隐私政策
逐分在 Apple Watch 上记分、在 iPhone 上复盘羽毛球比赛。首次使用需通过 Apple 登录并设置昵称与头像，可保留默认头像。添加好友后，你在 Watch 开赛前选中的好友可以查看这场比赛的摘要。我们不投放广告，也不跨 App 跟踪。
App 处理的数据
- 比赛记录：比赛日期、单打或双打、逐分事件、每局比分、发球方、完成状态、球友称呼和私人备注。
- 健康数据：经你授权后，Apple Watch 创建羽毛球 Workout，并读取该次比赛的时长、心率和 Apple 估算的活动能量。
- 动作数据：经你授权后，Apple Watch 在设备端处理手腕加速度与旋转数据，用于估算挥拍事件、每个事件窗口内的手腕峰值角速度、典型与已观察最快手腕挥拍速度以及数据质量。正常比赛不保存或上传高频原始动作样本。在 TestFlight 或开发版中，你可以主动开始标注动作采集；原始加速度、角速度、重力、动作标签、佩戴方向、提示时刻及 Watch 版本与构建号会保存在手表并同步到配对手机，用于你主动导出后分析识别问题。样本不自动上传服务器，不包含心率、比分、昵称或球友资料，你可以在手机单独删除这些样本。
- 设备同步：Apple Watch 与配对 iPhone 通过 Apple 的 WatchConnectivity 在你的设备之间传输比赛记录。 手机将本账号专用的 Watch 会话同步到配对手表，用于接收和确认运动记录邀请，不复制手机的登录令牌。
保存与共享
完整比赛会保存在本机，有云端存储权益时自动加密备份到你的逐分账号，包括逐分比分、参与者称呼、私人备注、比赛心率样本与挥拍派生结果。HealthKit 中的 Workout 仍由 Apple 的“健康”系统管理。服务器还保存账号标识、你填写的昵称、头像、逐分 ID 和好友关系。Apple 授权凭据加密保存；不索取 Apple ID 密码。 为发送邀请并关联同场运动，服务器还保存通知设备令牌、比赛标识、参与身份、角色、时间和邀请响应；通知载荷不含心率、动作、比分或球友姓名。
在线球友与共同比赛摘要属于会员功能；接受好友本身不会开放比赛数据。你在 Watch 开赛前选择已确认的逐分好友后，这场比赛同步到当前登录的 iPhone 时，我们会另外保存该场加密摘要，最多保留最近 50 场符合条件的 Watch 比赛：比赛时间、单／双打、局分、完成状态、时长、场均与峰值心率、活动能量、估计挥拍与典型手腕拍速。只有被你选为该场参赛者且仍与你保持好友关系的人能读取该场摘要。手动补记、私人备注、其他球友姓名、逐点健康样本及原始动作不包含在球友共享摘要中。摘要不用于广告或营销；球友查看页不保存离线副本。 选中好友会异步发送记录邀请，不自动开启对方的健康采集。对方在自己的 Watch 确认后，仅记录加入后的本人运动，并向发起方共享本场摘要；不确认或没有 Watch 不影响发起方。摘要还可包含有分类结果时的实验性杀球估算。
比赛备份仅供当前账号恢复，不因备份而开放给球友。二维码可通过相机扫描或从系统相册选图识别，僅讀取逐分 ID；相机画面和所选图片仅在本机处理，不保存、不上传，也不请求整个相册的访问权限。传输使用 HTTPS。
本人昵称、内置头像和上传的资料照片按账号缓存在手机，支持有效会话离线进入；退出或删除账号清除此账号缓存。日／周／月／年统计在本机计算。分享比赛卡片时，昵称和健康指标默认隐藏，私人备注始终排除；仅用户选择并通过系统分享的图片或 PDF 报告会交给所选接收方，已分享内容不能撤回。 日常分享活动会读取所在服务区域的活动配置，并以第一方统计记录活动弹窗实际展示、活动页访问和进入方式，以及活动标识、App 版本和安装来源。已登录产品可关联本 App 账号；没有账号的产品仅使用本机安装标识。统计不包含私人记录、照片、位置、健康数据、笔记链接或截图，不用于广告跟踪。你主动提交的笔记与截图由人工审核，领奖信息在审核后确认；请勿发送密码或验证码。
购买与会员
开发内测访问会员云端功能时，还会临时提交 Apple 签名的 App 安装凭据以核对本 App 与测试环境，不保存原始凭据或将其记为正式购买。Apple 处理永久会员付款，我们不读取银行卡或支付密码。本机验证购买后，签名交易会传给当前逐分账号所在区域的服务端独立核验。服务端保存商品、交易标识、账号归属、购买环境、购买时间及退款／撤销状态，后台授权单独保存；购买同步不携带比赛、健康或动作数据。退出账号清除当前会员绑定，退款或撤销不删除比赛。删除逐分账号会清除该 App 的服务端购买关联，但不会删除 Apple 购买。 为提供老用户优惠，我们在你登录的服务区域核对同一账号在 Wristlab 其他 App 的已确认付费事实，仅返回是否符合优惠条件、目标商品及价格，不向其他 App 提供来源订单或个人内容。领取时将一次性优惠码加密分配给当前账号；付款由 Apple 确认，删除此 App 账号时清理相关分配。
