Privacy Policy隐私政策

Your journal is processed on your devices. Optional Apple services, website visits and messages you send to support involve separate processing described below.你的日志在你的设备上处理。可选的 Apple 服务、网站访问和你发送的支持消息涉及下文说明的其他处理。

1.Publisher and scope发布者与适用范围

1.1Piru is published by Elysia Muñoz, an individual based in Colombia, whose contact email is [email protected]. In this policy, “we” means the publisher. kageroumado maintains the app and the kagerou.glass website. Website privacy questions can also be sent to [email protected].Piru 由居住在哥伦比亚的个人 Elysia Muñoz 发布，联系邮箱为 [email protected]。本政策中的“我们”指发布者。kageroumado 维护 App 和 kagerou.glass 网站。网站隐私问题也可发送至 [email protected]。

1.2Official App Store distribution excludes the European Union, as described in the Terms of Use. This policy covers the Piru app, its Watch app, widgets and Live Activities, and the pages at kagerou.glass/piru. “Journal data” means your entries, notes, settings and the information derived from them. Apple and websites you choose to visit handle information under their own policies.官方 App Store 分发不包括欧盟，详见使用条款。本政策适用于 Piru App、其 Watch App、小组件、实时活动以及 kagerou.glass/piru 网页。“日志数据”指你的记录、笔记、设置及据此生成的信息。Apple 和你选择访问的网站按各自的政策处理信息。

2.Processing on your devices设备上的处理

2.1Your journal is processed on your devices. Piru has no journal account or publisher-operated journal server. Normal app use does not upload your journal to us, and we cannot remotely retrieve or erase it. Unsolicited medical material sent to support is handled under Section 10.你的日志在你的设备上处理。Piru 没有日志账户，也没有由发布者运营的日志服务器。正常使用 App 不会将日志上传给我们，我们也无法远程获取或删除日志。未经请求发送给支持邮箱的医疗资料按第 10 节处理。

2.2The publisher handles support correspondence and developer diagnostics for the purposes described below. kageroumado operates the website and handles its request information. Contact details for each are in Section 19.发布者为下文所述目的处理支持通信和开发者诊断信息。kageroumado 运营网站并处理其请求信息。双方的联系方式见第 19 节。

3.Information in your journal日志中的信息

3.1Depending on the features you use, Piru stores substances, amounts, units, routes and entry times; sessions, notes, check-ins and ratings; medication schedules and reminders; product and inventory details; profile information such as body weight; optional locations and Health readings; and preferences, caches and calculated estimates.根据你使用的功能，Piru 会存储物质、用量、单位、使用途径和记录时间；场次、笔记、状态确认和评分；用药计划和提醒；产品与库存信息；体重等个人资料；可选的位置与健康读数；以及偏好设置、缓存和模型估计。

3.2These records may reveal sensitive information about your health, substance use and location. Consider who can access your devices and any copies you create. The bundled substance library is reference material and contains no information about you.这些记录可能透露你的健康状况、物质使用和位置等敏感信息。请留意谁能访问你的设备及你创建的副本。App 内置的物质资料库是参考资料，不包含你的个人信息。

4.Apple HealthApple 健康

4.1With your permission, Piru reads body weight, heart rate, resting heart rate, systolic and diastolic blood pressure, and workouts from Apple Health. It uses these readings on your device to personalize estimates and display session information. Workout data helps distinguish exercise-related heart-rate changes. The current integration requests read access only; it does not write records to Apple Health.经你授权，Piru 从 Apple 健康读取体重、心率、静息心率、收缩压、舒张压和体能训练数据。这些读数在你的设备上用于个性化估计和显示场次信息。体能训练数据用于区分与运动有关的心率变化。当前集成仅申请读取权限，不会向 Apple 健康写入记录。

4.2You can refuse individual permissions or revoke access in Apple Health or device settings. Revoking access leaves any values already copied into your journal until you delete them. Apple manages its original Health records separately. We do not use Health data for advertising or sell it.你可以拒绝单项权限，或在 Apple 健康及设备设置中撤销访问权限。撤销权限后，已复制到日志中的数值会保留，直至你删除它们。Apple 单独管理其原始健康记录。我们不会将健康数据用于广告或出售这些数据。

