 删除全部数据”，清除浏览器站点数据，或卸载应用。

• 你可以单独删除痕迹、成长路径和里程碑；相关本地时间线也会一并删除。
• “删除全部数据”会清除应用中的痕迹、成长路径和 App 锁配置。
• 已导出、已分享或保存在应用外部的文件不受应用控制，需要由你在对应位置手动删除。
• Evermark 不创建在线账号，也不在开发者服务器保留用户数据，因此没有可由开发者执行删除的 服务器账号或云端记录。

如需确保卸载前删除本地内容，建议先使用应用内“删除全部数据”功能。

8. 儿童隐私

Evermark 并非专门面向 13 岁以下儿童设计。开发者不会明知故意收集儿童的个人数据。 由于应用没有账号和开发者服务器，用户创建的内容默认只保存在其设备上。 监护人如对儿童使用本应用有疑问，可通过本政策末尾的联系方式与我们联系。

9. 本政策的变更

当 Evermark 的功能、数据处理方式或适用政策发生变化时，我们可能更新本隐私权政策。 新版本会在本页面标明最新更新日期；如变更对用户权益有重大影响， 我们会通过应用内提示或应用商店发布说明提供适当通知。

10. 联系我们

如果你对本政策、Evermark 的数据处理方式或删除数据的方法有疑问，请联系：

1. Scope and data controller

This Privacy Policy applies to Evermark and related versions provided by Elliot Shi (“the Developer”). It explains how Evermark accesses, processes, stores, shares, and deletes information relating to users.

Evermark currently has no online account system and no backend operated to receive user records. “Processing” in this policy therefore primarily means processing performed locally on the user’s device.

2. Data Evermark accesses and processes

Evermark lets you intentionally create, import, or select the following content. It may include personal information you choose to enter, but it stays on your device by default and is not transmitted to the Developer.

Data the Developer does not collect

The current version does not transmit personal data, device identifiers, advertising identifiers, precise or approximate location, contacts, browsing history, diagnostics, or usage data to the Developer or a Developer-controlled server. Evermark does not use advertising, third-party analytics, or cross-app tracking SDKs.

3. Purposes of local processing

• Create, display, search, and update traces and status timelines;
• Manage growth paths, milestones, time invested, and progress;
• Schedule user-selected revisit dates and generate local yearly summaries;
• Save language, theme, and privacy preferences;
• Verify the App Lock code and protect in-app content;
• Create, share, or restore local backups and exports at your direction.

Evermark does not use user data for advertising, marketing, credit assessment, automated profiling, or sale.

4. Data sharing and third parties

The Developer does not sell, rent, or share your in-app records with third parties. The following actions occur only when you initiate them:

• System sharing: when you tap Share, the operating system passes the selected content to the app, person, or service you choose. The recipient’s own privacy policy governs its handling.
• Exports and encrypted backups: you may save files to your device, external storage, or a chosen cloud drive. The Developer does not receive these files and cannot access your backup password.
• App stores and operating systems: Google Play, the Apple App Store, or your operating system may process installation, purchase, crash, or store-access data under their own terms, independently of Evermark’s local processing.

5. Device permissions and file access

Evermark uses operating-system file pickers and share sheets. It can access only files you explicitly select and does not scan your entire photo library or file system.

The current Android production release does not request contacts, device location, camera, microphone, or broad storage access. A “place” entered in Evermark is a text field and is not obtained from device location services.

6. Data security

• Trace and growth data is stored in the app’s local database;
• Android system backup is disabled to reduce unintended copying of local data;
• App Lock stores only a salted cryptographic verifier and protects related settings using operating-system secure storage;
• Backups are encrypted on the device with a password you provide; the app does not retain that password;
• User records are not transmitted to a Developer-operated server.

No device or storage method can guarantee absolute security. Use a system screen lock and safeguard exported files, backup files, and their passwords.

7. Data retention and deletion

Your records remain on your device until you delete individual records, use Settings → Delete all data, clear browser site data, or uninstall the app.

• You may delete individual traces, growth paths, and milestones; related local timeline entries are deleted with them.
• Delete all data removes traces, growth paths, and App Lock configuration from the app’s active storage.
• Files already exported, shared, or stored outside Evermark are beyond the app’s control and must be deleted by you at their destination.
• Evermark creates no online account and retains no user data on a Developer server, so there is no server account or cloud record for the Developer to delete.

To ensure local content is removed before uninstalling, use the in-app Delete all data feature first.

8. Children’s privacy

Evermark is not specifically directed to children under 13. The Developer does not knowingly collect children’s personal data. Because the app has no account system or Developer server, user-created content stays on the device by default. A parent or guardian with questions may contact us using the details below.

9. Changes to this policy

We may update this Privacy Policy when Evermark’s features, data practices, or applicable requirements change. The latest revision date will appear on this page. If a change materially affects user rights, we may provide additional notice in the app or store release notes.

10. Contact us

For questions about this policy, Evermark’s data practices, or how to delete local data, contact: