更新及生效日期：2026年11月2日 · 适用版本：iOS 1.0.0
运营者：北京止间科技有限公司。隐私联系邮箱：[email protected]。
1. 本地养鱼与联网功能
池间无需注册账号。鱼、成长、金币、鱼食、投喂次数和偏好等玩法进度保存在设备本地；我们不提供账号云存档或跨设备找回。核心玩法可离线运行。删除 App、清除数据或更换设备可能导致本地进度丢失；Apple 系统备份和迁移是否保留数据取决于设备设置。
联网功能包括自建使用统计以及您主动提交的意见反馈。当前 1.0.0 版本在启动及使用过程中自动收集并尝试发送使用统计，设置中没有统计开关。离线时，待发送事件可保存在应用本地队列中，恢复联网后重试。不要将“无需账号”或“可离线养鱼”理解为联网时完全不收集数据。
2. 我们处理的数据与用途
**使用统计：**安装段随机标识、会话标识、经哈希处理的设备关联标识、事件标识及发生时间、时区偏移、平台和系统主版本、应用版本、发行渠道、界面与系统语言及使用上下文；以及启动、前后台、停留时间、投喂、游戏金币购买/出售、鱼类偏好与库存摘要、音乐选择和播放时长、语言切换等应用内事件及结果，以及首页加载耗时、存储操作和音乐错误码。用于理解功能使用情况、发现异常和改进产品，不用于广告投放、跨应用追踪、信用评估或真实货币交易。
iOS 设备关联值来自系统提供的厂商标识，经 SHA-256 处理后上传；原始值不进入统计事件。相关值可能在本机钥匙串中保留，重新安装未必重置关联。哈希和随机标识属于去标识化措施，不代表数据绝对匿名。我们不通过此功能读取 IMEI、电话号码、通讯录、照片、精确位置或广告标识符 IDFA。
**意见反馈：**只有您点击提交时才发送填写的文字、随机提交标识、平台和 App 版本，用于阅读和处理反馈。未提交的草稿保存在本机。请勿填写身份证件、密码、银行卡或与问题无关的敏感信息；我们不要求填写联系方式。若您主动在文字或邮件中提供个人信息，我们会将其用于处理对应请求。
**连接及运行信息：**建立 HTTPS 连接时，网络基础设施需要处理来源 IP 等技术信息。应用自建接口不将 IP 作为业务统计字段保存，池间入口关闭常规访问日志；故障或安全诊断可能涉及必要的技术信息，不用于广告画像。本地错误日志用于排查运行问题，不会作为完整日志文件自动上传。
3. 接收方、服务与公开网页
统计和反馈发送至我们管理的 HTTPS 服务 https://pond.zhijianwuyou.com，由受限的后台人员处理。服务使用阿里云服务器和独立数据库，不向其他项目开放业务数据。当前版本没有友盟、第三方广告或商业云统计 SDK，也不出售个人信息。
公开协议及支持页面使用 Notion 托管。访问这些网页时，Notion 可能按其隐私政策处理网页访问技术信息；我们不将 App 统计事件发送给 Notion。详情：https://www.notion.com/privacy 。向客服邮箱发送邮件时，邮件服务会处理您主动发送的内容及回信地址。
如将来新增接收方、处理目的、数据类型或跨境处理安排，我们会更新说明，并在法律要求时事先取得相应同意；本政策不构成对尚未实施处理的概括授权。
4. 保留与安全
统计及反馈业务记录按最长 30 天窗口保存，并由定时任务清理到期记录。生产备份最多保留 7 天，同时受源记录到期时间约束；不会因备份重新延长业务记录的 30 天期限。本地统计队列有数量和时间限制；本地玩法数据由您在设备上管理。
客服邮件按处理请求及依法保存所必需的期间保留；我们不会把这一说明当作无限期保存的依据。法律确需保留或涉及争议时，仅在必要范围和期间保留相关信息。
我们使用 HTTPS、后台身份验证、权限隔离和限制访问等措施。没有任何传输或存储能保证绝对安全；如发生安全事件，我们会采取补救并依法履行通知义务。
5. 您的选择、删除与其他权利
您可以离线使用核心养鱼功能。当前版本没有应用内统计关闭按钮；停止联网使用可停止当时的上传，但不会自动删除服务器已接收的数据，本地待发送队列在恢复联网后可能重试。卸载也不等同于删除服务器数据。
您可向 [email protected] 发送主题为“池间隐私请求”的邮件，提出访问、更正、删除、撤回或限制处理等适用法律下的请求。由于没有账号，仅凭邮箱无法自动关联所有设备统计；我们可能请您提供提交时间、反馈片段、平台或版本等与核验相称的信息，说明可关联范围与技术限制。我们不会要求为此强制注册或提供过度身份材料，也不会声称已删除无法定位的记录。
我们将在适用法律规定的期限内响应并说明处理结果；如需核验、依法延期或不能满足请求，会说明理由和后续方式。您也可向有权的监管机构投诉。我们不能远程删除只存在于您设备上的本地存档。
6. 未成年人及政策更新
池间不要求填写出生日期，也没有监护人同意核验流程；没有收集年龄不等于已经取得监护人同意。未成年人应由监护人指导使用，并避免在反馈中发送个人信息。若您或监护人认为存在未依法获得许可的未成年人数据收集，请通过隐私邮箱联系我们，我们会核实并依法处理。
重大变化会通过适当方式告知；依法需要同意的，不以继续离线养鱼推定您已同意新增处理。中英文文本旨在一致，不减损当地法律赋予您的权利。
──────────────── English
Updated and effective: November 2, 2026. Applies to iOS 1.0.0.