5.Locations and maps位置与地图

5.1If you allow location access or choose a place manually, Piru can save that location with an entry. It is included in exports containing that entry. Revoking location permission leaves saved locations in existing entries.如果你允许位置访问或手动选择地点，Piru 可以将该位置与记录一同保存。包含该记录的导出文件也会包含位置。撤销位置权限不会移除已有记录中的位置。

5.2Place search, map display and location lookup use Apple services. Search text, location information and network request information may be sent to Apple to provide those features. A manually typed place search can contact Apple even when location permission is off. See Apple’s Maps privacy notice.地点搜索、地图显示和位置查询使用 Apple 服务。为提供这些功能，搜索文字、位置信息和网络请求信息可能会发送给 Apple。即使位置权限已关闭，手动输入的地点搜索仍可能连接 Apple。请参阅 Apple 的地图隐私说明。

6.Watch, widgets and notificationsWatch、小组件与通知

6.1Piru exchanges entries and related information with a paired Apple Watch through WatchConnectivity. Widgets and extensions use shared local storage. These transfers do not send the journal to the publisher.Piru 通过 WatchConnectivity 与配对的 Apple Watch 交换记录及相关信息。小组件和扩展使用共享的本地存储。这些传输不会将日志发送给发布者。

6.2Widgets, Live Activities, complications and notification previews can show journal information on your Home Screen, Lock Screen, watch face and other system surfaces. Anyone who can see those surfaces may see the information, including while the device is locked. Review the app’s notification choices and Apple’s preview and mirroring settings.小组件、实时活动、复杂功能和通知预览可能在主屏幕、锁定屏幕、表盘及其他系统界面显示日志信息。能看到这些界面的人可能看到相关内容，即使设备已锁定。请检查 App 的通知选项，以及 Apple 的预览和镜像设置。

7.Network activity网络活动

7.1Piru contains no advertising, tracking or third-party analytics SDK. Its journal and bundled reference library work locally. Optional Apple services use the network: MapKit searches and maps, StoreKit product listings, purchases and restores, and services provided by the operating system.Piru 不含广告、跟踪或第三方分析 SDK。日志和内置参考资料库在本地工作。可选的 Apple 服务会使用网络，包括 MapKit 搜索与地图、StoreKit 产品列表、购买与恢复购买，以及操作系统提供的服务。

7.2On Android, Piru checks for a newer version at most once a day by requesting the public release list of its GitHub repository. GitHub receives your IP address and the request; nothing from your journal or settings is sent. You can turn this off in Settings → Check for Updates.在 Android 上，Piru 每天最多一次向其 GitHub 仓库请求公开的版本列表，以检查是否有新版本。GitHub 会收到你的 IP 地址和该请求；日志和设置中的任何内容都不会被发送。你可以在「设置 → 检查更新」中关闭此功能。

7.3Opening a source, support or privacy link sends a request to that website through your browser. The destination may receive your IP address and browser information. Sending an email or sharing an export also uses the service you choose.通过浏览器打开来源、支持或隐私链接时，会向相应网站发送请求。目标网站可能收到你的 IP 地址和浏览器信息。发送邮件或分享导出文件也会使用你选择的服务。

8.Exports and backups导出与备份

8.1Piru can export journal data and reports through system file and sharing controls. Plain exports and PDFs are readable by anyone who obtains the file. An encrypted export uses a passphrase you choose; we keep no copy of that passphrase and cannot recover it.Piru 可以通过系统文件和分享功能导出日志数据与报告。普通导出文件和 PDF 可被任何获取该文件的人读取。加密导出使用你设置的口令；我们不会保存口令副本，也无法恢复口令。

8.2Piru has no app-managed cloud journal sync. Your device-backup settings may nevertheless include app data in Apple or computer backups. Protection depends on your backup settings, including encryption and, where available, Advanced Data Protection. See Apple’s iCloud data security overview.Piru 没有由 App 管理的日志云端同步。不过，你的设备备份设置可能将 App 数据包含在 Apple 或电脑备份中。保护程度取决于你的备份设置，包括加密及可用时的高级数据保护。请参阅 Apple 的 iCloud 数据安全概览。

8.3Files you export, screenshots, shared reports and backup copies are separate from the active journal. Deleting an entry does not recall these copies. Manage them in each destination where you saved or shared them.导出的文件、截屏、分享的报告和备份副本独立于当前日志。删除记录不会收回这些副本。请在各个保存或分享目的地分别管理它们。

9.Apple purchases and diagnosticsApple 购买与诊断

9.1Apple processes App Store payments. Piru checks verified StoreKit transactions and entitlements to provide purchased features. We receive no payment-card details. Apple may provide the publisher with sales and download reports.Apple 处理 App Store 付款。Piru 检查经验证的 StoreKit 交易和购买权益，以提供已购买的功能。我们不会收到支付卡资料。Apple 可能向发布者提供销售和下载报告。

9.2If your Apple settings permit sharing diagnostics with developers, Apple may make crash reports and usage information available through App Store Connect. We use available reports to investigate defects and app performance. Diagnostic reports can contain device and technical information; review attachments before sending additional reports yourself. Apple’s privacy policy explains its processing.如果你的 Apple 设置允许与开发者共享诊断信息，Apple 可能通过 App Store Connect 提供崩溃报告和使用信息。我们使用这些报告调查故障和 App 性能。诊断报告可能包含设备与技术信息；如果你自行发送其他报告，请先检查附件。Apple 的隐私政策说明其处理方式。

10.Support messages and sensitive information支持消息与敏感信息

10.1For technical app support, email [email protected]. We answer only technical questions within the developer’s competence. Piru and its support service provide no medical advice or interpretation of medical data. For medical questions, contact a qualified healthcare professional or your local health authority. For an emergency, contact local emergency services.如需 App 技术支持，请发送邮件至 [email protected]。我们仅回答开发者能力范围内的技术问题。Piru 及其支持服务不提供医疗建议或医疗数据解读。医疗问题请咨询合格的医疗专业人员或当地卫生部门。紧急情况请联系当地急救服务。

10.2Do not send medical reports, health records, personal health details or journal exports to our contact addresses. Use fictional data to describe a technical problem. We receive the sender’s email address, any name provided, the message and any attachments. We use ordinary technical-support information to investigate software issues and reply. When contacting us for technical support, please confirm that you authorize Elysia Muñoz to use your email address and message for handling that request under this policy. This authorization covers technical correspondence only. Where the GDPR or UK GDPR applies, our basis is the legitimate interest in supporting and maintaining the app, subject to your rights; a contractual basis applies only where the processing is necessary to perform a contract with you or take steps you request before entering one.请勿向我们的联系邮箱发送医疗报告、健康记录、个人健康详情或日志导出文件。请使用虚构数据描述技术问题。我们会收到发件人的邮箱地址、所提供的姓名、消息和附件。我们使用一般技术支持信息调查软件问题并回复。联系技术支持时，请确认你授权 Elysia Muñoz 按本政策使用你的邮箱地址和消息来处理该请求。此授权仅涵盖技术通信。在 GDPR 或英国 GDPR 适用时，处理依据是在尊重你权利的前提下支持和维护 App 的合法利益；只有在履行与你的合同或按你的要求采取订立合同前的步骤确有必要时，才采用合同依据。

10.3We do not request medical material, including for troubleshooting. If we identify medical details or a medical report in an unsolicited email, we use Gmail’s Delete control to remove that message from the inbox. We do not interpret it, provide a medical response, forward it to maintainers or retain it as a troubleshooting example. We review only as much as needed to identify and remove it. A message sent against this policy does not constitute consent to use its medical contents. Section 14.3 explains the limits of deletion.我们不会索取医疗资料，排查问题时也不会。如果发现未经请求的邮件包含医疗详情或医疗报告，我们会使用 Gmail 的“删除”功能将该邮件移出收件箱。我们不会解读其中内容、提供医疗答复、将其转发给维护者或留作排查示例。我们仅在识别并移除这些内容所需的范围内查看。违反本政策发送消息不构成对使用其中医疗内容的同意。第 14.3 节说明删除操作的限制。

10.4GitHub issues and community Discord channels can be visible to other people and copied or indexed. Keep technical reports free of medical details and use fictional data. Maintainers may receive a technical description of a software issue without medical material. Requests to exercise privacy rights are handled under Section 13; this support restriction does not limit those rights.GitHub issue 和社区 Discord 频道可能对他人可见，也可能被复制或索引。技术问题报告请勿包含医疗详情，并请使用虚构数据。维护者可以收到不含医疗资料的软件问题描述。隐私权利请求按第 13 节处理；这些支持范围限制不会限制你的隐私权利。

11.Security安全

11.1Piru relies on the device’s storage protection and your device access settings. Encrypted exports provide separate passphrase protection. The app has no separate app lock: someone using your unlocked device can open the journal. Keep your device software current, use a device passcode and review Lock Screen previews.Piru 依赖设备的存储保护和访问设置。加密导出另有口令保护。App 没有独立的应用锁：能使用你已解锁设备的人可以打开日志。请及时更新设备软件、设置设备密码，并检查锁定屏幕预览。

11.2Electronic storage and transmission carry risks, including loss, corruption and unauthorized access. These limits do not waive our obligation to use appropriate security measures for personal information we handle or your rights under applicable law.电子存储和传输存在丢失、损坏和未经授权访问等风险。这些限制不会免除我们对所处理个人信息采取适当安全措施的义务，也不会限制适用法律赋予你的权利。

12.Legal requests法律请求

12.1We cannot produce journal data that remains solely on your devices. Information you send to support, including attachments, may be available to us and may have to be disclosed in response to a valid legal obligation. We assess requests and disclose information only as required by applicable law.我们无法提供仅保存在你设备上的日志数据。你发送给支持邮箱的信息及附件可能由我们持有，并可能需要依有效的法律义务披露。我们会评估请求，仅按适用法律要求披露信息。

12.2Your devices, exports and third-party backups may separately be subject to legal requests. Records about health or substance use can be sensitive in legal, employment or other proceedings. Consider that when deciding what to record and share.你的设备、导出文件和第三方备份可能另行受到法律请求。有关健康或物质使用的记录在法律、就业或其他程序中可能十分敏感。请在决定记录和分享内容时考虑这一点。

13.Your rights你的权利

13.1Depending on applicable law, you may request access, correction, deletion, restriction or portability of personal information, object to processing based on legitimate interests, and withdraw consent. You may complain to your data protection authority. We do not sell personal information or use it for targeted advertising, and we do not penalize people for exercising privacy rights.根据适用法律，你可以请求访问、更正、删除、限制处理或转移个人信息，对基于合法利益的处理提出异议，并撤回同意。你可以向数据保护监管机构投诉。我们不会出售个人信息或将其用于定向广告，也不会因你行使隐私权利而给予不利待遇。

13.2Contact [email protected] for information the publisher holds, or [email protected] for website information. We may ask for proportionate identity verification and will respond within the applicable legal deadline. You can inspect, edit and export your local journal directly; a request to us cannot remotely change your device’s files.对于发布者持有的信息，请联系 [email protected]；对于网站信息，请联系 [email protected]。我们可能要求适度的身份核实，并会在适用法律规定的期限内回复。你可以直接查看、编辑和导出本地日志；向我们提出请求无法远程更改设备上的文件。

13.3Under Colombia’s Law 1581 of 2012, you may access your information free of charge, correct or update it, request proof of authorization and information about its use, and request deletion or withdraw authorization where legally available. Elysia handles these requests at the email in Section 19. Identify yourself, describe the request and provide a reply address; send only information needed to verify and handle it. Queries are answered within 10 business days, extendable by up to 5 with reasons and a response date. Complaints are answered within 15 business days from the following day, extendable by up to 8 with notice. If a complaint is incomplete, we request the missing information within 5 days; after two months without a response it is treated as withdrawn. After first completing the query or complaint process with us, you may complain to Colombia’s Superintendencia de Industria y Comercio (SIC). Other applicable deadlines and remedies remain available.根据哥伦比亚《2012 年第 1581 号法律》，你可以免费访问自己的信息，更正或更新信息，要求提供授权证明及信息使用情况，并在法律允许时要求删除或撤回授权。Elysia 通过第 19 节的邮箱处理这些请求。请说明身份、请求内容与回复地址，仅提供核验及处理所需的信息。咨询会在 10 个工作日内回复；说明原因及回复日期后，最多可延长 5 个工作日。投诉会从收到之次日起 15 个工作日内回复；事先通知后，最多可延长 8 个工作日。投诉不完整时，我们会在 5 日内要求补充；两个月内未回复的，视为撤回。先完成向我们提出咨询或投诉的程序后，你可以向哥伦比亚工商监管局（SIC）投诉。其他适用的期限与救济仍然有效。

