隐私政策

中文

1. 适用范围与运营者

本政策适用于 iOS、Apple Watch 与 Android 应用“静念 / OneThought”（下称“本应用”）。本应用由独立开发者 Shaolie Lin 提供。如有隐私问题，请联系 l_charlie@163.com。

Android 版独立说明

适用版本：Android 应用包名 com.onethought.woodfish。当前 Android 版本不包含广告或应用内购买；Android 版包含功德排行榜，并使用 Firebase Analytics 记录有限的应用使用事件。下方涉及广告、购买或 Apple Watch 的说明仅适用于实际提供相应功能的平台。

• 设备本地数据：功德计数、收藏、播放偏好、睡眠定时状态、佛曲目录快照与离线音频缓存在应用私有目录中，用于修行记录、播放和离线收听。我们不会主动把这些本地记录上传到自己的账号系统。
• 功德排行榜：当你使用排行榜或应用同步功德时，应用会生成并保存一个随机用户标识，并将排行榜昵称、今日功德、总功德及已释放功德发送到排行榜服务，用于展示和同步排名。排行榜不要求注册账号。
• Firebase Analytics：Android 版会将应用启动、页面浏览、木鱼敲击里程碑、佛曲播放、分享、收藏、深链接打开等有限事件发送给 Google Analytics for Firebase，用于了解功能使用情况和改进应用。
• Android 系统备份：应用允许 Android 按用户设备与账号的系统设置执行云备份或设备迁移。该过程由 Android 平台管理；你可以在系统设置中管理备份，并可通过清除应用数据或卸载应用删除本机数据。
• 在线目录与音频：应用会访问 app.onethought.top 获取佛曲目录，并按目录地址访问我们的服务或远程音频内容提供方。请求会自然携带 IP 地址、请求时间、所请求资源及必要的网络技术信息；相关服务可能按安全、故障排查和最短必要原则处理受限日志。
• 运动传感器：仅在你启用“智能关闭”时，应用会读取加速度传感器以判断设备是否长时间静止。原始传感器数据仅在设备上实时处理，不保存、不上传。
• 后台媒体播放：你主动播放佛曲时，Android 前台媒体服务和系统媒体通知用于继续播放并提供播放控制，不会因此读取通讯录、相机、麦克风或精确位置。
• 系统分享：只有在你点击分享后，应用才把曲目标题和 onethought.top 链接交给 Android 系统分享面板；你选择的第三方应用会依据其自身隐私政策处理分享内容。

Android 本地数据通常保留至你清除应用数据或卸载应用；服务端安全日志按运营和法律要求限制访问与保留。隐私、访问或删除问题可发送邮件至 l_charlie@163.com。

2. 我们处理的数据

我们不要求注册账号，也不会要求你提供真实姓名、电话号码或通讯录。请不要在排行榜昵称中填写敏感信息。

3. 设备权限与传感器

• 运动传感器：在你开启摇动敲击时，本应用会在前台读取加速度数据以识别动作。原始运动数据不会被保存或上传。
• 后台音频：用于你主动播放佛曲、白噪音或有声内容时继续播放。
• Apple Watch 连接：用于在你的配对设备之间同步功德计数和操作状态。

4. 在线内容和第三方服务

• Firebase Analytics：帮助我们了解功能使用情况。
• Firebase Remote Config：获取轻量功能配置，例如是否启用开屏广告；该服务会处理国家或地区代码、语言、时区、系统版本和应用标识等技术信息。
• Google Mobile Ads：展示开屏广告和激励广告。广告可能是个性化、非个性化、受限或仅技术投放，取决于适用法律、地区、同意状态和 Google 设置。
• Apple StoreKit：加载供养商品、处理购买并验证交易。付款凭据和 Apple 购买记录由 Apple 管理。
• 在线音频与图片源：当你浏览、播放或下载佛曲、白噪音、有声书和封面时，本应用或我们的代理服务会访问相应资源提供方。

