Privacy Policy

1. Who we are

FVTimer (“the app”) is a timer and focus-tracking app built and operated by an independent developer. This policy explains what we collect, how we use it, and how we protect it.

2. Information we collect

2.1 Account

• Sign-in identifier: if you sign in with Apple, we receive an anonymous Apple user identifier, the email address you choose to share — which may be an Apple private relay address if you select “Hide My Email” — and the name you authorize Apple to share.
• User ID: we generate a random UUID that links your cloud data to your account.
• We do not collect your phone number, contacts, precise location, or identity documents.

2.2 Purchases and subscriptions

• When you buy a subscription or a lifetime unlock, we record the transaction identifier, product identifier, purchase date, expiry date and subscription status returned by the App Store, so we can grant and validate your entitlements.
• Payment is handled entirely by Apple. We never see or store your card details or billing address.

2.3 App data (uploaded only when you sign in and use cloud sync)

• Timer configurations, preferences, and app state such as onboarding completion and last active time.
• Session history (when and for how long you practised) stays in your device’s local database and is never uploaded.
• If you do not sign in or do not use cloud sync, the data above never leaves your device.

2.4 Device information and access logs

• To keep the service secure, troubleshoot faults, and monitor availability, our servers log a random request ID, request time, method, path, status code, latency, and IP address for each request.
• Access logs are used only for security, troubleshooting, and capacity analysis, and are kept for no more than 30 days. We do not log your timer content, recordings, or Apple sign-in credentials.
• We do not collect the advertising identifier (IDFA) and we do not use any cross-app tracking technology.

3. What we never upload

• Video and audio recorded with the camera or microphone are stored only on your device. They are never transmitted to our servers, shared with any third party, or used to train any model. Deleting the recordings or uninstalling the app removes them.
• We do not read your photo library, contacts, messages, or call history.

4. How we use this information

• To create your account and keep you signed in;
• To validate purchases and manage entitlements;
• To sync your timers across devices, only when you turn this on;
• To diagnose faults, keep the service secure, and improve the app;
• To meet legal obligations and handle disputes and refund checks.

We process this information to perform our contract with you, to comply with legal obligations, and for our legitimate interests in keeping the service secure and improving the app. Where we rely on your consent, you can withdraw it at any time.

We do not sell or rent your personal information, and we do not use it for advertising or profiling.

5. Where data is stored and how it is protected

• Cloud data is stored in the PostgreSQL database we use, deployed on cloud infrastructure we rent.
• The app never connects to the database directly. All cloud reads and writes go through HTTPS API endpoints, and the server restricts each request to the data belonging to the user ID in the signed session token.
• Traffic between the app and our servers is encrypted with TLS.
• Server-side keys live only on the server (environment variables, configuration files, or key files) and never ship inside the client app.
• Session history never leaves your device. If you do not sign in or do not use cloud sync, your timers and settings stay on your device as well.
• If a personal data breach occurs, we will notify affected users and regulators as required by applicable law.

6. Third-party services

• Apple (App Store, Sign in with Apple, In-App Purchase) — governed by the Apple Privacy Policy.
• Cloudflare (static hosting and DNS for this page; it processes access logs, including IP addresses, under its own policy) — governed by the Cloudflare Privacy Policy.
• Cloud infrastructure provider (server and database hosting) — processes data only on our instructions to run and store the service.

Beyond these, the app contains no third-party advertising, analytics, or data-broker services.

7. Retention and deletion

• Account data is retained for as long as your account exists.
• You can delete your account immediately in the app under Settings > Delete account, or email chenghuw@foxmail.com to request deletion. After deletion we remove your account and the timers, settings, and state stored in the cloud; transaction records we are legally required to keep are retained without your account identifier.
• Deletion in the app takes effect immediately. Email requests are usually completed within 30 days. If backup cycles require more time, we will explain this in our reply.
• Deleting your account does not automatically erase local data on your device; you can delete individual timers or uninstall the app.
• Uninstalling the app removes local data on the device, including recordings. It does not automatically delete data already synced to the cloud.

8. Your rights

Depending on where you live (GDPR, CCPA, China’s PIPL, and similar laws), you may have the right to access, correct, delete, or export your personal information, to withdraw consent, and to lodge a complaint about how we process your data. Contact us at the address below and we will respond within 30 days.

9. Children’s privacy

FVTimer is not directed at children under 13, and we do not knowingly collect their personal information. If your jurisdiction sets a higher age for consent to process minors’ data, that rule applies. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to this policy

If this policy changes materially, we will update the “Last updated” date on this page and notify you in the app where appropriate. Continued use of the app means you accept the updated policy.

11. Contact

For any privacy question, email chenghuw@foxmail.com.