ATLASPACES / OTTERUP
专心点隐私政策
OtterUp Privacy Policy
更新及生效日期 / Updated and effective: 2026-10-03
本机使用与可选同步
Local use and optional sync
专心点 OtterUp 是 Atlaspaces 开发团队提供的专注工具。核心功能无需登录。任务、专注时间、贝壳兑换、装饰、水獭名字和偏好设置首先保存在本机；首次使用时间和评分提示状态也只在本机保存。只有你登录账号后，任务、专注记录、兑换记录和个人设置才会上传，以提供备份与跨设备同步。账号与游客空间分别保存，退出登录不会把原账号的记录上传给其他账号。系统设备备份可能包含本机数据，由你的设备与备份设置控制。
OtterUp is a focus tool provided by the Atlaspaces development team. Core features do not require sign-in. Tasks, focus time, shell redemptions, decorations, your otter's name, and preferences are initially stored on your device. First-use time and the rating-prompt state also stay locally. When you sign in, tasks, focus records, redemption records, and profile settings are uploaded for backup and cross-device sync. Account and guest spaces are stored separately; signing out does not upload the former account's records to another account. System device backups may contain local data and are controlled by your device and backup settings.
登录信息
Sign-in information
使用短信登录时，我们处理你提供的手机号和验证码，以验证身份，并通过短信服务商发送验证码。在 iOS 使用“通过 Apple 登录”时，我们验证 Apple 身份凭据及该 App 的用户标识；当前 App 不请求 Apple 姓名或邮箱。服务器创建独立账号标识，并保存身份关联与会话凭据的哈希。设备将会话凭据保存在系统安全存储中。这些信息用于身份验证、会话安全及记录归属。
For SMS sign-in, we process the phone number and verification code you provide to authenticate you; a messaging provider delivers the code. For Sign in with Apple on iOS, we verify the Apple identity credential and app-specific user identifier. The app currently does not request your Apple name or email address. The service creates a separate account identifier and stores identity associations and hashed session credentials. Your device keeps session credentials in system secure storage. This information supports authentication, session security, and ownership of records.
主动提交的反馈
Feedback you choose to submit
摇动手机只在本机识别动作，不会自动上传传感器读数。仅在你点击提交时，App 才发送反馈文字、App 版本、构建编号、操作系统版本、设备型号、语言和当前页面类别。反馈接口不自动附带账号、任务、专注记录、截图、日志或设备唯一标识。请不要在反馈文字中填写密码、验证码或其他不必要的个人信息。为防止滥用，服务器临时处理来源网络地址，并生成与 App 和当天日期相关的不可直接读取的校验摘要；反馈记录不保存原始来源地址。反馈文字及内部处理记录按 180 天保留周期清理，限流统计按 31 天周期保留。
Shaking is recognized locally and does not automatically upload sensor readings. Only when you tap Submit does the app send your feedback text, app version, build number, operating-system version, device model, language, and current screen category. The feedback request does not automatically include your account, tasks, focus records, screenshots, logs, or a unique device identifier. Do not include passwords, verification codes, or unnecessary personal information in your message. To prevent abuse, the service temporarily processes the source network address and creates a keyed digest specific to the app and date; feedback records do not store the raw address. Feedback text and internal handling records are cleaned up on a 180-day retention cycle; rate-limit statistics are kept on a 31-day cycle.
购买、通知与小组件
Purchases, notifications, and widgets
Pro 购买与退款由你使用的 Apple App Store 或 Google Play 商店处理。安卓版本将商品标识和购买令牌通过 HTTPS 发送至我们的验证服务，服务向 Google 核实购买状态、到期时间和撤销情况并确认购买后才授予权益；不将令牌保存至数据库或写入应用日志。验证接口的运行日志处理来源 IP、路径、状态码和耗时，来源摘要限流最多保留一分钟。Google 按其政策保留交易数据。App 在设备上检查 Apple 验证的商品标识、有效期及撤销状态，以提供和恢复权益；我们不接收银行卡信息。购买权益不会作为任务同步记录上传。账号删除或卸载 App 不会自动取消 Apple 或 Google Play 订阅。提醒使用你授权的本地通知；小组件与实时活动通过设备上的共享空间显示专注状态。
The Apple App Store or Google Play handles Pro purchases and refunds, depending on your platform. Android sends the product ID and purchase token over HTTPS to our verification service. The service checks purchase state, expiry and revocation with Google and acknowledges valid purchases before granting access. Tokens are not persisted in our database or application logs. Verification operational logs process the source IP, request path, status and duration; hashed source rate-limit counters expire within one minute. Google retains transaction data under its own policy. The app checks Apple-verified product identifiers, expiry, and revocation status on your device to provide and restore access. We do not receive card information. Pro entitlements are not uploaded as task-sync records. Deleting your account or uninstalling the app does not automatically cancel an Apple or Google Play subscription. Reminders use local notifications you authorize; widgets and Live Activities use on-device shared state to display focus status.
