BlinkRain 隐私政策

简体中文

BlinkRain 由华慧健（天津）科技有限公司（“我们”）提供。本政策说明 macOS 版 BlinkRain 如何处理信息。

核心原则

BlinkRain 不包含广告、跨应用跟踪、用户画像或自建云端账号系统。摄像头画面、麦克风音频和语音识别文本只在本机内存中处理，不保存、不上传给开发者，也不写入诊断日志。当设备不支持完全离线语音识别时，语音呼机功能会停止，不会切换到云端识别。

本机处理和保存的数据

摄像头画面用于估计眨眼、挤眼和在座状态，逐帧在本机处理，不写入磁盘。
麦克风和语音识别仅在用户主动使用语音呼机且界面显示“Mic”时运行；音频和转写只短暂存在于内存。“语音待命”会保持 Mic 和 Apple 设备端语音识别运行；“关闭（隐私模式）”停止 Mic，此时快捷键只临时运行 30 秒且不会改变持久设置。
眨眼/挤眼累计统计、久坐记录、护眼打卡和用户偏好保存在本机应用容器中。
本机随机安装标识符用于区分诊断文件和迁移来源，不用于广告或跨应用跟踪。

用户主动触发的外部处理

购买与恢复购买由 Apple StoreKit 和 App Store 处理。我们不会获得完整支付卡信息；Apple 可按其政策处理购买、Apple ID、税务和设备信息。
点击 App Store、PubMed、世界卫生组织或邮件入口会打开相应第三方服务。
选择 iCloud Drive、Dropbox 或其他同步目录后，加密自动备份通常会由对应文件提供商传出本机并上传到该服务。选择同步目录即表示数据不再只存在于本机，并受相应服务的隐私政策约束。
反馈邮件只预填版本和界面设置摘要；发送前可检查和修改，只有用户确认发送后才离开设备。

迁移、备份和诊断文件

手动导出的 .blinkrain-data 使用用户口令与 AES-256-GCM 加密。自动备份使用这台 Mac 钥匙串中的随机密钥，主要用于同机恢复；另一台 Mac 不应被假定能够直接解密。跨 Mac 时，应在旧 Mac 设置至少 12 字符口令手动导出，并在新 Mac 输入口令导入。导入上限为 25 MB，格式、版本、完整性或字段范围不合法的文件会被拒绝。旧版明文迁移文件仍可兼容导入，但新版不再生成。

.blinkrain-support 诊断文件仅在用户主动生成时创建，包含系统与应用环境、设置摘要、记录范围和最近 30 分钟 BlinkRain 日志；不包含摄像头画面、麦克风音频、语音文本或逐日健康记录，也不会自动发送。

保留、删除、儿童与医疗说明

用户可停止自动备份，并自行删除本机、同步目录及其“最近删除”中的文件。Apple 管理购买记录。我们没有远程 BlinkRain 健康数据库。BlinkRain 不是医疗器械，不用于诊断或治疗；产品不面向 13 岁以下儿童独立使用。任何本地或云同步存储都无法保证绝对安全。

政策变更、联系与经营主体

重大变更会随应用更新并更新本页生效日期。隐私、数据权利或安全问题请联系 service@h2me.tech，一般产品问题请访问 BlinkRain 支持页面。

经营主体：华慧健（天津）科技有限公司 / Huahuijian (tianjin) Technology Co., Ltd.
Address: Rm 204, Floor 3, Qifa Bldg, Ecological Science Park, No.1620 Zhongtian Ave, Sino-Singapore Tianjin Ecological City, Binhai New Area, 300467, China.

English

BlinkRain is provided by Huahuijian (tianjin) Technology Co., Ltd. (“we”). This policy explains how BlinkRain for macOS handles information.

Core principles

BlinkRain has no advertising, cross-app tracking, profiling, or first-party cloud account. Camera frames, microphone audio, and speech-recognition text are processed only in Mac memory. They are not saved, uploaded to the developer, or written to diagnostic logs. Voice Pager stops when fully on-device recognition is unavailable and never falls back to cloud recognition.

Data processed and stored locally

Camera frames estimate blinks, squeezes, and seat presence and are never written to disk.
Microphone and speech recognition run only after the user invokes Voice Pager and while the interface shows “Mic.” Audio and transcripts exist briefly in memory. Voice Standby keeps Mic and Apple on-device speech recognition active; Off (Privacy Mode) stops Mic, and its shortcut runs only a 30-second temporary session without changing the saved mode.
Cumulative statistics, sitting history, check-ins, and preferences are stored in the local app container.
A random local installation identifier distinguishes diagnostic files and migration sources; it is not used for advertising or tracking.

User-initiated external processing

Apple StoreKit and the App Store process purchases and restorations. We do not receive full payment-card details; Apple handles purchase, Apple ID, tax, and device information under its policies.
App Store, PubMed, World Health Organization, and email actions open the relevant third-party service.
If you select iCloud Drive, Dropbox, or another synchronized folder, its File Provider will ordinarily carry encrypted automatic backups off this Mac and upload them to that service. The data no longer exists only on this Mac and is subject to the provider's privacy policy.
Feedback email is editable and leaves the Mac only after the user sends it.

Migration, backup, and diagnostic files

Manual .blinkrain-data exports use a user passphrase and AES-256-GCM. Automatic backup uses a random key in this Mac's Keychain and is mainly for same-Mac recovery; another Mac should not be expected to decrypt it directly. For another Mac, export manually with a passphrase of at least 12 characters, store it separately, and enter it during import. Imports are limited to 25 MB and rejected for invalid format, version, integrity, or field ranges. Legacy plaintext imports remain compatible, but new versions no longer create them.

A .blinkrain-support file is generated only on request. It contains app and system context, a settings summary, record ranges, and up to 30 minutes of BlinkRain logs. It excludes camera frames, audio, speech text, and daily wellness records and is never sent automatically.

Retention, deletion, children, and medical status

Users can stop backup and delete files from the Mac, synchronized folder, and Recently Deleted area. Apple controls purchase records. We operate no remote BlinkRain wellness database. BlinkRain is not a medical device and does not diagnose or treat disease. It is not intended for independent use by children under 13. No local or synchronized storage can be guaranteed absolutely secure.

Policy changes, contact, and legal entity

Material changes will be disclosed with an app update and an updated effective date. For privacy, data-rights, or security questions, email service@h2me.tech. For general product help, visit BlinkRain Support.

Provider: Huahuijian (tianjin) Technology Co., Ltd. / 华慧健（天津）科技有限公司
Address: Rm 204, Floor 3, Qifa Bldg, Ecological Science Park, No.1620 Zhongtian Ave, Sino-Singapore Tianjin Ecological City, Binhai New Area, 300467, China.