本隐私政策说明手机限时锁 iOS 版（亦称「Flowora」「本应用」「我们」）在您使用我们的 iOS 应用程序及相关服务时，如何收集、使用、存储与共享信息。Flowora 定位为自律与亲友/伴侣监督工具。我们仅收集实现核心功能所必需的信息，并就平台权限保持透明。
应用与开发者信息 / App & Developer
- 应用名称 / App Name：手机限时锁（Flowora）
- Bundle ID：com.haloutongxue.offly
- 开发者名称 / Developer：杭州哈喽同学网络科技有限公司
- 开发者联系方式 / Contact：server@haloutongxue.com（或应用内「设置 → 反馈」）
- 官方网站 / Website：https://global.haloutongxue.com/discipline.html
- ICP 备案号：浙ICP备2023044934号-4A
1. 我们是谁
本应用「手机限时锁」（Bundle ID：com.haloutongxue.offly）由杭州哈喽同学网络科技有限公司开发并运营。官方网站为 https://global.haloutongxue.com/discipline.html。如您有隐私相关问题，可通过应用内「反馈」功能联系我们，发送邮件至 server@haloutongxue.com，或访问我们的官方网站。
2. 我们收集的信息
视您使用 Flowora 的方式，我们可能处理下列类别的信息。我们不会出售您的个人信息。
您首次启动并同意本政策前，本应用及第三方 SDK 不会为广告或画像目的收集设备标识或使用数据；同意后亦仅在实现对应功能所必需时处理信息。激励广告相关 SDK 仅在您主动进入激励广告流程时初始化，并会按系统要求申请 App Tracking Transparency；拒绝跟踪不影响核心锁定功能。
- 账号与身份：您选择的登录方式对应的标识与资料（例如微信登录标识、昵称、头像；或通过「通过 Apple 登录」由 Apple 提供的 Apple 用户标识及您授权的邮箱/姓名），以及维持登录状态所需的会话令牌。
- 监督关系数据：您的 6 位监督码、邀请、您为监督人设置的昵称/头像，以及关系状态（「监督我的人」/「我监督的人」）。
- 应用锁定配置：锁定规则、时间表、时长限制、所选应用令牌/标识符、您选择的解锁密码或验证输入，以及执行状态。
- 本机安装标识（installId）：应用在同意本政策后于本机生成的随机标识，用于匿名建户与会话恢复；并非硬件设备序列号或广告跟踪标识。
- 您创建的 Safebox 内容：私人笔记、私人联系人（您输入的姓名/电话/邮箱），以及您导入的私人照片/视频。上述内容主要为您使用 Safebox 功能而存储。
- 锁定所需的使用与设备信号：Screen Time / FamilyControls、DeviceActivity 与 ManagedSettings 授权及相关令牌，用于选择应用/类别并施加屏蔽。
- 会员与商业数据：VIP/会员状态、到期时间，以及通过 App Store 应用内购买处理的购买相关记录（含自动续订状态；付款明细由 Apple 按其政策处理）。
- 广告互动数据：当您通过广告聚合合作伙伴（GroMore / Pangle 技术栈）观看激励广告（例如免费锁定时长奖励）时，可能在适用的同意框架下处理广告标识符与广告事件信号，包括在必要情况下于 iOS 适用的 App Tracking Transparency。
- 您提交的反馈：消息内容、可选联系方式与时间戳。
- 本地偏好：语言、小组件配置等存储于设备本地的设置（例如通过本地数据库 / UserDefaults）。
- 技术日志：有助于保障服务稳定的基本诊断信息，例如 API 错误或执行失败。此类信息不会用于广告画像。
3. 我们申请的权限
Flowora 仅在功能需要时申请系统权限。您可在 iOS「设置」中拒绝或撤销权限；部分功能届时将不可用。
- Screen Time / FamilyControls（iOS）：选择应用/类别，并为时间限制与锁定施加屏蔽。
- 照片与视频图库：选择个人头像与监督人头像；为意见反馈添加图片；将您选择的照片/视频导入 Safebox（不会从图库删除原件）。
- 通知：提醒您锁定状态，并帮助打开解锁流程。
- 跟踪（iOS ATT，如适用）：在激励广告功能中展示更相关的广告。拒绝跟踪不会移除核心锁定功能。
- 网络访问：登录、数据同步与激励广告等联网功能。
- 主屏幕小组件 / App Groups：使用共享本地数据展示小组件内容。
4. 我们如何使用信息
我们将信息用于：
- 提供应用锁定、时间表、使用限额、屏蔽与解锁流程。
- 启用您选择配置的监督邀请、监督码与远程问责功能。
- 运营 Safebox（密码门禁、私人笔记/联系人/媒体）。
- 维护您的账号、会员权益与购买状态。
- 在您选择参与时投放激励广告并提供相关免费时长奖励。
- 回应反馈，并提升可靠性与安全性。
- 遵守法律、防止滥用，并保护用户、监督人与服务。
5. 本地处理与云端同步
Flowora 的许多敏感功能依赖端侧机制：iOS 上的 Screen Time / FamilyControls 框架，以及用于规则与 Safebox 内容的本地存储。
账号、监督关系、会员状态及其他服务功能可能与我们的后端服务器同步，以便在与您登录关联的会话与设备间正常工作。我们仅传输上述功能所需的信息。产品信息发布于 https://global.haloutongxue.com/discipline.html。
我们不会声称读取您锁定的第三方应用内容。锁定使用平台应用令牌与系统 API，而非截屏或完整抓取其他应用内容。
