隐私政策 Privacy Policy
1. 你的数据，只属于你 1. Your Data Belongs to You
Zilulu 坚信隐私是底线。我们的应用架构严格遵循“绝对本地优先”原则。这意味着：
Zilulu believes privacy is non-negotiable. We follow an absolute "Local-First" architecture. This means:
- 所有的应用使用统计数据（如屏幕时间、拿起次数等）都仅在这个运行的物理设备上被读取。
- 我们不拥有也未使用任何云端服务器来存储、分析或与任何第三方分享你的个人使用数据。
- 我们无法查看你被挡住了哪些应用，也无法得知你做过什么答题记录。
- All usage statistics (Screen Time, pickups, etc.) are strictly read and processed locally on your physical device.
- We DO NOT own or use any servers to store, analyze, or share your personal data with third parties.
- We cannot see which apps you engage with or blocked, nor can we trace your quiz history.
2. 屏幕时间权限与 Family Controls 2. Family Controls API Usage
由于运行机制，Zilulu 深度使用了 Apple 官方提供的 Family Controls / Device Activity API 来实现系统级防沉迷。此项底层权限专属用于：
Due to its operational nature, Zilulu deeply integrates with Apple's official Family Controls and Device Activity API to ensure system-level focus. This root-level permission is used strictly to:
- 检测使用时长： 仅用于根据你自主设定的循环或配额上限做出锁定响应。
- 干预与屏蔽： 当配额枯竭时，下达基于系统层的界面覆盖指令。
- Monitor Duration: To check your usage strictly against the daily limits or cycles you've configured.
- System Blocking: To invoke OS-level UI shielding when those allowances are exhausted.
需要强调的是：Apple 的这一层 API 在设计时即保证了用户的绝对隐私。Zilulu 对受限应用的获取仅表现为“不透明的加密令牌” (Opaque Tokens)。换言之，即便是开发者本人，也绝对无法获知你所选择锁定的具体应用名称、图标或其中发生的内容。
It is important to emphasize that Apple’s API is designed to preserve absolute user privacy. Zilulu's access to restricted apps is handled solely through encrypted "Opaque Tokens." In other words, even as developers, we absolutely cannot know the specific names, icons, or contents of the apps you choose to block.
3. 数据收集的界限 3. Strict Data Collection Boundaries
我们不收集任何可主动识别个人身份的信息 (PII)。 We do not collect any Personally Identifiable Information (PII).
在极少数异常情况下，为排查彻底的闪退，Apple OS 层级可能会协助收集完全匿名的崩溃日志给开发者（前提是你本人在 iOS 系统的“分析与改进”设置中主动开启了该权限）。但这些只用于修复 Bug，与 App 的核心工作机制安全独立。
In rare instances, to squash critical bugs, Apple's OS might share fully anonymous crash logs with developers (only if you have explicitly enabled the "Analytics & Improvements" option in your iOS System Settings). This serves purely mechanical app maintenance and sits completely apart from the app's workflow security.
4. 数据安全承诺 4. Data Security Promise
既然我们没有中央服务器，数据安全便直接受托于您手持的物理设备。只要您的设备硬件锁与底层系统（如 Face ID / Touch ID / 锁屏密码）处于安全状态，Zilulu 内的历史记录与配置资产便是处于不可攻破的保险箱中。
Because we run no remote servers, your data security fundamentally relies on the physical integrity of your device. As long as your hardware lock and underlying OS (like Face ID / Passcode) are secure, your Zilulu history and configurations remain in an impenetrable vault.
5. 政策变更预告 5. Changes to This Policy
虽然我们长期坚守极简隐私，但如果未来必须对本协议作不可避免的更新补充，我们将在版本迭代更新时，通过 App Store Release Notes (升级说明) 或应用内的强提示弹窗予以公示。保持透明是我们唯一的原则。
While we stand firmly by our minimalist privacy approach, if unavoidable updates must be made to this agreement in the future, we will declare them prominently via App Store Release Notes or in-app alerts prior to the update. Total transparency remains our only policy.