Your family records stay local unless you choose cloud sync.

1. Local use and when the app connects

You can create child profiles and use growth, vision, dental, memo, reminder, timetable, honor-book, and local premium features without signing in or enabling cloud sync. In this local mode, these records and honor photos remain on your device and are not uploaded to UGrowth servers.

The app connects to online services only when needed for an action you choose, such as opening an external help or privacy link, signing in, joining a family account, enabling cloud sync, making or restoring a purchase, or using iOS sharing destinations.

2. Information you provide

• Child profile: name or nickname, date of birth, and sex.
• Health-related records: height, weight, head circumference, vision and refraction measurements, axial length, dental status, caries and sealant status, dates, and short notes.
• Organization records: memos, reminders, repeat schedules, and reminder completion history.
• Learning records: timetables and class names, times, cycle settings, and display colors.
• Honor records: title, date, category, importance, result, school term, notes, and up to three photos for each honor.
• Account and family data: Apple-provided identifier, email or name when available, family name, member nickname, role, and family login or invitation codes.
• Support messages: information you choose to include when contacting us by email.

3. Technical, account, and purchase information

When you choose an online feature, UGrowth may process an app installation identifier, user and family identifiers, platform, app version, access tokens, last-active and sync timestamps, record versions, and security or error logs. Network infrastructure may also process standard connection information such as IP address.

For Sign in with Apple, we receive the Apple account identifier and any name or email Apple makes available under your selection. For purchases, we process the product identifier, transaction or receipt verification data, purchase status, and service period. Apple processes your payment method; UGrowth does not receive your full card or bank details.

4. Optional cloud sync and family sharing

Records are uploaded only after you choose cloud sync and a family account is active. Cloud sync stores child profiles, growth, vision, dental records, memos, reminders, completion history, timetables, honors, deletion status, and sync metadata on UGrowth servers so that authorized devices can stay consistent.

Honor photos are uploaded directly to Qiniu Cloud object storage using time-limited upload credentials issued by UGrowth. UGrowth servers store the object identifier and its association with the honor record. Downloaded copies are cached in an app-specific directory on each authorized device to avoid unnecessary repeat downloads.

Family members can view and, according to their permissions, edit shared family records. The family owner controls member accounts and is the only role allowed to add children or export shared family data. Do not add a person unless you trust them to access the family’s information.

5. How information is used

We use information only to provide local records, calculations and charts, reminders, timetables, the honor book, purchases, authentication, cloud sync, family sharing, account security, troubleshooting, customer support, and compliance with applicable law. Growth references, percentiles, and predicted values are informational and are not medical advice or diagnosis.

6. Disclosure and third parties

We do not sell personal information and do not use children’s or health information for advertising. The app does not include third-party advertising, behavioral analytics, or cross-app tracking.

Information may be processed by:

• family members you or the family owner authorize;
• Apple for Sign in with Apple, App Store purchases, notifications, system backup, and sharing services under Apple’s terms;
• infrastructure providers used to host and secure UGrowth cloud services, only as necessary to provide those services;
• Qiniu Cloud, which provides object storage for honor photos when cloud sync is enabled;
• destinations you select when exporting or sharing a PDF; and
• authorities or other parties where disclosure is legally required or necessary to protect rights and security.

7. PDF export and notifications

PDF files are generated on your device. They leave the app only when you select a save or sharing destination, whose own terms then apply. Reminders and their notification content are scheduled through iOS. You can disable notifications in iOS Settings.

8. Retention, record deletion, and service expiry

Local records and honor photos remain until you delete the related content, clear local family data, or uninstall the app. To avoid repeat downloads, honor photos downloaded on another device are cached in an app-specific directory; local photo files may not be removed immediately after a record is deleted. Supported local records can be restored from Recently Deleted for 30 days. Some deletion markers or underlying records may remain to keep synchronized devices consistent.

Cloud records remain while the family account is active. After an honor photo is deleted, the app requests deletion of the related cloud object when network synchronization is available. When a cloud service period expires, new uploads stop, but existing cloud data is not automatically deleted and may be available again after service renewal. Limited logs or backups may remain for security, fraud prevention, legal compliance, and disaster recovery for as long as reasonably necessary.

