浮番隐私政策
浮番（fufun，Android 包名 com.paotu.focus）由北京婷宝美业有限公司（开发者名称：Atsince）提供。本政策说明浮番应用及官网如何处理数据。如有隐私问题，请联系 support@lashreel.com。官网为 fufun.lashreel.com。
浮番无需创建账号即可使用。专注记录默认保存在设备上；配置 GitHub 后可同步已保存内容。应用使用 Google Firebase Analytics 进行使用统计，默认开启，你可以在设置中关闭。
1. 本地记录
应用在本机保存专注事项、计时时长与状态、日期、已保存速记、未保存的编辑内容、生成文案，以及语言、浮窗样式和其他设置。文案由本地模板生成，不会发送给在线 AI 服务。未配置 GitHub 同步时，专注标题、速记正文和文案不会通过同步功能上传。
专注记录和草稿使用应用私有存储；它们未另行使用应用层加密。应用禁用 Android 系统备份。你可以在应用中删除记录，或在 Android 设置中清除应用数据、卸载应用来移除本机数据。
2. 可选的 GitHub 同步
你主动填写仓库、分支、目录和访问令牌并保存配置后，应用通过 HTTPS 直接访问 GitHub API，在你指定的仓库中同步专注标题、日期、计划时长、计时状态、已保存速记及删除标记。完成专注、保存速记、删除记录及返回应用时会触发同步，也可手动同步。未保存的编辑内容、生成文案和本机计时控制信息不包含在同步记录中。
仓库配置和令牌经 Android Keystore 支持的 AES-GCM 加密保存在本机；令牌发送给 GitHub 用于授权请求，不发送给 Firebase 统计服务。同步文件是可读的 Markdown，不是端到端加密文件。公开仓库的内容可能被任何人查看，建议使用私有仓库。GitHub 的处理方式见 GitHub 隐私声明。
删除记录后，删除操作会在同步成功后应用到仓库当前文件和其他已连接设备，并保留用于防止记录重新出现的删除标记。Git 提交历史可能仍保留旧内容；应用不会清除提交历史、其他副本或备份。清除本机 GitHub 配置会停止后续同步，但不会删除远端文件或撤销令牌。你可在 GitHub 管理仓库、历史记录和令牌。
3. 使用统计
已配置统计服务的安装包默认启用 Google Firebase Analytics，用于了解功能使用情况和改进产品。事件包括页面访问、计时开始/暂停/继续/完成、计划与实际专注时长、速记保存次数、文案复制与分享操作、浮窗样式、语言，以及同步成功情况和错误类别。
Firebase 还处理应用实例标识、应用和设备信息、应用会话，以及根据网络地址推导的大致地区等统计信息。浮番不向统计服务发送专注标题、速记正文、生成文案、GitHub 仓库、访问令牌或业务会话 ID，不设置用户账号 ID。应用禁用广告 ID 采集及广告存储、广告用户数据和个性化广告用途，当前不展示广告。
当前统计项目未启用 Google 信号，也未关联 Google Ads。统计账号允许将汇总和去标识化的数据用于统计建模和业务洞察，并允许 Google 在提供技术支持和业务建议时按相应设置访问统计数据；“Google 产品和服务”数据共享选项已关闭。
你可以在设置的“使用统计”中关闭或重新开启统计，不影响主要功能。关闭会停止后续采集、清除本机统计缓存并重置统计标识；这不会删除本地专注记录，也不会自动删除已上传的历史统计。当前 Google Analytics 项目的事件数据保留设置为 2 个月，用户数据保留设置为 14 个月；新的用户活动会重置用户数据的保留期。到期数据按 Google 的删除流程处理，这些设置不影响大多数基于汇总数据的标准报告，汇总统计可能保留更长时间。
相关服务由 Google 提供，参见 Google 隐私政策及 Firebase 隐私与安全说明。如需咨询统计数据处理或删除事宜，可通过上述支持邮箱联系；统计标识重置后，我们可能无法将历史统计与特定设备重新对应。
4. 下载、更新和官网访问
官网渠道版本会向 download.starvideo.site 检查版本，并在你选择更新后下载安装包。请求包含应用包名、所选语言和请求头等信息，服务器及网络服务提供商会接收到 IP 地址等必要连接信息。Google Play 渠道版本通过 Google Play 提供更新，不从官网下载安装更新包。
访问官网或下载站时，Cloudflare 等托管和网络服务提供商会处理请求网址、IP 地址、浏览器信息等连接信息，用于提供页面、下载和保障服务安全。相关服务日志按照实际服务配置和提供商适用规则处理。本隐私页面不加载统计脚本或外部字体。
5. 权限与主动分享
- “显示在其他应用上层”：用于展示浮番倒计时、事项和速记入口，不用于读取其他应用的页面内容。
- 前台服务及通知：用于持续显示用户启动的计时与控制入口；振动用于计时完成提示。
- 网络：用于已配置的使用统计、可选 GitHub 同步，以及官网渠道的版本检查和下载。
- 安装未知应用：仅官网渠道更新安装包时使用，需要你在 Android 系统中授权；Google Play 渠道不请求该权限。
点击“复制文案”会将所选文案写入系统剪贴板；点击“分享”会打开系统分享面板，由你选择接收应用。接收应用按照其自身政策处理内容。浮番不会自动发布到社交平台。
6. 安全、保留和你的选择
应用访问 GitHub、Firebase 和下载服务时使用加密的网络连接。加密传输不代表接收方无法读取数据，也不等同于端到端加密。本地内容保留到你删除记录、清除应用数据或卸载；GitHub 内容由你管理，统计信息依据统计服务配置保留。
浮番没有独立账号注册或账号系统，因此无需删除浮番账号即可停止使用。你可以关闭统计、清除同步配置、撤销系统权限或删除本机数据。清除本机数据及卸载不会自动删除已经同步到 GitHub 的文件或已上传的历史统计。隐私咨询可发送至 support@lashreel.com，请勿发送 GitHub 令牌或其他密码。
7. 政策更新
当数据处理方式变化时，我们会更新本页面及日期，并在需要时通过应用提供说明或请求你的选择。
fufun Privacy Policy
fufun (Android package com.paotu.focus) is provided by 北京婷宝美业有限公司 (developer name: Atsince). This policy explains data handling in the app and its website. For privacy questions, contact support@lashreel.com. Our website is fufun.lashreel.com.
fufun works without creating an account. Focus records are stored on your device by default; you can configure GitHub to sync saved content. Google Firebase Analytics is enabled by default in configured builds and can be turned off in Settings.
