隐私政策 / Privacy Policy

中文

枕边（下称"本应用"）是一个本地运行的个人专注 / 睡眠辅助工具。你的核心数据——屏蔽规则、App 选择、使用记录——只保存在你这台设备上，我们没有服务器，也无法读取。免费版会展示广告（见下文"广告"一节）。

你的核心数据：只在本机

下列信息只保存在你这台设备上，我们没有服务器，无法收集或读取——包括：

• 你选择屏蔽的 App 清单（以 Apple 不透明 token 形式）
• 你的屏蔽时间段
• 你的解锁 / 冷静 / 任务完成记录

这部分数据永远不会离开你的设备，也永远不会用于广告。

广告

免费版通过第三方广告网络（Google AdMob）展示广告，广告 SDK 可能为广告目的收集设备标识、粗略地区等信息。要点：

• 广告只在免费版出现；一次性购买「去广告 / Pro」后不再展示任何广告，也不再加载广告 SDK。
• 首次启动会弹出系统「App 跟踪透明度」(ATT) 请求，你可拒绝——仍展示广告，但为非个性化广告。
• 广告永远不会在睡眠时段（默认 21:00–09:00）出现，也永远不会在你点"暂停"的那一刻出现。只在暂停完成之后、非睡眠时段、且满足频次限制时才可能出现。
• 广告 SDK 的数据与你的屏蔽规则、App 选择、使用记录完全隔离。

本地存储的数据

为了本应用正常运作，下列数据只保存在你这台设备上，具体位置是 App 的 App Group 容器（group.com.zach.bedside）和系统 Keychain：

• 你设置的屏蔽窗口（开始 / 结束时间、启用状态）
• 你通过系统 Screen Time 选择器选中的 App（以 Apple 提供的不透明 token 形式）
• 每日的解锁次数计数
• 你自己设置的监督人密码的哈希值（存于 Keychain；原始密码从不保存）
• 本地事件日志（用于统计页展示）

系统在屏蔽决策时会访问你对某些 App 的选择。这些选择通过 Apple 的 Family Controls 框架保存在系统安全沙箱里，作者（枕边开发者）以及任何第三方都无法读取具体是哪些 App。

Apple 的 Screen Time / Family Controls 数据

本应用使用 Apple 的 FamilyControls、ManagedSettings、DeviceActivity 三个框架。这些框架由 iOS 系统管理，本应用只能收到 Apple 允许的信息（例如屏蔽生效、时段到点）。我们不会把这些数据用于广告、不会与第三方共享、不会用于除本应用功能之外的任何用途。

删除

卸载本应用会删除所有本地数据，包括 Keychain 中存的监督人密码哈希（如果你设过）。没有需要另外联系我们删除的服务端数据。

第三方

免费版集成 Google AdMob 广告 SDK。除此之外不集成其他分析、崩溃上报或追踪 SDK。Pro 版不加载任何第三方 SDK。

你的权利

关于核心数据：我们不收集，没有可访问或可删除的东西。关于广告：可通过首次启动的 ATT 弹窗拒绝跟踪，或购买 Pro 彻底去除广告与广告 SDK。欧盟 / 英国用户在适用时另见广告同意（GDPR）弹窗。

隐私政策变更

本政策若有变更，会更新本页最上方的"生效日期"，并在 App 更新说明里提示。

联系方式

如有疑问，发邮件至：zachsong@gmail.com

English

Bedside (the "App") is a local-only personal focus and sleep tool. Your core data — block rules, app selections, usage records — stays on this device only. We have no servers and cannot read it. The free version shows ads (see "Advertising").

Your core data: on-device only

The following stays on your device; we have no servers and cannot collect or read it:

• The apps you choose to block (as Apple opaque tokens)
• Your block schedule
• Your unlock / cooldown / task records

This data never leaves your device and is never used for advertising.

Advertising

The free version shows ads via a third-party ad network (Google AdMob), which may collect device identifiers and coarse region for advertising. Key points:

• Ads appear only in the free version; a one-time "Remove Ads / Pro" purchase removes all ads and stops loading the ad SDK.
• On first launch you'll see the system ATT prompt; you may decline — ads still show, but non-personalized.
• Ads never appear during sleep hours (default 21:00–09:00), and never at the moment you tap "Pause." Only after a pause takes effect, outside sleep hours, within a frequency cap.
• Ad-SDK data is fully isolated from your block rules, app selections, and usage records.

What is stored locally

For the App to function, the following is stored on your device (in the App Group container group.com.zach.bedside and the system Keychain):

• Your block windows (start / end, enabled flag)
• The apps you picked via the system's Screen Time app picker (as opaque tokens provided by Apple)
• Daily unlock counters
• A hash of the guardian password you set, if any (stored in Keychain; the plaintext password is never kept)
• A local event log, used by the Stats screen

Your app selections are held in Apple's secure sandbox via the Family Controls framework. The author of this app — and any third party — cannot read which specific apps you selected.

Screen Time / Family Controls data

The App uses Apple's FamilyControls, ManagedSettings, and DeviceActivity frameworks. These are managed by iOS itself. The App only receives what Apple permits (e.g. shield activation, interval boundaries). We do not use this data for advertising, do not share it with third parties, and do not use it for anything outside the App's core function.

Deletion

Uninstalling removes all local data including the guardian password hash (if you set one). There is no server-side data to request deletion of.

Third parties

The free version integrates the Google AdMob ad SDK. Beyond that, no analytics, crash-reporting, or tracking SDKs are integrated. The Pro version loads no third-party SDKs.

Your rights

For your core data: we don't collect it, so there's nothing to access or delete. For ads: decline tracking via the first-launch ATT prompt, or buy Pro to remove ads and the ad SDK entirely. EU/UK users see a separate ad-consent (GDPR) prompt where applicable.

Changes

If this policy changes, the "Effective date" at the top will be updated and noted in App release notes.

Contact

Questions: zachsong@gmail.com