6. 共享与第三方
我们仅在有限情形下共享信息：
- 服务提供商：托管、支付处理，以及在合同约束下代表我们处理数据的广告合作伙伴。
- 微信：若您使用微信登录，微信将依据其条款与隐私政策提供身份验证数据。
- Apple：若您使用「通过 Apple 登录」，Apple 将依据其条款与隐私政策向我们提供身份验证数据；会员购买通过 App Store 扣款，付款明细由 Apple 处理。
- 您邀请的监督人：通过监督码连接的人员，可看到监督/解锁流程所需的关系信息与参与情况。请谨慎选择监督人。
- 法律要求：在适用法律、法规、法律程序要求下，或为保护权利与安全，我们可能披露信息。
7. 第三方 SDK 清单
为实现登录、分享与激励广告等功能，本应用在 iOS 端集成下列第三方 SDK。广告相关 SDK 仅在您主动进入激励广告流程时初始化，并按系统要求申请 App Tracking Transparency。拒绝跟踪不影响核心锁定功能。
7.1 微信 Open SDK for iOS
- SDK名称：微信 Open SDK for iOS
- 开发者：深圳市腾讯计算机系统有限公司
- 收集信息范围：用户主动选择的图片或内容；用户主动选择的微信头像、昵称信息（本应用不使用微信支付相关能力；具体以该 SDK 隐私政策为准）
- 使用目的：实现微信登录、微信分享与收藏等相关能力
- 实现功能所需权限：剪切板（用于本应用与微信之间的数据传输）
- SDK隐私政策链接：https://support.weixin.qq.com/cgi-bin/mmsupportacctnodeweb-bin/pages/RYiYJkLOrQwu0nb8
7.2 穿山甲广告 SDK（GroMore / Pangle，iOS）
- SDK名称：穿山甲广告 SDK（含 GroMore 聚合）
- 开发者：北京巨量引擎网络技术有限公司
- 收集信息范围：设备标识符（如 IDFV、经用户授权后的 IDFA），IP 地址，设备品牌/型号/系统版本，屏幕信息，设备语言与时区，网络与运营商相关信息，应用包名/版本与前后台状态，以及广告投放、监测归因、SKAdNetwork、反作弊所需的其他设备与使用信号（具体以该 SDK 隐私政策为准）
- 使用目的：激励广告投放、监测归因、反作弊、统计分析、保障广告服务稳定
- SDK隐私政策链接：https://www.csjplatform.com/privacy
8. Safebox、媒体与敏感内容
Safebox 用于存放个人私密内容。您自行决定导入内容。请勿存储您无权合法持有的内容。
Safebox 密码保护是产品安全功能，并不能保证在设备被入侵、越狱、取证提取，或他人已知您的解锁方式时仍绝对安全。
9. 儿童与家庭使用
Flowora 可用于个人自律或相互监督。若您与儿童一起或为儿童使用本应用，您有责任依据适用法律取得所需同意，并合理配置监督。
我们不会在知情情况下将本应用营销为以广告为目的收集儿童个人数据的服务。家长或监护人应在儿童设备上启用锁定或媒体功能前审阅权限。
10. 数据保留
在您的账号保持有效且为提供服务所需期间，我们保留账号与关系数据。本地 Safebox 与锁定配置会保留在您的设备上，直至您删除、清除应用数据或卸载本应用（受操作系统备份行为影响）。
在法律、会计或安全原因要求时，我们可能更长时间保留有限记录（例如购买历史、防欺诈日志或反馈）。
11. 您的选择与权利
您可以：
- 在 iOS「设置」中撤销平台权限。
- 在应用内断开监督关系。
- 编辑您控制的个人资料昵称/头像与 Safebox 内容。
- 通过「反馈」提交请求或问题。
- 停止使用本应用，并在法律要求且技术可行时请求协助进行与账号相关的删除。
- 管理 App Store 订阅：打开「设置」→ Apple ID →「订阅」，取消自动续订。
12. 安全
我们采取与数据性质相适应的合理管理、技术与组织措施（例如经验证的 API 访问，以及 Safebox 的端侧访问控制）。任何传输或存储方式都无法做到百分之百安全。
13. 国际用户
服务器与服务提供商可能在与您居住地不同的司法管辖区处理数据。使用本应用即表示您理解，您的信息可能被传输至隐私法律不同的地点。
14. 本政策的变更
我们可能更新本隐私政策，以反映产品、法律或运营变化。我们将修订「最近更新」日期，并在适当时就重大变更提供应用内通知。
15. 联系方式
开发者：杭州哈喽同学网络科技有限公司。隐私咨询：请使用应用内「设置 → 反馈」，或发送邮件至 server@haloutongxue.com，或访问 https://global.haloutongxue.com/discipline.html。请提供足以识别您请求的信息（请勿发送不必要的敏感内容）。
This Privacy Policy explains how 手机限时锁 (also referred to as “Flowora”, “the App”, “we”, “us”, or “our”) collects, uses, stores, and shares information when you use our iOS mobile application and related services. We designed Flowora as a self-discipline and parental/partner supervision tool. We aim to collect only what is needed to operate core features and to be transparent about platform permissions.
