应时一事 Timely DeedsTimely Deeds

一、适用范围与主体1. Scope and Operator

本政策由温州华弥电子商务有限公司（浙江省温州市）发布，生效日期为 2026 年 10 月 6 日。本政策覆盖应时一事的海外版（Android 应用与 H5 网页版）及本产品的官网展示页。This policy is issued by Wenzhou Huami E-commerce Co., Ltd. (Wenzhou, Zhejiang, China) and takes effect on 6 October 2026. It covers the international edition of Timely Deeds (the Android app and the H5 web version) and this product's showcase page.

国内版（微信小程序）由同一主体运营，但使用独立的账号体系与服务器，其数据处理方式不同；使用国内版时请以国内版另行说明的隐私政策为准。The mainland-China edition (WeChat mini-program) is operated by the same entity on a separate account system and server, under different data practices. Its own policy applies to that edition.

应用的全部功能无需登录即可使用。登录只用于云端同步与跨设备，不是使用应用的前提。Every feature works without signing in. An account exists only for cloud sync and cross-device use; it is not a precondition for using the app.

二、我们收集哪些信息2. Information We Collect

不登录使用时，我们不保存任何与你身份关联的信息。以下清单仅在你主动登录后适用：When you use the app without signing in, we store nothing that identifies you. The list below applies only once you choose to sign in:

三、我们不收集的信息3. What We Do Not Collect

• 手机号码、邮箱地址、身份证件——海外版登录只使用一个账号标识，邮箱从不保存。Your phone number, email address, or government ID — sign-in uses only an account identifier, and the address is never stored.
• 通讯录、相册、短信、通话记录、剪贴板、相机、麦克风。Your contacts, photos, messages, call logs, clipboard, camera, or microphone.
• 你的位置轨迹——坐标只在当次查询天气时使用一次，不记录你去过哪里。Your location history — coordinates are used once per weather lookup; we never record where you go.
• 广告标识符（如 Google Advertising ID）。海外版未接入任何广告。Advertising identifiers such as Google Advertising ID. The international build carries no advertising.
• 出生日期、出生时辰、性别，或任何可用于命理推断的信息。我们不收集这些字段，也不做任何生肖、五行、运势类推断。Your birth date, birth hour, gender, or anything usable for fortune-telling. We collect none of these, and draw no zodiac, element, or fortune conclusions.

四、设备本地存储4. Local Storage on Your Device

应用会在你的设备上保存以下内容，它们不会离开你的设备。卸载应用即全部删除；应用内的「清除缓存」清除其中的缓存类条目，登录态相关的键则在你退出登录时清除：The app stores the following on your device. None of it leaves the device. Uninstalling removes all of it; the in-app "clear cache" removes the cache entries, while sign-in-related keys are removed when you sign out:

• `timely-deeds:auth` — 登录会话凭证，有效期 30 天，退出登录即清除。`timely-deeds:auth` — the session credential, valid for 30 days; cleared when you sign out.
• `token` — 登录令牌信息（与 `timely-deeds:auth` 同源的会话数据），退出登录即清除。`token` — your sign-in token data (session state alongside `timely-deeds:auth`); cleared when you sign out.
• `accessTokenExpireTime` / `refreshTokenExpireTime` — 令牌过期时间戳，退出登录即清除。`accessTokenExpireTime` / `refreshTokenExpireTime` — token expiry timestamps; cleared when you sign out.
• `user` — 你的资料本地缓存（昵称、头像、偏好），退出登录即清除。`user` — a local cache of your profile (display name, avatar, preferences); cleared when you sign out.
• `timely-deeds:favorites` — 收藏项本地缓存。`timely-deeds:favorites` — a local cache of your favourites.
• `timely-deeds:dailyRite` — 主页「每日落印」浮层的「今天已弹」标记（一个本地日期），在你的落印或关闭后写入。`timely-deeds:dailyRite` — the "shown today" flag for the daily check-in overlay (a local date), written once you check in or dismiss it.
• `timely-deeds:google-oauth-state` — 登录回跳时用于防伪造的随机串，用完即清除。`timely-deeds:google-oauth-state` — a random string used to prevent forged callbacks during sign-in; cleared once consumed.
• `app-tabbar-path` — 界面状态，不含敏感数据。`app-tabbar-path` — interface state, containing nothing sensitive.

