TOMATALLY

Privacy Policy

English简体中文

Effective date: 12 November 2026

Last updated: 12 November 2026

Tomatally is developed and published by Guangzhou Yingdong Technology Co., Ltd. (广州英咚科技有限公司), a company registered in Guangzhou, Guangdong, China ("we", "us", "our"). We are the controller responsible for the personal information described in this policy.

This Privacy Policy explains how we handle information when you use the Tomatally iOS app (the "App"), visit the Tomatally website (the "Website"), or contact us for support.

1. Summary

Tomatally is designed to work entirely on your iPhone. We do not collect, transmit, sell, rent, or share your personal information through the App. Your tomato records, optional display name and avatar, language preference, and growth progress are stored locally on your device and are not sent to us or to any server.

We do not use accounts, advertising, analytics, tracking, or third-party SDKs that transmit data. The only time we receive personal information is when you choose to contact us by email.

2. Scope

This policy applies to:

  • the Tomatally iOS app;
  • the Tomatally website at the URL where this policy is published;
  • support and other communications you send to us.

It does not apply to Apple's App Store, iOS, iCloud, or other Apple services, which are governed by Apple's Privacy Policy. It also does not apply to third-party apps or services you choose to share content with through the iOS share sheet.

3. Information stored locally on your device

The App stores the following information in its private storage on your device:

  • your tomato records, including the time and local date of each record;
  • an optional display name and avatar that you choose in the profile editor;
  • your language preference;
  • a "growth peak" value used to display the 500-tomato milestone.

This information is stored only on your device. We do not receive it, cannot access it, and do not back it up to our servers. If you delete the App, the information is deleted from your device, subject to any device backup you have made.

4. Information we do not collect

We do not collect:

  • your name, email address, phone number, or postal address (unless you email us);
  • your contacts or address book;
  • your precise or approximate location;
  • your photos, videos, camera, or microphone data;
  • your health, fitness, or motion data;
  • your payment or financial information (the App has no in-app purchases);
  • biometric information or other sensitive personal information;
  • advertising identifiers (IDFA) or other device identifiers used for tracking;
  • usage analytics, event logs, crash logs, or diagnostics;
  • browsing history or search history;
  • any other personal information through the App.

The App does not include advertising, analytics, tracking, or third-party SDKs that transmit data.

5. Device permissions

The App requests only the permissions it needs:

  • Photos (add-only): used when you tap "Save to Photos" to save your weekly share card. The App writes the image to your photo library but does not read your photos. You can change or revoke this permission in iOS Settings.
  • Motion: the App does not request or use motion data. If an earlier build included a motion usage description, it was unused and has been removed.

The App does not request access to your camera, microphone, contacts, location, health data, or notifications.

6. How we use information

We do not use your App data for any purpose because we do not receive it. The App uses local data only to:

  • display your daily count, history, calendar, streak, and milestone;
  • remember your language and profile choices;
  • render the weekly share card on your device.

If you contact us by email, we use your email address, name, and message content to respond to your request, troubleshoot issues, and keep a record of the conversation. We do not use this information for advertising or profiling.

7. Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies:

  • Local app data: processing is necessary to provide the App's core functionality that you request (Article 6(1)(b)). This processing happens on your device; we do not receive the data.
  • Support communications: we process your contact details and message based on our legitimate interest in responding to you and improving the App (Article 6(1)(f)), or based on your consent where required.
  • Legal obligations: we may process information where necessary to comply with applicable law.

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

8. Sharing and disclosure

We do not sell, rent, trade, or share your personal information.

The App includes a system share sheet. When you choose to share a weekly card, iOS passes the image to the destination you select. We do not receive information about the destination, and the destination app's privacy policy applies. You control whether and where to share.

We may disclose support communications if required by law, regulation, legal process, or a valid governmental request, or if necessary to protect our rights, users, or the public. Because we do not hold App data, we cannot disclose your records.

We do not share personal information with advertisers, data brokers, or analytics providers.

9. Analytics, advertising, and third-party SDKs

The App contains no advertising SDKs, no analytics SDKs, no attribution SDKs, no crash-reporting SDKs, and no social login SDKs. It does not use the Advertising Identifier (IDFA) or App Tracking Transparency.

The App uses only Apple system frameworks for local storage, video playback, photo saving, and the share sheet.

