1. 适用范围与基本原则
本隐私权政策适用于 TimeWell 移动应用。TimeWell 不要求注册账户，也不运营用于接收用户内容的应用服务器。 应用中输入的时间记录、目标、人物和生活设置默认仅保存在您的设备上。
2. 应用在设备本地处理的数据
“本地处理”是指数据由应用在您的设备上访问和使用，但不会由 TimeWell 传输给开发者或其服务器。 根据您主动使用的功能，应用可能在本地处理以下内容：
| 数据类型 | 示例 | 用途 | 默认位置 |
|---|---|---|---|
| 时间与活动记录 | 活动名称、分类、开始和结束时间、时长、心情、备注 | 展示时间线、统计和回顾 | 设备本地数据库 |
| 目标信息 | 目标名称、分类、时间范围、目标时长和状态 | 计算和展示目标进度 | 设备本地数据库 |
| 重要人物信息 | 姓名或昵称、关系、头像文字、备注、关联记录 | 帮助您回顾与重要人物相处的时间 | 设备本地数据库 |
| 生活可视化信息 | 出生日期、参考年龄 | 计算人生时间可视化数据 | 设备本地偏好设置 |
| 应用设置 | 语言、主题、备份提醒、应用锁和后台隐藏设置 | 保存您的应用偏好 | 设备本地偏好设置 |
| 备份数据 | 您主动创建或选择的 .ybackup / JSON 备份文件 | 导出和恢复本地数据 | 您通过系统文件界面选择的位置 |
如果您记录其他人的姓名、昵称或备注，请确保您有权保存这些信息，并避免录入不必要的敏感内容。
3. 数据收集、共享与出售
- 不收集：TimeWell 不将上述用户内容传输到开发者或开发者服务器。
- 不共享：TimeWell 不主动向广告商、数据经纪商、分析平台或其他第三方提供用户内容。
- 不出售：TimeWell 不出售、出租或交易个人数据。
- 不追踪：应用不使用广告 ID、跨应用追踪、用户画像或个性化广告。
当您主动将备份保存到云盘或其他外部存储服务时，文件可能由您选择的服务同步或处理。 这是由您发起的操作，后续处理受该存储服务自身的隐私政策和安全措施约束，TimeWell 开发者无法访问或控制该服务中的文件。
4. 权限和系统功能
设备身份验证
当您主动启用“应用锁”时，TimeWell 会调用设备提供的生物识别或设备凭据验证界面。 指纹、面容模板或设备密码由操作系统管理，TimeWell 不会读取、复制或保存原始生物识别数据； 应用只会收到验证成功、失败或取消的结果。
用户选择的文件
创建或恢复备份时，TimeWell 使用系统文件选择器访问您明确选择的目标位置或备份文件。 应用不会扫描全部文件，也不申请 Android 的“管理所有文件”权限。
不使用的敏感权限
当前版本不请求位置、通讯录、电话、短信、相机、麦克风、日历或健康平台权限。
5. 第三方组件与平台服务
TimeWell 使用 Flutter 及用于本地数据库、偏好设置、设备验证和系统文件选择的功能组件。 这些组件用于实现应用功能；当前版本不集成广告、营销、远程分析或远程崩溃收集 SDK。
Google Play、Android、iOS 或您选择的云存储服务可能依据其自身条款处理安装、更新、商店访问、 设备诊断或文件同步数据。此类平台处理不由 TimeWell 开发者接收或控制，请参阅相应服务的隐私政策。
6. 数据安全
- 应用数据默认保存在操作系统为 TimeWell 分配的应用沙盒中。
- 您可以启用应用锁，使用设备身份验证限制应用界面访问。
- 切换到后台时，可以启用内容遮挡以减少屏幕预览泄露。
- 我们不会声称任何系统绝对安全；请保持设备系统更新，并妥善保护设备访问凭据。
备份安全提醒：TimeWell 的备份文件是可移植的 JSON 数据，目前不会由应用单独加密。 任何能够访问备份文件的人都可能读取其中内容。请仅保存到可信位置，不要公开分享，并使用设备或存储服务提供的加密和访问控制。
7. 数据保留与删除
- 本地内容会保留在设备上，直到您在应用内删除、清除应用存储或卸载应用。
- 应用内“删除全部数据”会删除时间记录、目标和重要人物；您也可以单独编辑或删除相关内容。
- 如需删除包括出生日期和应用偏好在内的全部本地信息，请使用系统设置中的“清除存储/清除数据”或卸载 TimeWell。
- 您创建的备份独立于应用数据存在，卸载应用不会自动删除备份；请在所选文件位置自行删除。
- TimeWell 没有用户账户或云端副本，因此开发者无法远程恢复或删除您设备及外部存储位置中的文件。
由于应用不提供账户创建功能，Google Play 的应用账户删除要求目前不适用。
8. 儿童隐私
TimeWell 是通用的个人时间记录工具，并非专为儿童设计。应用不会向开发者传输或由开发者收集儿童个人数据。 监护人应指导未成年人避免在记录或备份中填写不必要的敏感信息。
9. 跨境传输
TimeWell 不运营接收用户内容的服务器，因此开发者不会对应用内用户内容进行跨境传输。 如果您选择将备份保存到云服务，该服务可能按照其政策在不同国家或地区处理文件。
10. 政策变更
当应用功能、数据实践或适用规则发生变化时，我们可能更新本政策。 更新版本将修改页面顶部的生效日期。若变化会实质影响您的权利或数据处理方式，我们会通过应用内说明、 商店发布说明或其他适当方式提示。
11. 联系我们
如对本政策或 TimeWell 的数据处理方式有疑问，请通过以下方式联系：
1. Scope and core principles
This Privacy Policy applies to the TimeWell mobile application. TimeWell does not require an account and does not operate an application server that receives your content. Time records, goals, people, and life settings you enter are stored locally on your device by default.
