隐私政策
更新日期：2026/9/5
生效日期：2026/9/5
导言
愿安 是一款由 Harvey Wan（以下简称"我们"）提供的端侧安全监护产品。您在使用我们的服务时，我们可能处理与您相关的信息。我们希望通过本《隐私政策》向您说明，在使用我们的服务时，我们如何收集、使用、储存和分享这些信息，以及我们为您提供的访问、更新、控制和保护这些信息的方式。
本《隐私政策》与您所使用的愿安服务息息相关，请您仔细阅读，在需要时，按照本《隐私政策》的指引，作出您认为适当的选择。
您使用或继续使用我们的服务，即意味着同意我们按照本《隐私政策》收集、使用、储存和分享您的相关信息。
如对本《隐私政策》或相关事宜有任何问题，请通过 huiworkspace@qq.com 与我们联系。
1. 我们收集的信息
我们或我们的第三方合作伙伴提供服务时，可能会收集、储存和使用下列与您有关的信息。如果您不提供相关信息，部分功能将无法使用或无法达到相关服务拟达到的效果。
- 位置信息：当您在设置中开启"位置采样"并使用我们基于位置提供的相关服务时，愿安通过设备的 GPS/Wi-Fi 定位能力按设定间隔采样您的地理位置信息，用于失联告警附带最新位置。位置采样完全在设备上进行；您可以通过关闭"位置采样"开关，停止对您的地理位置信息的收集。
- 您主动提交的信息：紧急联系人信息（姓名、电话号码、邮箱地址）、您的称呼与地址等资料、自定义消息模板、SMTP 邮箱配置（采用 AES-256-GCM 加密存储），以及您在"意见反馈"页主动提交的反馈内容（含选填的联系方式，以及自动附带的软件版本、设备型号与 Android 系统版本）。
- 自动记录并仅保存在设备上的信息：解锁事件时间、签到记录（含签到方式）、告警记录（触发时间、渠道与结果）、应用锁与主题语言等本地偏好。
- 说明：本应用不使用 cookies、标识符、浏览/点击行为采集及第三方统计分析 SDK；不存在"注册成为用户"的流程，您无需提供注册信息即可使用全部功能。
我们接入的第三方 SDK：
- supabase
- 第三方名称：supabase
- 使用目的：处理反馈信息
- 收集个人信息类型：所在地区、机型、安卓版本、软件版本、主动输入的联系方式和反馈内容
- 处理方式：仅保存；需要协助处理问题时，开发者会根据您主动填写的联系方式与您联系
- 隐私政策链接：https://supabase.com/privacy
2. 信息的存储
2.1 信息存储的方式和期限
- 愿安以安全方式存储您的信息：监护数据保存在设备本地私有存储中（SMTP 凭据使用 Android Keystore 派生密钥 AES-256-GCM 加密），无需登录、无服务端账号体系。
- 一般情况下，我们只会在为实现服务目的所必需的时间内或法律法规规定的条件下存储您的个人信息；反馈数据保存在开发者的后台表中，直至您要求删除（删除后立即抹除）。
2.2 信息存储的地域
- 您的本机数据不会离开您的设备，也不会被任何人远程调阅。
- 您主动提交的反馈存储于我们使用的数据处理服务（由 supabase 托管，位于境外机房），这是我们唯一的信息出境场景；将来如需其他的跨境传输或存储，我们会向您告知信息出境的目的、接收方、安全保证措施和安全风险，并征得您的同意。
2.3 产品或服务停止运营时的通知
- 当我们的产品或服务发生停止运营的情况时，我们将以推送通知、公告等形式通知您，并在合理期限内删除您的个人信息或进行匿名化处理，法律法规另有规定的除外。
3. 信息安全
我们使用各种安全技术和程序，以防信息的丢失、不当使用、未经授权阅览或披露。例如，告警邮件与反馈上传使用传输层加密（TLS）连接，SMTP 凭据使用 AES-256-GCM 加密存储，监护数据存放于应用私有目录。但请您理解，由于技术的限制以及可能存在的各种恶意手段，即便竭尽所能加强安全措施，也不可能始终保证信息百分之百的安全。您需要了解，您接入我们的服务所用的系统和通讯网络，有可能因我们可控范围外的因素而出现问题。
4. 我们如何使用信息
我们可能将在向您提供服务的过程之中所收集的信息用作下列用途：
- 向您提供监护与失联告警服务（超时向您指定的紧急联系人发送短信/邮件告警）；
- 在我们提供服务时，用于安全防范与存档备份用途，确保我们向您提供的产品和服务的安全性；
- 帮助我们设计新服务，改善我们现有服务（仅基于您主动提交的反馈数据，不用于广告投放或用户画像）；
- 保障应用安全（应用锁校验设备凭据）与软件升级管理（在您主动使用时检查并完成官方渠道更新）。
本应用不含广告，不使用任何广告 SDK 或广告位；不含第三方统计分析或追踪 SDK；无用户画像与个性化推荐。
5. 信息共享
目前，我们不会主动共享或转让您的个人信息至第三方，如存在下列情形时，我们会在符合本政策的前提下处理：
- 告警触发时，告警内容（可能包含您的称呼、地址、位置、最近签到时间）经您的系统短信服务与您自行配置的邮件服务器发送给您指定的紧急联系人；仅当您开启"包含位置""包含最近签到时间"选项时才会包含相应信息（该选项默认开启，可随时关闭）；
- 您主动提交的反馈由数据处理者 supabase 托管（仅保存与展示，详见第 1 节 SDK 声明），用于改进与诊断；
- 除上述情形与信息公开披露外，我们不会向合作伙伴分享可用于识别您个人身份的信息（例如您的姓名或电子邮件地址），除非您明确授权。
我们不会对外公开披露所收集的个人信息，如必须公开披露时，我们会向您告知此次公开披露的目的、披露信息的类型及可能涉及的敏感信息，并征得您的明示同意。
随着我们业务的持续发展，我们有可能进行合并、收购、资产转让等交易，我们将告知您相关情形，按照法律法规及不低于本《隐私政策》所要求的标准继续保护或要求新的控制者继续保护您的个人信息。
另外，根据相关法律法规及国家标准，以下情形中，我们可能会共享、转让、公开披露个人信息无需事先征得您的授权同意：
- 与国家安全、国防安全直接相关的；
- 与公共安全、公共卫生、重大公共利益直接相关的；
- 犯罪侦查、起诉、审判和判决执行等直接相关的；
