1. Overview

This Privacy Policy explains how Cows ("Cows," "we," "us," or "our"), operated by BIN ZHANG, handles personal data when you use the Cows mobile application, related support, and online services.

You can use core task and focus features without an account. Some features—including cloud sync, AI features, the farm, and Premium purchases—require sign-in.

2. Data we handle

Data stored on your device

Before sign-in, tasks, notes, comments, settings, focus records, rewards, and related app state are stored on your device. They may be lost if you delete or reinstall the app. Time Guard selections are represented by Apple privacy-preserving tokens and are not used to identify the apps you selected.

Account and cloud-sync data

If you sign in with Apple or Google, we process an authentication identifier, sign-in provider, and any basic account information the provider makes available according to your choices, such as an email address or display name. We assign an account identifier and may sync supported tasks, notes, comments, settings, focus records, rewards, and cow collection data through Firebase.

AI feature data

When you actively use automatic task breakdown, we send the task title, task notes, language, and the minimum request context to our backend and then to our AI provider. When you actively use the task companion, we send your question, up to six recent local conversation messages, and only the limited task or focus results needed to answer your request. We do not automatically send your entire task library. Before sharing, we ask for explicit permission to send this information to third-party AI service providers. We may change the AI provider to maintain service availability or quality; a provider change does not expand the data or purposes described here. Declining does not prevent manual task or focus features.

Advertising and optional AI rewards

In versions where ads are enabled, free users may see app-open ads after the first 48 hours and may choose to watch a rewarded ad for an extra AI question. Premium users do not see ads. Google AdMob and its consent platform may process IP addresses, approximate location, app/device identifiers, ad interactions, and diagnostics to deliver and measure ads and prevent fraud. We request non-personalized ads and do not share task content or AI conversations with the ad service. For optional rewards, we send an account identifier and a random reward ticket to Google for server verification. Tickets and unused question credits are associated with your account and deleted when you delete it; transaction hashes without account identifiers are retained to prevent duplicate rewards. Where required, we request consent before ads and provide Ad privacy choices in Settings. See Google’s advertising privacy information.

Subscription data

Apple processes payment details. Cows and RevenueCat receive subscription-related data such as product identifiers, transaction or customer identifiers, purchase status, trial eligibility, and Premium entitlement status. We do not receive your full card or bank account number.

Usage and crash reports

In the production app, usage analytics and crash diagnostics are enabled by default from launch. We do not display a startup privacy popup or provide an in-app switch for this reporting in the current version. Google Firebase Analytics and Crashlytics receive feature-use events, app sessions, crash diagnostics, SDK installation identifiers, and app/device information to help us improve reliability and usability. Our custom events contain no task titles, notes, comments, AI questions or answers, email addresses, or account identifiers. We do not set a user ID for analytics and do not use this data for advertising. Analytics also derives general location from masked IP addresses and may automatically measure StoreKit purchases and subscriptions, including product identifiers and prices. We do not request GPS location for analytics. Reports are not completely anonymous: Firebase uses installation identifiers. Native crash reports may be temporarily stored on the device; we only request uploads from a production installation.

Security, device, and support data

We may process app version, operating-system version, request timestamps, network and security metadata, and App Check attestation data to operate and protect the service. If you contact support, we process the information you choose to send. Screenshots or detailed logs are included only when you choose to provide them.

3. How we use data

• Provide tasks, focus sessions, account access, sync, rewards, and other requested features.
• Process purchases, restore subscriptions, and determine Premium access.
• Respond to AI requests that you initiate.
• Deliver and measure ads, record your ad privacy choices, and verify optional AI rewards when advertising features are enabled.
• Protect accounts and services, prevent abuse, and troubleshoot failures.
• Respond to support, privacy, and account-deletion requests.
• Comply with legal obligations and enforce our Terms of Service.

Depending on where you live, our legal bases may include performing our contract with you, your consent, our legitimate interests in securing and improving the service, and compliance with law.

