所有打卡记录、日记内容均通过设备本地数据库（drift/SQLite）加密存储在你的手机上，不会同步到心迹之外的任何服务器。卸载 App 会永久删除这些数据。
只有在你主动开启「健康权限授权」后，App 才会通过 HealthKit 读取步数等数据，仅用于本机洞察图表展示，不会被上传、分享或用于任何形式的广告投放。
App 锁定功能使用系统的 Face ID / Touch ID / 设备密码进行验证，生物特征数据始终由 iOS 系统管理，心迹本身不会采集、存储或接触你的生物特征信息。
你可以在「我的」页随时将全部数据导出为 CSV / JSON 文件，也可以一键清除本机全部本地数据，我们不保留任何备份。
心迹不会将你的情绪、日记或健康数据出售、共享或提供给任何第三方。端侧 AI 洞察功能（Foundation Models）在设备本地运行，分析过程不会传输任何数据到云端。
如对本隐私政策或数据处理方式有任何疑问，请发送邮件至 moodtrace@proton.me。
Every check-in and journal entry is stored in an encrypted local database (drift/SQLite) on your phone. Nothing is synced to any server outside MoodTrace. Uninstalling the app permanently deletes this data.
Only after you explicitly enable Health Permission does the app read data such as step count via HealthKit, used solely for on-device insight charts. It is never uploaded, shared, or used for advertising.
App Lock uses the system's Face ID / Touch ID / device passcode for authentication. Biometric data is always managed by iOS itself — MoodTrace never collects, stores, or accesses your biometric information.
You can export all your data as CSV / JSON files anytime from the Me tab, or clear all local data with one tap. We keep no backup copies.
MoodTrace never sells, shares, or provides your mood, journal, or health data to any third party. The on-device AI insight feature (Foundation Models) runs entirely on your device and never transmits data to the cloud.
If you have any questions about this privacy policy or how we handle data, please email moodtrace@proton.me.