第三方会按照其自身政策处理数据。你可以查阅 Google 隐私权政策、Firebase 隐私与安全说明和 Apple 隐私政策。

5. 广告与隐私选择

你可以通过 iOS 的隐私与跟踪设置限制广告标识符和跨 App 跟踪。在适用地区，如果应用显示 Google 的同意或隐私选项界面，你可以在其中管理广告相关选择。关闭个性化并不意味着不再显示广告。

6. 保留、删除和你的选择

• 本地数据通常会保留到你在应用内删除内容、清除应用数据或卸载应用。佛曲、白噪音和有声书缓存可在“设置 → 离线缓存”中单独删除或全部清空。
• 你可以编辑排行榜昵称；如需删除服务器上的排行榜记录，请发送邮件并提供应用中显示的排行榜昵称及可用于定位记录的必要信息。我们可能需要进一步核验请求。
• 本应用不会另行持久化保存 StoreKit 交易明细；Apple 会依据其政策保留购买记录，并通过 Apple 账户与支持渠道提供管理。分析、广告和服务器日志的保留期限由我们或相应服务提供方依据安全、运营和法律需要决定。
• 你可以关闭摇动敲击、停止使用在线内容，或通过系统设置管理相关隐私选项。

7. 数据共享与出售

我们不会出售你的心愿内容或本地功德历史。我们仅会为提供本应用、分析、广告、购买处理、安全和法律合规所需，与 Apple、Google 及上述内容或基础设施服务提供方处理或共享必要信息；在法律要求、保护权利或完成业务重组时，也可能依法披露必要信息。

8. 儿童、健康与宗教信息

本应用不是面向儿童定向设计的服务，也不会有意要求儿童提交真实身份信息。本应用提供的木鱼、冥想与心愿功能仅用于休闲和自我记录，不构成医疗、心理、宗教或其他专业建议。请勿在心愿或昵称中输入不必要的健康、宗教或其他敏感信息。

9. 安全与跨境处理

我们采用与应用规模相适应的技术和组织措施保护信息，但任何存储或传输方式都无法保证绝对安全。第三方服务可能在你所在国家或地区以外处理数据，并依据其合同、政策和适用法律采取保护措施。

10. 政策更新

功能、服务提供方或法律要求变化时，我们可能更新本政策，并在本页公布新的生效日期。重大变化会在合理可行时通过应用内或其他适当方式提示。

11. 联系我们

隐私咨询、访问或删除请求：l_charlie@163.com

English

1. Scope and Provider

This policy applies to the iOS, Apple Watch, and Android versions of “OneThought / 静念” (the “App”), provided by independent developer Shaolie Lin. Contact: l_charlie@163.com.

Android App-Specific Notice

Covered package: com.onethought.woodfish. The current Android version does not include advertising or in-app purchases. It does include a merit leaderboard and uses Firebase Analytics for limited app-usage events. References below to advertising, purchases, or Apple Watch features apply only to platforms that actually provide them.

• On-device data: Merit counts, favorites, playback preferences, sleep-timer state, a Buddhist-music catalog snapshot, and offline audio cache are stored in the App's private storage for practice records, playback, and offline listening. We do not proactively upload these local records to an account service.
• Merit leaderboard: When you use the leaderboard or the App synchronizes merit, it generates and stores a random user identifier and sends the leaderboard name, daily merit, total merit, and spent merit to the leaderboard service for ranking and synchronization. No account registration is required.
• Firebase Analytics: The Android version sends limited events such as app launches, screens viewed, wood-fish milestones, Buddhist-music playback, sharing, favorites, and deep-link opens to Google Analytics for Firebase to understand feature usage and improve the App.
• Android system backup: Subject to your device and account settings, Android may include app data in cloud backup or device transfer. Android manages that process. You can manage backup in system settings and remove local data by clearing app storage or uninstalling the App.
• Online catalog and audio: The App connects to app.onethought.top for the Buddhist-music catalog and then accesses our service or remote audio-content providers identified by the catalog. Requests inherently include an IP address, request time, requested resource, and necessary network technical information. Relevant services may process restricted logs for security and troubleshooting with access and retention limited to what is necessary.
• Motion sensor: Only when you enable Smart Close, the App reads accelerometer data to determine whether the device has remained still. Raw sensor data is processed in real time on the device and is neither stored nor uploaded.
• Background media playback: When you start Buddhist-music playback, an Android foreground media service and system media notification continue playback and provide controls. This does not require access to contacts, camera, microphone, or precise location.
• System sharing: Only after you tap Share does the App pass a track title and an onethought.top link to the Android system share sheet. A third-party app you select processes that content under its own privacy policy.

