适用范围与设备本地数据
本政策适用于 iPhone 和 iPad 版 大水杯。下文账号和会员说明适用于已发布的 iOS 1.2.2 及后续支持这些功能的版本。饮水记录、每日目标、瓶型、瓶盖状态、场景、灯光、瓶身文字和姿态仅保存在当前设备，用于显示与恢复状态，不上传到账号服务器，也不随登录或恢复购买迁移。卸载应用会删除设备上的应用本地记录。
可选 Apple 账号
无需注册或登录 大水杯 账号即可使用核心饮水记录，或购买、恢复和使用 App Store 会员。可选的“通过 Apple 登录”会提供 Apple 账号标识，以及首次授权时 Apple 提供的姓名和邮箱（可能是隐藏邮箱）。Cloudflare Worker 与 D1 保存应用账号、登录身份映射和会话；后台加密保存 Apple 授权令牌，用于在删除账号时撤销授权。账号数据在账号存续期间保留，删除方式见下方。退出登录、删除账号不会改变独立的商店客户标识，也不会取消订阅。
App Store 会员与服务提供方
App Store 处理付款。RevenueCat 处理独立的商店客户标识、购买历史、商品、购买和恢复信息，用于交易验证、会员权益、订阅历史和统计。新安装可由 SDK 生成匿名标识；升级保留既有标识。会员仅在签名核验通过后授予；恢复购买使用相同的 App Store 购买账号。大水杯 不接收或保存完整银行卡信息。应用不包含广告、通用点击或浏览行为分析、崩溃统计服务。
账号删除会移除本项目的账号、身份映射、会话和服务端会员快照。Apple 与 RevenueCat 的商店客户、订阅和交易记录独立管理，不随可选应用账号删除；相关记录的保留及隐私权请求按各服务提供方政策处理：Apple 隐私政策、RevenueCat 隐私政策、Cloudflare 隐私政策。
安全与防滥用
Cloudflare 处理请求来源 IP 地址和账号 UUID，用于防滥用和限流。后台分别以原始 IP 和账号 UUID 作为平台限流键，不在本项目 D1 中建立 IP 计数表。60 秒计数窗口不代表平台删除期限；基础设施和安全处理按 Cloudflare 政策执行。
在应用内删除 Apple 账号
打开 大水杯 → 设置 → 账号与会员。已登录时，在账号信息下选择“删除账号”，确认删除，再按 Apple 提示验证同一身份。无需创建其他账号、设置密码、发邮件或联系客服，删除请求直接在应用内完成。本网页仅解释流程，不收取或代办删除请求。
如果已退出登录，使用原 Apple 身份登录后再删除该账号；从未创建可选应用账号的访客无需为购买或恢复会员注册账号。仅卸载应用或退出登录不会删除服务端账号。
删除成功后撤销 Apple 授权，并删除本项目的服务端账号、登录身份映射、会话和会员快照。应用会退出该账号。若网络中断或删除未完成，请在原账号的“重试删除账号”入口重试，不会要求联系客服。有限的删除确认记录用于防止重复处理和恢复重试；完成后保留七天重试窗口，过期后在例行清理中移除。处理中断的请求保留至完成。
删除应用账号保留本地饮水记录，不会取消 App Store 订阅或移除独立的商店会员权益。若不再需要自动续订，请另行打开 Apple 订阅管理 取消。Apple 与交易服务提供方按各自政策保留交易记录。
联系与健康提示
隐私或支持咨询可联系 mhgd3250905@gmail.com。请仅提供处理问题所需的最少信息，勿发送密码、验证码或完整银行卡信息。
大水杯仅用于饮水记录和可视化，不提供医疗诊断、治疗或个性化医疗建议。
iOS privacy policy · English
Last updated: November 6, 2026. This policy applies to HydroLog for iPhone and iPad. Account and membership information applies to released iOS version 1.2.2 and later versions with these features. Hydration records, daily goals and bottle presentation remain on the device, are not uploaded to our account server and do not migrate with sign-in or purchase restoration. Uninstalling removes the app's local records.
Optional Apple account
No HydroLog registration or sign-in is required for core hydration tracking or for purchasing, restoring or using App Store membership. Optional Sign in with Apple supplies an Apple identifier and, when shared at first authorization, a name and email, including a private relay email. Cloudflare Worker and D1 store app accounts, identity mappings and sessions. An encrypted Apple authorization token supports revocation during deletion. Account data is retained while the account exists; deletion is described below. Optional app sign-in, sign-out or deletion does not switch the separate store customer or cancel a subscription.
Purchases and service providers
App Store processes payments. RevenueCat processes a separate store customer identifier, purchase history, products, purchases and restoration information for transaction verification, verified entitlements, subscription history and analytics. The SDK may generate an anonymous identifier for new installations and preserve an existing identifier on upgrades. Restore with the same App Store purchase account. We do not receive full payment card information. The app has no advertising, general tap or browsing analytics, or crash statistics service.
Deleting an optional app account removes our account, identity mappings, sessions and server membership snapshot. Apple and RevenueCat manage store customers, subscriptions and transactions independently; these records are not removed by app account deletion. Their retention and privacy request processes follow their policies: Apple, RevenueCat, Cloudflare.
Security
Cloudflare processes request IP addresses and account UUIDs to prevent abuse and rate-limit requests, using separate raw platform keys rather than an IP counter table in our D1 database. The 60-second counting window is not a deletion period. Infrastructure and security processing follow Cloudflare's policy.
Delete your Apple app account in the app
Open HydroLog → Settings → Account and membership. While signed in, choose Delete account below your account information, confirm, and verify the same identity with Apple. No additional account, new password, email or customer service request is required. Deletion is completed in the app; this webpage explains the process and does not accept deletion requests.
If signed out, sign in with the original Apple identity to delete that account. Guests who never created an optional app account do not need to register to buy or restore membership. Signing out or uninstalling does not delete a server account.
Successful deletion revokes Apple authorization and removes our server account, identity mappings, sessions and membership snapshot, then signs the app account out. If interrupted, use Retry account deletion with the original account. Limited deletion confirmation records support retries for seven days after completion and are removed during routine cleanup after expiration. Interrupted requests are retained until completed.
App account deletion preserves local hydration records and does not cancel App Store subscriptions or remove separate store membership. To stop auto-renewal, cancel separately in Apple subscription management. Apple and transaction providers retain transaction records under their own policies.
Contact and health information
For privacy or support questions, email mhgd3250905@gmail.com. Share only the minimum details needed; do not send passwords, verification codes or full payment card details.
HydroLog is a water log and visualization tool. It offers no medical diagnosis, treatment or personalized medical advice.