1. Who We Are
The App is operated in connection with the Flowora / Discipline Lock service. Our official website is https://global.haloutongxue.com/discipline.html. If you have privacy questions, contact us through the in-app Feedback feature, email server@haloutongxue.com, or visit our official website.
2. Information We Collect
Depending on how you use Flowora, we may process the categories below. We do not sell your personal information.
Ad-related SDKs initialize only when you enter a rewarded-ad flow, and we request App Tracking Transparency as required by the system before ad SDK initialization. Declining tracking does not disable core locking features.
- Account & identity: identifiers and profile data from the sign-in method you choose (for example WeChat login identifiers, nickname, and avatar; or an Apple user identifier and any email/name you authorize via Sign in with Apple), plus session tokens needed to keep you signed in.
- Supervisor relationship data: your 6-digit supervise code, invitations, nicknames/avatars you set for supervisors, and relationship status (“people supervising me” / “people I supervise”).
- App-lock configuration: lock rules, schedules, duration limits, selected app tokens/identifiers, unlock passwords or verification inputs you choose, and enforcement status.
- Safebox content you create: private notes, private contacts (name/phone/email you enter), and private photos/videos you import. These are stored primarily for your use of the Safebox feature.
- Usage & device signals needed for locking: Screen Time / FamilyControls, DeviceActivity, and ManagedSettings authorizations and related tokens used to select apps/categories and apply shields.
- Membership & commercial data: VIP/membership status, expiry, and purchase-related records processed through App Store In-App Purchase (including auto-renewable subscription status; payment details are handled by Apple under its policies).
- Advertising interaction data: when you watch rewarded ads (for example, free lock-time rewards) via our ad mediation partner (GroMore / Pangle stack), advertising identifiers and ad event signals may be processed under applicable consent frameworks, including App Tracking Transparency on iOS when required.
- Feedback you submit: message content, optional contact details, and timestamps.
- Local preferences: language, widget configuration, and similar settings stored on device (for example via local database / UserDefaults).
- Technical logs: basic diagnostics such as API errors or enforcement failures that help us keep the service reliable. These are not used for advertising profiling.
3. Permissions We Request
Flowora requests system permissions only when a feature needs them. You can deny or revoke permissions in iOS Settings; some features will then be unavailable.
- Screen Time / FamilyControls (iOS): select apps/categories and apply shields for time limits and locks.
- Photo Library: choose a profile or supervisor avatar; attach images to feedback; import photos/videos into Safebox (this app does not delete originals from the system library).
- Notifications: remind you about lock state and help open the unlock flow.
- Tracking (iOS ATT, where applicable): show more relevant ads in rewarded-ad features. Declining tracking does not remove core locking features.
- Home-screen widgets / App Groups: show Flowora widget content using shared local data.
4. How We Use Information
We use information to:
- Provide app locking, schedules, usage limits, shields, and unlock flows.
- Enable supervisor invitations, supervise codes, and remote accountability features you choose to set up.
- Operate Safebox (password gate, private notes/contacts/media).
- Maintain your account, membership benefits, and purchase status.
- Deliver rewarded ads and related free-time rewards when you opt in.
- Respond to feedback and improve reliability and safety.
- Comply with law, prevent abuse, and protect users, supervisors, and the service.
5. Local Processing vs. Cloud Sync
Much of Flowora’s sensitive functionality relies on on-device mechanisms: Screen Time / FamilyControls frameworks on iOS, and local storage for rules and Safebox content.
