隐私政策
简短地说
- 我们读不到你的记录。App 没有账号，我们也没有服务器；不做统计，不放广告，不追踪你。
- 你的记录存在你的 iPhone和你自己的 iCloud里。只有你邀请的家人能看到你们共同的家。
- 购买由 Apple 处理，我们拿不到你的付款信息。
- 你可以随时导出全部数据，也可以在 App 里删除你的数据。
1. 我们是谁
家有宠由 Homepaw 团队（clartrace）开发和提供（下称“我们”）。对本政策有任何问题，请写信到 beyondbyterminal@gmail.com。
2. App 里保存了哪些信息
App 只保存你和家人在 App 里自己写下的内容：
- 宠物资料：名字、种类、品种、性别、生日、到家的日子、是否绝育、过敏、既往病史、常去的医院和头像。
- 照护记录：照护项目和时间、每次盖章（谁在什么时候完成，以及新版照护章盖下时的文字和样式）、每天的胃口、精神和便便。
- 健康记录：康复期、症状记录、用药和喂药记录、就诊记录（医院、诊断、费用、备注）、体重。
- 回忆和照片：你写下的文字和添加的照片。
- 家庭信息：家庭名称；每位成员自己填的称呼和名章，包括选择的章形、印色、边框和字样；你为不用 App 的家人（比如奶奶）添加的称呼和名章，以及“谁替谁盖的章”；加入、离开的时间和谁是创建者；每位成员的会员有效期（用于核验创建者提供的家庭协作及各成员的个人高级功能，并兼容旧家庭权益）；以及 iCloud 为本 App 提供的一个用户编号，用来认出家里哪位成员是你。这个编号只在本 App 里有效，不包含你的 Apple 账号、姓名、邮箱或电话。
- 本机设置：体重单位、通知偏好等，只存在这台 iPhone 上。
照片在你的 iPhone 上缩小（长边不超过 2048 像素）并重新压缩后才保存，原照片里的拍摄地点等附加信息不会被保存。头像抠图用的是 Apple 的系统功能，在手机上完成。
App 不读取你的通讯录、位置或健康 App 数据，也不使用广告标识符。
3. 这些信息存在哪里
- 你的 iPhone 上：App 的数据库在 App 自己的存储空间里。App 每天在本机自动保留一份备份（最近 7 份），数据出问题时可以在「设置」›「iCloud 与同步」›「从本机备份恢复」恢复。这些文件和其他 App 数据一样，会按你的 iOS 设置包含在 iPhone 的 iCloud 云备份或电脑备份里。
- 你自己的 iCloud 里：登录 iCloud 时，App 通过 Apple 的 CloudKit 把记录同步到你 iCloud 账户里属于本 App 的私有数据库，照片占用你的 iCloud 空间。换手机或重装后，记录会自动回来。不登录 iCloud 也能在这台手机上使用，只是不能同步，也不能邀请家人。
- 共享的家：当你邀请家人加入一个家，这个家的数据通过 CloudKit 共享给加入的家人。数据仍存放在这个家所在的 iCloud 账户（最初创建它的人）里，并占用这个账户的 iCloud 空间；加入的家人可以在自己的设备上查看记录，并在具备相应权限时添加记录。
我们没有服务器，看不到、也无法访问你在 iCloud 里的数据。iCloud 由 Apple 提供，适用 Apple 的隐私政策。
4. 和家人共享
- 邀请：新建家庭由创建者生成单次领取的私密邀请二维码，无需预填邮箱或手机号。领取前持码者可能抢先加入，请只向目标家人出示；领取后共享权限绑定到领取账号。旧版家庭兼容原有链接或二维码共享，持有旧公共链接的人可能加入，请只向可信家人提供。
- 加入后能看到什么：这个家里的全部宠物、照护和健康记录、回忆和照片，以及每位成员的称呼、名章、谁盖的章和会员状态。
- 撤销邀请与共享：新私密共享按受邀账号授权，移除参与者会撤销该账号的共享访问。创建者也可明确选择停止协作，保留自己的记录。旧公共共享改变权限可能影响已有参与者；离线设备的本地数据清理依赖后续同步。
- 移除家人：创建者可以点「请 TA 离开」。对方会被移出 iCloud 共享；旧版公共共享还会重置邀请链接，可能影响原有参与者；TA 盖过的章和写过的回忆会保留，名章变成灰色。这一步需要在这个家所在的 iCloud 账户（最初创建者）的 iPhone 上操作。
- 退出：受邀成员可以在家庭管理中点「退出这个家」，也可以在「欢迎回来」页点「不再照顾这些毛孩」，选择受邀家庭并确认退出。iCloud 退出成功后，App 移除本机的该家庭共享副本及图片缓存；创建者和其他家人的记录不受影响，你留下的章和回忆仍保留在家里，显示为“已离开”。这不等于删除该家庭的原始数据。再次加入需要接受邀请。
- 退出未完成与其他设备：退出需要联网并由 iCloud 完成。未完成时会提示，而不会报告已删除；待退出状态保存在本机，之后在启动、回到前台或同步合并时重试。其他设备的共享变更及本地清理依赖后续同步；暂时的同步错误不会被当作退出或解散。
- 保留记录，开始新的照顾：你可以保留自己创建的家庭及记录，先创建或扫码加入其他家庭。这个选择和待退出状态只保存在本机设置中，不会发送给我们；选择保留不代表退出、解散或删除，之后仍可查看保留的家庭。