4. Service providers and international processing

We share data only as needed with providers that help us deliver the service:

• Apple for Sign in with Apple, StoreKit purchases, subscription management, and device platform features.
• Google Firebase for Google sign-in, authentication, cloud data storage and sync, and App Check; Analytics and Crashlytics for usage and crash reports.
• Third-party AI service providers, reached through our backend, for automatic task breakdown and task-companion responses.
• Google AdMob and User Messaging Platform for advertising, consent management, and verification of optional ad rewards when advertising features are enabled.
• RevenueCat for subscription status, purchase restoration, offerings, and Premium entitlement management.
• Google Cloud to host our backend, Cloudflare Pages to host this website, and Gmail to receive support emails. Website hosts may process IP addresses and request metadata to serve and secure pages. This website saves only your language preference in local storage; it does not include advertising or analytics scripts.

We require providers that receive personal data to protect it at least as described in this policy and required by applicable Apple App Review Guidelines, and to use it only for the disclosed services and applicable legal obligations.

These providers may process data in countries other than yours. Where required, we use available contractual and technical safeguards for international transfers.

We may also disclose information if required by law, to protect rights or safety, or as part of a business transaction subject to appropriate safeguards.

5. Retention and deletion

• Guest data remains on your device until you delete it, uninstall the app, or sign in and migrate supported data.
• Cloud-synced account data is kept while your account is active. Completing in-app account deletion removes the authentication account and account-scoped tasks, comments, focus history, settings, rewards, cows, and usage records from our active service. If deletion fails, the app reports a failure and lets you retry; it does not report success before the server finishes.
• AI request data is kept only as long as needed to provide, secure, and troubleshoot the requested feature, subject to provider settings and legal obligations.
• Support records are kept as long as needed to resolve the request and maintain necessary business records.
• Subscription and transaction records may be retained by Apple, RevenueCat, or us as required for purchases, fraud prevention, accounting, or law.

Deleting the app does not by itself delete an account or cloud data. Use the in-app account-deletion flow if you want to delete an account.

6. Your choices and rights

• Use core task and focus features without creating an account.
• Choose whether to sign in and sync supported data.
• Task-companion AI asks for permission before first use and remembers your agreement on this device. AI sharing occurs when you send a typed question; fixed quick actions do not use AI. Automatic task breakdown asks for permission before first use and remembers your agreement on this device for future breakdowns. We ask again if the disclosed recipient or data scope changes. Withdrawing permission does not recall data already processed; contact us for deletion requests.
• Manage or cancel subscriptions through your Apple account and restore eligible purchases in the app.
• Delete your account in Me → Settings → Account & Security → Delete account. You may need to verify your identity again. Account deletion does not cancel an Apple subscription; manage it separately in your Apple Account.
• Request access, correction, deletion, restriction, objection, or portability where applicable in your jurisdiction.

We may need to verify your identity before completing a privacy request. You may also have the right to complain to your local data-protection authority.

7. Security

We use measures designed to protect data, including authenticated access, account-scoped authorization, encrypted network connections, App Check, limited service credentials, and data-minimization rules. No system can guarantee absolute security.

8. Children

Cows is not directed to children under 13, or the minimum age required by local law to consent to online services. We do not knowingly collect personal data from a child without legally required consent. Contact us if you believe a child provided personal data improperly.

9. Changes to this policy

We may update this policy as the product, providers, or law changes. We will update the date above and provide additional notice when required.

10. Contact

Questions or privacy requests can be sent to carlbrown26042316@gmail.com.

