「局点」隐私政策

生效日期:2026 年 10 月 18 日 · 另见《用户协议》与《支持中心》

「局点」是一款记录网球运动的 iPhone 与 Apple Watch 应用。这份政策说明它收集哪些信息、为什么收集、以及你如何控制这些信息。

三句话概括:不登录也能完整使用;你的球局记录默认只存在你自己的设备和你自己的 iCloud 里;我们不含任何第三方 SDK,不做广告,不做跨 App 追踪。

1. 不需要账号

计分、运动记录、打卡、装备陈列柜等功能不需要登录。不登录时,你的数据只保存在本机,并通过 Apple 的 iCloud 在你自己的设备之间同步(存放在你 Apple 账户名下的私有数据库中,我们无法读取)。

2. 我们收集哪些信息

2.1 你自己记录的运动数据

球局时间、时长、击球与挥拍统计、球场名称、装备信息等,由你在使用中产生。不登录时它们不会离开你的设备与你的 iCloud。

2.2 登录「局点账号」后(可选)

你可以用「通过 Apple 登录」或中国大陆手机号 + 短信验证码创建账号,以便在排行榜露面并在设备间恢复数据。此时我们的服务器会保存:

上传到我们服务器的球局记录中,不包含心率与卡路里——这是代码层面的约定,健康类数值不会离开你的设备。

2.3 排行榜(公开可见)

登录后,你的昵称、头像、NTRP 水平(如有设置)、每日打球时长与击球数会用于排行榜,对其他用户公开可见。头像文件通过公开链接分发(排行榜需要所有人都能看到)。不想公开可以不登录,或在账号页注销账号。

网球名片:「开放在个人主页」默认开启。开启时,其他登录用户在排行榜点你的头像可以看到以上资料(昵称、头像、NTRP 水平)与你填写的所在地、惯用手、反手、身高、鞋码,以及你当前使用的球拍 / 球鞋 / 球线的名称与装备照片;装备照片同样通过公开链接分发。你可以在「我的 → 网球名片」里随时关闭,关闭后其他用户立即看不到名片;你自己始终能看到自己的名片。

2.4 健康数据

经你授权后,App 会向「健康」App 写入网球运动记录,并读取网球运动与心率,用于在 App 内显示这场球的身体数据、以及把你在其它 App 记录的网球场次导入进来。

心率与卡路里不会上传到我们的服务器,也不会写入 iCloud。它们在你打开详情页时从「健康」App 现场读取用于显示;我们只保存系统给这次运动的标识符,用来知道哪条记录对应哪场运动。

2.5 位置

经你授权后,位置仅用于搜索附近的球场并帮你把这场球关联到球场。你的实时位置(经纬度)不会上传到我们的服务器,只在本机用于发起附近搜索。

但请注意:你选定或创建的球场(含名称与坐标)会作为你的记录保存;如果你登录了「局点账号」,它会随生涯数据同步到我们的服务器,以便换设备后恢复。不登录时,球场只留在本机与你的 iCloud。球场信息不会出现在排行榜上,其他用户看不到。

2.6 使用统计(可随时关闭)

为了知道哪些功能有人用,我们收集使用统计:App 打开次数、页面浏览与功能点击、「我的」页活动横幅的展示与点击(只记横幅编号)、付费页浏览与购买结果(成功 / 取消 / 失败等类别,不含金额、价格与交易号,详见第 6 节)、一个随机生成的安装标识(不是广告标识符,也不是设备序列号,更不由设备特征推导)、App 版本与构建号、设备机型、系统版本、语言与时区偏移,以及你当前使用的皮肤、时段与浮云开关(这三项都是 App 内置的固定选项)。数值一律分桶后再上报,原始值不出设备。

关于这个安装标识与你的账号:不登录时,它不与任何身份信息关联,我们无法据此知道你是谁。如果你登录了「局点账号」,它会与你的账号关联——只服务两个用途:注销账号时把统计数据一并删干净,以及计算「登录用户占比」这一个指标。注销时该标识会被重新生成,此前的数据不会再挂到你身上。

这部分不收集姓名、邮箱、位置、球场名称、心率、卡路里或任何健康数据,也不收集支付方式、金额或交易号。可在 App 内「我的 → 基础功能 → 隐私管理」随时关闭,关闭后立即停止采集,尚未发出的记录也会一并清空。