Apple may provide us with aggregated crash reports and diagnostics if you have opted in to share analytics with developers in iOS Settings. These reports are processed by Apple and do not include your diary records.

10. Cookies and the Website

The Website is a static informational site. We do not set cookies for analytics, advertising, or tracking, and we do not run advertising on it. Our hosting provider may set strictly necessary security cookies to protect the site; those cookies are controlled by the provider.

Our hosting provider may process standard server logs (such as IP address, user agent, requested URL, and timestamp) to deliver the Website, maintain security, and prevent abuse. We do not use these logs to identify individual visitors. The hosting provider's own privacy policy applies to its processing.

We do not use web beacons, pixel tags, or third-party fonts or scripts on the Website.

11. Data retention

App data remains on your device until you delete the records or delete the App. We do not retain a copy.

Support emails are retained for up to 24 months after the conversation ends, unless a longer period is required by law or to resolve an ongoing dispute. We delete or anonymize them when no longer needed.

Website server logs are retained by the hosting provider according to its retention policy.

12. Security

We design the App to minimize risk by not collecting or transmitting your records. Local data is protected by the iOS app sandbox and your device's security features, including your passcode and device encryption.

We protect support communications with reasonable technical and organizational measures. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting personal information we hold (for example, support emails), we will investigate and notify affected users and authorities as required by law.

13. International transfers

We do not transfer App data internationally because we do not receive it.

If you email us, your message may be processed by our email service provider, which may be located outside your country. Where required, we use appropriate safeguards for such transfers. You can contact us for more information.

14. Your rights (EEA/UK)

If you are in the EEA or UK, you have the right to:

  • access the personal information we hold about you;
  • request correction of inaccurate information;
  • request deletion;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • request portability;
  • withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
  • lodge a complaint with your local data protection authority.

Because the App does not send us your records, we usually hold no App data about you. If you have emailed us, you can exercise these rights by contacting us at the email below. We may need to verify your identity before responding. We will respond within the time required by law (generally one month).

15. California privacy notice (CCPA/CPRA)

We do not collect personal information from California residents through the App. We do not sell or share personal information as defined by the CCPA/CPRA. We do not use or disclose sensitive personal information for purposes prohibited by the CPRA. We do not disclose personal information to third parties for their direct marketing purposes.

Notice at Collection: we collect no categories of personal information through the App. If you email us, we collect the contact details and content you choose to send, as described in this policy.

If you have contacted us, you have the right to know, delete, correct, and obtain a copy of your personal information, and to opt out of sale/sharing. We will not discriminate against you for exercising these rights.

To make a request, email us at the address below. We may need to verify your identity. Authorized agents may submit requests with written permission.

16. China mainland privacy notice (PIPL)

If you are in mainland China, the following applies under the Personal Information Protection Law of the PRC ("PIPL"):

  • No collection through the App. The App does not provide internet information services and does not collect, store on our servers, or transfer your personal information. Your records are stored locally on your device.
  • Support communications. If you contact us, we process your name, email address, and message content to respond to you, based on your consent or as necessary to respond to your request. We do not use it for marketing.
  • Sensitive personal information. We do not collect sensitive personal information through the App. Please do not send sensitive information in support emails.
  • Your rights. You have the right to know, decide, access, copy, correct, and delete your personal information; to withdraw consent; and to request an explanation of our processing. Contact us to exercise these rights.
  • Children. We do not collect personal information from children under 14 through the App. If a guardian contacts us about a child's information, we will handle it in accordance with PIPL.
  • Cross-border transfer. We do not transfer App data outside China because we do not receive it. Support emails may be processed by our email provider; where required, we will comply with PIPL's cross-border requirements.
  • Complaints. You may contact us or complain to the competent cyberspace administration or other authorities.

17. Children

The App is not directed to children, and we do not knowingly collect personal information from children. The App has no account, chat, advertising, or social features. If you believe a child has sent us personal information by email, contact us and we will delete it.

18. Do Not Track and Global Privacy Control

We do not track users across websites or apps. Because we do not engage in tracking, the Website does not respond differently to "Do Not Track" signals. We honor Global Privacy Control (GPC) to the extent required by law; because we do not sell or share personal information, no opt-out is necessary.

19. Third-party services and links

The App may open the iOS share sheet, Settings, or the App Store. Those services are operated by Apple or by the destination app you choose, and their privacy policies apply. The Website may link to the App Store or to our support email; we are not responsible for third-party sites.