用途、服务商与安全
Purpose, service providers, and security
信息用于实现你请求的功能、同步、客服及防止滥用，不用于广告追踪，不出售个人信息。当前 App 不包含广告或跨 App 跟踪 SDK，也不请求通讯录、定位、相机、麦克风或相册。网络服务使用 HTTPS，并对服务器与数据库设置访问控制。托管、网络传输、短信及邮件服务商会为运行相应服务处理必要信息。账号登录与同步 API 的运行日志保存来源 IP 地址、请求路径、状态码和响应耗时，用于安全、防止滥用、服务可用性监控及故障排查。独立反馈接口的记录和应用日志不保存原始来源 IP 地址，只使用上述按 App 和日期生成的校验摘要。联系支持邮箱时，邮件服务会处理你的邮箱和主动提供的内容。我们不会把你的任务或专注记录公开展示给其他用户。
Information supports the features you request, sync, support, and abuse prevention. It is not used for advertising tracking, and we do not sell personal information. The current app has no advertising or cross-app tracking SDK and does not request contacts, location, camera, microphone, or photo-library access. Network services use HTTPS and access controls for servers and databases. Hosting, network, messaging, and email providers process information needed to operate their services. Operational logs for account sign-in and sync APIs retain the source IP address, request path, status code, and response latency for security, abuse prevention, service availability monitoring, and troubleshooting. Records and application logs for the separate feedback API do not retain the raw source IP address; they use only the app-and-date-specific keyed digest described above. If you email support, the email service processes your address and the content you choose to provide. Your tasks and focus records are not publicly displayed to other users.
保留、删除与恢复
Retention, deletion, and recovery
账号同步记录在账号使用期间保留。你可以删除任务，或在“我的 → 数据与同步 → 删除账户”删除服务器账号、身份关联、会话与同步记录；删除不能恢复。退出登录仅结束会话，不等同于删除。删除账号后，本机原账号副本会封存，不再显示或自动同步给其他账号。无法确认归属的旧版记录也会保留在本机，等待身份确认，不会猜测归属。要清除该设备上的本机副本，请使用 iOS 的“删除 App”（而非“卸载 App”）；设备备份中的副本需按你的备份设置另行管理。主动提交的独立反馈及邮件不会因删除 App 账号而自动删除；需要访问、更正或删除这些内容时，请联系支持并提供足以定位请求的信息。
Synced records are retained while you use the account. You can delete tasks or choose Me → Data & Sync → Delete account to remove the server account, identity associations, sessions, and synced records. Account deletion cannot be undone. Signing out ends a session and is not deletion. After account deletion, the former account's local copy is archived and is neither displayed nor automatically synced to another account. Legacy records without a confirmed owner are also retained locally pending identity verification, without guessing ownership. To clear local app copies on that device, use iOS Delete App, rather than Offload App; manage copies in device backups separately through your backup settings. Independently submitted feedback and emails are not automatically deleted when you delete an app account. Contact support to request access, correction, or deletion, providing enough information to locate the request.
你的选择与未成年人
Your choices and minors
你可以不登录、关闭通知或在“关于我们”关闭摇一摇反馈，并继续使用相应的核心功能。本产品不是专门面向儿童的服务，也不是医疗产品。未成年人应在监护人指导下使用；如果你认为我们不适当地处理了未成年人的信息，请联系我们。有关个人信息访问、更正、删除或其他适用权利的请求，可通过下方邮箱提出；我们会按适用要求核实并处理。
You may use the app without signing in, disable notifications, or turn off shake feedback in About, while continuing to use the relevant core features. The product is not specifically directed at children and is not a medical product. Minors should use it with guidance from a parent or guardian. Contact us if you believe we have inappropriately processed a minor's information. You may email us to request access, correction, deletion, or other applicable rights; we will verify and handle requests in accordance with applicable requirements.
更新与联系
Updates and contact
本政策适用于专心点 OtterUp。功能或数据处理发生变化时，我们会更新本页面；需要额外授权的处理会先通过相应产品流程征求授权。隐私或支持问题请联系 support@atlaspaces.com，并在邮件主题注明 OtterUp。
This policy applies to OtterUp. We will update this page when features or data practices change. Processing that requires additional authorization will request it through the relevant product flow before it begins. For privacy or support questions, email support@atlaspaces.com with OtterUp in the subject.