1. 概述

本隐私政策说明由 BIN ZHANG 运营的 Cows（以下简称“Cows”或“我们”）在你使用 Cows 移动应用、相关支持与在线服务时，如何处理个人数据。

无需账号即可使用核心任务与专注功能。云同步、AI 功能、农场和 Premium 购买等部分功能需要登录。

2. 我们处理的数据

保存在设备上的数据

登录前，任务、备注、评论、设置、专注记录、奖励及相关 App 状态保存在你的设备上。删除或重新安装 App 后，这些数据可能丢失。时间守护的选择以 Apple 隐私保护令牌表示，我们不会用它识别你选择了哪些 App。

账号与云同步数据

使用 Apple 或 Google 登录时，我们会处理身份验证标识、登录方式，以及登录服务按照你的选择提供的基础账号信息，例如邮箱地址或显示名称。我们会分配账号标识，并可能通过 Firebase 同步受支持的任务、备注、评论、设置、专注记录、奖励和牛只收藏数据。

AI 功能数据

当你主动使用自动拆小时，我们会把任务标题、任务备注、语言和最少请求上下文发送到我们的后端，再传给 AI 服务商。当你主动使用任务伙伴时，我们会发送你的问题、最多六条最近的本机会话，以及回答所需的有限任务或专注结果。我们不会自动发送你的完整任务库。共享前，我们会明确说明数据将发送给第三方 AI 服务商并征求你的同意。我们可能为保持服务可用性或改善质量调整 AI 服务商，但不因此扩大本政策所述的数据范围或用途；拒绝不会影响手动任务和专注功能。

广告与可选 AI 奖励

启用广告的版本中，免费用户在首次使用 48 小时后可能看到开屏广告，也可主动观看激励广告兑换额外 AI 问答。Premium 用户免广告。Google AdMob 及其同意管理平台可能处理 IP 地址、大致位置、应用或设备标识、广告互动和诊断信息，用于广告投放、衡量与防欺诈。我们请求非个性化广告，不向广告服务发送任务或 AI 对话。兑换奖励时，会向 Google 发送账号标识和随机奖励票据供服务端验证；账号下的票据与剩余问答次数随账号注销删除，不含账号标识的交易摘要用于防止重复发奖。适用地区在广告前征求同意，并在设置提供“广告隐私选项”。参见 Google 广告隐私说明。

订阅数据

支付信息由 Apple 处理。Cows 与 RevenueCat 会收到商品标识、交易或客户标识、购买状态、试用资格和 Premium 权益状态等订阅相关数据。我们不会收到完整银行卡号或银行账户号码。

使用与崩溃报告

正式 App 从启动起默认启用使用分析和崩溃诊断；当前版本不展示启动隐私弹窗，也不提供 App 内关闭此类上报的开关。Google Firebase Analytics 与 Crashlytics 会接收功能使用事件、App 会话、崩溃诊断、SDK 安装标识及 App/设备信息，用于改进稳定性和使用体验。我们的自定义事件不包含任务标题、备注、评论、AI 问题或回答、邮箱和账号标识；我们不设置分析用户 ID，也不将这些数据用于广告。Analytics 还会根据经过处理的 IP 地址推断一般地区，并可能自动记录 StoreKit 购买与订阅事件，包括商品标识和价格；我们不会为分析请求 GPS 定位。报告并非完全匿名，因为 Firebase 使用安装标识。原生崩溃报告可能暂存于本机，我们只在正式环境请求上传。

安全、设备与支持数据

为了运行和保护服务，我们可能处理 App 版本、操作系统版本、请求时间、网络与安全元数据，以及 App Check 证明数据。联系支持时，我们会处理你主动发送的信息；只有在你选择提供时，才会包含截图或详细日志。

3. 我们如何使用数据

• 提供任务、专注、账号访问、同步、奖励及你请求的其他功能。
• 处理购买、恢复订阅并判断 Premium 权益。
• 响应你主动发起的 AI 请求。
• 启用广告功能时，投放和衡量广告、记录广告隐私选择，并验证可选 AI 奖励。
• 保护账号和服务、防止滥用并排查故障。
• 处理支持、隐私和账号删除请求。
• 履行法律义务并执行服务条款。