If you post a rating or review on the App Store, Apple may display your review and nickname publicly. We do not control that display; please do not include personal information in a public review.

20. Changes to this policy

We may update this policy to reflect changes in the App, legal requirements, or our practices. We will post the updated policy at this URL and update the "Last updated" date. If a change materially affects your rights, we will provide a prominent notice in the App or on the Website. Where required by law, we will ask for your consent to the change.

21. Contact us

Guangzhou Yingdong Technology Co., Ltd.

广州英咚科技有限公司

Registered address: Guangzhou, Guangdong, China (full address available on request)

Email: dev@yingdong.online

We aim to respond to privacy requests within 30 days. If you are in the EEA/UK and are not satisfied with our response, you may complain to your local data protection authority. If you are in mainland China, you may complain to the competent cyberspace administration.

22. Language versions

This policy is provided in English and Simplified Chinese. For users in mainland China, the Chinese version prevails to the extent required by law. For all other users, the English version prevails. If you need this policy in another language, contact us.

隐私政策

生效日期： 2026 年 11 月 12 日

最后更新： 2026 年 11 月 12 日

Tomatally 由广州英咚科技有限公司（Guangzhou Yingdong Technology Co., Ltd.）开发并发布，公司注册于中国广东省广州市（以下称“我们”）。我们是本政策所述个人信息处理的处理者。

本隐私政策说明：当你使用 Tomatally iOS App（以下简称“本 App”）、访问 Tomatally 网站（以下简称“本网站”）或联系我们寻求支持时，我们会如何处理信息。

1. 摘要

Tomatally 完全在你的 iPhone 本地运行。我们不会通过本 App 收集、传输、出售、出租或共享你的个人信息。 你的番茄记录、可选的显示名称和头像、语言偏好以及成长进度都只保存在你的设备上，不会发送给我们或任何服务器。

本 App 不使用账号、广告、统计分析、追踪，也不含任何会传输数据的第三方 SDK。我们唯一可能收到个人信息的情况，是你主动通过电子邮件联系我们。

2. 适用范围

本政策适用于：

  • Tomatally iOS App；
  • 发布本政策的 Tomatally 网站；
  • 你发送给我们的支持请求及其他沟通。

本政策不适用于 Apple 的 App Store、iOS、iCloud 或其他 Apple 服务，这些服务适用 Apple 隐私政策。本政策也不适用于你通过 iOS 系统分享面板选择分享的第三方 App 或服务。

3. App 在设备本地保存的信息

本 App 只在自己的私有存储中保存以下信息：

  • 你的番茄记录，包括每次记录的时间和本地日期；
  • 你在个人档案中可选填的显示名称和头像；
  • 你的语言偏好；
  • 用于显示 500 颗里程的“历史最高值”。

这些信息只保存在你的设备上。我们不会收到、无法访问，也不会备份到我们的服务器。删除本 App 后，这些信息会从你的设备删除，但你自行制作的设备备份可能除外。

4. 我们不收集的信息

我们不会通过本 App 收集：

  • 你的姓名、邮箱、电话或邮寄地址（你主动发邮件时除外）；
  • 你的通讯录；
  • 你的精确或大致位置；
  • 你的照片、视频、相机或麦克风数据；
  • 你的健康、健身或运动数据；
  • 你的支付或财务信息（本 App 不含内购）；
  • 生物识别信息或其他敏感个人信息；
  • 广告标识符（IDFA）或其他用于追踪的设备标识符；
  • 使用统计、事件日志、崩溃日志或诊断信息；
  • 浏览记录或搜索记录；
  • 任何其他个人信息。

本 App 不含广告、统计分析、追踪，也不含任何会传输数据的第三方 SDK。

5. 设备权限

本 App 只申请必要的权限：

  • 相册（仅添加）： 当你点击“保存到相册”保存本周分享卡片时使用。本 App 只把图片写入你的相册，不读取你的照片。你可以随时在 iOS 设置中修改或撤销该权限。
  • 运动与健身： 本 App 不申请、也不使用运动数据。如果早期版本包含过运动权限说明，该权限未被使用，并已移除。