14.Retention and deletion保存与删除

14.1Journal records remain until you remove them. Data & Backup → Delete Everything removes all shared journal model records, including entries, sessions, notes, lab measurements, schedules, inventory, profile and custom presets. It also clears local recovery copies and journal caches, cancels notifications, ends Live Activities and sends a reset to the Watch. An offline Watch retains its copy until it reconnects; entries queued before the reset are rejected by the phone. Remove the Watch app separately if you cannot reconnect it.日志记录会保留到你删除为止。「数据与备份 → 删除所有数据」会删除共享日志模型中的全部记录，包括记录、场次、笔记、化验数据、计划、库存、个人资料和自定义预设，同时清除本地恢复副本与日志缓存、取消通知、结束实时活动，并向 Watch 发送重置。离线的 Watch 会保留副本，直到重新连接；重置前排队等待发送的记录会被手机拒绝。如果无法重新连接，请另行移除 Watch App。

14.2Apple’s original Health records, device backups and files you exported are managed separately. Revoking Health access or deleting Piru leaves those copies under the controls of Apple or the service where you stored them. Deletion from storage and backups may take time; it is not a guarantee against forensic recovery.Apple 的原始健康记录、设备备份和你导出的文件需要分别管理。撤销健康访问权限或删除 Piru 后，这些副本仍由 Apple 或你保存它们的服务管理。从存储与备份中删除数据可能需要时间，也不保证无法通过取证手段恢复。

14.3Ordinary technical-support correspondence is kept while the request is open and agreed follow-up remains outstanding. Afterward, we delete it or keep a technical description with personal details removed. Emails containing unsolicited medical material are deleted when identified, subject to any applicable legal duty to preserve a specific record. Deletion means using Gmail’s Delete control: Google says this moves messages to Trash, where they normally remain for 30 days unless deleted from Trash sooner. We cannot independently verify erasure from Google’s infrastructure or backups. Google controls those systems and describes its deletion and retention practices in Gmail Help and its retention policy.一般技术支持通信会在请求尚未解决或约定的后续事项尚未完成期间保存。此后，我们会删除通信，或仅保留已去除个人信息的技术描述。包含未经请求的医疗资料的邮件会在识别后删除，但适用法律要求保留特定记录的情况除外。这里的删除指使用 Gmail 的“删除”功能：Google 说明此操作会将邮件移至“垃圾箱”，邮件通常会在那里保留 30 天，除非提前从“垃圾箱”中删除。我们无法独立核实 Google 基础设施或备份中的数据是否已被清除。这些系统由 Google 控制，其删除与保存方式见 Gmail 帮助和保存政策。

14.4Downloaded diagnostic reports are retained while the defect is being investigated and verified, then deleted or reduced to a technical summary without personal details. Apple controls retention of reports in its own systems. We keep only the records needed to meet any applicable accounting requirements for purchases.下载的诊断报告会在故障调查与验证期间保存，随后删除，或仅保留已去除个人信息的技术摘要。Apple 控制其自身系统内报告的保存期限。购买相关记录仅在满足适用会计要求所需的范围内保存。

15.Service providers and international processing服务提供商与跨境处理

15.1The publisher’s listed support address uses Google’s Gmail service. The website is hosted on DigitalOcean and delivered through Cloudflare. These providers process communications or web-request information to provide their services. Apple processes the services described above. GitHub or Discord receives information only when you choose to use those channels.发布者列出的支持邮箱使用 Google 的 Gmail 服务。网站托管于 DigitalOcean，并通过 Cloudflare 提供访问。这些提供商为提供服务而处理通信或网页请求信息。Apple 处理前文所述服务。只有在你选择使用 GitHub 或 Discord 渠道时，这些平台才会收到相应信息。