权限与删除
你可以在系统“设置”或“健康”App 中撤回健康与动作权限。“健康”中的 Workout 需在“健康”App 中管理。联网后符合条件的共享摘要随本机记录更新。解除好友后，对方不能继续读取你的摘要。删除逐分账号会删除云端比赛备份、资料照片、球友资料、好友关系和共享摘要；本机比赛与 Apple 健康记录保留。退出登录会停止本机云备份，不撤回此前上传的摘要。已被对方看见或截图的数据无法收回。相机权限可在系统“设置”中关闭。 通知权限可在系统设置中关闭；删除账号时一并清除邀请关联和通知登记。
数据含义
估计挥拍来自持拍手腕的动作信号，并不等于确认击球。“典型手腕挥拍速度（估算）”取该场可用挥拍事件窗口峰值角速度的中位数，以 °/s 表示手腕角速度。“已观察最快”取最大值；手机显示的最大拍速按固定参考半径换算为约数 km/h，仅供相同佩戴方式下比较个人趋势。这些指标不是实测拍头速度、击球速度或球速。没有保存拍速派生值的旧记录和手动补记不会回算拍速。心率与能量仅用于运动复盘，不构成医疗诊断、治疗或紧急预警。
界面语言
登录后，iPhone 会随账号请求上报此 App 实际使用的界面语言。服务端按此 App 与账号保存语言代码及最后一次语言变化的时间，用于本地化支持和问题排查。它不包含记录内容，不用于广告或跨 App 跟踪，也不能确认你的国籍。删除此 App 的账号时会一并删除；退出登录停止上报，但保留已有值。
使用分析
我们使用第一方统计记录首次打开、登录、资料完成、会员页展示、购买及进入首页的阶段、结果和前台耗时，以及版本、界面语言、商店地区和 App 专属随机标识。经 Apple 验证的匿名下载标识及原始下载时间用于区分首次下载、更新与重装；不保存原始安装凭证。登录后可关联本 App 账号，不采集比赛内容、健康数据、照片或昵称，不用于广告或跨 App 跟踪。离线事件受保护并排除备份，联网后补传，统计失败不影响使用。匿名行为和来源信息保留 90 天，删除账号时清除关联行为。 我们记录从设置进入「我们的其他 App」、点击的目标 App、时间以及系统是否接受打开商店链接。已登录事件关联当前 App 账号，未登录事件保持匿名；只供内部改进使用，保留期限和删号规则与使用分析相同，不表示已下载或购买，不向目标 App 传送账号、健康或个人记录。 为改进使用体验，我们记录启动与页面浏览、引导步骤、系统权限请求结果、账号操作、会员页面、购买与恢复结果、核心操作是否成功、分享操作、手机与手表同步以及评分入口和系统评分请求。仅记录预先定义的操作类别、时间、App版本与界面语言，不采集记录正文、照片、位置、健康值、分享接收方、评分星级或评价内容，也不能确认系统评分弹窗实际展示或评价已提交。已登录操作关联当前App账号；匿名操作使用本App随机安装标识，之后登录不会追溯关联。会员分组采用接收时的有效权益。记录保留90天，删除关联App账号时一并清除，不用于跨App广告跟踪；统计失败不影响引导、购买或正常使用。
联系
性能与诊断
为改进稳定性与性能，iPhone 端通过 Apple MetricKit 收集启动、卡顿、资源消耗和脱敏诊断，包含 App 版本、机型与系统版本。诊断仅保留受限的二进制调用栈，不收集异常原文、账号、用户输入、位置或健康内容，不用于广告跟踪。完整报告保留 30 天，去除调用栈的性能统计窗口保留 12 个月；未确认上传的报告仅在本机有界缓存。
Privacy Policy
RallyTrace scores badminton on Apple Watch and reviews matches on iPhone. First use requires Sign in with Apple and a nickname and avatar. You can keep the default avatar; uploading a personal photo is optional. Accepted friends you select on Watch before a match can view that match’s summary. We do not run ads or track across apps.