2. Data processed locally on your device
Depending on the features you choose to use, TimeWell may process the following data locally:
- Activity names, categories, start and end times, duration, mood, and notes;
- Goals, target duration, date range, category, and status;
- Names or nicknames of important people, relationship labels, avatar text, notes, and linked records;
- Birth date and reference age used for life-time visualizations;
- Language, theme, backup reminder, app lock, and background privacy preferences; and
- Backup files that you explicitly create or select.
Local processing means that the app accesses and uses this data on your device without transmitting it to the TimeWell developer or a developer-operated server. If you enter information about another person, make sure you are authorized to store it and avoid unnecessary sensitive details.
3. Collection, sharing, and sale
- No developer collection: TimeWell does not transmit your app content to the developer or a developer server.
- No sharing for advertising or analytics: TimeWell does not provide your content to advertisers, data brokers, or analytics platforms.
- No sale: TimeWell does not sell, rent, or trade personal data.
- No tracking: The app does not use advertising identifiers, cross-app tracking, profiling, or personalized ads.
If you choose to save a backup to a cloud drive or another external storage provider, that provider may sync or process the file under its own privacy policy. This transfer is initiated by you. The TimeWell developer cannot access or control files stored with that provider.
4. Permissions and system features
Device authentication
If you enable App Lock, TimeWell invokes the authentication interface supplied by your operating system. Fingerprints, facial templates, and device credentials remain under operating-system control. TimeWell does not read, copy, or store raw biometric data and receives only an authentication result.
User-selected files
When you create or restore a backup, TimeWell uses the system file picker to access only the destination or backup file you explicitly select. The app does not scan all files and does not request Android's broad “Manage all files” permission.
Sensitive permissions not used
The current version does not request access to location, contacts, phone, SMS, camera, microphone, calendar, or health-platform data.
5. Third-party components and platform services
TimeWell uses Flutter and functional components for local databases, preferences, device authentication, and system file selection. The current version does not integrate advertising, marketing, remote analytics, or remote crash-reporting SDKs.
Google Play, Android, iOS, or a storage provider you select may independently process installation, update, store-access, device-diagnostic, or file-sync data under their own terms. The TimeWell developer does not receive or control that platform processing.
6. Security
- App data is stored in the operating-system sandbox assigned to TimeWell.
- You may enable App Lock to restrict access to the app interface using device authentication.
- You may hide content in the app-switcher preview while TimeWell is in the background.
- No system can be guaranteed completely secure; keep your operating system updated and protect your device credentials.
Backup warning: TimeWell backups are portable JSON files and are not separately encrypted by the app. Anyone who can access a backup may be able to read it. Store backups only in trusted locations, do not publish them, and use encryption and access controls offered by your device or storage provider.
7. Retention and deletion
- Local content remains on your device until you delete it, clear app storage, or uninstall TimeWell.
- The in-app “Delete all data” action removes time records, goals, and important people. Individual content can also be edited or deleted.
- To remove all local information, including birth date and preferences, use your system's Clear storage/Clear data action or uninstall TimeWell.
- Backup files exist independently. Uninstalling TimeWell does not delete them; delete them from the location you selected.
- Because TimeWell has no accounts or cloud copy, the developer cannot remotely recover or delete files stored on your device or with your chosen storage provider.
TimeWell does not offer account creation, so Google Play's app-account deletion requirement does not currently apply.
8. Children's privacy
TimeWell is a general personal time-recording tool and is not designed specifically for children. The app does not transmit children's personal data to the developer. Guardians should help minors avoid entering unnecessary sensitive information into records or backups.
9. International transfers
TimeWell does not operate a server that receives your app content, so the developer does not transfer that content internationally. A cloud storage provider you select may process a backup in other countries or regions under its own policy.
10. Changes to this policy
We may update this policy when app features, data practices, or applicable requirements change. The effective date at the top will be revised. Material changes may also be communicated through the app, release notes, or another appropriate channel.
11. Contact us
For privacy questions or inquiries about TimeWell's data practices, contact: