Wondelle 隐私政策
Wondelle（以下简称"本应用"）每天为你送上一张精心挑选的壁纸和一则短故事。本政策说明我们收集哪些信息、为什么收集、如何使用，以及你可以怎么控制它。我们只收集让应用正常运转所必需的信息，不出售你的个人信息。
1. 我们收集的信息
| 信息 | 何时产生 | 用途 |
|---|---|---|
| 匿名用户 ID（随机生成，与你的身份无关） | 首次打开应用时自动创建 | 保存你的收藏、下载记录，并让购买的权益能对应到你 |
| 电子邮箱和密码 | 仅当你主动注册账号时 | 登录、跨设备找回收藏和购买。密码由认证服务加密（哈希）保存，我们看不到明文 |
| 收藏、下载记录（哪张壁纸、什么时间） | 你点击收藏或下载时 | 提供收藏功能；统计哪些内容受欢迎，用来改进内容 |
| 壁纸浏览次数（按壁纸累计的总数，不含个人信息） | 你打开某张壁纸详情时 | 内容效果统计 |
| 购买记录：商品 ID、Google Play 购买凭证、校验时间、你已解锁的额度/壁纸 | 你完成购买时 | 校验购买真实性、发放并恢复你购买的权益。支付本身由 Google Play 处理，我们不会收到你的银行卡或支付账户信息 |
| 留言内容（及你的匿名用户 ID） | 你在"关于"页提交留言时 | 回复和改进产品。请不要在留言里填写敏感个人信息 |
| 本地设置：语言偏好、收藏缓存、登录状态 | 使用过程中 | 只保存在你的手机上，用于记住你的设置 |
本应用不会读取你的相册、通讯录、位置、麦克风或摄像头。保存壁纸时，应用只会把图片写入你的相册，不会读取相册里已有的任何内容。
2. 广告
未购买过解锁的用户会在应用内看到 Google AdMob 提供的横幅广告。为了展示和衡量广告，Google 可能会收集并使用设备的广告 ID、IP 地址、设备型号与系统版本、应用使用信息等，并可能基于此展示个性化广告。你可以随时在手机系统设置中重置或删除广告 ID、关闭个性化广告；也可参阅 Google 的广告政策说明。购买任意解锁商品的用户不再显示广告。
3. 我们使用的第三方服务
- Supabase：提供账号认证、数据库和图片存储。你的账号、收藏、购买记录和留言存放于此。
- Google Play 结算：处理应用内购买。
- Google AdMob：展示广告（见第 2 节）。
- Expo（EAS Update）：向你的设备发送应用的小型更新。请求更新时，Expo 会收到应用版本、系统平台等技术信息。
这些服务商按各自的隐私政策处理数据。我们不会把你的个人信息出售给任何第三方，也不会用于与本应用无关的目的。
4. 数据保存与安全
数据通过加密连接（HTTPS）传输。数据库对每位用户设置了访问规则，你的收藏和购买记录只有你自己的账号能读取。我们会在提供服务所需的期间内保存你的数据；你删除账号后，与该账号关联的数据会立即被永久删除，我们不会另外保留。常规备份（如有）会按服务商的备份周期被覆盖；通过 Google Play 支付的订单记录由 Google 保管，我们无法删除。
5. 你的权利和数据删除
在应用内删除账号：打开 Wondelle → 右上角菜单 → 账号 → 删除账号。确认后，你的账号及所有关联数据（收藏、下载记录、购买记录与已解锁权益、留言）会立即被永久删除，无法恢复，我们不会额外保留这些数据；通过 Google Play 已支付的购买也不会退款。
你也可以随时要求查看或更正我们保存的、与你有关的数据，或在无法使用应用时请求我们代为删除账号及数据。请发送邮件至 kaiwang.e@gmail.com，并请从注册时使用的邮箱发送（匿名用户请说明大致使用时间与设备信息，以便我们协助定位）。我们会在合理期限内处理。
6. 儿童
本应用面向一般用户，不面向 13 岁以下儿童，也不会有意收集 13 岁以下儿童的个人信息。如果你认为某位儿童向我们提供了个人信息，请联系我们，我们会尽快删除。
7. 政策变更
如果本政策有重要变化，我们会更新本页面并修改上方的生效日期。继续使用本应用即表示你接受更新后的政策。
8. 联系我们
运营方：Elsie & Mi（个人独立开发者）
邮箱：kaiwang.e@gmail.com
Wondelle Privacy Policy
Wondelle ("the app") delivers one carefully chosen wallpaper and one short story each day. This policy explains what information we collect, why, how it is used, and the choices you have. We only collect what the app needs to work, and we do not sell your personal information.
