Privacy Policy

Hxmy Task · Last updated 21 September 2026

Hxmy Task collects no personal data. There is no account to create, no server of ours, no analytics, no advertising, no tracking, and no third-party SDK of any kind. Your tasks stay on your device unless you choose to sync them through your own iCloud account.

1. Who we are

Hxmy Task is developed and published by Yuhang Xie (an individual developer). For any question about this policy or about your data, write to hyzdreamstudio@gmail.com.

2. What we collect

Nothing. We do not collect, receive, store, sell, share or transmit any personal data to ourselves or to anyone else. We have no server that your data could reach, and no account system that could identify you.

Concretely, the app contains no analytics framework, no crash-reporting service, no advertising identifier (IDFA), no attribution or fingerprinting code, and no third-party SDK. It links only against frameworks provided by Apple.

3. Where your tasks are stored

By default, everything you create — lists, tasks, notes, dates and repeat rules — is stored only on your device, in the app's own storage area. It is not transmitted anywhere.

iCloud sync (optional, off by default)

If you turn on Sync to iCloud, your tasks are synchronised through your own iCloud account, into a private CloudKit database that only you can access. We operate no server in this path and have no technical means of reading your data. Your use of iCloud is governed by Apple's Privacy Policy.

Sharing a list (optional, off by default)

You can share one list with another person. This uses Apple's CloudKit sharing and the system share sheet; the invitation and the shared records stay inside iCloud. We never see who you share with, or what you share.

Please note: if you stop sharing later, data the other person has already received cannot be recalled. The app states this in its interface as well.

Mirroring to Apple Calendar (optional, off by default)

If you enable it, tasks that have a date are written as events into a calendar you choose on your own device, using Apple's EventKit. Nothing is read or written before you grant calendar access, and nothing is sent to us.

Widgets on the Home Screen and Lock Screen

A widget reads the same database on your device — it makes no network request of its own. Two things are worth stating plainly. First, a widget you place on the Lock Screen shows task titles and due dates while the device is still locked; if that matters to you, put the widget on the Home Screen instead, or don't add one. Second, completing a task from the widget writes to the same local database; that change then syncs the same way any other change does — only if you have turned iCloud sync on.

4. Voice input, and what leaves your device

Holding the microphone button lets you speak a task instead of typing it. Here is exactly what happens, stage by stage:

StageRunsLeaves your device?
Recording and transcribing your voice On your device Never. Audio is never transmitted.
Working out the date, time and repeat rule On your device No. No network is used.
Tidying the wording into a task title On your device by default Only if you switch it to Cloud — see below.

Under Settings › Intelligence › Run on you can choose On device (the default) or Cloud. In Cloud mode, the transcribed text of your sentence is sent to Apple's Private Cloud Compute to be reworded. It is never sent to us, and we receive nothing in either mode. If you prefer that nothing at all leaves your device, leave this setting on On device.

A separate switch, Let the assistant read my tasks, controls whether existing task text may be given to the model for suggestion features. You can turn it off and still use voice entry.

Adding a task through Siri is a different path. When you say “Add a task to Hxmy Task”, it is Siri — not this app — that hears and transcribes you, so what happens to that audio is governed by Apple's privacy policy, not ours. The app receives only the resulting text, and handles it exactly as if you had typed it: the date and time are worked out on your device. We receive nothing.

5. Permissions the app may ask for

No permission is requested when the app launches. Each one is requested only at the moment you use the feature that needs it, and declining always leaves the rest of the app fully usable.

PermissionWhyDefault
MicrophoneVoice entry, while you hold the microphone buttonNot requested
Speech recognitionTurning your speech into text, on deviceNot requested
Calendars & RemindersOnly for optional mirroring to Apple CalendarOff
Face ID / Touch IDOnly for the optional App LockOff
NotificationsReminders for tasks you give a time toNot requested

The app never asks for Contacts, Photos, Location, Camera, Health, Motion, Bluetooth, or permission to track you across other apps.

6. Security — stated plainly

Your data on the device is protected by the operating system's own file protection, and iCloud traffic is protected in transit by Apple. The app implements no cryptography of its own and manages no keys.

One thing we want to be explicit about: the backup file you can export from Settings is not encrypted. It is readable JSON, so that you can inspect it and move it anywhere you like — but that also means anyone who obtains the file can read your tasks. The app tells you this before exporting. Titles and notes of tasks you have already deleted are removed from the export.

7. Your data is already in your hands

Because we hold nothing, there is no request you need to send us to access, correct or delete your data:

8. Children

Hxmy Task is a personal task list. It has no advertising, no in-app purchases, no chat, no user-generated content shared with strangers, and no external links that open without your action. We do not knowingly collect data from anyone, of any age — because we collect no data at all.

9. Changes to this policy

If a future version of the app changes how data is handled, this page will be updated before that version is released, and the date at the top will change. If a change ever means data would be sent to us, it will be stated here in plain language and will require your explicit consent in the app.