Operator: 北京止间科技有限公司 (Beijing Zhijian Technology Co., Limited). Privacy contact: [email protected].
Local gameplay. No Chijian account is required. Fish, growth, coins, food, feeding opportunities and preferences are stored on your device. Core gameplay works offline. We do not provide account-based cloud saves or cross-device recovery. Deleting the app or changing devices may cause progress loss; Apple backup and migration depend on device settings.
Automatic usage statistics. Version 1.0.0 automatically collects and attempts to send usage events during startup and use. It has no in-app statistics switch. Offline events may be queued locally and retried when connectivity returns. No account and offline gameplay do not mean that no data is collected while connected.
Data includes random installation and session identifiers; a hashed device association identifier; event IDs and times; timezone offset; platform and major OS version; app version, channel, language and usage context; and interactions such as launches, foreground/background activity, time spent, feeding, gameplay-coin purchases/sales, fish preferences and inventory summaries, music selections/listening time and language changes, home load duration and storage/music error codes. We use this to understand features, investigate issues and improve the app. It is not used for advertising, cross-app tracking, credit decisions or real-money transactions.
On iOS, a system vendor identifier is hashed with SHA-256 before use in uploaded events. The raw value is not included. A related value may persist in the device keychain, including across reinstallations. Hashing and random identifiers are pseudonymization, not a guarantee of anonymity. This feature does not read IMEI, phone numbers, contacts, photos, precise location or the advertising identifier (IDFA).
Feedback. Only when you submit feedback do we send its text, a random submission ID, platform and app version. Unsent drafts stay on-device. Contact details are not required. Do not include passwords, identity documents, banking details or unrelated sensitive information. Information you voluntarily send in feedback or email is used to handle that request.
Infrastructure and recipients. Our HTTPS service at https://pond.zhijianwuyou.com receives analytics and feedback, with restricted administrative access and an isolated database on Alibaba Cloud infrastructure. Other hosted projects are not given access to these records. The app has no Umeng, advertising or commercial cloud analytics SDK, and we do not sell personal information. Network infrastructure necessarily processes technical connection information such as source IP. IP is not stored as a business analytics field, routine Pond gateway access logging is disabled, and necessary fault/security diagnostics may process technical information. Local error log files are not automatically uploaded in full.
Notion hosts the public policy/support webpages and may process webpage access data under https://www.notion.com/privacy . App analytics events are not sent to Notion. Email services process messages and reply addresses you voluntarily provide to support. New recipients, purposes, data types or international transfer arrangements will be explained, with additional consent where required; this policy does not authorize unspecified future processing.
Retention and safeguards. Analytics and feedback business records have a maximum 30-day retention window and scheduled expiry cleanup. Production backups are kept for at most seven days and are also constrained by the earliest source-record expiry, rather than extending the 30-day window. Local queues have size/time limits. Support correspondence is retained only as necessary to handle the request and satisfy applicable legal requirements. Relevant records may be retained where legally necessary for a dispute. We use HTTPS, administrator authentication, access restrictions and isolation. No system is absolutely secure; incidents will be addressed and reported as required by law.
Choices and rights. Core gameplay can be used offline. This version has no in-app analytics opt-out. Stopping connected use stops transmission at that time, but does not delete previously received records; queued events may be retried on reconnection. Uninstalling does not itself delete server records.
Email [email protected] with “Chijian Privacy Request” to request access, correction, deletion, withdrawal or restriction where applicable. Without an account, an email address alone cannot automatically identify all device statistics. We may ask for proportionate details such as submission time, a feedback excerpt, platform or app version, and explain what can be located. We do not require account registration or excessive identity documents and do not claim to delete records we cannot locate. We respond within applicable legal deadlines and explain verification, lawful extensions or refusal. You may complain to the relevant supervisory authority. We cannot remotely delete gameplay saved only on your device.
Children and changes. We do not request dates of birth and have no parental-consent verification flow. Not collecting age is not proof of parental permission. Children should use the app with guardian guidance and avoid sending personal information. Contact us if you believe a child's data has been collected without legally required permission. Material changes will be communicated appropriately; continued offline gameplay is not consent to additional processing. Applicable mandatory local rights are not reduced by this policy or translation differences.
相关链接 / Related pages
https://nosy-pickle-2b8.notion.site/Chijian-Support-40b8e07774e4805bb09dffd9b4fa406a
https://nosy-pickle-2b8.notion.site/Chijian-Terms-of-Use-40b8e07774e480edb47cddc65bf971f2