隐私政策Privacy policy

1. 适用范围

本政策适用于由 Baize Mapping 提供的 Android 应用 Laterrr ToDo。应用面向 18 岁以上用户，首发地区不包括欧洲经济区、英国和瑞士。

2. 默认保存在设备上的数据

任务标题与内容、标签、日期、任务状态、专注记录、计时器状态和应用设置默认仅保存在你的设备上。Laterrr ToDo 不提供账号或云端任务同步，也不会把这些内容上传到我们的服务器。

3. Pro 购买校验所处理的数据

当你购买、恢复或刷新 Laterrr ToDo Pro 权益时，我们会处理：

• 随机生成的安装标识；
• Google Play 提供的购买令牌与购买状态；
• 订单号的不可逆哈希；
• 用于防欺诈与排障的 IP 地址和基础请求日志。

购买令牌会在存储前加密，安装标识和订单号会以哈希形式保存。这些数据仅用于确认购买、恢复权益、防止滥用、处理退款或撤权以及保障购买系统安全。

4. 服务提供商与托管地区

Google Play 负责付款与商店购买记录；Google Play Developer API 和 Play Integrity 用于验证购买与应用完整性。购买校验后端由 Supabase 托管，当前项目地区为德国法兰克福（eu-central-1）。这些服务提供商会按照各自的政策处理必要数据。

5. 反馈邮件

只有当你主动点击“帮助与反馈”并通过自己的邮件应用发送邮件时，我们才会收到你填写的邮件地址、正文和附件。应用不会自动附加任务、专注记录、备份或设备标识。

6. 我们不会做的事

• 不展示广告；
• 不使用行为分析或跨应用追踪；
• 不出售个人数据；
• 不使用 Cookie 或网页分析脚本。

7. 保留期限

• 有效的永久购买记录：在权益有效期间保留；
• 退款、取消或撤权记录：自撤权之日起最多保留 24 个月，之后自动删除；
• 你主动发送的反馈邮件：最多保留 12 个月。

8. 你的选择与权利

你可以通过卸载应用或清除应用数据删除设备上的本地数据。购买校验记录、反馈邮件的访问或删除请求，以及隐私投诉，可发送至 contact@baizemapping.com。为防止误删他人记录，我们可能需要你提供足以定位购买或邮件的必要信息。

9. 安全与变更

我们使用传输加密、购买令牌加密、最小权限和定期撤权核对来保护购买校验数据。我们可能因产品或法律要求更新本政策，并在本页面更新日期。

1. Scope

This policy applies to the Laterrr ToDo Android app provided by Baize Mapping. The app is intended for adults aged 18 or older. Its initial release is not offered in the EEA, the United Kingdom, or Switzerland.

2. Data stored on your device

Task titles and content, tags, dates, task status, focus history, timer state, and app settings remain on your device by default. Laterrr ToDo has no account system or cloud task sync, and we do not upload this content to our servers.

3. Data processed for Pro purchase verification

When you buy, restore, or refresh Laterrr ToDo Pro, we process:

• a randomly generated installation identifier;
• the Google Play purchase token and purchase state;
• a one-way hash of the order identifier; and
• IP address and basic request logs for fraud prevention and troubleshooting.

Purchase tokens are encrypted before storage. Installation and order identifiers are stored as hashes. We use this data only to verify and restore purchases, prevent abuse, process refunds or revocations, and secure the purchase system.

4. Service providers and hosting region

Google Play processes payments and store purchase records. The Google Play Developer API and Play Integrity verify purchases and app integrity. Our purchase-verification backend is hosted by Supabase in Frankfurt, Germany (eu-central-1). These providers process necessary data under their own policies.

5. Feedback email

We receive your email address, message, and attachments only when you choose Help & feedback and send an email through your own email app. Laterrr ToDo does not automatically attach tasks, focus history, backups, or device identifiers.

6. What we do not do

• We do not show ads.
• We do not use behavioral analytics or cross-app tracking.
• We do not sell personal data.
• This page uses no cookies or analytics scripts.

7. Retention

• Active lifetime purchase records: retained while the entitlement remains active.
• Refunded, canceled, or revoked records: retained for no more than 24 months after revocation, then automatically deleted.
• Feedback email you send: retained for no more than 12 months.

8. Your choices and rights

You can delete local data by clearing the app's data or uninstalling it. To request access to or deletion of purchase-verification records or feedback email, or to make a privacy complaint, contact contact@baizemapping.com. We may ask for the minimum information needed to locate the correct purchase or message and avoid deleting another person's record.

9. Security and changes

We protect purchase-verification data with encryption in transit, encrypted purchase-token storage, least-privilege access, and regular revocation checks. We may update this policy when the product or legal requirements change and will update the date on this page.