- 出于维护个人信息主体或其他个人的生命、财产等重大合法权益但又很难得到本人同意的；
- 个人信息主体自行向社会公众公开个人信息的；
- 从合法公开披露的信息中收集个人信息的，如合法的新闻报道、政府信息公开等渠道。
6. 您的权利
在您使用我们的服务期间，我们为您提供相应的操作设置，以便您可以查询、删除、更正或撤回您的相关个人信息：
- 查看与删除：可在"记录"页查看并删除解锁、签到与告警记录；可在设置中修改或清除资料与联系人信息；
- 撤回同意：可在"设置—关于—隐私政策"中撤回同意，撤回后监护与位置采样立即停止；
- 注销：卸载本应用即删除全部本地数据；
- 反馈数据：可通过本政策提供的联系方式请求查看、更正或删除，我们将在 30 日内处理并答复。
此外，我们还设置了投诉举报渠道，您的意见将会得到及时的处理。如果您无法通过上述途径和方式行使您的个人信息主体权利，您可以通过本《隐私政策》中提供的联系方式提出您的请求，我们会按照法律法规的规定予以反馈。
7. 变更
我们可能适时修订本《隐私政策》的条款。当变更发生时，我们会在版本更新时向您提示新的《隐私政策》，并向您说明生效日期。请您仔细阅读变更后的《隐私政策》内容，若您继续使用我们的服务，即表示您同意我们按照更新后的《隐私政策》处理您的个人信息。
8. 未成年人保护
本应用面向 13 周岁及以上用户，不以 13 周岁以下儿童为目标，也不有意收集儿童信息。我们鼓励父母或监护人指导未成年人使用我们的服务，并建议未成年人鼓励他们的父母或监护人阅读本《隐私政策》，在提交个人信息之前寻求父母的同意和指导。如您认为我们意外收到了儿童信息，请通过联系方式告知我们，我们将尽快删除。
Privacy Policy
Last updated: 2026/9/5
Effective date: 2026/9/5
Introduction
YuAn is an on-device safety monitoring product provided by Harvey Wan (the "Developer"). While you use our service, we may process information related to you. This Privacy Policy explains how we collect, use, store and share such information, and the ways we provide for you to access, update, control and protect it.
This Privacy Policy applies to the YuAn service you use. Please read it carefully and make choices that are appropriate for you.
By using or continuing to use our service, you agree to the collection, use, storage and sharing of your relevant information as described in this Privacy Policy.
If you have any questions about this Privacy Policy, contact us at huiworkspace@qq.com.
1. Information we collect
The information listed below may be collected, stored and used while providing the service. If you do not provide it, some features may not work or may not achieve the intended effect.
- Location information: when you turn on "Location sampling" in Settings, YuAn samples your geographic location via the device's GPS/Wi-Fi positioning at the configured intervals, for the latest location attached to alerts. Sampling happens entirely on the device; turn the switch off to stop collection.
- Information you actively provide: emergency contacts (name, phone, e-mail), your profile (name, address, contact details), custom alert templates, SMTP mail configuration (encrypted with AES-256-GCM), and feedback you actively submit (optional contact info plus the app version, device model and Android version attached automatically).
- Information recorded automatically and stored on device only: unlock event timestamps, check-in records (incl. their source), alert records (trigger time, channel, result), app lock, theme and language preferences.