根据你所在地区，处理数据的法律依据可能包括履行与你的合同、取得你的同意、保护和改进服务的合法利益，以及遵守法律义务。

4. 服务商与跨境处理

我们仅在提供服务所需范围内与以下服务商共享数据：

• Apple：用于 Apple 登录、StoreKit 购买、订阅管理及设备平台功能。
• Google Firebase：用于 Google 登录、身份验证、云端数据存储与同步，以及 App Check；Analytics 与 Crashlytics 用于使用与崩溃报告。
• 第三方 AI 服务商：通过我们的后端提供自动拆小和任务伙伴回答。
• Google AdMob 与 User Messaging Platform：启用广告功能时，用于广告、同意管理和可选广告奖励验证。
• RevenueCat：用于订阅状态、恢复购买、Offering 和 Premium 权益管理。
• Google Cloud 托管后端，Cloudflare Pages 托管本网站，Gmail 接收支持邮件。网站托管方可能处理 IP 地址和请求元数据以提供网页并保护服务。本网站仅在本地保存语言偏好，不包含广告或分析脚本。

我们要求接收个人数据的服务商提供不低于本政策及适用 Apple 审核指南要求的数据保护，并仅为披露的服务及适用法律义务使用数据。

这些服务商可能在你所在国家或地区以外处理数据。法律要求时，我们会采用可用的合同和技术保障措施处理跨境传输。

法律要求、保护权利或安全，或发生受适当保障约束的业务交易时，我们也可能披露相关信息。

5. 保留与删除

• 游客数据保留在设备上，直到你将其删除、卸载 App，或登录并迁移受支持的数据。
• 账号有效期间保留云端账号数据。App 内注销完成后，会从当前服务删除身份账号以及账号下的任务、评论、专注记录、设置、奖励、牛收藏和用量记录。若删除失败，App 会提示失败并允许重试，不会在服务端完成前提示成功。
• AI 请求数据只在提供、保护和排查对应功能所需期间保留，并受服务商设置和法律义务约束。
• 支持记录会在解决请求和保留必要业务记录所需期间保存。
• Apple、RevenueCat 或我们可能因购买处理、防欺诈、会计或法律要求保留订阅和交易记录。

仅删除 App 不会自动删除账号或云端数据。如需删除账号，请使用 App 内的账号注销流程。

6. 你的选择与权利

• 无需创建账号即可使用核心任务与专注功能。
• 自行决定是否登录和同步受支持的数据。
• 任务伙伴 AI 首次使用前会征求同意，并在本机记住。仅在发送输入的问题时进行 AI 共享，固定快捷动作不使用 AI。首次使用 自动拆小前会单独征求同意，并在本机记住，后续拆解不重复询问；告知的接收方或数据范围变化后会重新确认。撤回不追回已处理的数据，如需删除请联系我们。
• 通过 Apple 账号管理或取消订阅，并在 App 内恢复符合条件的购买。
• 在“我 → 设置 → 账号与安全 → 注销账号”中删除账号，可能需要重新验证身份。注销不会取消 Apple 订阅，请在 Apple 账号中另行管理。
• 在你所在地区适用时，请求访问、更正、删除、限制处理、反对处理或迁移数据。

处理隐私请求前，我们可能需要验证你的身份。你也可能有权向当地数据保护机构投诉。

7. 安全

我们采用旨在保护数据的措施，包括身份验证、账号范围授权、加密网络连接、App Check、受限服务凭据和数据最小化规则。但任何系统都无法保证绝对安全。

8. 未成年人

Cows 并非面向未满 13 周岁，或当地法律规定的网络服务最低同意年龄的儿童。未经法律要求的同意，我们不会故意收集儿童的个人数据。如果你认为儿童不当提供了个人数据，请联系我们。

9. 政策变更

产品、服务商或法律发生变化时，我们可能更新本政策。我们会更新上方日期，并在法律要求时提供额外通知。

10. 联系我们

如有问题或隐私请求，请联系 carlbrown26042316@gmail.com。