Android local data generally remains until you clear app data or uninstall the App. Access to and retention of server security logs are limited according to operational and legal needs. For privacy, access, or deletion questions, email l_charlie@163.com.

2. Data We Process

• On-device data: merit counts and history, wishes and progress, titles and badges, favorites, playback state, offline audio files, and settings. This data is primarily stored locally; some merit data may sync between your paired iPhone and Apple Watch.
• Leaderboard data: a randomly generated user ID, display name, total and daily merit counts, and spent merit are sent to and stored by our leaderboard service.
• Analytics and configuration: app launches, screens viewed, tap milestones, Buddhist music, white-noise and audiobook interactions, ad-reward interactions, and related app/device technical information may be processed by Google Analytics for Firebase. Firebase Remote Config also processes country/region code, language, time zone, OS version, Firebase App ID, bundle ID, and related technical information.
• Advertising data: Google Mobile Ads and its partners may process IP address, device identifiers, advertising data, interactions, approximate location, crash logs, performance, and related technical data depending on SDK version, device settings, region, and consent status.
• Purchases: Apple StoreKit processes product IDs, price and storefront information, purchase results, and verified transaction information. The App reads the result needed to grant merit; we do not receive payment-card or bank-account details.
• Network data: IP address, request time, requested Buddhist music, white noise, audiobook, artwork or leaderboard endpoint, and ordinary server logs may be processed by our service or content providers.

No account is required. We do not request your legal name, phone number, or contacts. Do not put sensitive information in your leaderboard name.

3. Sensors and Device Features

When shake-to-tap is enabled, accelerometer data is processed in the foreground to recognize gestures; raw motion data is not stored or uploaded. Background audio supports user-initiated Buddhist music, white-noise, and audiobook playback. Watch connectivity syncs relevant merit counts and actions between paired devices.

4. Third-Party Services

The App uses Firebase Analytics, Firebase Remote Config, Google Mobile Ads, Apple StoreKit, and remote audio/image providers. These providers process data under their own policies. See Google’s Privacy Policy, Firebase Privacy and Security, and Apple’s Privacy Policy.

5. Ads and Choices

You can use iOS privacy and tracking settings to restrict advertising identifiers and cross-app tracking. Where applicable, use any Google consent or privacy-options interface presented by the App. Turning off personalization does not necessarily remove ads.

6. Retention and Deletion

Local data generally remains until you delete it, clear App data, or uninstall the App. Buddhist music, white-noise, and audiobook files can be removed individually or all at once under Settings → Offline Cache. To request deletion of a server-side leaderboard record, email us with the leaderboard name and the minimum information needed to locate the record; additional verification may be required. The App does not separately persist StoreKit transaction details; Apple retains purchase records under its policies and provides management through Apple account and support channels. Analytics, advertising, and server-log retention is governed by operational, security, legal, and provider requirements.

7. Sharing

We do not sell wish content or local merit history. Necessary information may be processed by Apple, Google, and the providers above for App functionality, analytics, advertising, purchase processing, security, or legal compliance, and may be disclosed when legally required or as part of a business reorganization.

8. Children and Sensitive Information

The App is not specifically directed to children and does not knowingly ask children for real-world identity information. Its meditation, wish, and wooden-fish features are for recreation and personal reflection, not medical, psychological, religious, or other professional advice. Avoid entering unnecessary sensitive information.

9. Security and International Processing

We use safeguards appropriate to the App’s scale, but no storage or transmission method is completely secure. Third-party providers may process data outside your country under their policies, contracts, and applicable law.

10. Changes and Contact

We may update this policy when features, providers, or laws change and will post the new effective date here. Privacy and deletion requests: l_charlie@163.com.