🔒 核心隐私承诺 · Our Privacy Promise
Balana 秉持「数据属于用户」的原则：不设账号、不含广告 SDK、不出售数据、不用于广告追踪。您的健康数据通过 Apple 官方 HealthKit 同步，仅存储在您的设备本地进行隐私沙盒计算；只有当您主动使用 AI 功能时，相关内容才会经加密通道处理。您随时可以在系统「健康」App 中撤销全部权限。
一、我们是谁
Balana（以下简称「本应用」）由个人开发者 Aiiluo Chen 开发与运营，是一款 HRV（心率变异性）测量与身心恢复分析应用，包括 iOS 主应用、Apple Watch 应用（Balana Watch）与通知扩展。
二、我们处理哪些数据
2.1 通过 Apple HealthKit（Apple 健康）读取的数据
仅当您在首次使用时明确授权后，本应用才会读取以下类型的健康数据用于分析展示：
- 心血管类：心率、心率变异性（SDNN）、心电图（ECG）、心跳序列、静息心率、心率恢复（1 分钟）、步行平均心率、血氧饱和度（SpO₂）、呼吸频率、手腕温度；
- 睡眠与正念：睡眠分析、正念分钟数；
- 运动与体能：体能训练、GPS 训练路线、骑行距离 / 速度 / 踏频 / 功率、跑步速度 / 功率 / 步长 / 触地时间 / 垂直振幅、游泳距离、步行与跑步距离、VO₂ 最大摄氧量；
- 活动与身体：步数、活动能量、静息能量、日照时长、身高、体重、出生日期、生物性别；
- 女性健康（可选授权）：月经流量、排卵测试结果、宫颈粘液、基础体温。
2.2 通过 Apple HealthKit 写入的数据
经您授权后写入：体能训练记录、月经流量记录、身高、体重（例如您在 App 内记录经期或体重时同步至 Apple 健康）。
2.3 其他传感器与设备数据
- 蓝牙：连接您主动配对的 BLE 心率带，采集实时 RR 间期用于 HRV 计算；
- 相机：您使用摄像头指尖测量功能时，摄像头画面仅用于实时心率检测，不拍摄、不存储、不上传任何影像；
- 麦克风：仅当您在 AI 对话中使用语音输入功能时，用于本地语音识别；
- 运动与健身传感器：HRV 测量期间检测您是否处于静止状态以保证数据质量；
- 相册：仅当您主动选择图片供 AI 分析，或主动保存分享海报时访问。
2.4 设备与账户信息
本应用不要求注册账号，不收集您的姓名、电话号码、电子邮箱或社交账号，不采集广告标识符（IDFA）。
三、数据存储在哪里
- 健康数据：通过 HealthKit 保存在您的设备与您个人的 iCloud 健康存储中，由 Apple 加密保护，开发者无法访问；
- 应用数据：分析结果、测量记录、设置偏好等仅存储在设备的 iOS 沙盒本地存储中；
- 开发者不运营任何自有云端健康数据库，我们没有任何可以「下载全部用户数据」的服务器。
四、数据何时会离开您的设备
以下三种情形之外，数据不会离开您的设备：
4.1 Bano AI 功能（您主动发起）
当您使用 AI 对话、AI 洞察或语音输入时，与该次请求相关的内容会通过 HTTPS 加密通道发送至开发者部署在阿里云函数计算（中国上海地域）的转发服务，由其调用第三方大语言模型生成回答。该服务启用了 Apple App Attest 设备完整性校验以防止滥用。我们不在自有服务器上持久存储对话记录；您的对话历史仅保存在您的设备本地。若您清除 App 数据或卸载应用，对话记录随之删除。
4.2 地图与轨迹展示
运动轨迹地图基于 Mapbox 渲染，查看地图时您的设备会向 Mapbox 请求地图瓦片（Mapbox 可能按其隐私政策处理请求相关的 IP 等网络信息）。轨迹数据本身仍来自并保存在您的设备与 Apple 健康。
4.3 第三方运动平台授权（您主动连接）
当您主动连接 Strava、Garmin、iGPSPORT 等第三方平台时，授权与数据交互遵循相应平台的隐私条款，凭证仅保存在您的设备本地，您可以随时在平台侧或 App 内断开授权。
五、我们不会做什么
- 不出售：绝不向任何第三方出售、出租或交换您的数据；
- 不追踪：无广告 SDK、无行为埋点 SDK、不采集 IDFA、不进行跨应用跟踪；
- 不上传数据库：除第 4.1 条 AI 场景外，不上传任何健康数据或分析结果；
- 不用于广告：AI 请求仅用于生成您要求的回答，不用于广告画像或模型训练。
六、您的控制权
- 撤销权限：在 iOS「设置 → 隐私与安全性 → 健康」或「健康 App → 数据访问与设备 → Balana」中可单独撤销任意数据类型的授权；
- 删除数据：在 App「我的 → 数据维护 / 隐私设置」中可清除缓存、重置应用内数据（不会删除 Apple 健康中的原始数据）；
- AI 记忆：Pro 会员的 AI 长效档案保存在您的设备本地，可随时删除；
- 卸载即删除：卸载本应用将清除设备上的全部应用数据。
七、订阅与支付
订阅与购买完全通过 Apple App Store 内购系统处理，开发者不接触、不存储您的支付信息。可在「App Store → 账户 → 订阅」中管理订阅。
八、儿童隐私
本应用不面向 13 岁以下儿童营销或收集其个人信息。若您是儿童监护人并发现儿童向我们提供了信息，请通过第十一条的渠道联系我们处理。
九、数据安全
- 所有网络请求均经 TLS/HTTPS 加密传输；
- AI 转发服务启用 Apple App Attest 防滥用校验，API 凭证不存放于设备端；
- 数据存储依赖 iOS 系统级沙盒与设备加密保护。
十、隐私政策的变更
如本政策发生实质性变更，我们将在应用内显著位置与本页面同步更新，并在页首标注生效日期。
十一、联系我们
关于隐私的任何问题、请求或投诉，请通过以下渠道联系我们，我们通常会在 48 小时内回复：
1. Who We Are
Balana ("the App") is an HRV (heart-rate-variability) measurement and mind-body recovery app for iOS, Apple Watch and a notification extension, developed by independent developer Aiiluo Chen.