3. 个人信息收集清单

下表是本 App 收集的全部个人信息。「是否上传到我们的服务器」一列是关键:标注「否」的信息永远不出你的设备(iCloud 除外,那是你自己 Apple 账户名下的私有存储)。

信息类型何时收集用途是否上传到我们的服务器
球局记录、球场、装备、偏好设置你使用 App 时产生记录与展示你的运动数据仅登录后上传,用于跨设备恢复
Apple 用户唯一标识、Apple 转发的邮箱你选择「通过 Apple 登录」创建与识别你的账号是(登录所必需)
手机号码你选择用手机号登录,或在账号页绑定手机号发送登录 / 绑定验证码、识别你的账号是(不用手机号就不收集;可在账号页解绑,注销即删除)
昵称、头像你在账号页主动填写或上传账号资料、排行榜公开展示是(可不填;头像可随时撤回)
NTRP 水平你在「我的 → NTRP 水平」主动选择账号资料、排行榜公开展示是(可不填;可随时改或清除)
所在地(省市)、惯用手、反手、身高、鞋码你在网球名片里主动填写账号资料;「开放在个人主页」开启时(默认开启)对其他登录用户展示是(可不填;可随时改或清除,可随时关闭开放)
装备照片你为某件装备主动上传装备详情与网球名片展示(名片开放时对其他登录用户可见,默认开放)是(可不传;可随时删除)
每日打球时长与击球数登录后按日聚合排行榜排名是(登录后必需)
位置(经纬度)你授权定位并使用「附近球场」在本机搜索附近球场否(可跳过,手动填球场名即可)
健康数据(网球运动、心率、卡路里)你授权「健康」权限App 内展示身体数据、导入历史场次否(也不写入 iCloud)
安装标识、App 版本与构建号、机型、系统版本、语言、时区偏移、当前皮肤 / 时段 / 浮云开关、页面浏览与点击、活动横幅的展示与点击(只记横幅编号)、付费页浏览与购买结果(成功 / 取消 / 失败等类别,不含金额、价格与交易号)App 运行时(可关闭)使用统计;登录后安装标识与账号关联,用于注销级联与「登录用户占比」是(可在隐私管理中随时关闭)

4. 对外提供与委托处理清单

我们不向任何第三方共享、转让或出售你的个人信息,也不含任何第三方 SDK。下面是两项委托他人处理的情形,以及两条你应当了解的说明。

4.1 内容机审(委托处理)

受托方处理的信息何时发生目的
腾讯云内容安全(天御)
深圳市腾讯计算机系统有限公司
你提交的昵称文本与头像与装备照片你首次登录设置昵称、修改昵称、上传头像或装备照片时,各一次自动核验是否含违法或不良内容

法律要求账号的名称与头像在注册和变更时经过核验(《互联网用户账号信息管理规定》),排行榜与网球名片又把它们展示给其他用户,所以这一步无法省略。请注意:

4.2 短信验证码(委托处理)

受托方处理的信息何时发生目的
阿里云号码认证服务
阿里云计算有限公司
你的手机号码与这一次的验证码你在登录页或绑定手机号时点「获取验证码」,每点一次发一条把验证码短信发到你的手机

4.3 两条补充说明

5. 我们不做的事

6. 订阅与购买

「局点专业版」的订阅与买断全部由 Apple 处理。我们不接触也不保存你的支付方式、银行卡号或账单地址。App 从系统获知「当前是否拥有专业版权益」,用于解锁相应功能。

为了解付费流程是否顺畅,使用统计(见第 2.6 节,关闭后同样停止)会记录付费页的浏览以及购买、恢复购买的结果类别:从哪个入口打开付费页、选的是年订阅还是买断、是否为免费试用、购买结果是成功 / 取消 / 等待家长批准 / 失败(失败只记系统给出的错误类别)、恢复购买后是否已解锁。这些记录不含金额、价格、币种、交易号或任何支付信息;与其它使用统计一样,登录后会与你的账号关联,注销账号时一并删除。

7. 保存多久,如何删除

8. 未成年人与儿童

本 App 不面向不满 14 周岁的儿童,也不会有意收集他们的个人信息。不满 14 周岁的用户请勿注册「局点账号」。

不满 18 周岁的用户,请在监护人的陪同下阅读本政策,并在取得监护人同意后使用本服务。如果我们发现收集了不满 14 周岁儿童的个人信息而未事先取得监护人同意,会尽快删除。监护人如发现此类情形,或希望查阅、更正、删除孩子的信息,请通过第 10 条的方式联系我们。

9. 变更

政策更新时会修改本页顶部的生效日期。涉及重大变化时会在 App 内提示。

10. 联系我们

有任何隐私相关的问题、查阅或删除个人信息的请求,请联系:linyumingpm@gmail.com。我们会在收到后尽快处理,一般不超过 15 个工作日。


Terava — Privacy Policy

Effective: October 18, 2026 · See also the Terms of Service and Support

Terava is an iPhone and Apple Watch app for recording your tennis. This policy explains what it collects, why, and how you stay in control.