五、我们如何使用你的信息5. How We Use Your Information

• 提供应用核心功能：登录、云端同步、天气、今日指引、穿衣建议、落印、时记。To provide the app: sign-in, cloud sync, weather, the daily suggestions, clothing advice, check-ins, and your journal.
• 按你的城市、作息与关注主题对今日指引排序。To order the daily suggestions by your city, routine, and topics.
• 维持登录状态与防止账号被盗用。To keep you signed in and detect account misuse.
• 履行适用法律规定的义务。To meet obligations under applicable law.

我们不出售你的个人信息，不与第三方共享它用于其自身的定向广告，也不将其用于广告画像。We do not sell your personal information, do not share it with third parties for their own targeted advertising, and do not use it for advertising profiles.

六、第三方服务6. Third-Party Services

我们刻意保持依赖精简：应用不集成任何第三方统计、崩溃监控、广告或推送 SDK。下表是全部会接收到你数据的外部服务。We deliberately keep our dependencies lean: the app integrates no third-party analytics, crash-reporting, advertising, or push SDKs. The table below lists every external service that receives your data.

不登录时，仅在查看天气、今日指引或穿衣建议的情况下会向 Open-Meteo 发出当次坐标；该请求不携带你的账号信息。Without signing in, your coordinates reach Open-Meteo only when you open weather, the daily suggestions, or clothing advice — and that request carries no account information.

七、数据存储与安全7. Storage and Security

海外版的数据存储于美国境内的服务器，数据库位于美国。你在应用中产生的数据可能传输至 Google 与 Open-Meteo（均在欧洲经济区以外），我们依据 GDPR 第 46 条的标准合同条款处理此类传输。Data for the international edition is stored on servers located in the United States, with the database in the US. Information you enter may be transferred to Google and Open-Meteo, both outside the European Economic Area; we rely on Standard Contractual Clauses under Art. 46 GDPR for such transfers.

会话凭证通过 Authorization 请求头传递，不写入网页 Cookie。数据在传输中经 HTTPS 加密。Session credentials travel in the Authorization header rather than in web cookies. Data is encrypted in transit over HTTPS.

八、保存期限8. Retention

你的账户数据在账号存续期间不设自动过期期限，我们长期保留。 请注意这与第九节的注销相互衔接：你提交注销申请后，我们人工处理，并在 15 个工作日内删除全部个人数据，不留副本。Your account data has no automatic expiry and is retained for as long as the account exists. This connects to deletion in the next section: once you request deletion, we handle it manually and remove all personal data within 15 business days, leaving no copy behind.

坐标从不被持久保存。设备本地数据（第四节）随退出登录或清除缓存而删除。Coordinates are never stored. The local data in section 4 is removed on sign-out or when you clear the cache.

服务器访问日志保留 14 天后自动删除；应用运行日志单容器上限 30 MB，超出即滚动删除，最多保留 3 份。Server access logs are deleted automatically after 14 days. Application run logs are capped at 30 MB per container and roll over when that limit is reached, keeping at most 3 files.

九、你的权利与数据删除9. Your Rights and Deletion

你可以在应用内直接行使以下权利，无需联系客服：You can exercise the following rights in the app, without contacting support:

• 访问与更正 —「我的 → 设置 → 个人信息」可查看并修改昵称、城市、作息与关注主题。Access and rectification — under Me → Settings → Profile you can view and change your display name, city, routine, and topics.
• 撤回定位授权 — 在系统设置中撤销定位权限即可。撤销后天气与穿衣建议不再显示，其余功能全部正常。Withdraw location consent — revoke the location permission in system settings. Weather and clothing advice then stop appearing; everything else keeps working.
• 删除账号与全部数据 —「我的 → 设置 → 申请注销账号」提交申请，我们人工处理，并在 15 个工作日内完成。Delete your account and all its data — submit a request under Me → Settings → Request account deletion; we handle it manually and complete it within 15 business days.
• 撤回登录 — 退出登录会清除本地会话凭证，不影响服务端已保存的同步数据。Sign out — this clears the local session credential; your synced data on the server is unaffected.
• 数据可携带 — 你可以向我们索取云端保存的账号资料、收藏、时记与落印记录的副本，我们会以通用格式（JSON）提供。Data portability — you may request a copy of the account data, favourites, journal entries and check-ins stored in the cloud, and we will provide it in a common format (JSON).
• 反对处理 — 你可以基于你的具体情况反对我们处理你的个人信息；对于「今日指引」排序这类处理，你可以在应用内留空偏好设置来停止。Object to processing — you may object to our processing of your personal information on grounds relating to your situation; for processing such as the ordering of the daily suggestions, you can stop it in-app by leaving the preferences blank.
• 向监管机构投诉 — 若你认为我们处理你的个人信息违反了适用法律，你有权向所在国家或地区的监管机构投诉（例如欧盟/欧洲经济区成员国的数据保护机构）。Lodge a complaint — if you believe our processing infringes applicable law, you have the right to lodge a complaint with a supervisory authority in your country or region (for example, the data protection authority of your EU/EEA member state).

