hxmy asset 隐私政策
Privacy Policy
1. 我们收集哪些数据
没有。本应用不收集、不传输、不共享任何个人数据或财务数据。
- 无账号体系——不需要注册、不需要登录，我们没有任何你的身份信息。
- 无分析与追踪——应用未集成任何统计、崩溃上报、广告或追踪 SDK。
- 无广告——应用不展示任何广告。
- 不使用设备标识符——不读取 Android ID、广告 ID、IMEI 等。
2. 你的数据存在哪里
你录入的交易、账户、资产、负债、卡片、税务资料等，全部写入你设备本地的数据库。 这些数据不会离开你的设备，我们无法读取、无法访问、也无法恢复。
应用同时关闭了 Android 系统自动备份与设备间迁移（allowBackup="false"，
并在备份规则中排除了全部数据域），因此你的财务数据也不会经由系统备份进入任何云端。
应用提供的备份功能会生成一个由你的密码加密的本地文件（AES-GCM 加密 + PBKDF2 密钥派生）。 该文件保存在你选择的位置，由你自行掌管。我们不接收也不存储任何备份文件。
3. 应用的联网行为
应用只发起以下网络请求，全部是单向获取公开市场数据，不会上传你的任何信息：
| 用途 | 访问的服务 | 是否发送你的数据 |
|---|---|---|
| 外汇汇率 | api.frankfurter.dev | 否 |
| 加密货币行情 | data-api.binance.vision | 否 |
| 静态公共资源 | cdn.jsdelivr.net | 否 |
与任何网络请求一样，上述服务在技术上会看到你的 IP 地址（这是网络通信的固有属性）。 我们不记录、不回传、也不将其与你的任何数据关联。
4. 通知捕账（可选功能）
应用提供一项可选功能：读取支付类通知并自动生成一条交易记录，省去手动录入。
- 默认关闭。只有你在系统设置中主动授予「通知使用权」后才会生效。
- 通知内容仅在你的设备上解析，用于识别金额、商户与时间。
- 通知原文与解析结果都不会离开你的设备，不会上传、不会共享给任何第三方。
- 你可以随时在系统设置中撤销该权限，功能立即停止。
5. 购买与订阅
订阅与一次性买断均通过 Google Play 结算系统完成。你的支付信息由 Google 处理， 我们不接触、不接收、不存储任何支付信息。应用只从 Google Play 读取「当前是否拥有权益」这一结果。
Google 对支付数据的处理适用其自身政策：Google 隐私权政策。
6. 数据的删除
由于数据只存在你的设备上，卸载应用即删除全部数据；你也可以在应用内单独删除任意记录。 我们没有服务器副本，因此无需（也无法）代你执行删除请求。
7. 儿童
本应用面向 18 岁及以上的成年用户，不面向儿童，也不会有意收集儿童的任何信息。
8. 政策变更
若本政策发生变更，我们会更新本页面并修改顶部的生效日期。重大变更会在应用内提示。
9. 联系我们
如对本政策有任何疑问：hyzdreamstudio@gmail.com
Privacy Policy
hxmy asset
1. Data we collect
None. This app does not collect, transmit, or share any personal or financial data.
- No accounts — no sign-up, no sign-in; we hold no identity information about you.
- No analytics or tracking — the app integrates no analytics, crash-reporting, advertising, or tracking SDKs.
- No ads — the app shows no advertising.
- No device identifiers — we do not read Android ID, Advertising ID, IMEI, or similar.
2. Where your data lives
Every transaction, account, asset, liability, card and tax profile you enter is written to a local database on your device. This data never leaves your device; we cannot read it, access it, or recover it.
The app also disables Android system backup and device-to-device transfer
(allowBackup="false", with every data domain excluded in the backup rules), so your financial
data cannot reach any cloud through the system backup path either.
The in-app backup feature produces a local file encrypted with your own password (AES-GCM encryption with PBKDF2 key derivation). You choose where it is stored and you keep it. We never receive or store any backup file.
3. Network activity
The app makes only the following network requests. All are one-way fetches of public market data and send none of your information:
| Purpose | Service | Sends your data? |
|---|---|---|
| Foreign-exchange rates | api.frankfurter.dev | No |
| Cryptocurrency prices | data-api.binance.vision | No |
| Static public assets | cdn.jsdelivr.net | No |
As with any network request, those services can technically see your IP address — an inherent property of internet communication. We do not log it, transmit it onward, or associate it with any of your data.
4. Notification capture (optional feature)
The app offers an optional feature that reads payment notifications and automatically drafts a transaction entry, saving you manual typing.
- Off by default. It works only after you explicitly grant notification access in system settings.
- Notification content is parsed only on your device, to detect amount, merchant and time.
- Neither the notification text nor the parsed result ever leaves your device. Nothing is uploaded or shared with any third party.
- You may revoke the permission at any time in system settings; the feature stops immediately.
5. Purchases and subscriptions
Subscriptions and the one-time lifetime purchase are processed by Google Play Billing. Your payment details are handled by Google; we never see, receive, or store any payment information. The app only reads back from Google Play whether an entitlement is currently owned.
Google's handling of payment data is governed by its own Privacy Policy.
6. Deleting your data
Because your data exists only on your device, uninstalling the app deletes all of it; you can also delete individual records inside the app. We hold no server-side copy, so there is no deletion request for us to fulfil on your behalf.
7. Children
This app is intended for adults aged 18 and over. It is not directed to children and does not knowingly collect any information from children.
8. Changes to this policy
If this policy changes, we will update this page and revise the effective date above. Material changes will be surfaced in the app.
9. Contact
Questions about this policy: hyzdreamstudio@gmail.com