In short: the app works fully without an account; your session data lives on your own device and in your own iCloud by default; there are no third-party SDKs, no ads, and no cross-app tracking.

1. No account required

Scoring, workout recording, check-ins and the gear locker all work without signing in. Without an account, your data stays on your device and syncs across your own devices through Apple's iCloud, in a private database under your Apple Account that we cannot read.

2. What we collect

2.1 The sessions you record

Dates, durations, stroke and rally statistics, court names and gear details — all created by you as you use the app. Without an account they never leave your device and your iCloud.

2.2 If you sign in (optional)

You may create an account with Sign in with Apple, or with a mainland China mobile number and a text-message code, to appear on the leaderboard and restore data across devices. Our server then stores:

Heart rate and calories are never part of the session data uploaded to our server. This is enforced in the code; health figures do not leave your device.

2.3 Leaderboard (publicly visible)

When signed in, your nickname, profile photo, NTRP rating (if set), daily playing time and shot count are used for the leaderboard and are visible to other users. Profile photos are served over public links, because the leaderboard has to be viewable by everyone. If you would rather not be public, simply don't sign in, or delete your account.

Tennis card: "Show on my profile" is on by default. While it is on, other signed-in users who tap your avatar on the leaderboard can see the information above (nickname, profile photo, NTRP rating) together with the location, dominant hand, backhand, height and shoe size you entered, and the names and gear photos of the racket / shoes / strings you currently use; gear photos are also served over public links. You can turn it off at any time in Profile → Tennis Card, after which other users immediately lose access to your card; you can always see your own card.

2.4 Health data

With your permission, the app writes tennis workouts to the Health app and reads tennis workouts and heart rate, so it can show body metrics for a session and import tennis sessions you recorded with other apps.

Heart rate and calories are never uploaded to our servers and never written to iCloud. They are read from the Health app on the spot when you open a session, purely for display. We only store the system's workout identifier so we know which record belongs to which workout.

2.5 Location

With your permission, location is used only to find nearby courts and attach a session to one. Your live location (coordinates) is never uploaded to our server — it is used on-device to run the nearby search.

Please note, however: a court you pick or create (including its name and coordinates) is saved as part of your records, and if you are signed in it syncs to our server along with the rest of your history so it can be restored on another device. Without an account, courts stay on your device and in your iCloud. Courts never appear on the leaderboard and are not visible to other users.

2.6 Usage statistics (you can turn these off)

To learn which features people actually use, we collect usage statistics: app launches, screen views and feature taps, views and taps of the promo banner on the Profile tab (banner ID only), paywall views and purchase outcomes (categories such as success / cancelled / failed — never amounts, prices or transaction IDs; see section 6), a randomly generated install identifier (not an advertising identifier, not a device serial number, and never derived from device characteristics), app version and build number, device model, OS version, language and UTC offset, plus the theme, time of day and drifting-clouds setting you currently use (all three are fixed built-in options). Numeric values are bucketed before they are sent; raw values do not leave the device.

About that install identifier and your account: while you are not signed in it is linked to no identity at all, and we cannot tell who you are from it. If you sign in to a Terava account, it becomes linked to that account — for two purposes only: so that deleting your account also wipes your statistics, and to compute the single "share of signed-in users" metric. Deleting your account regenerates the identifier, so earlier data is no longer tied to you.

This never includes your name, email, location, court names, heart rate, calories or any health data, nor your payment method, amounts paid or transaction IDs. You can turn it off at any time under Profile → Basic Functions → Privacy; collection stops immediately and anything not yet sent is discarded.

3. What we collect — full list

Everything the app collects is listed below. The last column is the one that matters most: anything marked "No" never leaves your device (except through iCloud, which is private storage under your own Apple Account).