- 解散：创建者可以解散一个家。解散标记同步后，其他家人不再看到这个家，受邀者的本机共享副本会清理；离线设备要等后续同步。可管理该家庭的创建者可在 30 天内通过「设置」›「最近删除」恢复保留的记录；已经退出共享的成员需重新接受邀请。
5. 通知、小组件、实时活动、Apple Watch 和 Siri
照护、喂药等提醒是 App 在你的 iPhone 上安排的本地通知。家人动态的通知，也是你的 iPhone 在同步到家人的新记录后自己生成的。小组件和锁屏上的实时活动读取的是 App 存在本机的数据。这些都不经过我们。为了及时同步，iCloud 会通过 Apple 的推送服务提醒 App 有新数据。
Apple Watch 上看到的今天的小事，是你的 iPhone 通过 Apple 的手表连接（WatchConnectivity）直接发给手表的；在手表上盖章，也是发回你的 iPhone 记下。手表不连接 iCloud，也不经过我们。用 Siri 或“快捷指令”盖章时，你说的话由 Apple 处理（适用 Apple 的隐私政策），App 只收到要盖哪件小事，并在你的 iPhone 上记下。
6. 购买和会员
- 订阅和买断都通过 App Store 由 Apple 处理。我们收不到你的姓名、Apple 账号或付款信息。
- App 通过 Apple 的 StoreKit 在你的 iPhone 上读取你是否有会员、有效期到哪天，并把本人的有效期写进本人成员记录，用于核验创建者的家庭协作及各成员的个人高级功能；同一家庭的成员可以看到这些会员状态。邀请不授予受邀者个人订阅，旧家庭保留原有共享权益。
- 恢复购买：「设置」›「会员」›「恢复购买」。管理或取消订阅：「设置」›「会员」›「管理订阅」，或者在 iPhone 的系统设置里管理。
7. 我们不做的事
- 不放广告，不跨 App 或网站追踪你，不出售或分享任何数据。
- App 里没有会收集数据的第三方 SDK。唯一的第三方代码库是 SnapKit，它只用来排版界面，不收集任何数据。
- App 自己不连接我们的服务器（我们也没有服务器）。网络只用于 Apple 的 iCloud 同步和 App Store 购买。
8. 权限
- 相机：拍下宠物的照片，以及扫描家人的邀请二维码。
- 照片（仅添加）：你选择保存时，把照片存到相册。
- 从相册选照片：使用系统的照片选择器，只有你选中的照片会交给 App，App 不需要读取整个相册的权限。
- 通知：发送照护、喂药和家人动态提醒。
这些权限都可以在 iPhone 的系统设置里随时关闭；关闭后对应的功能不可用，其余照常。
9. 联系我们和诊断信息
如果你写信给我们，我们会收到你的邮箱地址、邮件内容，以及你自己选择附上的文件（例如截图）。从 App 的「设置」›「写信给我们」打开邮件时，正文末尾会预先填好 App 版本、iOS 版本和最近一次出错的错误代码（例如“CK-15”和 Apple 给出的错误说明），方便我们找原因；发送前你可以看到并删改这些内容，发不发由你决定。我们只用它们来回复和解决你的问题，处理完毕后不再需要的会删除；你也可以随时要求我们删除往来邮件。
如果你在 iPhone 的「设置」›「隐私与安全性」›「分析与改进」里打开了“与 App 开发者共享”，Apple 可能会把崩溃报告等诊断信息提供给我们。这由 Apple 处理，你可以随时关闭。
10. 导出和删除
- 导出：「设置」›「导出全部数据」会在你的 iPhone 上打包一个 ZIP（JSON 和照片）。手帐、就诊档案 PDF 也在手机上生成。导出的文件由你自己决定存到哪里、发给谁。
- 删除单条记录：删掉的宠物和家庭会在「最近删除」里保留 30 天，之后才会真正删除。
- 删除我的数据：在「设置」›「删除我的数据」，输入“删除”确认后：
- 存在你 iCloud 里的家会被解散并立即删除，你 iCloud 里和本机上的这些数据一起删除；如果家里还有别人，App 会先请你解散这个家。
- 你会退出别人 iCloud 里的家。如果你是其中某个家的创建者、家里还有别人，需要先把创建者交给家里的另一个人。
- 「最近删除」、本机每天的备份、本机设置、小组件的数据、正在进行的实时活动和通知都会被清除。本机只留下安装日期和上次请你评分的时间，免得过早再次请你评分。
- 你在别人的家里盖过的章、写过的回忆会留在那个家里，显示为“已离开”。这些记录存放在那个家所在的 iCloud 账户里，属于那个家。
- 删除后无法恢复，建议先导出全部数据。会员订阅不会自动取消，需要在系统设置里单独取消。
- 只删除 App：会删掉这台 iPhone 上的数据，但不会删除你 iCloud 里的记录；重新安装并登录同一个 iCloud 后，仍保留在 iCloud 且你仍有访问权限的记录会同步回来。已成功退出的受邀家庭不会仅因重装自动重新加入。要连同 iCloud 里的数据一起删除，请先在 App 里使用“删除我的数据”。
删除操作会通过 iCloud 同步到你的其他设备。Apple 如何在其服务器上处理已删除的 iCloud 数据，见 Apple 的隐私政策。
11. 保存多久
