拾刻 / TokiPomo 隐私政策
拾刻由 Gleanfar 提供，是支持本地专注、可选 Google 登录、云同步及 Pro 购买的番茄钟应用。以下说明 Android 版本实际处理的数据。
本地记录与可选云同步
计时、任务、专注记录和偏好默认保存在设备上。登录时，我们验证 Google 身份凭证，并将 Google 身份标识映射为 Toki 账号 ID；昵称、邮箱和头像用于账号展示。使用云同步时，账号对应的任务、专注记录及计时偏好经 HTTPS 发送至我们的 Cloudflare 服务，用于保存和跨设备同步。游客数据不会因登录自动合并到账号。
购买与第三方服务
Google Play 处理付款；我们不接收银行卡号或支付密码。RevenueCat 处理应用用户 ID、商品、交易与会员状态，以及其 SDK 所需的设备、应用和网络信息，用于验证、恢复购买和提供会员权益。Cloudflare 托管云端身份映射与同步数据。Google 登录与 Google Play 按各自隐私政策处理数据。本 Android 版本不提供广告，不接入独立广告或行为分析 SDK；服务供应商仍可能处理运行所需的技术日志。
用途、安全与跨境处理
数据用于账号登录、同步、购买验证、用户支持及服务安全，不出售个人数据。网络传输使用 HTTPS；云端内容不是端到端加密，运营服务及受托供应商为提供服务可能访问必要数据。Google、RevenueCat、Cloudflare 的基础设施可能在你的国家或地区以外处理数据。
删除账号、保存期限与权利
你可在个人中心“删除账号与云端数据”查看申请方式，或无需安装 APP，通过下方账号删除页面发起申请。我们核实账号归属后删除身份映射、云端任务、专注记录、偏好、变更日志和同步操作记录，并回复处理结果。账号数据在提供服务期间保存，直到你提出并完成删除申请。商店交易记录及依法必须保留的财务、安全记录可能按适用法律或供应商政策保留；删除不取消订阅。卸载或清除本机数据不会删除云端账号；已登录时应先退出再清除本机数据。你也可联系支持请求访问、更正或导出账号数据。
权限与适用人群
网络用于登录、同步、购买和打开政策页面；音频、唤醒锁或前台服务用于你主动开始的专注音效和后台计时。当前版本不申请麦克风或广告标识符权限。应用面向 18 岁及以上用户，不以儿童为目标用户。
申请删除与联系我们
删除 Toki 账号与云端数据 · toki@gleanfar.com
政策发生实质变化时将更新本页，并按适用要求通知。Google、RevenueCat 和 Cloudflare 的政策见下方链接。
TokiPomo Privacy Policy
TokiPomo (拾刻), provided by Gleanfar, offers local focus sessions, optional Google sign-in, cloud sync and Pro purchases. This policy covers data processed by the Android release.
Local records and optional cloud sync
Timers, tasks, focus records and preferences are stored on your device by default. Sign-in verifies your Google credential and maps its identity to a Toki account ID. Your name, email and photo display your account. When you use cloud sync, account-specific tasks, focus records and timer preferences are sent over HTTPS to our Cloudflare service for storage and cross-device sync. Guest data is not automatically merged by signing in.
Purchases and service providers
Google Play processes payments; we do not receive card numbers or payment passwords. RevenueCat processes your app user ID, products, transactions, membership state and device, app and network information required by its SDK to validate and restore purchases and provide membership access. Cloudflare hosts cloud identity mappings and synced data. Google sign-in and Google Play operate under their own privacy policies. This Android release has no ads or separate advertising or behavioral analytics SDK. Service providers may process technical logs needed to operate the services.
Purpose, security and international processing
Data supports sign-in, sync, purchase validation, customer support and service security. We do not sell personal data. Network traffic uses HTTPS; cloud content is not end-to-end encrypted. We and our service providers may access data as necessary to operate the service. Google, RevenueCat and Cloudflare infrastructure may process data outside your country.
Account deletion, retention and your rights
Use Delete account and cloud data in the profile or the account deletion page below, without installing the app, to initiate a request. After verifying ownership, we delete identity mappings, cloud tasks, focus records, preferences, change logs and sync operation records and confirm the result. Account data remains while we provide the service, until your deletion request is completed. Store transaction records and financial or security records legally required for retention may remain under applicable law or provider policies. Deletion does not cancel subscriptions. Uninstalling or clearing local data does not delete a cloud account; sign out before clearing local data. Contact support to request access, correction or export.
Permissions and audience
Network access supports sign-in, sync, purchases and policy links. Audio, wake locks or foreground services support sounds and background timing you start. This release does not request microphone or advertising identifier permissions. The app is intended for adults aged 18 and over and is not directed to children.
Deletion requests and contact
Delete your Toki account and cloud data · toki@gleanfar.com
We update this page for material changes and provide notices as required.