我们收集什么
汤圆的数据服务提供公共节假日和服务开关，不接收你的录音或位置，没有广告，也不使用第三方统计或广告 SDK。使用共享日历时，我们会把这个共享日历里的日程（标题、时间、地点、备注）、你起的昵称和头像颜色，以及推送令牌保存到汤圆的服务器，用于在成员之间同步和通知。共享日历不需要手机号或邮箱，账号是匿名的。分享课表时，这张课表（课程名、上课地点、老师和作息）会换成一个最长 180 天有效的短口令，过期内容会定期清理，拿到口令的人都能导入。使用单条日程的网页分享功能时，选定的日程内容（包括标题、时间、备注以及已填写的地点）会上传并生成一个七天有效的口令，持有口令的人可查看并导入该日程。
你的数据存在哪里
你自己的日程、生日、纪念日等内容只保存在你的设备上；开启 iCloud 同步后，保存在你自己的 iCloud 账户中，我们无法访问。共享日历的内容保存在位于中国大陆的汤圆服务器上，只有这个日历的成员能看到。创建者删除日历、或你退出后，相关内容不再向你同步；删除的日历在在线数据库中保留 30 天后清理。服务器的故障恢复备份最多保留 31 份每日副本，旧内容会随备份轮换删除，备份不用于向用户提供内容。长期不用且不再属于任何共享日历的匿名账号也会自动删除。
联网功能与缓存
天气、地图和购买由 Apple 提供，共享日历由汤圆的服务器提供。天气、路线和共享安排可在本机缓存；没网时对共享日历的修改先保存在本机，联网后再提交。语音优先在本机识别，允许云端识别时由 Apple 处理，不保存录音。
健康、面容 ID 与照片
只有你在经期助手里授权后，才会读写“健康”App 中的经期数据。经期记录仅存本机，不参与汤圆的 iCloud 同步或备份，也不会用于广告。面容 ID 由系统验证，我们拿不到你的面部信息。手账照片在本机处理。选择课表二维码图片时，汤圆仅在本机读取其中的二维码。
通知
提醒通知由设备在本地生成，不经过任何服务器。共享日历里有人修改时，汤圆的服务器通过 Apple 推送服务通知你，通知里包含对方的昵称和日程标题；可以在共享日历里关闭。
购买
订阅和购买由 Apple 处理，我们只能得知是否已购买，无法获取你的付款信息。
Privacy Policy
What We Collect
Tangyuan’s data service provides public holidays and service switches. It doesn’t receive your recordings or location, shows no ads, and uses no third-party analytics or ad SDKs. When you use shared calendars, that calendar’s events (title, time, location, notes), your nickname and avatar color, and your push token are stored on Tangyuan’s server, to sync and notify members. Shared calendars need no phone number or email; accounts are anonymous. When you share a timetable, it (course names, locations, teachers and schedule) is shared through a code valid for up to 180 days. Expired content is cleaned up regularly, and anyone with the code can import it. When you share an individual event via a web link, the selected event details (such as its title, time, notes, and any location you added) are uploaded and a code valid for seven days is generated. Anyone with the code can view and import the event.
Where Your Data Lives
Your own events, birthdays and anniversaries stay on your device; with iCloud sync on, they’re stored in your own iCloud account, which we can’t access. Shared calendar content is stored on Tangyuan’s server in mainland China and is visible only to that calendar’s members. After the creator deletes a calendar or you leave, it no longer syncs to you. Deleted calendars are retained in the online database for 30 days before cleanup. Server recovery backups retain up to 31 daily copies; old content is removed as these copies rotate, and backups are not used to serve content to users. Long-unused anonymous accounts that no longer belong to any shared calendar are also deleted automatically.
Online Features & Cache
Weather, maps and purchases are provided by Apple; shared calendars are provided by Tangyuan’s server. Weather, routes and shared events may be cached on your device; shared calendar changes made offline are saved on your device and uploaded when you’re online. Speech is recognized on device first; if cloud recognition is allowed, Apple processes it and recordings aren’t kept.
Health, Face ID & Photos
Cycle data in the Health app is read and written only after you allow it in Cycle Tracker. Cycle records stay on this device, aren't included in Tangyuan's iCloud sync or backups, and are never used for advertising. Face ID is verified by the system; we never receive your face data. Journal photos are processed on device. When you select a timetable QR image, its QR code is read on device.
Notifications
Reminder notifications are created on your device and don’t go through any server. When someone changes a shared calendar, Tangyuan’s server notifies you through Apple Push Notification service; the notification includes their nickname and the event title. You can turn this off in Shared Calendars.
Purchase
Subscriptions and purchases are handled by Apple. We only know whether you've purchased — never your payment details.