2. Data We Process
2.1 Data read from Apple HealthKit
Only after your explicit authorization do we read the following health data types for analysis and display:
- Cardiovascular: heart rate, heart-rate variability (SDNN), electrocardiogram (ECG), heartbeat series, resting heart rate, heart rate recovery (1-min), walking heart rate average, blood oxygen (SpO₂), respiratory rate, wrist temperature;
- Sleep & mindfulness: sleep analysis, mindful minutes;
- Workouts & fitness: workouts, GPS workout routes, cycling distance/speed/cadence/power, running speed/power/stride length/ground-contact time/vertical oscillation, walking + running distance, VO₂ max;
- Activity & body: steps, active energy, resting energy, time in daylight, height, weight, date of birth, biological sex;
- Women's health (optional): menstrual flow, ovulation test results, cervical mucus, basal body temperature.
2.2 Data written to Apple HealthKit
With your authorization: workouts, menstrual flow, height and weight (e.g., when you log cycles or weight in the App and sync to Apple Health).
2.3 Other sensor and device data
- Bluetooth: connects to BLE heart-rate straps you pair to collect real-time RR intervals for HRV computation;
- Camera: used only for live heart-rate detection during camera-based measurement; no photos or video are captured, stored or uploaded;
- Microphone: used only for speech recognition when you use voice input in AI chat;
- Motion & fitness sensors: verify stillness during HRV measurement to ensure data quality;
- Photo library: accessed only when you pick a photo for AI analysis or save a share poster.
2.4 Account information
The App requires no account registration. We do not collect your name, phone number, email or social accounts, and we do not collect advertising identifiers (IDFA).
3. Where Data Is Stored
- Health data stays in Apple HealthKit on your device and your personal iCloud, encrypted and protected by Apple;
- App data (analysis results, measurement records, preferences) is stored only in the local iOS sandbox;
- The developer operates no cloud database of user health data.
4. When Data Leaves Your Device
Only in the following three cases:
4.1 Bano AI (user-initiated)
When you use AI chat, AI insights or voice input, content related to your request is sent over HTTPS to a forwarding service deployed by the developer on Alibaba Cloud Function Compute (Shanghai region), which calls a third-party large language model to generate the answer. The service enforces Apple App Attest integrity checks. We do not persistently store conversations on our servers; your chat history lives only on your device and is removed when you clear app data or uninstall.
4.2 Maps
Workout route maps are rendered with Mapbox; your device requests map tiles from Mapbox (which may process network information such as IP per its privacy policy). Route data itself originates from and remains on your device and Apple Health.
4.3 Third-party fitness platforms (user-initiated)
When you connect Strava, Garmin, iGPSPORT or similar platforms, authorization and data exchange follow those platforms' own privacy terms. Credentials are stored locally on your device and can be revoked at any time.
5. What We Never Do
- No selling: we never sell, rent or trade your data;
- No tracking: no advertising SDKs, no analytics trackers, no IDFA, no cross-app tracking;
- No bulk uploads: except for AI requests described in 4.1, no health data or analysis results are uploaded;
- No ad profiling: AI requests are used only to answer you, never for advertising or model training.
6. Your Controls
- Revoke permissions: in iOS Settings → Privacy & Security → Health, or in the Health app → data access for Balana, you may revoke any data type individually;
- Delete data: in the App (Me → Data Maintenance / Privacy Settings) you can clear caches and reset in-app data (original Apple Health data is untouched);
- AI memory: the Pro long-term AI profile is stored locally on your device and can be deleted anytime;
- Uninstall: uninstalling the App removes all locally stored app data.
7. Subscriptions & Payments
All purchases and subscriptions are processed entirely by Apple's App Store in-app purchase system. The developer never receives or stores your payment information. Manage or cancel subscriptions in App Store → Account → Subscriptions.
8. Children's Privacy
The App is not directed to children under 13 and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us via Section 11.
9. Data Security
- All network traffic is encrypted via TLS/HTTPS;
- The AI forwarding service enforces Apple App Attest anti-abuse checks; API credentials are never stored on the device;
- Local data is protected by iOS system sandboxing and device encryption.
10. Changes to This Policy
Material changes will be reflected in the App and on this page with an updated effective date.
11. Contact Us
For any privacy questions, requests or complaints, reach us at chenpeng.me@hotmail.com, via the feedback form or the support page. We typically respond within 48 hours.