DataWhenPurposeUploaded to our server?
Sessions, courts, gear, preferencesCreated as you use the appRecording and showing your tennisOnly if signed in, for cross-device restore
Apple user identifier, relayed emailYou choose Sign in with AppleCreating and identifying your accountYes (required to sign in)
Mobile numberYou sign in with your phone number, or link one on the Account pageSending sign-in / linking codes, identifying your accountYes (only if you use phone sign-in; unlink anytime, deleted with your account)
Nickname, profile photoYou enter or upload themAccount profile, public leaderboardYes (both optional; photo can be withdrawn)
NTRP ratingYou pick it under Me → NTRP ratingAccount profile, public leaderboardYes (optional; change or clear anytime)
Location (province / city), dominant hand, backhand, height, shoe sizeYou enter them on your tennis cardAccount profile; shown to other signed-in users while "Show on my profile" is on (on by default)Yes (optional; change or clear anytime, turn sharing off anytime)
Gear photosYou upload one for a piece of gearGear details and tennis card (visible to other signed-in users while your card is shared, which is the default)Yes (optional; delete anytime)
Daily playing time and shot countAggregated daily once signed inLeaderboard rankingYes (required once signed in)
Location (coordinates)You grant location access and search nearby courtsOn-device nearby searchNo (skippable — you can type a court name)
Health data (tennis workouts, heart rate, calories)You grant Health accessShowing body metrics, importing past sessionsNo (and never written to iCloud)
Install identifier, app version and build, device model, OS version, language, UTC offset, current theme / time of day / drifting-clouds setting, screen views and taps, promo banner views and taps (banner ID only), paywall views and purchase outcomes (categories such as success / cancelled / failed; no amounts, prices or transaction IDs)While the app runs (can be turned off)Usage statistics; once signed in, the install identifier is linked to your account for deletion cascade and the "share of signed-in users" metricYes (switchable off under Privacy)

4. Disclosure and entrusted processing — full list

We do not share, transfer or sell your personal information to anyone, and the app contains no third-party SDKs. Below are the two cases where we entrust processing to someone else, plus two notes you should know about.

4.1 Content screening (entrusted processing)

ProcessorWhat is sentWhenPurpose
Tencent Cloud Content Security (Tianyu)
Shenzhen Tencent Computer Systems Co., Ltd.
The nickname text and the profile photo and gear photos you submitOnce each time you set a nickname at first sign-in, change it, or upload a profile photo or gear photoAutomated screening for unlawful or harmful content

Chinese law requires account names and photos to be screened at registration and on change, and the leaderboard and tennis card show them to other users, so this step cannot be skipped. Note that:

4.2 Text-message codes (entrusted processing)

ProcessorWhat is sentWhenPurpose
Alibaba Cloud Phone Number Verification Service
Alibaba Cloud Computing Co., Ltd.
Your mobile number and that one verification codeEach time you tap Get Code while signing in or linking a numberDelivering the code to your phone by text message

4.3 Two further notes

5. What we don't do

6. Subscriptions and purchases

Terava Pro subscriptions and the lifetime purchase are handled entirely by Apple. We never see or store your payment method, card number or billing address. The app learns from the system whether Pro is currently unlocked, and uses that to unlock the features.

To see whether checkout works smoothly, usage statistics (section 2.6 — turning them off stops this too) record paywall views and the outcome categories of purchases and restores: which entry point opened the paywall, whether you picked the annual subscription or the lifetime purchase, whether it was a free trial, whether the purchase succeeded / was cancelled / is awaiting parental approval / failed (failures carry only the system's error category), and whether Pro is unlocked after a restore. These records never include amounts, prices, currency, transaction IDs or any payment details; like other usage statistics, they are linked to your account once you sign in and deleted when you delete your account.

7. Retention and deletion

8. Minors and children

Terava is not directed to children under 14, and we do not knowingly collect their personal information. If you are under 14, please do not create a Terava account.

If you are under 18, please read this policy together with a parent or guardian and use the service with their consent. If we learn that we have collected personal information from a child under 14 without prior guardian consent, we will delete it promptly. Guardians who notice this, or who wish to review, correct or delete their child's information, can reach us via section 10.

9. Changes

When this policy changes we update the effective date at the top of this page, and we'll say so in the app for anything significant.

10. Contact

For any privacy question, or to request access to or deletion of your personal information, reach us at linyumingpm@gmail.com. We aim to respond within 15 working days.