我们自己不保存你的任何 App 数据。你的记录会一直保留在你的设备和 iCloud 里，直到你删除它们；「最近删除」里的内容保留 30 天，本机备份保留最近 7 份。往来邮件按第 9 条处理。
12. 儿童
本 App 不面向儿童。我们不收集任何人的个人信息，包括儿童的。家长可以通过 Apple 家人共享的“购买前询问”管理孩子的购买。
13. 本政策的变更
如果 App 处理数据的方式发生变化，我们会更新本页并修改上方的生效日期。重大变更会在变更生效前在本页说明。
14. 联系方式
Homepaw 团队（clartrace）
beyondbyterminal@gmail.com
使用本 App 的规则见用户协议。
Privacy Policy
The short version
- We can't read your records. There are no accounts and we have no servers. No analytics, no ads, no tracking.
- Your records live on your iPhone and in your own iCloud. Only the family members you invite can see the families you share.
- Purchases are handled by Apple. We never see your payment details.
- You can export all your data at any time, and delete your data in the app.
1. Who we are
Homepaw is developed and provided by the Homepaw team (clartrace) ("we"). If you have any questions about this policy, write to beyondbyterminal@gmail.com.
2. What the app stores
The app only stores what you and your family enter in it:
- Pet profiles: name, species, breed, sex, birthday, the day they came home, whether they're neutered, allergies, medical history, usual vet clinic and photo.
- Care records: care tasks and times, each stamp (who completed what and when, plus the original text and style of care stamps created in this version), and daily appetite, energy and stool.
- Health records: recovery periods, symptom logs, medications and doses given, vet visits (clinic, diagnosis, cost, notes) and weight.
- Memories and photos: the text you write and the photos you add.
- Family information: the family's name; each member's chosen name and seal, including its shape, ink, border and lettering; the names and seals you add for family members who don't use the app (such as a grandparent), and who stamped on whose behalf; when they joined or left and who the creator is; each member's membership expiry date (to verify creator-sponsored collaboration and each member’s personal advanced features, and preserve existing family benefits); and a user number that iCloud provides to this app, used to recognize which family member is you. This number only works within this app and doesn't contain your Apple Account, name, email or phone number.