9. Leaving a family, signing out, and account deletion

• When signing out, a family owner can keep local data or synchronize and then clear it. A family member’s local family data is cleared when they sign out, leave the family, or are removed. These actions do not by themselves delete the family’s cloud records.
• A family member who deletes their account removes their account and membership. Records shared with the family remain family records, with the former member’s direct identity removed or anonymized where applicable.
• A family owner who deletes their account deletes the family and its cloud records. Account deletion is available under Settings → About. Apple sign-in authorization is also revoked where possible.

10. Children’s privacy and guardian responsibility

UGrowth is intended to be operated by an adult parent or guardian, not independently by a child. By entering or uploading a child’s information, you confirm that you have authority and any consent required to process and share it. If you do not agree to cloud processing of a child’s information, keep cloud sync disabled.

11. Security and international processing

We use access controls, authenticated connections, account tokens, and other reasonable safeguards. No system can guarantee absolute security. Protect your device passcode, Apple account, family login codes, and exported files. Cloud infrastructure may process data outside your region; where law requires additional notice or consent for a transfer, we will provide it before that transfer.

12. Your choices, changes, and contact

You can keep data local, decline cloud sync, edit or delete records, manage family members, export data where eligible, disable notifications, sign out, or delete an account. For access, correction, deletion, privacy questions, or complaints, email bob.xiamr@gmail.com. Please do not include unnecessary children’s health information in email.

We may update this policy when features, service providers, or legal requirements change. Material changes will be presented with an updated date and, where required, a new consent request.

一、本地使用与联网时机

您无需登录或开启云同步，即可在本地创建孩子档案，使用生长、视力、牙科、备忘录、提醒、课程表、荣誉册及本地高级功能。本地模式下，这些记录及荣誉照片仅保存在您的设备中，不会上传至小优成长记服务器。

只有在完成您主动选择的操作时，应用才会访问相应在线服务，例如打开外部帮助或隐私政策链接、登录、登入家庭账户、开启云同步、购买或恢复购买，以及使用 iOS 分享目标。

二、您主动提供的信息

• 孩子档案：姓名或昵称、出生日期及性别。
• 健康相关记录：身高、体重、头围、视力与验光数据、眼轴、牙齿状态、龋齿与窝沟封闭状态、日期及简短备注。
• 管理记录：备忘录、提醒、重复周期及提醒完成记录。
• 学习记录：课程表，以及课程名称、时间、循环方式和显示颜色。
• 荣誉记录：荣誉名称、日期、分类、重要程度、获奖结果、所属学期、备注，以及每条荣誉最多三张照片。
• 账户与家庭信息：Apple 提供的用户标识、可提供的邮箱或姓名、家庭名称、成员昵称与角色、家庭登录码或邀请码。
• 客服信息：您通过邮件联系我们时主动填写的内容。

三、技术、账户与购买信息

当您主动使用在线功能时，小优成长记可能处理 App 安装标识、用户与家庭标识、平台、App 版本、访问令牌、最后活跃及同步时间、记录版本，以及安全或错误日志。网络基础设施也可能处理 IP 地址等标准连接信息。

通过 Apple 登录时，我们会接收 Apple 账户唯一标识，以及 Apple 根据您的选择提供的姓名或邮箱。购买时，我们会处理商品标识、交易或收据校验数据、购买状态及服务期限。付款方式由 Apple 处理，小优成长记不会获得您的完整银行卡或银行账户信息。

四、可选云同步与家庭共享

只有在您主动选择云同步且家庭账户处于启用状态后，相关记录才会上传。云同步会将孩子档案、生长、视力、牙科记录、备忘录、提醒、完成记录、课程表、荣誉记录、删除状态及同步元数据保存至小优成长记服务器，用于保持已授权设备间的数据一致。

荣誉照片会使用小优成长记签发的限时上传凭证直接上传至七牛云对象存储；小优成长记服务器保存对象标识及其与荣誉记录的关联。为减少重复下载，已授权设备下载的照片会缓存在应用专用目录中。