本 App 不申请相机、麦克风、通讯录、位置、健康数据或通知权限。

6. 我们如何使用信息

由于我们不会收到你的 App 数据，我们不会将其用于任何目的。本 App 只在本地使用数据，用于：

  • 显示今日数量、历史记录、月历、连续记录和里程；
  • 记住你的语言和档案选择；
  • 在你的设备上生成本周分享卡片。

如果你通过电子邮件联系我们，我们会使用你的邮箱、姓名和邮件内容来回复你的请求、排查问题，并保留沟通记录。我们不会将这些信息用于广告或用户画像。

7. 法律依据（欧洲经济区/英国）

在适用《通用数据保护条例》（GDPR）或英国 GDPR 的情况下：

  • 本地 App 数据： 处理是你使用本 App 核心功能所必需的（GDPR 第 6(1)(b) 条）。处理发生在你的设备上，我们不会收到数据。
  • 支持沟通： 我们基于回复你并改进本 App 的合法利益（GDPR 第 6(1)(f) 条），或在法律要求时基于你的同意，处理你的联系方式和邮件内容。
  • 法律义务： 在遵守适用法律所必需时，我们可能处理相关信息。

我们不会进行会产生法律或类似重大影响的自动化决策或用户画像。

8. 共享与披露

我们不会出售、出租、交易或共享你的个人信息。

本 App 包含 iOS 系统分享面板。当你选择分享本周卡片时，iOS 会把图片传递给你选择的目标。我们不会收到有关分享目标的信息，目标 App 适用其自己的隐私政策。是否分享、分享到哪里，完全由你决定。

如果法律、法规、法律程序或有合法效力的政府要求要求我们披露，或为保护我们、用户或公众的权利、财产或安全所必需，我们可能披露支持沟通中的信息。由于我们不持有 App 数据，我们无法披露你的记录。

我们不会向广告商、数据经纪商或分析服务商共享个人信息。

9. 分析、广告与第三方 SDK

本 App 不含广告 SDK、分析 SDK、归因 SDK、崩溃上报 SDK 或社交登录 SDK。本 App 不使用广告标识符（IDFA），也不使用 App Tracking Transparency。

本 App 只使用 Apple 系统框架完成本地存储、视频播放、相册保存和系统分享。

如果你在 iOS 设置中选择与开发者共享分析数据，Apple 可能向我们提供聚合的崩溃报告和诊断信息。这些报告由 Apple 处理，不包含你的日记记录。

10. Cookie 与网站

本网站是静态信息页面。我们不会为分析、广告或追踪设置 Cookie，也不在网站上投放广告。我们的托管服务商可能设置严格必要的安全 Cookie 以保护网站；这些 Cookie 由服务商控制。

我们的托管服务商可能处理标准服务器日志（例如 IP 地址、浏览器标识、请求 URL 和时间戳），用于提供网站、维护安全和防止滥用。我们不会用这些日志识别具体访客。托管服务商对其处理行为适用其自己的隐私政策。

本网站不使用网络信标、像素标签、第三方字体或第三方脚本。

11. 数据保留

App 数据会一直保存在你的设备上，直到你删除记录或删除本 App。我们不会保留副本。

支持邮件在沟通结束后最多保留 24 个月，除非法律要求更长期间或为解决持续争议所必需。不再需要时，我们会删除或匿名化。

网站服务器日志由托管服务商按其保留政策处理。

12. 安全

我们通过不收集、不传输你的记录来降低风险。本地数据受 iOS App 沙盒以及设备安全功能（包括锁屏密码和设备加密）保护。

我们采取合理的技术和组织措施保护支持沟通。但任何传输或存储方式都无法做到绝对安全，我们无法保证绝对安全。如果我们发现影响我们所持个人信息（例如支持邮件）的安全事件，我们会进行调查，并按法律要求通知受影响用户和主管机关。

13. 跨境传输

我们不会跨境传输 App 数据，因为我们不会收到这些数据。

如果你给我们发邮件，你的邮件可能由我们的邮件服务商处理，该服务商可能位于你所在国家/地区之外。在法律要求时，我们会为此类传输采取适当保障措施。你可以联系我们了解详情。

14. 你的权利（欧洲经济区/英国）

如果你位于欧洲经济区或英国，你有权：

  • 查阅我们持有的你的个人信息；
  • 要求更正不准确的信息；
  • 要求删除；
  • 要求限制处理；
  • 反对基于合法利益的处理；
  • 要求数据可携带；
  • 随时撤回同意，但不影响撤回前处理的合法性；
  • 向当地数据保护监管机构投诉。