- Settings on this phone: weight unit, notification preferences and similar, stored only on this iPhone.
Photos are resized (up to 2048 pixels on the long edge) and recompressed on your iPhone before they're saved, so extra information in the original photo, such as where it was taken, is not kept. Cutting out your pet for the profile photo uses Apple's built-in feature on the phone.
The app doesn't read your contacts, location or Health app data, and doesn't use the advertising identifier.
3. Where it's stored
- On your iPhone: the app's database lives in the app's own storage. The app keeps a daily backup on this phone (the last 7), which you can restore from Settings › iCloud and Sync › Restore from Backup on This Phone. Like other app data, these files are included in your iPhone's iCloud Backup or computer backup according to your iOS settings.
- In your own iCloud: when you're signed in to iCloud, the app uses Apple's CloudKit to sync your records to this app's private database in your iCloud account. Photos use your iCloud storage. Your records come back on a new phone or after reinstalling. Without iCloud, you can still use the app on this phone, but it can't sync or invite family.
- Shared families: when you invite family to a family, its data is shared with the members who join through CloudKit. The data stays in the iCloud account the family belongs to (the person who first created it) and uses that account's iCloud storage. Members who join can view records on their own devices and add records when they have the required permissions.
We have no servers. We can't see or access your data in iCloud. iCloud is provided by Apple and covered by Apple's Privacy Policy.
4. Sharing with family
- Inviting: creators of new families show a QR code for a private, single-claim invitation. No email or phone number is required. Anyone holding an unclaimed code may claim it first, so give it only to the intended person. Once claimed, access is tied to that account. Existing families retain their original links or QR codes; anyone holding an old public link may join, so share it only with trusted family.
- What members can see: all pets, care and health records, memories and photos in that family, plus every member's name, seal, who stamped what, and membership status.
- Revoking invitations and sharing: claimed private invitations authorize the claiming account. Removing a participant revokes that account’s access. Creators can stop collaboration while retaining their records. Changing an existing public share can affect existing participants; cleanup on offline devices depends on later synchronization.
- Removing a member: the creator can tap Remove. The person is removed from the iCloud share. For an existing public share, the invite link is also reset, which can affect other participants. Their stamps and memories stay, and their seal turns gray. This has to be done on the iPhone of the iCloud account the family belongs to (the original creator).
- Leaving: invited members can leave from family management, or choose an invited family under “Stop caring for these pets” on the Welcome Back screen and confirm. Once iCloud completes the exit, the app removes that family’s shared copy and image cache from this device. The creator’s and other members’ records are unaffected. Your stamps and memories remain in the family and show as "Left". This does not delete the family’s original data. Accept an invitation to rejoin.
- Incomplete exits and other devices: leaving requires a network connection and completion by iCloud. An incomplete exit is reported rather than described as deleted. Pending exit status is stored locally and retried on a later launch, return to the foreground or sync merge. Changes and cleanup on other devices depend on later synchronization. Temporary sync errors are not treated as leaving or closing a family.
- Keeping records while starting again: keep families you created and their records while creating or scanning an invitation to join another family. This choice and pending exit status are local settings and are not sent to us. Keeping records does not leave, close or delete a family, and retained families remain accessible.
- Closing a family: the creator can close a family. After the closure syncs, other members no longer see the family and invited members’ local shared copies are cleaned up. Offline devices must sync later. A creator authorized to manage the family can restore the retained records from Settings › Recently Deleted within 30 days. Members who have left the share must accept an invitation again.
5. Notifications, widgets, Live Activities, Apple Watch and Siri
Care and medication reminders are local notifications scheduled by the app on your iPhone. Family activity notifications are also created by your iPhone itself after it syncs your family's new records. Widgets and Live Activities on the Lock Screen read data the app keeps on this phone. None of this goes through us. To sync promptly, iCloud uses Apple's push service to let the app know there's new data.
Today's tasks on Apple Watch are sent from your iPhone straight to the watch over Apple's watch connection (WatchConnectivity); when you stamp on the watch, it's sent back to your iPhone to record. The watch doesn't connect to iCloud, and none of this goes through us. When you stamp with Siri or Shortcuts, what you say is processed by Apple (under Apple's privacy policy); the app only receives which task to stamp and records it on your iPhone.