Account, supervisor relationships, membership status, and other service features may sync with our backend servers so they work across sessions and devices associated with your login. We transmit only what those features require. Product information is published at https://global.haloutongxue.com/discipline.html.
We do not claim to read the contents of third-party apps you lock. Locking uses platform application tokens and system APIs, not screenshots or full content capture of other apps.
6. Sharing & Third Parties
We share information only in limited situations:
- Service providers: hosting, payment processing, crash/diagnostic tooling, and ad mediation partners that process data on our behalf under contractual controls.
- WeChat: if you sign in with WeChat, WeChat provides authentication data according to WeChat’s terms and privacy policy.
- Apple: if you use Sign in with Apple, Apple provides authentication data according to Apple’s terms and privacy policy. Membership purchases are charged through the App Store; payment details are handled by Apple.
- Supervisors you invite: people you connect via supervise codes can see relationship information and participation needed for supervision/unlock flows you enable. Choose supervisors carefully.
- Legal requirements: we may disclose information if required by applicable law, regulation, legal process, or to protect rights and safety.
7. Third-Party SDK List
To provide login, sharing, and rewarded ads, the iOS app integrates the third-party SDKs below. Ad-related SDKs initialize only when you enter a rewarded-ad flow, and we request App Tracking Transparency as required by the system. Declining tracking does not disable core locking features.
7.1 WeChat Open SDK for iOS
- SDK name: WeChat Open SDK for iOS
- Developer: Shenzhen Tencent Computer Systems Company Limited
- Data processed: images or content you actively select; WeChat avatar and nickname you authorize (this app does not use WeChat Pay; details per the SDK privacy policy)
- Purpose: WeChat login, sharing, and favorites
- Permissions needed for SDK features: pasteboard/clipboard for data exchange with WeChat
- SDK privacy policy: https://support.weixin.qq.com/cgi-bin/mmsupportacctnodeweb-bin/pages/RYiYJkLOrQwu0nb8
7.2 Pangle Ads SDK (GroMore / Pangle, iOS)
- SDK name: Pangle Ads SDK (including GroMore mediation)
- Developer: Beijing Ocean Engine Network Technology Co., Ltd. (as registered for Pangle/CSJ)
- Data processed: device identifiers (such as IDFV and IDFA after user authorization), IP address, device brand/model/OS version, screen information, device language and time zone, network/carrier-related signals, app package/version and foreground/background state, and other device/usage signals needed for ad delivery, attribution, SKAdNetwork, and anti-fraud (details per the SDK privacy policy)
- Purpose: rewarded-ad delivery, attribution, anti-fraud, analytics, and stable ad service
- SDK privacy policy: https://www.csjplatform.com/privacy
8. Safebox, Media & Sensitive Content
Safebox is intended for personal private content. You control what you import. Do not store content you are not legally allowed to possess.
Safebox password protection is a product security feature, not a guarantee against a compromised device, jailbreak, forensic extraction, or someone who already knows your unlock method.
9. Children & Family Use
Flowora can be used for personal discipline or mutual supervision. If you use the App with or for a child, you are responsible for obtaining any consent required under applicable law and for configuring supervision appropriately.
We do not knowingly market the App as a service that collects personal data from children for advertising purposes. Parents or guardians should review permissions before enabling locking or media features on a child’s device.
10. Data Retention
We retain account and relationship data while your account remains active and as needed to provide the service. Local Safebox and lock configurations remain on your device until you delete them, clear app data, or uninstall the App (subject to OS backup behavior).
We may retain limited records (for example, purchase history, fraud-prevention logs, or feedback) for longer when required for legal, accounting, or security reasons.
11. Your Choices & Rights
You may:
- Revoke platform permissions in iOS Settings.
- Disconnect supervisor relationships in the App.
- Edit profile nickname/avatar and Safebox content you control.
- Submit requests or questions through Feedback.
- Stop using the App and request account-related deletion assistance where legally required and technically feasible.
- Manage App Store subscriptions: Settings → Apple ID → Subscriptions, then turn off auto-renew.
12. Security
We use reasonable administrative, technical, and organizational measures appropriate to the nature of the data (for example, authenticated API access and on-device access controls for Safebox). No method of transmission or storage is 100% secure.
13. International Users
Servers and service providers may process data in jurisdictions different from where you live. By using the App, you understand that your information may be transferred to locations where privacy laws differ.
14. Changes to This Policy
We may update this Privacy Policy to reflect product, legal, or operational changes. We will revise the “Last updated” date and, where appropriate, provide in-app notice for material changes.
15. Contact
For privacy inquiries: use Settings → Feedback in the App, email server@haloutongxue.com, or visit https://global.haloutongxue.com/discipline.html. Please include enough detail for us to identify your request (without sending unnecessary sensitive content).