上海沐小阳网络科技有限公司(以下称"我们")开发并运营 Numable 应用及其桌面小组件(iOS、iPadOS、macOS、Android、HarmonyOS 等客户端,以下统称"本应用")。我们将按《中华人民共和国个人信息保护法》(PIPL)、《网络安全法》《数据安全法》及适用的境外法律(如欧盟 GDPR、美国加州 CCPA)保护您的个人信息。
Numable 采用"本地优先(local-first)"架构:您的仪表盘、收藏、已安装组件等使用数据默认仅保存在您的设备本地,不上传至我们的服务器;应用直接从第三方信息源获取展示数据,我们的服务器不经手、不留存这些数据。 本政策说明我们如何收集、使用、存储、共享和保护您的个人信息,以及您享有的权利。请在使用本应用前仔细阅读;继续使用即表示您认可本政策。
Shanghai Muxiaoyang Network Technology Co., Ltd. ("we", "us") develops and operates the Numable app and its home-screen widgets (iOS, iPadOS, macOS, Android, HarmonyOS; the "App"). We protect your personal information under China's PIPL, Cybersecurity Law and Data Security Law, and applicable overseas laws including the EU GDPR and California CCPA. Numable is local-first: your dashboards, favorites and installed widgets stay on your device by default and are not uploaded to our servers; the App fetches display data directly from third-party sources, which our servers never receive or retain. By using the App you acknowledge this policy.
我们坚持"最小必要"原则。
2.1 您主动提供的信息
| 场景 | 收集信息 | 是否必需 |
|---|---|---|
| 登录账号(Apple / Google) | 第三方返回的用户唯一标识(sub)、邮箱、昵称、头像 URL、登录方式 | 登录为可选,不登录可匿名使用大部分功能 |
| 会员购买(如开放) | 交易凭据、订单号、订阅状态(不含银行卡号) | 仅购买时 |
| 举报 / 意见反馈 | 您填写的内容(反馈可选匿名) | 仅使用该功能时 |
| 发布组件(UGC) | 您上传的组件内容及关联账号标识 | 仅发布时 |
2.2 自动收集:登录令牌(JWT,加密存于设备本地安全存储);下载组件包/检查更新产生的必要网络信息(如 IP、系统版本,用于分发与安全);匿名化崩溃诊断(如启用)。
2.3 我们不收集:定位、通讯录、麦克风、相册(相机仅在您主动扫码连接编辑器调试时使用,不留存图像);您在组件中浏览的具体数据内容;不进行用户画像广告追踪。
(2.1) Information you provide: account identity from Apple/Google sign-in (subject id, email, display name, avatar URL, provider — login is optional); membership receipts and subscription status (never your card number); report and feedback content (feedback may be anonymous); content you publish and its account id. (2.2) Automatically collected: your login token (JWT, stored locally in the OS secure store); basic device/network data (IP, OS version) from bundle downloads and update checks, for distribution and security; anonymized crash diagnostics if enabled. (2.3) We do not collect: location, contacts, microphone, or photo library (the camera is used only when you actively scan a QR code to pair the editor, no image retained); the data you view inside widgets; and we do no advertising/profiling tracking.
您创建的仪表盘、收藏、已安装组件、偏好等默认仅存于设备本地(App Group / 应用私有目录),我们的服务器不保存副本。组件展示的实时数据由本应用在您的设备上直接向第三方信息源获取,数据不经过我们的服务器。重要:您获取的第三方数据受该第三方各自隐私政策约束,请一并阅读遵守;我们对第三方信息源的数据处理不承担责任。
Your usage data is stored only on your device by default; our servers keep no copy. Live widget data is fetched directly from third-party sources by the App on your device and does not pass through our servers. Data you obtain from a third-party source is governed by that source's own privacy policy; we are not responsible for third parties' data practices.
仅用于:(a) 提供与维护账号、会员、发布、举报/反馈等功能;(b) 分发与更新组件包并保障其完整性与来源可信(Ed25519 签名校验);(c) 安全防护、滥用与欺诈防范;(d) 履行法律义务。我们不将您的个人信息用于广告投放或出售。
We use information only to: (a) provide account, membership, publishing and report/feedback features; (b) distribute/update bundles and verify their integrity and authenticity (Ed25519); (c) ensure security and prevent abuse/fraud; (d) meet legal obligations. We do not use your personal information for advertising, and we do not sell it.
鸿蒙(HarmonyOS)客户端不集成任何第三方运行时 SDK,仅使用系统能力。
| 名称 | 提供方 | 平台 | 用途 | 涉及个人信息 |
|---|---|---|---|---|
| Sign in with Apple | Apple | iOS/Mac | Apple 账号登录 | Apple 身份令牌、邮箱、昵称(首次授权) |
| Google 账号登录 | iOS/Android | 系统浏览器完成 OAuth(不集成 Google SDK) | 由 Google 处理的登录信息 | |
| MJRefresh | 开源 | iOS/Mac | 下拉刷新 UI | 无 |
| ZIPFoundation | 开源 | iOS/Mac | 组件包解压 | 无 |
| Glide | 开源 | Android | 图片加载与磁盘缓存 | 访问图片 URL 的网络请求 |
| SmartRefreshLayout | 开源 | Android | 下拉刷新 UI | 无 |
| Material Components | 开源(Google) | Android | UI 组件 | 无 |
| BouncyCastle | 开源 | Android | 签名/加密算法 | 无(本地计算) |
| ZXing (embedded) | 开源 | Android | 扫码连接编辑器(开发调试) | 相机画面(实时解码,不留存) |
| AndroidX Browser / Security | Android | 系统浏览器登录 / 本地加密存储 | 本地令牌加密 | |
| App Store / Google Play 内购(如开放) | Apple / Google | iOS / Android | 会员订阅支付 | 交易凭据(不含卡号) |
The App integrates the third-party components above. The HarmonyOS client integrates no third-party runtime SDK and uses only system capabilities. Open-source UI/utility libraries process no personal information. We update this list when integrations change.
