选择适用的平台
iPhone 和 iPad 用户请阅读 iOS 隐私政策与应用内账号删除说明。本页以下 Google 登录、Google Play 订阅及联系删除流程仅适用于 Android 的 Google 账号。
For iPhone and iPad, read the iOS privacy policy and in-app account deletion instructions. The Google account, Google Play and contact-based deletion sections on this page apply only to Android Google accounts.
我们处理哪些数据
饮水记录、每日目标、瓶身模型、瓶盖状态、工作室光线、瓶身文字和瓶身姿态仍只保存在当前设备，用于恢复应用状态。使用 Google 登录时，大水杯 会处理 Google 提供的账号标识、名称、邮箱和头像，并在独立服务端保存登录会话与会员状态；不会上传饮水记录。
登录、会员与服务提供方
Google 提供账号登录；Google Play 处理订阅交易；RevenueCat 用于读取套餐、购买、恢复和核验订阅；Cloudflare Worker 与 D1 保存账号会话和可重建的会员快照。大水杯 不接收或保存完整银行卡信息。当前不包含广告、通用点击或浏览行为分析、崩溃统计服务。RevenueCat 会处理购买历史和账号标识，用于交易核验、会员权益以及订阅历史和统计。
安全与防滥用
Cloudflare 还处理请求来源 IP 地址和账号 UUID，用于防滥用和限流。后台将原始 IP 和账号 UUID 分别作为平台限流键，不在自有 D1 中建立 IP 计数表；60 秒计数窗口不代表平台删除期限。平台基础设施和安全处理按 Cloudflare 的政策执行。
Android Google 账号删除与本地数据控制
Apple 账号请在 iOS 应用内直接删除，无需联系客服；具体步骤见 iOS 账号删除说明。
本地饮水记录只保存在设备上，可通过卸载应用或清除应用数据删除。退出登录、清除应用数据或卸载应用不会取消 Google Play 订阅，也不等于删除服务端账号；订阅可在 Google Play 管理。要申请删除 Android 的 Google 登录账号及关联的服务端账号、登录身份映射、会话和会员快照，请发邮件至 mhgd3250905@gmail.com 提交请求并注明“删除 大水杯 账号”。我们会在 30 天内处理；依法必须保留的最少交易或审计记录可能在法定期限内保留。Google Play 的订阅和交易记录由 Google 按其政策管理。
iOS 账号与 App Store 会员
以下会员说明适用于已发布的 iOS 1.2.2 及后续支持会员的版本。
无需注册或登录 App 账号即可通过 App Store 购买、恢复和使用会员。RevenueCat 保留独立的商店客户标识，新安装可由 SDK 生成匿名标识，升级保留既有标识；用于商品、交易、订阅历史和统计，以及经过签名核验的权益。可选 Apple 登录、退出或删号不切换这个商店客户、不按邮箱合并会员；重装或在其他支持设备上恢复需使用相同 App Store 购买账号。饮水记录不随账号或恢复购买迁移。
在提供 Apple 登录的 iOS 版本中，Apple 提供登录身份、首次授权时的姓名和邮箱（包括隐藏邮箱）；App Store 处理订阅交易，RevenueCat 核验会员，Cloudflare Worker 与 D1 保存本项目账号、会话和会员快照。为支持撤销授权，后台加密保存 Apple 授权令牌。Apple 与 Google 账号按各自身份独立，不按邮箱自动合并，也不默认共享会员。饮水记录仍只保存在设备上。
已登录的 Apple 用户可在应用“账号与会员”中选择“删除账号”，按 Apple 提示确认同一身份。成功后撤销 Apple 授权并删除本项目的服务端账号、身份映射、会话和会员快照；处理中断时请使用原账号重试。有限的删除确认记录用于恢复重试，完成且过期后在例行清理中移除。删除账号不清除本地饮水记录，也不会取消 App Store 订阅；请通过 Apple 订阅管理 单独取消。Apple 和订阅服务提供方按其政策处理交易记录。
Privacy policy · English
Last updated: November 6, 2026. Hydration records, daily goals and bottle presentation stay on the device and are not uploaded. Google login provides an account identifier, name, email and avatar. Google Play handles Android subscriptions. RevenueCat verifies subscriptions; Cloudflare Worker and D1 keep separate account sessions and membership snapshots. HydroLog does not store full payment card details and has no advertising, general tap or browsing analytics, or crash statistics service. RevenueCat processes purchase history and account identifiers for transaction verification, entitlements, subscription history and subscription analytics. For Android Google account deletion only, email mhgd3250905@gmail.com; requests are handled within 30 days. Local records can be removed by clearing app data or uninstalling. Signing out, uninstalling or deleting an account does not cancel store subscriptions. Minimum transaction or audit records required by law may be retained. For privacy questions, email mhgd3250905@gmail.com. HydroLog is a hydration logging tool and does not provide medical diagnosis or treatment.
Security and abuse prevention
Cloudflare also processes request IP addresses and account UUIDs to prevent abuse and rate-limit requests. The backend passes the raw IP and account UUID as separate platform rate-limit keys and does not create an IP counter table in its D1 database. The 60-second counting window is not a platform deletion period. Cloudflare infrastructure and security processing follow its policies.
iOS accounts and App Store membership
The membership information below applies to released iOS version 1.2.2 and later versions that support membership.
These versions support purchasing, restoring and using App Store membership without app registration or sign-in. RevenueCat retains a separate store customer identifier, generated anonymously by the SDK for new installations and preserved on upgrades, for products, transactions, subscription history and analytics, and cryptographically verified entitlements. Optional Apple sign-in, sign-out or account deletion does not switch that store customer or merge membership by email. Restore after reinstallation or on another supported device uses the same App Store purchase account. Hydration records do not migrate with account sign-in or purchase restoration.
In an iOS version that offers Apple sign-in, Apple supplies the login identity and the name and email shared at first authorization, including a private relay email. App Store handles subscription transactions, RevenueCat verifies membership, and Cloudflare Worker and D1 store this app's account, sessions and membership snapshots. The backend encrypts an Apple authorization token to support revocation. Apple and Google accounts use separate identities; we do not automatically merge them by email or share membership between them. Hydration records remain on the device.
Signed-in Apple users can choose Delete account in Account and membership and confirm the same identity with Apple. On success, we revoke Apple authorization and remove this app's server account, identity mapping, sessions and membership snapshot. If interrupted, retry with the original account. A limited deletion confirmation record supports retries; completed, expired confirmations are removed during routine cleanup. Account deletion leaves local hydration records on the device and does not cancel an App Store subscription. Cancel separately through Apple subscription management. Apple and subscription service providers handle transaction records under their own policies.
健康提示
大水杯 是饮水记录和可视化工具，不提供医疗诊断、治疗或个性化医疗建议。请根据自身情况咨询专业人士。
联系开发者
如需咨询隐私问题，请发邮件至 mhgd3250905@gmail.com 联系大水杯。