1. Information we collect
| Information | When | Purpose |
|---|---|---|
| Anonymous user ID (randomly generated, not tied to your identity) | Created automatically on first launch | Keeps your favorites and download history, and ties purchased entitlements to you |
| Email address and password | Only if you choose to register an account | Sign-in, and recovering favorites and purchases across devices. Passwords are stored hashed by the authentication service; we cannot see them |
| Favorites and download records (which wallpaper, when) | When you favorite or download | Provide favorites; see which content is popular so we can improve it |
| Wallpaper view counts (a running total per wallpaper, no personal data) | When you open a wallpaper | Content performance statistics |
| Purchase records: product ID, Google Play purchase token, verification time, credits and wallpapers you unlocked | When you buy something | Verify the purchase and grant or restore your entitlements. Payment is handled by Google Play; we never receive your card or payment account details |
| Messages you send us (with your anonymous user ID) | When you submit the contact form in About | To respond and improve the product. Please don't put sensitive personal information in messages |
| Local settings: language, favorites cache, sign-in state | During use | Stored only on your device to remember your preferences |
The app does not read your photo library, contacts, location, microphone or camera. When you save a wallpaper, the app only writes the image to your gallery; it never reads anything already in it.
2. Advertising
Users who have not purchased an unlock see banner ads served by Google AdMob. To serve and measure ads, Google may collect and use your device's advertising ID, IP address, device model and OS version, and app usage information, and may show personalized ads based on it. You can reset or delete your advertising ID, or opt out of ad personalization, in your phone's system settings, and see Google's advertising policies. Users who buy any unlock no longer see ads.
3. Third-party services we use
- Supabase: authentication, database and image storage. Your account, favorites, purchase records and messages are stored there.
- Google Play Billing: processes in-app purchases.
- Google AdMob: serves ads (see section 2).
- Expo (EAS Update): delivers small app updates to your device. When checking for updates, Expo receives technical information such as the app version and platform.
These providers process data under their own privacy policies. We do not sell your personal information and do not use it for purposes unrelated to the app.
4. Retention and security
Data is transmitted over encrypted connections (HTTPS). The database enforces per-user access rules, so only your own account can read your favorites and purchase records. We keep your data for as long as needed to provide the service; when you delete your account, the data linked to it is deleted immediately and permanently, and we do not keep it. Routine backups, if any, are overwritten on the provider's normal backup cycle; order records for purchases paid through Google Play are held by Google and are not something we can delete.
5. Your rights and data deletion
Delete your account in the app: open Wondelle → the menu at the top right → Account → Delete account. Once confirmed, your account and all data linked to it (favorites, download history, purchase records and unlocked entitlements, messages) are deleted immediately and permanently. We do not keep any of it. This cannot be undone, and purchases already paid through Google Play are not refunded.
You may also ask us at any time to show or correct the data we hold about you, or to delete your account and data for you if you can no longer use the app. Email kaiwang.e@gmail.com, ideally from the address you registered with (anonymous users: please tell us roughly when and on what device you used the app so we can locate your data). We will handle requests within a reasonable time.
6. Children
The app is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it promptly.
7. Changes to this policy
If this policy changes materially, we will update this page and the effective date above. Continued use of the app means you accept the updated policy.
8. Contact
Operator: Elsie & Mi (independent developer)
Email: kaiwang.e@gmail.com