Data processed by the app
- Match records: match date, singles or doubles format, point events, game scores, serving side, completion status, local player names, and private notes.
- Health data: with your permission, Apple Watch creates a badminton workout and reads its duration, heart rate, and active energy estimated by Apple.
- Motion data: with your permission, Apple Watch processes wrist acceleration and rotation on-device to estimate swings, event-window peak angular velocity, typical and highest observed wrist speed, and data quality. Normal matches do not save or upload raw high-frequency motion samples. In TestFlight or development builds, you can explicitly collect labeled samples. Raw acceleration, angular velocity, gravity, labels, wear orientation, prompt time, and Watch version and build are saved on Watch and synced to your paired iPhone for analysis after you export them. Samples are not automatically uploaded to a server, exclude heart rate, scores, nicknames and friend details, and can be deleted separately on iPhone.
- Device transfer: Apple Watch and its paired iPhone use Apple WatchConnectivity to transfer match records between your devices. The phone syncs a Watch session dedicated to this account to the paired watch for receiving and accepting workout invitations. It does not copy the phone’s sign-in token.
Storage and sharing
Full matches are saved on your device. With the cloud-storage membership benefit, they are automatically encrypted and backed up to your RallyTrace account, including point-by-point scores, participant names, private notes, match heart-rate samples, and derived swing results. Apple Health continues to manage HealthKit workouts. Our server also stores your account identifier, nickname, avatar, RallyTrace ID, and friend connections. Apple authorization credentials are stored encrypted; we do not ask for your Apple ID password. To send invitations and link activity from the same match, the server also stores notification device tokens, match IDs, participant identities, roles, times and invitation responses. Notification payloads exclude heart rate, movements, scores and player names.
Online friends and shared match summaries are membership features. Accepting a friend does not by itself give access to your match data. When you select an accepted RallyTrace friend on Apple Watch before a match and that match syncs to the currently signed-in iPhone, we separately store an encrypted summary. We retain up to the latest 50 eligible Watch matches: match time, singles or doubles format, game scores, completion status, duration, average and peak heart rate, active energy, estimated swings, and typical wrist speed. Only a person selected to participate in that match who remains your friend can read its summary. Friend summaries exclude manual entries, private notes, other player names, individual health samples, and raw motion data. Summaries are not used for advertising or marketing; the friend-viewing screen does not retain an offline copy. Selecting a friend sends a recording invitation asynchronously; it does not start their health collection. Only after they accept on their own Watch is their activity recorded, from that moment onward, and their match summary shared with the host. Not accepting or not having a Watch does not block the host. Summaries may also include experimental smash estimates when classifications exist.
Full match backups can only be restored by the current account and do not grant access to friends. QR codes can be scanned with the camera or read from an image you select in Photos; only RallyTrace IDs are read. Camera frames and selected images are processed on-device, never saved or uploaded. We do not request access to the entire photo library. Transfers use HTTPS.
Your own nickname, preset avatar, and uploaded profile photo are cached per account on iPhone for offline access with a valid session. Signing out or deleting the account clears that account’s cache. Day, week, month, and year statistics are calculated on the device. Match sharing cards hide names and health metrics by default and always exclude private notes. Only images or PDF reports you choose to share through the system share sheet are sent to your selected recipients. Shared files cannot be recalled.