- Note: the App uses no cookies, identifiers, browsing/click behavior collection or third-party analytics SDKs; there is no account registration - you can use every feature without signing up.
Third-party SDKs we use:
- supabase
- Name: supabase
- Purpose: processing feedback
- Data types collected: region, device model, Android version, app version, contact info and feedback content you actively enter
- How it is used: stored only; the developer may contact you via the contact you actively provided if follow-up is needed
- Privacy policy: https://supabase.com/privacy
2. Information storage
2.1 Storage method and duration
- YuAn stores information securely: monitoring data stays in the app's private on-device storage (SMTP credentials encrypted with AES-256-GCM via an Android Keystore-derived key); there is no login and no server-side account system.
- We generally keep personal information only as long as needed for the service purposes or as required by law; feedback is kept in the developer's backend table until you ask for its deletion (removed immediately afterwards).
2.2 Storage location
- On-device data never leaves your device and cannot be viewed remotely by anyone.
- Feedback you actively submit is stored in the data processor we use (hosted by supabase, outside of the mainland region). This is the only cross-border transfer; any future cross-border processing would be announced with purpose, recipient, safeguards and risks, and only with your consent.
2.3 Notice when the service stops operating
- If the product or service ceases operation, we will notify you via push notification or announcement, and delete or anonymize your personal information within a reasonable period, except as otherwise required by law.
3. Data security
We use a variety of security technologies and procedures to prevent loss, misuse, unauthorized access or disclosure of information. For example, alert e-mails and feedback uploads use transport-layer encryption (TLS), SMTP credentials are encrypted with AES-256-GCM, and monitoring data lives in the app's private directory. Please understand that, due to technological limits and possible malicious methods, 100% security can never be guaranteed; the system and communication networks you use may fail for reasons beyond our control.
4. How we use information
Information collected in the course of providing the service may be used to:
- Provide the monitoring and unreachable-alert service (on timeout, send an SMS/e-mail alert to your designated emergency contacts);
- Ensure the safety and archiving/backup of the service we provide;
- Help design new services and improve existing ones (only based on feedback you actively submit - never for ad delivery or profiling);
- Secure the App (app lock verifies your device credential) and manage software updates (official updates check and apply when you use the feature).
The App contains no ads (no ad SDK or placements), no third-party analytics or tracking SDK, and performs no profiling or personalized recommendations.
5. Information sharing
Currently we do not proactively share or transfer your personal information to third parties, except in the following cases:
- When an alert is triggered, the alert content (which may include your name, address, location and last check-in time) is sent through your system SMS service and the mail server you configured to your designated emergency contacts; location and last check-in are included only if you enabled the corresponding options (enabled by default, can be turned off at any time);
- Feedback you actively submit is hosted by supabase as a data processor (storage and display only - see the SDK section); used for improvement and diagnostics;
- Apart from the cases above and public disclosure, we do not share information that identifies you personally (such as your name or e-mail address) with partners unless you explicitly authorize it.
We do not publicly disclose collected personal information; if disclosure is ever required, we will inform you of the purpose, data types and any sensitive information involved, and obtain your explicit consent.
As our business grows, we may engage in mergers, acquisitions or asset transfers; we will inform you accordingly and continue to protect your personal information under the standards of this Policy (or require the new controller to do so).
According to applicable laws and national standards, the following cases may allow sharing, transfer or public disclosure of personal information without prior consent:
- Directly related to national security or defense;
- Directly related to public safety, public health or major public interests;
- Directly related to criminal investigation, prosecution, trial or enforcement of judgments;
- Needed to protect the lives, property or other major lawful interests of the data subject or other individuals, when obtaining consent is difficult;
- The data subject has made the personal information public themselves;
- Information collected from lawful public disclosures, such as legitimate news reporting or government information disclosure.
6. Your rights
While using our service, we provide the following controls so you can query, delete, correct or withdraw your personal information:
- View and delete: in the History screen you can view and delete unlock, check-in and alert records; in Settings you can edit or clear your profile and contacts;
- Withdraw consent: in "Settings - About - Privacy Policy"; monitoring and location sampling stop immediately;
- Deletion: uninstalling the App deletes all on-device data;
- Feedback data: request viewing, correction or deletion through the contact below; requests are handled and answered within 30 days.
We also provide a complaint channel; your feedback will be handled promptly. If you cannot exercise these rights through the paths above, make a request through the contact in this Policy and we will respond within the period required by law.
7. Changes
We may revise this Policy from time to time. When changes occur, the updated Policy will be shown at the next version update together with the effective date. Please read the revised Policy carefully; if you continue to use the service, you agree to the processing of your personal information under the updated Policy.
8. Minors
The App is intended for users aged 13 and above; we do not target children under 13 and do not knowingly collect children's information. We encourage parents or guardians to guide minors and encourage minors to have their guardians read this Policy and seek parental consent before submitting personal information. If you believe a child's information has reached us unintentionally, contact us and we will remove it promptly.