由于本 App 不会把记录发送给我们，我们通常不持有你的 App 数据。如果你曾给我们发邮件，可以通过下方邮箱行使上述权利。我们可能需要先验证你的身份，并在法律要求的期限内回复（通常为一个月）。

15. 加州隐私声明（CCPA/CPRA）

我们不会通过本 App 收集加州居民的个人信息。我们不会出售或共享《加州消费者隐私法》及《加州隐私权法》（CCPA/CPRA）所定义的个人信息。我们不会将敏感个人信息用于 CPRA 禁止的用途。我们不会向第三方披露个人信息用于其直接营销。

收集时告知： 我们不会通过本 App 收集任何类别的个人信息。如果你给我们发邮件，我们只会收集你主动提供的联系方式和内容，具体见本政策。

如果你曾联系我们，你有权知情、删除、更正并获取你的个人信息副本，也有权选择退出出售/共享。我们不会因你行使这些权利而歧视你。

如需提出请求，请发送邮件至下方邮箱。我们可能需要验证你的身份。授权代理人可凭书面授权代为提出请求。

16. 中国大陆隐私声明（PIPL）

如果你位于中国大陆，以下内容适用于《中华人民共和国个人信息保护法》（“PIPL”）：

  • 本 App 不收集个人信息。 本 App 不提供互联网信息服务，不会收集、存储到我们的服务器或传输你的个人信息。你的记录只保存在你的设备本地。
  • 支持沟通。 如果你联系我们，我们会基于你的同意或为回复你的请求所必需，处理你的姓名、邮箱和邮件内容。我们不会将其用于营销。
  • 敏感个人信息。 我们不会通过本 App 收集敏感个人信息。请不要在支持邮件中发送敏感信息。
  • 你的权利。 你依法享有知情权、决定权、查阅权、复制权、更正权、删除权、撤回同意权，以及要求我们解释处理规则的权利。你可以通过下方邮箱行使这些权利。
  • 儿童。 我们不会通过本 App 收集不满 14 周岁儿童的个人信息。如监护人就儿童信息联系我们，我们会按照 PIPL 处理。
  • 跨境传输。 我们不会将 App 数据传输到中国境外，因为我们不会收到这些数据。支持邮件可能由我们的邮件服务商处理；如涉及跨境，我们会遵守 PIPL 的跨境传输要求。
  • 投诉。 你可以联系我们，也可以向有管辖权的网信部门或其他主管机关投诉。

17. 儿童

本 App 不面向儿童，我们不会有意收集儿童的个人信息。本 App 没有账号、聊天、广告或社交功能。如果你认为儿童通过邮件向我们发送了个人信息，请联系我们，我们会删除。

18. Do Not Track 与全球隐私控制

我们不会跨网站或跨 App 追踪用户。由于我们不进行追踪，本网站不会对“Do Not Track”信号作出不同响应。在法律要求的范围内，我们遵守全球隐私控制（GPC）；由于我们不出售或共享个人信息，无需额外选择退出。

19. 第三方服务与链接

本 App 可能打开 iOS 系统分享面板、系统设置或 App Store。这些服务由 Apple 或你选择的目标 App 运营，适用其各自的隐私政策。本网站可能链接到 App Store 或我们的支持邮箱；我们不对第三方网站负责。

如果你在 App Store 发表评分或评论，Apple 可能会公开展示你的评论和昵称。我们无法控制该展示；请不要在公开评论中包含个人信息。

20. 政策变更

我们可能根据 App 功能、法律要求或我们的做法更新本政策。更新后的政策会发布在本 URL，并更新“最后更新”日期。如果变更对你的权利有重大影响，我们会在 App 内或网站上显著提示；在法律要求时，我们会征得你的同意。

21. 联系我们

广州英咚科技有限公司

Guangzhou Yingdong Technology Co., Ltd.

注册地址：中国广东省广州市（完整地址可应要求提供）

邮箱：dev@yingdong.online

我们力争在 30 天内回复隐私请求。如果你位于欧洲经济区/英国且对我们的回复不满意，可以向当地数据保护监管机构投诉。如果你位于中国大陆，可以向有管辖权的网信部门投诉。

22. 语言版本

本政策提供英文和简体中文版本。对于中国大陆用户，在适用法律要求的范围内，以中文版本为准；对于其他用户，以英文版本为准。如果你需要其他语言版本，请联系我们。