6. Purchases and membership
- Subscriptions and one-time purchases are processed by Apple through the App Store. We don't receive your name, Apple Account or payment details.
- Using Apple’s StoreKit on your iPhone, the app verifies your membership and writes its expiry into your own member record to verify creator-sponsored collaboration and personal advanced features. Family members can see these states. Invitations do not grant a personal subscription; existing family benefits are preserved.
- Restore purchases: Settings › Membership › Restore Purchases. Manage or cancel a subscription: Settings › Membership › Manage Subscription, or in your iPhone's Settings.
7. What we don't do
- We don't show ads, track you across apps or websites, or sell or share any data.
- There are no third-party SDKs that collect data. The only third-party code library is SnapKit, which lays out the screens and collects nothing.
- The app doesn't connect to a server of ours (we don't have one). It uses the network only for Apple's iCloud sync and App Store purchases.
8. Permissions
- Camera: take photos of your pet and scan a family invite QR code.
- Photos (add only): save your pet's photos to your library when you choose to.
- Picking photos: the app uses the system photo picker. Only the photos you pick are given to the app; it doesn't need access to your whole library.
- Notifications: care, medication and family activity reminders.
You can turn any of these off at any time in your iPhone's Settings. The related feature stops working; everything else keeps working.
9. Contacting us and diagnostics
If you email us, we receive your email address, your message and any files you choose to attach (such as screenshots). When you open an email from Settings › Write to us in the app, the end of the message is pre-filled with the app version, iOS version and the error code of the most recent error (such as "CK-15" with Apple's error description) to help us find the cause; you can see and edit it before sending, and whether to send is up to you. We use them only to reply and solve your problem, and delete what we no longer need once it's resolved. You can ask us to delete our correspondence at any time.
If you turned on "Share With App Developers" in your iPhone's Settings › Privacy & Security › Analytics & Improvements, Apple may share diagnostic information such as crash reports with us. This is handled by Apple, and you can turn it off at any time.
10. Export and deletion
- Export: Settings › Export All Data packs a ZIP (JSON + photos) on your iPhone. Journal and Vet Record PDFs are also created on the phone. You decide where exported files go and who gets them.
- Deleting single items: deleted pets and families stay in Recently Deleted for 30 days before they're gone for good.
- Delete My Data: in Settings › Delete My Data, after you type "Delete" to confirm:
- Families stored in your iCloud are closed and deleted right away, both in your iCloud and on this phone. If a family still has other members, the app first asks you to close it.
- You leave families stored in other people's iCloud. If you're the creator of one of them and others are still in it, you first hand the creator role to someone else.
- Recently Deleted, the daily backups on this phone, the app's settings, widget data, running Live Activities and notifications are all cleared. The phone keeps only the install date and when you were last asked for a rating, so you aren't asked again too soon.
- Your stamps and memories in other people's families stay there and show as "Left". Those records are stored in the iCloud account that family belongs to, and belong to that family.
- This can't be undone, so consider exporting all data first. Your membership subscription isn't canceled automatically; cancel it separately in Settings.
- Deleting just the app removes the data on this iPhone but not your records in iCloud. If you reinstall and sign in to the same iCloud, records still retained in iCloud that you are authorized to access can sync back. Reinstalling alone does not rejoin an invited family you have successfully left. To delete the data in iCloud too, use Delete My Data in the app first.
Deletions sync to your other devices through iCloud. For how Apple handles deleted iCloud data on its servers, see Apple's Privacy Policy.
11. How long data is kept
We don't keep any of your app data. Your records stay on your devices and in iCloud until you delete them. Items in Recently Deleted are kept for 30 days, and the last 7 daily backups are kept on the phone. Email is handled as described in section 9.
12. Children
This app is not directed at children. We don't collect personal information from anyone, including children. Parents can manage a child's purchases with Ask to Buy in Apple Family Sharing.
13. Changes to this policy
If the way the app handles data changes, we'll update this page and the effective date above. Significant changes will be explained on this page before they take effect.
14. Contact
The Homepaw team (clartrace)
beyondbyterminal@gmail.com
The rules for using the app are in the Terms of Use.