Privacy Policy

Crown: Hair Progress · Qingdao Ketai Software Co., Ltd. · Updated October 31, 2026 · Applies to version 1.5 and later

1. Data stored on your device / 存储在你设备上的数据

Progress photos, treatment plans, reminders, weekly notes, measurements and settings are stored locally in the app's private container. We have no access to them.

进度照片、治疗方案、提醒、周记、测量与设置均保存在 App 的本地私有容器内，我们无法访问。

2. iCloud sync / iCloud 同步

If you enable iCloud sync, your data is stored in your personal, private iCloud database (CloudKit private database) tied to your Apple ID. It is encrypted in transit and at rest by Apple. Only your devices can read it — we cannot.

开启 iCloud 同步后，数据保存在与你 Apple ID 绑定的私人 CloudKit 数据库中，由 Apple 负责传输与存储加密。只有你自己的设备能读取，我们不能。

3. Camera & photos / 相机与照片

The camera is used only to take standardized progress photos inside the app. Photos are saved to the app's private storage; they are added to your system photo library only when you explicitly export or share them. Face-alignment guidance runs entirely on device using Apple's Vision framework.

相机仅用于在 App 内拍摄标准化进度照片。照片保存在 App 私有存储中，只有当你主动导出或分享时才会写入系统相册。人脸对齐引导完全在设备端通过 Apple Vision 框架完成。

4. Apple Health / 健康数据

If you grant permission, Crown reads last night's sleep duration from Apple Health to add context to your weekly check-ins. This data is read on demand, displayed to you, and never written back or uploaded. You can revoke access anytime in Settings → Health.

如你授权，Crown 会从"健康"App 读取昨晚睡眠时长，用于周记参考。该数据即取即用、仅展示给你本人，不会写回或上传。可随时在 设置 → 健康 中撤销授权。

5. Notifications / 通知

Reminders (doses, photo day, appointments) are scheduled locally on your device. No push servers are involved.

用药、拍照日与复诊提醒均为本地通知，不经过任何推送服务器。

6. Purchases / 购买

Subscriptions and the lifetime purchase are processed by Apple through your Apple ID. We never see your payment details. Purchase state is verified on device with StoreKit.

订阅与买断由 Apple 通过你的 Apple ID 处理，我们不会接触你的支付信息。购买状态通过 StoreKit 在设备端校验。

7. Children / 未成年人

Crown is not directed at children under 13. Please do not send children’s personal information to support.

Crown 不面向 13 岁以下儿童。请勿通过客服留言提供儿童的个人信息。

8. Not medical advice / 非医疗建议

Crown documents change over time. It does not diagnose conditions, measure hair density, or provide medical advice, and it is not a medical device. Consult a qualified clinician for medical decisions.

Crown 仅记录随时间的变化，不诊断疾病、不测量毛发密度、不提供医疗建议，也不是医疗器械。医疗决策请咨询专业医生。

9. Usage statistics and support / 使用统计与客服

Daily opening counts contain a per-message random identifier, date, first/repeat opening flag, app version, system version and distribution channel. They contain no device, installation or account identifier. A local first-open marker is kept in the device keychain. The network service may keep connection IP addresses in separate security logs.

每日打开计数仅含每条消息随机生成的去重标识、日期、首次/再次打开标志、App 版本、系统版本及分发渠道，不带设备、安装或账号标识。本机钥匙串保留首次打开标记。网络服务可能在独立安全日志中保存连接 IP。

Detailed statistics are off by default. If you enable them in Settings → Usage & privacy, Crown sends an analytics identifier, installation identifier, page visits, session durations, fixed app actions including purchase outcomes, Pro status, device/app settings and MetricKit crash and performance reports to our service at feedback.ketaiyun.com. These identifiers associate events with this installation or device; they are not used for advertising or combined across apps. Photos, care notes, treatment names and Apple Health data are excluded. Before consent, at most 300 events are held only in memory, not uploaded or saved; granting consent includes these events, while declining discards them.

详细统计默认关闭。在“设置 → 使用统计与隐私”开启后，Crown 会向 feedback.ketaiyun.com 发送分析标识、安装标识、页面访问、会话时长、固定操作结果（含购买结果）、Pro 状态、设备与 App 设置及 MetricKit 崩溃和性能报告。标识用于关联本次安装或设备内的事件，不用于广告或跨 App 合并。照片、护理备注、治疗名称和 Apple 健康数据不包含在内。同意前最多暂存 300 条内存事件，不落盘或上传；同意后会包含这些事件，拒绝则丢弃。

You may turn detailed statistics off at any time to clear the local event queue and stop new uploads. “Delete uploaded statistics” requests deletion of this device’s detailed statistics; if offline, the request retries on the next foreground launch. Daily opening counts have no device identifier and cannot be linked back for individual deletion. Diagnostic files held locally are bounded to recent reports. For data questions, contact us below.

可随时关闭详细统计，清理本地事件队列并停止新上传。“删除已上传的统计”会请求删除此设备的详细统计；离线时在下次进入前台重试。每日打开计数没有设备标识，因此无法回溯到个人进行删除。本机诊断文件仅保留有限的近期报告。如有数据问题，可通过下方邮箱联系我们。

Feedback is sent only when you press Send feedback, with your message, an installation identifier and app/device information. It is separate from the analytics switch, so we can answer in your feedback history. Do not include health details or other sensitive information. Support messages are retained to resolve requests; contact us with the ticket number if you wish to request removal.

仅在你点击“发送反馈”时上传留言、安装标识及 App/设备信息。反馈独立于统计开关，便于你在反馈历史中查看回复。请勿包含健康详情或其他敏感信息。客服留言用于处理请求；需要删除时，请提供工单号联系我们。

10. Changes / 政策变更

If this policy changes, the updated version will be posted at this address with a new effective date.

政策如有变更，将在本页面发布并更新生效日期。

11. Contact / 联系我们

Qingdao Ketai Software Co., Ltd. · aiagentmem@gmail.com