状态:暂未开放 / NOT YET AVAILABLE。会员支付尚未上线;以下为预留条款。
会员订阅通过 App Store / Google Play(海外)或微信/支付宝(国内,若开放)完成。支付由相应渠道处理,我们不接触您的银行卡号或支付密码。我们仅接收并存储:交易凭据/订单号、商品标识、订阅状态与到期时间、是否自动续费。自动续费提示:订阅默认在到期前由渠道自动续费,您可随时在对应平台的订阅管理中关闭;退款依相应渠道(Apple/Google/微信/支付宝)政策申请。
Subscriptions are processed by App Store / Google Play (or WeChat/Alipay for China, if enabled). Payment is handled by the channel; we never see your card number or payment password. We store only the receipt/order id, product id, subscription status, expiry, and auto-renew flag. Auto-renewal occurs via the channel unless you disable it in your platform's subscription settings; refunds follow each channel's policy.
账号与会员等后端数据存储于 Cloudflare(Workers / D1 / R2)。因我们以海外分发为主,数据可能存储于中国境外;如您在中国境内且涉及个人信息出境,我们将依 PIPL 履行告知—单独同意及相应合规义务(详见 §11)。本地敏感数据(登录令牌)加密存于设备安全存储;所有网络传输经 HTTPS/TLS 加密。账号信息在您使用期间保留,注销后在合理期限内删除或匿名化(法律要求留存的除外)。
Backend data (account, membership) is stored on Cloudflare (Workers/D1/R2) and, as we distribute primarily overseas, may be stored outside China; cross-border transfer of mainland-China users' personal information is handled under PIPL (§11). Local tokens are kept in the device secure store; all traffic uses HTTPS/TLS. We retain account data while active and delete or anonymize it within a reasonable period after account closure, except where law requires retention.
我们不出售您的个人信息。仅在下列情形共享:(a) 经您同意;(b) 为实现功能所必需的第三方服务商(如 Cloudflare、支付渠道),在合同约束下按最小必要处理;(c) 法律法规或司法/行政机关依法要求。发布 UGC 内容时,您的公开昵称/头像及所发布内容将对其他用户可见(详见《用户协议》)。
We do not sell your data. We share only: (a) with your consent; (b) with processors strictly necessary to run the service (e.g. Cloudflare, payment channels) under contract and minimization; (c) as required by law or lawful authority. When you publish UGC, your public display name/avatar and the content become visible to other users (see the Terms).
您有权查阅、复制、更正、补充、删除您的个人信息;撤回同意;注销账号;获取个人信息副本(可携带)。GDPR 下您另享限制处理、反对处理、可携权及向监管机构投诉的权利;CCPA 下您享有知情、删除、以及"不出售"的权利(我们本就不出售)。行使权利请见 §12;注销账号可在应用内「我的—账号」中操作或联系我们。
You may access, copy, correct, supplement, delete your personal information; withdraw consent; close your account; and obtain a portable copy. GDPR additionally grants restriction, objection, portability, and the right to complain to a supervisory authority; CCPA grants rights to know, delete, and opt out of sale (we do not sell). Contact us via §12; account closure is available in-app under "Mine — Account".
本应用不面向 14 周岁以下儿童。若您为不满 14 周岁的未成年人,请在监护人同意并指导下使用;如我们发现在未获监护人有效同意下收集了儿童个人信息,将尽快删除。
The App is not directed to children under 14. Minors under 14 should use it only with guardian consent. We delete children's data collected without valid guardian consent.
对于中国境内用户的个人信息出境,我们将:向您告知境外接收方信息及处理目的;取得您的单独同意;并采取 PIPL 要求的合规路径(通过安全评估、订立标准合同或通过认证之一)。
Where personal information of mainland-China users is transferred abroad, we provide notice of the overseas recipient and purpose, obtain your separate consent, and adopt a PIPL-compliant transfer mechanism (security assessment, standard contract, or certification).
个人信息处理者:上海沐小阳网络科技有限公司,注册地址:上海市浦东新区达秀路151号1幢3层301室。隐私相关事宜:privacy@numable.app;一般客服:support@numable.app。
Controller: Shanghai Muxiaoyang Network Technology Co., Ltd., Room 301, 3rd Floor, Building 1, No. 151 Daxiu Road, Pudong New Area, Shanghai, China. Privacy contact: privacy@numable.app; general support: support@numable.app.
我们可能适时更新本政策;重大变更将通过应用内显著方式通知,并在必要时重新征得您的同意。继续使用即表示接受更新后的政策。
We may update this policy; material changes will be notified prominently in-app and, where required, re-consented. Continued use constitutes acceptance.