10. Contact

hyzdreamstudio@gmail.com

Hxmy Task 不收集任何个人数据。不需要注册账号,没有我们的服务器, 没有统计分析,没有广告,不做追踪,也没有任何第三方 SDK。 你的任务只存在你的设备上 —— 除非你自己选择用你自己的 iCloud 账户同步。

一、我们是谁

Hxmy Task 由 谢宇航(个人开发者)开发与发布。 关于这份政策或你的数据的任何问题,请写信到 hyzdreamstudio@gmail.com。

二、我们收集什么

什么都不收集。我们不收集、不接收、不存储、不出售、不共享、 也不向自己或任何第三方传输任何个人数据。我们没有任何服务器能接到你的数据, 也没有任何账号体系可以标识你。

具体来说:App 里没有任何统计框架、没有崩溃上报服务、没有广告标识符(IDFA)、 没有归因或指纹代码、没有任何第三方 SDK。它只链接 Apple 提供的框架。

三、你的任务存在哪里

默认情况下,你创建的一切 —— 清单、任务、备注、日期、重复规则 —— 只存在你的设备上,在 App 自己的存储区里,不会传输到任何地方。

iCloud 同步(可选,默认关闭)

打开「同步到 iCloud」后,你的任务会通过你自己的 iCloud 账户同步, 存放在只有你能访问的私有 CloudKit 数据库中。这条路径上没有我们的服务器, 我们在技术上也无法读取你的数据。你对 iCloud 的使用适用 Apple 的隐私政策。

共享清单(可选,默认关闭)

你可以把某一个清单共享给别人。这使用 Apple 的 CloudKit 共享与系统共享面板, 邀请与共享的数据都留在 iCloud 内部。我们看不到你共享给了谁,也看不到内容。

请注意:如果你之后停止共享,对方已经收到的数据无法收回。 App 界面里也如实说明了这一点。

镜像到「日历」(可选,默认关闭)

开启后,带日期的任务会通过 Apple 的 EventKit 写入你在本机选择的某个日历。 在你授权之前不会读取也不会写入任何日历数据,且不会发送给我们。

主屏幕与锁定屏幕上的小组件

小组件读取的是你设备上的同一个数据库,它自己不发起任何网络请求。有两件事要说清楚: 第一,放在锁定屏幕上的小组件,会在设备仍处于锁定状态时显示任务标题与到期日 —— 如果你在意这一点,把小组件放在主屏幕,或者干脆不添加; 第二,在小组件上勾选完成会写入同一个本机数据库,这条改动之后的同步方式与其他任何改动一样 —— 只有在你打开了 iCloud 同步的情况下才会同步。

四、语音输入:什么会离开你的设备

按住麦克风就能说一句话来建任务。逐个环节说清楚:

环节在哪里跑会离开设备吗
录音与转成文字你的设备上 永不。音频从不传输。
识别日期、时刻、重复规则你的设备上 不会。完全不联网。
把话整理成通顺的任务标题默认在你的设备上 只有你切到「云端」时才会 —— 见下。

在设置 › 智能 › 运行于里,你可以选择本机(默认) 或云端。选择云端时,你那句话的文本会被送到 Apple 的 Private Cloud Compute 去整理措辞。 它从不发送给我们,两种模式下我们都收不到任何东西。 如果你希望什么都不离开设备,把这一项保持在「本机」即可。

另有一个独立开关「让助手读取我的任务」,控制已有的任务文本是否可以 交给模型用于建议类功能。你可以关掉它,同时继续使用语音输入。

通过 Siri 添加任务走的是另一条路径。当你说「用 Hxmy Task 添加任务」时, 听到你说话并转成文字的是 Siri,不是这个 App —— 因此那段语音如何被处理, 适用的是 Apple 的隐私政策,不是我们的。 App 只收到最终的文本,并且完全按你手动输入的那样处理它:日期与时间在你的设备上算出。 我们什么都收不到。

五、App 可能申请的权限

App 启动时不申请任何权限。每一项都只在你使用到对应功能的那一刻才申请, 而拒绝之后 App 的其余部分照常可用。

权限用途默认
麦克风你按住麦克风按钮时的语音输入不申请
语音识别在设备上把语音转成文字不申请
日历与提醒事项仅用于可选的「镜像到日历」关闭
Face ID / Touch ID仅用于可选的应用锁关闭
通知为设了时刻的任务发提醒不申请

App 从不申请通讯录、照片、位置、相机、健康、运动、蓝牙, 也从不申请跨 App 追踪你的许可。

六、安全:如实说明

设备上的数据受操作系统自身的文件保护机制保护,iCloud 传输过程由 Apple 保护。 App 自身不实现任何加密算法,也不管理任何密钥。

有一件事我们要明确讲清:你从设置里导出的备份文件 不加密。它是可读的 JSON,好处是你能自己检查、能搬到任何地方 —— 但这也意味着拿到这个文件的人可以读到你的全部任务。 App 在导出前就会这样提示你。已删除任务的标题与备注不会出现在导出文件里。

七、你的数据本来就在你手里

因为我们什么都没有,所以你不需要向我们提交任何申请来访问、更正或删除数据:

八、儿童

Hxmy Task 是一个个人任务清单。没有广告、没有内购、没有聊天、 没有向陌生人公开的用户内容,也没有会在你未操作时自行打开的外部链接。 我们不会在知情的情况下收集任何年龄段任何人的数据 —— 因为我们压根不收集数据。

九、政策变更

如果未来版本改变了数据处理方式,本页会在那个版本发布之前更新, 顶部的日期也会随之改变。如果某次变更意味着数据会发送给我们, 我们会在这里用直白的语言写明,并且必须在 App 内取得你的明确同意。

十、联系方式

hyzdreamstudio@gmail.com