按本条款与产品实际行为，App Store Connect 隐私标签建议申报为 "未收集数据（Data Not Collected）"：
本 App 无自身服务器、无第三方 SDK，任何数据均不出设备（默认状态）；
可选 iCloud 同步使用 CloudKit 私有数据库（数据仅存于用户个人 iCloud 账号，开发者无访问能力），按 Apple 申报指引不构成"收集"；
Face ID 仅调用系统校验结果，不构成生物特征数据的收集。
This app connects to no server and collects no personal information.
This policy explains how "WhereTimeGo" (the "App") handles your information. In short: the App connects to no server, collects no personal information, and by default all of your data stays on your own device.
Covered clients: iOS / iPadOS / Apple Watch (Bundle ID: com.skyerkj.TimeBlock), plus the Today widget and Control Center widget inside the main app.
1.Summary: Your Data Belongs Only to You
By default the App connects to no server. Every category, time block and statistic you create is stored on your device and is never uploaded, harvested, or used for any commercial purpose.
We collect no personally identifying information, collect no behavioral analytics, and integrate no third-party analytics or advertising SDKs.
The only networking capability is iCloud sync, which you switch on: data moves between your own devices through your iCloud account, encrypted end to end by Apple. We cannot reach or access your cloud data.
2.Data We Process
2.1Data Stored On Your Device (the default and only form of storage)
The following is kept solely on your device and never leaves it:
Data
Contents
Purpose
Time block records
Start/end time, duration, title and notes, category, and your own "worth it" rating for each entry
Logging and statistics
Categories
Name, colour, icon, ordering
Grouping entries
Goals
Goal name, target duration, linked category, start date
Goal progress statistics
Preferences
Theme palette, appearance mode, language, daily target, reminder toggle and time
Personalisation
Statistics
Daily / weekly / monthly summaries, period comparisons
All computed live on device from the data above; never reported separately
2.2System Permissions (each triggered by a feature, revocable in Settings)
Permission
When requested
Actual scope of access
Face ID / Touch ID
When you turn on App Lock
Only calls the system verification API to receive a pass/fail result. The App never obtains or stores any biometric data — that is handled by the iOS secure enclave
Notifications
When you turn on logging reminders
Local notifications only, fired at the times you set; no push server involved and nothing beyond the notification content is read
2.3Data Handling in Optional Features
iCloud sync (off by default): only after you deliberately enable Settings → Sync to iCloud do the items listed in 2.1 move between your own devices through your iCloud account (a private CloudKit database). Transport and storage are encrypted by Apple throughout; we cannot access your cloud data and have no ability to decrypt it.
Widgets and Apple Watch: the Today widget, the Control Center widget and the Watch client all display a mirror of your local data, delivered through the system App Group and the paired-device channel between your iPhone and your own watch. Nothing passes through any third-party server.
Exporting data: at any time you can export all data as a file for your own keeping via Settings → Export CSV. The export happens on your device and the file is entirely yours to control.
3.What We Do Not Do
✕We do not collect personally identifying information (no sign-up, no account system)
✕We do not collect behavioral analytics data
✕We do not sell, share, or transfer any data (the App has no server of its own, so there is nothing to sell from)
✕We do not track your activity in other apps or on websites
4.Third-Party Services
The App embeds no third-party SDKs. The only external service involved is Apple iCloud, and only when you choose to enable sync: that service is operated by Apple and governed by the Apple Privacy Policy, and your cloud data lives in the private database of your own iCloud account.
5.Data Security
All data is stored inside the App's on-device sandbox, protected by the iOS sandbox and data-protection mechanisms.
You can enable App Lock (Face ID / Touch ID / device passcode) so others cannot view your records without authenticating.
6.Data Retention and Deletion
Gone when deleted: removing the App also removes every byte it stored on your device; you can also use "Erase All Data" inside Settings.
If you enabled iCloud sync, the cloud copy lives in your own iCloud account and you manage it yourself through the system's iCloud settings (neither the App nor the developer can view or delete it on your behalf).
7.Children's Privacy
The App is not marketed to children under 14 and collects no personal information from any child. Because the App collects no personal information at all, children can use it safely too.
8.Your Rights
Because your data lives entirely on your device and in your own iCloud account, you already hold full control:
Access and portability: export all data at any time via Settings → Export CSV;
Deletion: delete a single entry, erase all data, or remove the App;
Switching networking off: leave iCloud sync off (its default) and the App performs no data transfer over the network at all;
Withdrawing permissions: turn off notifications or Face ID in System Settings, or uninstall the App, at any time.
9.Changes to This Policy
If this policy changes materially we will publish the update here and revise the effective date at the top. Changes are not applied retroactively to how data was already handled.
We will reply to any privacy-related enquiry within a reasonable period.
Appendix: Suggested App Store "Privacy" Label
Based on this policy and the product's actual behaviour, the App Store Connect privacy label should be declared as "Data Not Collected":
The App has no server of its own and no third-party SDK; no data leaves the device in its default state;
Optional iCloud sync uses a CloudKit private database (data lives only in the user's personal iCloud account, which the developer cannot access), which under Apple's declaration guidance does not constitute "collection";
Face ID only reads the system's verification result, which is not collection of biometric data.