家庭成员可查看并按照权限编辑共享家庭记录。家庭管理员负责管理成员账户，且只有管理员可以添加孩子或导出共享家庭数据。请仅添加您信任并允许其访问家庭信息的人员。

五、信息使用目的

我们仅将信息用于实现本地记录、计算与图表、提醒、课程表、荣誉册、购买、身份验证、云同步、家庭共享、账户安全、问题排查、客户支持及履行法定义务。应用展示的生长参考值、百分位及预测结果仅供一般信息参考，不构成医疗建议或诊断。

六、信息提供与第三方处理

我们不会出售个人信息，也不会将儿童或健康信息用于广告。本应用不包含第三方广告、行为分析或跨应用追踪。

下列主体可能在必要范围内处理信息：

• 您或家庭管理员授权的家庭成员；
• Apple，其根据自身条款处理 Apple 登录、App Store 购买、通知、系统备份及分享服务；
• 为小优成长记云服务提供托管与安全保障的基础设施服务商；
• 在开启云同步后，为荣誉照片提供对象存储的七牛云；
• 您导出或分享 PDF 时主动选择的目标应用、服务或接收人；
• 法律要求披露，或为保护权利与安全确有必要时的主管机关及相关主体。

七、PDF 导出与通知

PDF 在您的设备本地生成，只有您主动选择保存或分享目标后才会离开应用，此后适用目标方的条款。提醒及通知内容通过 iOS 安排，您可随时在 iOS 系统设置中关闭通知。

八、保存期限、记录删除与服务到期

本地记录和荣誉照片会保留至您删除相关内容、清空本机家庭数据或卸载应用。为减少重复下载，其他设备下载的荣誉照片会缓存在应用专用目录；删除记录后，本机照片文件可能不会立即移除。支持“最近删除”的本地记录可在 30 天内恢复。为保持多设备同步一致，部分删除标记或底层记录可能继续保留。

云端记录会在家庭账户存续期间保留。删除荣誉照片后，应用会在可联网同步时请求删除对应的云端对象。云服务到期后停止上传新数据，但已有云端数据不会自动删除，续费后可恢复相关服务。出于安全、防欺诈、履行法定义务或灾难恢复需要，少量日志或备份可能在合理必要期限内继续保留。

九、退出家庭、退出登录与注销账户

• 退出登录时，家庭管理员可选择保留本机数据，或先同步再清空；普通成员退出登录、退出家庭或被移出家庭时会清空本机家庭数据。上述操作均不会因此自动删除家庭云端记录。
• 普通家庭成员注销账户时，其账户和成员关系会被删除；已经共享给家庭的记录仍属于家庭记录，原成员的直接身份会在适用情况下删除或匿名化。
• 家庭管理员注销账户时，会删除整个家庭及其云端记录。注销入口位于“设置 → 关于”。通过 Apple 登录的授权也会在可行情况下同时撤销。

十、儿童个人信息与监护人责任

小优成长记应由成年父母或其他监护人操作，不面向儿童独立使用。录入或上传儿童信息即表示您具备相应权限，并已取得依法所需的同意。如您不同意在云端处理儿童信息，请不要开启云同步。

十一、安全与跨境处理

我们采用访问控制、身份认证连接、账户令牌等合理安全措施，但任何系统都无法保证绝对安全。请妥善保护设备密码、Apple 账户、家庭登录码及导出文件。云基础设施可能在您所在地区之外处理数据；如法律要求就相关传输另行告知或取得同意，我们会在传输前履行相应义务。

十二、您的选择、政策更新与联系我们

您可以始终选择仅在本地保存数据、不开启云同步、编辑或删除记录、管理家庭成员、在符合条件时导出数据、关闭通知、退出登录或注销账户。如需访问、更正、删除个人信息，或咨询、投诉隐私问题，请发送邮件至 bob.xiamr@gmail.com。请勿在邮件中提供不必要的儿童健康信息。

当功能、服务商或法律要求发生变化时，我们可能更新本政策。重大变化会标注新的更新日期，并在法律要求时重新征得同意。