删除完成后，账号主体、打卡、收藏与时记记录一并删除，不留存备份副本。此后数据无法恢复；若你再次登录，将创建一个新的账号，而不是找回原来的数据。这是删除数据，而不是关闭账号——我们无法为你保留一个「不能再登录」的状态。Once deletion completes, the account, check-ins, favourites, and journal entries are removed together, with no backup copy retained. Afterwards the data cannot be recovered; signing in again creates a new account rather than restoring the old one. This is deletion of data, not account closure — we cannot keep you in a state where you could never sign in again.

十、未成年人保护10. Children’s Privacy

应用未设置年龄门槛，也不主动收集未成年人的个人信息。由于我们不收集出生日期，我们无法也不会验证使用者年龄。若你是未成年人，请在监护人陪同下阅读本政策并使用应用。The app has no age gate and does not knowingly collect personal information from children. Because we do not collect a date of birth, we cannot — and do not — verify a user’s age. If you are a minor, please read this policy with a parent or guardian before using the app.

若你是未成年人的监护人，并认为其在未经同意的情况下向我们提供了个人信息，请通过下方邮箱联系我们，我们会在核实后删除。If you are a parent or guardian and believe your child has given us information without consent, please contact us at the address below and we will verify and delete it.

十一、官网展示页11. The Showcase Page on Our Website

产品介绍页（`huami.pet`）是独立的静态页面，不提供登录或任何需要填写的表单。本页不收集任何个人信息：The product showcase page is a separate static page. It offers no sign-in and no forms. That page collects no personal information:

• 不使用 Cookie，没有统计脚本、广告像素或任何第三方追踪。It uses no cookies, and contains no analytics script, advertising pixel, or third-party tracking.
• 唯一的外部请求是页面字体（由 Google 提供），加载时会向 Google 发送你的 IP 地址与浏览器信息——这是网络请求本身的结果。Its only external request is for the page fonts (served by Google), which sends your IP address and browser information to Google as an inherent result of the request.
• 浏览器本地仅保存一项：你选择的界面语言（`site-lang`），从不上传，清除浏览器数据即可删除。One thing is stored locally: the interface language you chose (`site-lang`). It is never uploaded, and clearing your browser data removes it.
• 服务器会记录常规访问日志（IP 地址、请求时间、浏览器类型与页面路径），仅用于投递与排查故障，不与身份关联，保留 14 天后自动删除。The server keeps an ordinary access log (IP address, timestamp, browser type, page path), used only to deliver pages and diagnose faults, and not linked to any identity. Logs are deleted automatically after 14 days.

十二、政策更新12. Changes to This Policy

我们可能随功能变化更新本政策，并修订页首的「最后更新」日期。若变更涉及收集范围的实质增加，我们会通过应用内公告或邮件向你重新征得同意。We may update this policy as the app changes and revise the "Last updated" date above. If a change materially increases what we collect, we will ask for your consent again through an in-app notice or by email.

十三、联系我们13. Contact Us

如对本政策或个人信息处理有任何疑问、意见或投诉，请联系：温州华弥电子商务有限公司，邮箱 eggwhite@foxmail.com。我们会在收到请求后 15 个工作日内回应。For questions, comments, or complaints about this policy or our handling of your personal information, contact Wenzhou Huami E-commerce Co., Ltd. at eggwhite@foxmail.com. We respond within 15 business days of receipt.