1. Local records
The app stores focus titles, timer durations and states, dates, saved notes, unfinished editor text, generated writing, language, overlay styles and other settings on your device. Writing is generated from local templates, without sending content to an online AI service. Without GitHub sync configured, the sync feature does not upload your focus titles, note text or generated writing.
Records and drafts use app-private storage without additional app-level encryption. Android system backup is disabled. You can delete records in the app, clear app data in Android Settings or uninstall the app to remove local data.
2. Optional GitHub sync
After you enter and save a repository, branch, folder and access token, the app connects directly to the GitHub API over HTTPS. It syncs focus titles, dates, planned durations, timer states, saved notes and deletion markers to your chosen repository. Sync runs after completing a focus session, saving notes, deleting records or returning to the app; you can also sync manually. Unsaved editor text, generated writing and local timer control details are excluded.
Repository settings and the token are encrypted locally using AES-GCM with keys protected by Android Keystore. The token is sent to GitHub to authorize requests, not to Firebase Analytics. Synced Markdown files are readable and are not end-to-end encrypted. Anyone may see content in a public repository, so a private repository is recommended. See the GitHub Privacy Statement for GitHub's practices.
Once deletion sync succeeds, records are removed from current repository files and other connected devices. Deletion markers remain to prevent records from reappearing. Older content may remain in Git commit history; the app does not erase that history, other copies or backups. Clearing GitHub settings stops future sync but does not delete remote files or revoke the token. You can manage repositories, history and tokens on GitHub.
3. Usage analytics
Builds configured for Google Firebase Analytics enable it by default to understand feature usage and improve the product. Events include screen visits, timer starts/pauses/resumes/completions, planned and actual focus durations, note saves, copy and share actions, overlay styles, language, sync outcomes and error categories.
Firebase also processes an app-instance identifier, app and device information, sessions and statistics such as approximate location inferred from network addresses. fufun does not send focus titles, note text, generated writing, GitHub repositories, tokens or business session IDs to Analytics, and does not set an account user ID. Advertising ID collection, ad storage, ad user data and personalized advertising purposes are disabled. The app currently displays no ads.
The current Analytics project does not enable Google Signals and has no Google Ads links. The account allows aggregated, de-identified data to contribute to statistical modeling and business insights, and permits access to analytics data under the technical support and business recommendation settings. The “Google products and services” data-sharing option is turned off.
You can turn usage analytics off or on in Settings without affecting core features. Turning it off stops further collection, clears local analytics cache and resets the analytics identifier. It does not delete your focus records or automatically erase analytics already uploaded. The current Google Analytics project retains event data for 2 months and user data for 14 months, with new user activity resetting the user-data retention period. Expired data follows Google's deletion process. These settings do not affect most standard reports based on aggregate data, which may remain available for longer.
These services are provided by Google. See the Google Privacy Policy and Firebase Privacy and Security information. Contact our support email for questions about analytics processing or deletion. After an analytics identifier is reset, we may be unable to associate historical analytics with a particular device.
4. Downloads, updates and website visits
Website-distributed builds check download.starvideo.site for releases and download an installation package after you choose to update. Requests include the package name, selected language and request headers; servers and network providers receive necessary connection information such as your IP address. Google Play builds receive updates through Google Play and do not download update packages from the website.
When you visit our website or download site, hosting and network providers such as Cloudflare process connection information, including requested URLs, IP addresses and browser information, to serve pages and downloads and protect the service. Logs follow the actual service configuration and providers' applicable rules. This privacy page loads no analytics scripts or external fonts.
5. Permissions and sharing you initiate
- Display over other apps: shows fufun's countdown, focus title and note entry; it is not used to read other apps' screen content.
- Foreground service and notifications: keep a user-started timer and controls visible. Vibration provides a timer completion alert.
- Internet: supports configured analytics, optional GitHub sync, and release checks and downloads in website-distributed builds.
- Install unknown apps: used only for updates in website-distributed builds and requires your Android authorization. Google Play builds do not request this permission.
Copying writing places the selected text on the system clipboard. Sharing opens Android's share sheet so you can choose a receiving app, which handles the content under its own policy. fufun does not automatically post to social platforms.
6. Security, retention and your choices
The app uses encrypted network connections for GitHub, Firebase and download services. Encryption in transit does not prevent recipients from reading data and does not mean end-to-end encryption. Local content remains until you delete it, clear app data or uninstall. You control GitHub content; analytics retention follows the analytics service configuration.
fufun has no independent account registration or account system, so you do not need to delete a fufun account to stop using it. You can disable analytics, clear sync settings, revoke Android permissions or remove local data. Clearing app data or uninstalling does not automatically delete synced GitHub files or previously uploaded analytics. Send privacy inquiries to support@lashreel.com; do not include GitHub tokens or other passwords.
7. Policy changes
We will update this page and its date when our data practices change, and provide an in-app explanation or request your choice when needed.