15.2These services can process information outside your country, including in the United States. Google describes its Data Privacy Framework participation and standard contractual clauses in its transfer notice. Cloudflare describes its processing and transfer safeguards in its privacy policy; DigitalOcean publishes its data processing agreement. These provider statements explain their practices; they do not replace the publisher’s own duties for a transfer. Contact us for the safeguards applicable to information we handle and how to obtain a copy.这些服务可能在你所在国家以外的地区处理信息，包括美国。Google 在其跨境传输说明中介绍参与数据隐私框架及采用标准合同条款的情况。Cloudflare 在其隐私政策中说明处理方式和传输保障；DigitalOcean 公布其数据处理协议。这些提供商声明说明各自的做法，不替代发布者自身的传输义务。你可以联系我们，了解我们处理的信息适用哪些保障，以及如何取得相关副本。

16.Children未成年人

16.1Piru is intended for people who are at least 18 and have reached the age of majority where they live. If you believe a child has sent personal information to support, contact us so we can remove it.Piru 面向年满 18 岁且已达到当地成年年龄的人。如果你认为未成年人已向支持邮箱发送个人信息，请联系我们处理删除。

17.Website requests and browser storage网站请求与浏览器存储

17.1Loading these pages sends your IP address, requested URL, browser information and request timing to the hosting and delivery services. They use this information to deliver content, prevent abuse and diagnose faults. Where the GDPR or UK GDPR applies, our basis is the legitimate interest in operating and protecting the website. Website request information is not linked to the app journal.加载这些网页时，你的 IP 地址、请求的网址、浏览器信息和请求时间会发送给托管与内容分发服务。它们使用这些信息提供内容、防止滥用和排查故障。在 GDPR 或英国 GDPR 适用时，我们采用运营和保护网站的合法利益。网站请求信息不会与 App 日志关联。

17.2These pages use browser local storage to remember your language choice. They do not contain advertising or analytics trackers. Cloudflare may perform security checks and use security cookies. You can clear this site’s browser storage through your browser settings. The hosting and delivery providers retain service and security records under their published policies; any request details we retain for an incident are kept only until the incident is resolved and its fix verified, unless a specific legal requirement applies.这些网页使用浏览器本地存储记住你的语言选择，不包含广告或分析跟踪器。Cloudflare 可能执行安全检查并使用安全 Cookie。你可以通过浏览器设置清除此网站的存储。托管与内容分发提供商按其公布的政策保存服务和安全记录；我们为处理事件保存的请求详情仅保留至事件解决并确认修复为止，具体法律要求另有规定的除外。

18.Changes to this policy政策变更

18.1We update this page and its date when our practices change. Material changes will also be explained in release notes or in the app when relevant. If a change requires consent, we will ask for it separately; continuing to use the app does not substitute for that consent.处理方式发生变化时，我们会更新本页及日期。重大变更还会视情况在更新说明或 App 内说明。如果变更需要同意，我们会另行征求；继续使用 App 不替代该同意。

19.Contact联系方式

19.1Publisher and app privacy controller: Elysia Muñoz, Colombia. Email: [email protected]. Elysia handles privacy queries and complaints. Website maintenance and website privacy: kageroumado, [email protected]. Do not send medical details or health records.发布者与 App 隐私负责人：Elysia Muñoz，哥伦比亚。邮箱：[email protected]。Elysia 负责处理隐私咨询与投诉。网站维护与网站隐私：kageroumado，[email protected]。请勿发送医疗详情或健康记录。

19.2Competent authorities may send legal requests to the publisher’s email above. We verify the authority and legal basis of a request before providing additional publisher identification or contact information required by law. We also provide information to other persons where applicable law requires it. Your privacy rights and any mandatory disclosure duties remain unaffected.主管机关可向上述发布者邮箱发送法律请求。我们会核实请求机关的权限及法律依据，再提供依法要求的额外发布者身份或联系信息。适用法律要求时，我们也会向其他人提供信息。你的隐私权利及任何强制性披露义务不受影响。

20.Language and your legal rights语言与法定权利

20.1The English and Chinese versions are intended to describe the same practices. Please report any discrepancy so we can correct it. This policy does not limit mandatory data protection or consumer rights. The Terms of Use address use of the app separately.英文和中文版本旨在说明相同的处理方式。如有差异，请告知我们以便更正。本政策不限制强制性数据保护或消费者权利。使用条款另行规定 App 的使用事项。