Yishui Privacy Policy
Effective date: [date of publication] · Operator: [TBD] · Contact: mqh0623@gmail.com
Yishui ("the app") is developed by [Operator]. We follow a minimal-data principle: the app has no account system, no ad SDKs, no profiling, and never uploads your health or night data to developer servers. Everything below describes all data behavior.
1. What do we collect?
Nothing. "Collection" means data leaving your device to developer or third-party servers; the app has no such path. All records, settings and computation stay on your device.
2. Microphone
Used only while night monitoring you explicitly start and authorize; capture stops when you stop or when interrupted. By default the app computes volume and event timing on device and does not save raw audio. Verified purchasers may opt in per night to "short sound clips": up to 10 seconds each, 30 per recording, 100 clips / 20 MiB on device, retained for 7 days and cleaned on next use. Clips stay on device with system file protection, are excluded from backups, can be deleted individually or with all records, and are never uploaded.
3. Apple Health
Read permission is requested only when you tap to read; samples are used for the current view (report, stages, comparison) and kept in memory only — never written to the app database, exported, or sent to the watch. The app never writes or deletes any data in Apple Health.
4. Local storage
Night records, advice and feedback live in the on-device database; monitoring checkpoints support recovery; language, theme and app-lock are local settings. One step in Settings deletes all local records — this never touches Apple Health originals, your purchase, or system settings. Device backups are controlled by you in Apple settings.
5. Apple Watch
Monitoring status, language/theme and (for verified purchasers) up to 90 days of phone-capture summaries travel via Apple's Watch Connectivity between paired devices; never audio, health samples or sound-event details. Summaries stay in watch memory only.
6. Export
You may export a phone summary as CSV to a location you choose; the file contains no audio or health samples. Deleting records in the app does not remove exported copies.
7. Purchase
The one-time unlock is processed by Apple's StoreKit; we operate no payment backend and never receive payment data. Entitlements are verified by the system on device.
8. Permissions
App Lock uses system LocalAuthentication; the app cannot read your Face ID, Touch ID or passcode. Free-space readings power the low-storage notice only and are never uploaded.
9. Children
The app is for general audiences and does not knowingly collect any personal information, including children's.
10. Changes
If a future version adds any data-transmitting feature (e.g., cloud sync), we will update this policy and obtain necessary consent before enabling it; version history stays on this page.
11. Contact
Support and privacy: mqh0623@gmail.com. We usually reply within two business days.