日迹 · Timeleaf

隐私政策 Privacy Policy

记录留在你手里,云端备份由你决定。

最后更新 · Last updated: 2026-10-01

本地优先Local first
广告可移除Ads removable with Pro
备份可选Optional backup
不出售资料Data is not sold
中文

日迹(英文名 Timeleaf,Android 包名 com.rememberthisday.app)是一款用于记录日记、重要日子、照片与周年提醒的本地优先应用。

1. 本地资料

日记、日迹、照片、视频、音频、其他附件、标签、心情、地点、周年提醒及应用设置默认只保存在用户设备上。我们没有用于接收这些内容的开发者服务器,也不会出售这些资料。

2. 可选的 Google Drive 私有备份

用户可以自行选择连接 Google Drive 并手动备份。日迹仅请求 drive.appdata 权限,将备份保存到该用户 Google Drive 的隐藏 appDataFolder。应用不能读取用户 Drive 中的其他文件。

备份可能包含日记与日迹文字、日期、标签、心情、地点、附件及应用设置。备份只会在用户主动操作时上传,并通过 HTTPS/TLS 加密传输。

应用可能读取所选 Google 账号的邮箱地址,仅用于在设备上显示当前连接的备份账号。邮箱不会写入备份,也不会发送到我们的服务器。

3. 权限用途

  • 照片与媒体:仅在用户选择附件加入记录、播放附件或恢复备份时使用。
  • 通知:用于用户自行开启的周年提醒。
  • 网络:用于 Google 授权、用户主动进行的 Google Drive 备份/恢复/删除,以及正式版的广告和 Google Play 购买服务。

4. 资料分享与第三方服务

正式版可能在当天第一次打开之后展示 Google AdMob 开屏广告;内部测试版不包含广告。广告 SDK 可能处理广告标识符、设备信息、应用互动及诊断资料,以投放、衡量广告和防止滥用。适用地区会在必要时显示隐私/同意选项。我们不会把日记、日迹或附件内容提供给广告 SDK,也不使用独立的行为分析 SDK。

可选择通过 Google Play 一次性购买 Pro,移除广告并解锁无限附件。Google Play 处理付款资料;应用仅查询并在设备上保存 Pro 购买资格,不接收银行卡资料。

用户启用 Google Drive 备份时,资料会直接传输到该用户自己的 Drive 私有应用资料空间,由 Google 提供授权和储存服务。Google Identity、Google Play 服务、Google Drive、Google AdMob 会依照 Google 自身的隐私政策处理相关资料。

5. 资料保留与删除

本地资料会保留到用户删除记录、清除应用资料或卸载应用。用户可在应用内删除单篇日记、日迹及其附件。

Google Drive 备份会保留到被新备份替换或由用户删除。用户可以在日迹的备份页面删除云端备份、断开 Google Drive,或在 Google 账号权限页面撤销日迹的授权。

6. 儿童隐私

日迹并非专门面向 13 岁以下儿童设计,我们不会有意收集 13 岁以下儿童的个人资料。

7. 政策更新与联系

如果应用的数据处理方式发生变化,我们会更新本政策及其“最后更新”日期,并在需要时同步更新 Google Play 的数据安全声明。

如对隐私或资料处理有疑问,请联系 wilsonstudio1626@gmail.com。

English

Timeleaf (Chinese name: 日迹; Android package com.rememberthisday.app) is a local-first diary and important-date journal.

1. Local data

Diary entries, Timeleaves, photos, videos, audio, other attachments, tags, moods, locations, anniversary reminders, and settings are stored locally on the user’s device by default. We do not operate a developer server that receives this content, and we do not sell it.

2. Optional private Google Drive backup

Users may connect Google Drive and create backups manually. Timeleaf requests only the drive.appdata scope and stores backups in that user’s hidden Drive appDataFolder. The app cannot read other files in the user’s Drive.

A backup may contain diary and Timeleaf text, dates, tags, moods, locations, attachments, and settings. Uploads occur only after a user action and are encrypted in transit using HTTPS/TLS.

The app may read the selected Google account email solely to display the connected backup account on the device. The email is not included in backups and is not sent to our servers.

3. Permissions

  • Photos and media: used when the user adds or plays an attachment or restores a backup.
  • Notifications: used for anniversary reminders enabled by the user.
  • Network: used for Google authorization, user-initiated Drive backup/restore/deletion, and advertising and Google Play purchases in the production edition.

4. Sharing and third-party services

The production edition may show Google AdMob app-open ads after the first launch of the day; the internal-testing edition has no ads. The ads SDK may process advertising identifiers, device information, app interactions, and diagnostics to serve and measure ads and prevent abuse. Privacy or consent choices are shown where required. We do not provide diary, Timeleaf, or attachment content to the ads SDK, and we do not use a separate behavioral analytics SDK.

An optional one-time Google Play Pro purchase removes ads and unlocks unlimited attachments. Google Play processes payment details; the app only checks and locally stores Pro entitlement and does not receive card details.

When Drive backup is enabled, data is transferred directly to the user’s private Drive app-data space, with Google providing authorization and storage. Google processes Identity, Play services, Drive, and AdMob data under its own privacy policies.

5. Retention and deletion

Local data remains until the user deletes records, clears app data, or uninstalls the app. Individual diary entries, Timeleaves, and their attachments can be deleted in the app.

A Drive backup remains until replaced or deleted by the user. Users can delete the cloud backup from Timeleaf’s backup screen, disconnect Drive, or revoke Timeleaf access from their Google Account permissions.

6. Children

Timeleaf is not directed to children under 13, and we do not knowingly collect personal data from children under 13.

7. Changes and contact

We may update this policy when the app’s data practices change and will update the date shown here and the Google Play Data safety declaration when required.

For privacy questions, contact wilsonstudio1626@gmail.com.