HearTime 隐私政策
HearTime（以下简称“本 App”）是一款语音计时工具。本政策说明本 App 如何处理您的数据。
1. 本地数据
您创建的预设、流程、计时偏好、声音与显示设置，以及正在进行的计时恢复信息保存在您的设备上。本 App 不运营账户系统。本 App 不会将您的预设名称、流程文案、计时内容或自定义文字上传用于广告、营销、画像或跨 App 追踪。
2. 语音、麦克风与系统服务
HearTime 内置音色是使用 Microsoft Azure Speech 在 App 发布前预生成的合成语音。生成内容仅为 HearTime 固定的数字、时间单位和状态短语，不包含用户数据。生成后的音频随 App 提供并在设备上离线播放；使用内置音色时，本 App 不会向 Microsoft 发送您的计时内容或其他用户数据。
您也可以选择由 iOS 提供的 Apple 系统声音。本 App 使用 iOS 的语音与音频服务在设备上生成并播放这些播报。
当您在某个流程中启用离线语音计数时，本 App 会请求麦克风权限，并在设备上使用 Apple 提供的语音识别能力，以便将您说出的计数推进流程。该处理尽量在设备上完成；本 App 不会把您的语音录音或识别到的计数字句上传给开发者或 TelemetryDeck。您可随时在系统设置中关闭麦克风权限，或关闭该流程的语音计数开关。
3. 匿名使用分析
为了了解核心功能是否被使用（例如是否启动计时、是否完成一次流程、是否打开购买页），本 App 可向第三方分析服务 TelemetryDeck 发送匿名化的产品使用事件。事件使用安装级匿名标识，并可能包含设备类型、系统版本、App 版本，以及粗粒度属性（例如计时模式、时长区间、是否启用语音计数）。事件不包含您创建的预设或流程名称、自定义文字、语音内容或精确到秒的长期行为序列。
您可在本 App 设置中关闭“共享匿名使用数据”。关闭后，本 App 不再向 TelemetryDeck 发送这些事件。该分析仅用于改进 HearTime，不用于广告、营销或跨公司用户画像，也不与其他公司的 App 或网站数据关联。
4. 崩溃诊断与反馈
本 App 会在设备上本地保存最近不超过 3 份崩溃诊断记录，以帮助您主动报告问题；记录最多保留 7 天。本 App 不会在后台自动将它们上传给开发者。
只有当您主动选择“发送反馈”时，本 App 才会生成一封预填环境信息的邮件草稿。您可在邮件应用中查看、修改或取消发送。诊断信息可能包含 App 版本、系统版本、设备型号、线程、已加载映像路径、内存地址和错误信息；不会故意包含您创建的预设或流程内容。
发送至支持邮箱的邮件、邮件地址及您选择发送的附件只用于支持和故障排查，不用于营销或追踪；通常会在问题解决后 90 天内删除，法律、安全或争议处理需要时可能保留更长时间。
5. 系统权限
通知仅在您授权后用于计时完成提醒。Live Activity 和后台音频仅用于展示或播放您主动开始的计时。麦克风仅在您启用离线语音计数时使用。您可随时在系统设置中修改这些权限。
6. 第三方服务与安全
Microsoft Azure Speech 仅在发布前用于制作固定的内置合成语音文件，不集成在用户设备上的 App 运行流程中。TelemetryDeck 仅在您未关闭匿名使用分析时接收上文所述的匿名产品事件。本 App 不集成第三方广告网络或数据经纪服务。我们依赖 Apple 平台的应用沙盒和系统安全机制保护本地数据；任何存储或传输方式都无法保证绝对安全。
7. 政策更新与联系
数据处理方式发生重大变化时，我们会更新本政策与生效日期。隐私、数据删除或支持问题请联系：andping@126.com。
HearTime Privacy Policy
HearTime (the “App”) is a voice-guided timer. This policy explains how the App handles your data.
1. Local data
Presets, routines, timer preferences, voice and display settings, and limited timer-resume information are stored on your device. The App does not operate an account system. The App does not upload your preset names, routine text, timer content, or other custom text for advertising, marketing, profiling, or cross-app tracking.
2. Speech, microphone, and system services
HearTime built-in voices are synthetic speech files pre-generated with Microsoft Azure Speech before the App is distributed. The generation inputs consist only of HearTime's fixed numbers, time units, and status phrases and do not contain user data. The resulting audio is bundled with the App and plays offline on your device. When you use a built-in voice, the App does not send your timer content or other user data to Microsoft.
You may also select voices supplied by iOS. The App uses iOS speech and audio services to generate and play those announcements on your device.
If you enable offline voice counting for a Routine, the App requests microphone access and uses Apple speech-recognition capabilities on your device so spoken counts can advance the Routine. This processing is intended to stay on-device. The App does not upload your voice recordings or recognized count phrases to the developer or to TelemetryDeck. You can revoke microphone access in system settings or turn off voice counting for that Routine at any time.
3. Anonymous product analytics
To understand whether core features are used (for example whether a timer starts, a Routine finishes, or the purchase page is opened), the App may send anonymized product-usage events to the third-party analytics service TelemetryDeck. Events use an installation-level anonymous identifier and may include device type, system version, App version, and coarse attributes such as timer mode, duration buckets, or whether voice counting is enabled. Events do not include your preset or Routine names, custom text, audio content, or long second-by-second behavior sequences.
You can turn off Share Anonymous Usage Data in the App settings. When it is off, the App stops sending these events to TelemetryDeck. This analytics use is only for improving HearTime. It is not used for advertising, marketing, or cross-company profiling, and it is not linked with other companies’ apps or websites.
4. Crash diagnostics and feedback
The App may keep no more than three crash diagnostic records locally on your device so that you can choose to report a problem. Records are retained for no more than seven days. The App never uploads them to the developer automatically in the background.
A prefilled email draft is created only when you actively choose Send Feedback. You can review, edit, or cancel it in your mail app. Diagnostics may include App and system versions, device model, threads, loaded-image paths, memory addresses, and error details; the App does not intentionally include presets or Routine content.
Messages, email addresses, and attachments you choose to send are used only for support and troubleshooting, not for marketing or tracking. They are generally deleted within 90 days after resolution, unless longer retention is necessary for legal, security, or dispute-resolution purposes.
5. System permissions
Notifications are used only with your permission for timer-completion alerts. Live Activities and background audio are used only to display or play a timer you actively start. The microphone is used only when you enable offline voice counting. You can change permissions in system settings at any time.
6. Third-party services and security
Microsoft Azure Speech is used only before distribution to produce the App's fixed built-in synthetic voice files and is not integrated into the App's runtime on user devices. TelemetryDeck receives the anonymous product events described above only while Share Anonymous Usage Data remains enabled. The App does not integrate third-party advertising networks or data brokers. We rely on Apple platform protections, including app sandboxing and system security, to protect local data; no storage or transmission method can be completely secure.
7. Changes and contact
We will update this policy and its effective date when data practices materially change. For privacy, deletion, or support questions, contact andping@126.com.