Purchases and membership
When accessing member cloud features during development beta testing, the app temporarily submits an Apple-signed installation credential to verify the app and test environment. The raw credential is not saved or treated as a production purchase. Apple handles payment for lifetime membership; we do not read card details or payment passwords. After local purchase verification, signed transactions are sent to the service region of your current RallyTrace account for independent verification. The service stores the product, transaction identifier, account ownership, purchase environment, purchase time, and refund or revocation status. Administrator grants are stored separately. Purchase synchronization does not include match, health, or motion data. Signing out clears the current membership binding; refunds or revocations do not delete matches. Deleting your RallyTrace account removes this app’s server-side purchase association but does not delete your Apple purchase. For returning-customer offers, we check confirmed purchases by the same account in other Wristlab apps within your signed-in service region. Only eligibility, the target product and price are returned; source orders and personal content are not supplied to other apps. A one-time offer code is assigned encrypted to the current account when claimed. Apple confirms payment. Deleting this app’s account removes related assignments.
Permissions and deletion
You can withdraw Health and Motion permissions in system Settings or the Health app. Manage Health workouts in the Health app. Eligible shared summaries update from local records when connected. Removing a friend stops their access to your summaries. Deleting your RallyTrace account deletes cloud match backups, profile photos, player profiles, friend connections, and shared summaries. Matches on your device and Apple Health records remain. Signing out stops cloud backup on this device and does not withdraw summaries previously uploaded. Data another person has already viewed or captured cannot be recalled. Camera permission can be disabled in system Settings. You can disable notifications in system Settings. Deleting the account also removes invitation links and notification registrations.
Meaning of the data
Estimated swings come from motion signals on your racket wrist and do not confirm shuttle contact. Typical wrist swing speed is the median of peak angular velocities within usable swing-event windows, in °/s. Highest observed speed is the maximum. The maximum shown on iPhone is converted with a fixed reference radius to approximate km/h, only for comparing your own trends under the same watch fit. These are not measured racket-head, impact or shuttle speeds. Old records without derived speed values and manual entries are not recalculated. Heart rate and energy are for activity review, not medical diagnosis, treatment or emergency alerts.
Interface language
After sign-in, your iPhone reports this App's active interface language with account requests. Our service stores the language code and the time of its last change for this App and account to support localization and troubleshooting. It contains no record content and is not used for advertising, cross-app tracking, or determining nationality. Deleting this App's account removes it. Signing out stops reporting while retaining the existing value.
Usage analytics
Our first-party service records first opening, sign-in, profile completion, membership page displays, purchase outcomes and reaching home, with foreground duration, version, interface language, storefront and App-specific random identifiers. An Apple-verified anonymous download identifier and original download time distinguish first downloads, updates and reinstalls; raw installation credentials are not retained. Events may be linked to this App’s account after sign-in. Analytics excludes match content, health data, photos and nicknames, and is not used for advertising or cross-app tracking. Offline events are protected, excluded from backups and retried online; failures do not block use. Anonymous events and source information are retained for 90 days; deleting the account removes linked events. We also record opening Our Other Apps from settings, the target app tapped, the time and whether the system accepted opening its store link. Signed-in events link to this app’s current account; signed-out events stay anonymous. This is for internal improvement with the same retention and deletion rules. It does not indicate a download or purchase, and sends no account, health or personal records to the target app.
Contact
Performance and diagnostics
To improve stability and performance, the iPhone app uses Apple MetricKit to collect launch, hang and resource-use metrics and sanitized diagnostics, including app version, device model and system version. Diagnostics retain only restricted binary call stacks, excluding raw exception text, accounts, user input, location and health content. They are not used for advertising tracking. Full reports are retained for 30 days; performance statistics with call stacks removed are retained in reporting windows for 12 months. Reports awaiting confirmed upload remain only in a bounded on-device cache.
可选使用提醒
你允许系统通知后，设备会登记推送令牌，我们可发送本 App 的使用提醒或功能推荐。你可随时在 iOS 设置中关闭通知。为发送及评估效果，我们会关联本 App 的账号、设备推送令牌、设备时区、界面语言与已有使用记录，并记录发送和通知点击，结合已有打开及经 Apple 验证的付费记录统计当天回访与付费。推送不包含健康、位置或购买详情。消息和点击明细最多保留 90 天，删除本 App 账号时一并清除；关闭系统通知不影响 App 内功能；实际展示也受专注模式和系统设置影响。