Privacy Policy

Effective date: September 20, 2026

Current policy version: 20260920

WristTale ("we", "us", or the "App") is operated by 武汉牛拉松科技有限公司. We respect your privacy and process only the information necessary to provide our services. This policy applies to the WristTale mobile apps and related services; provisions specific to the mainland China Android build are identified below.

1. Information We Process

We follow the principle of data minimisation:

• Local reading data: Books you import, chapters, reading progress, sync progress, and App settings are stored locally on your phone and paired watch by default.
• Garmin device and transfer data: When you use Garmin features, the App processes the paired device identifier, model, connection status, installed-app status, and transfer progress to discover the watch, connect to it, and transfer books.
• Wear OS device and transfer data: Wear OS is provided only in builds and distribution channels where we have explicitly enabled it, and is not available in every release. Where it is enabled, and only after you turn it on on your Android phone, the Google Play services Wear OS Data Layer processes the node identifier, display name, and reachability of paired watches that advertise the WristTale capability, together with the book content and integrity metadata you explicitly choose to send. This is used to discover a target and queue the transfer. Content is stored in the watch App's private directory and does not use the WristTale network relay.
• Mainland China account data: When you choose Alipay or WeChat sign-in, we receive identifiers authorised by that provider (such as openid / unionid or an Alipay user identifier), nickname, and avatar to create a WristTale session and bind or restore benefits.
• Order and entitlement data: When you buy Pro, we process the order number, plan, amount, payment channel, payment result, and entitlement status. We do not store bank-card numbers or payment passwords.
• Network relay transfer (optional; Garmin only): Importing a book never uploads it automatically. Only after you explicitly choose Network Relay and start a transfer are selected chapters uploaded anonymously and temporarily to a Cloudflare or Tencent Cloud relay. A random transfer ID is used and is not tied to your account; relay logs do not record book text or credentials. The transfer expires after one hour and enters automatic deletion, although physical removal may take a little longer. Apple Watch transfers use Apple WatchConnectivity and Wear OS transfers use Google Wear OS Data Layer; neither uses this relay.
• Usage and diagnostics: After you accept this policy, the mainland China build may use Umeng to process device identifiers, device model, OS version, crash data, and usage statistics for stability analysis and troubleshooting.
• Network and security logs: Sign-in, payment, entitlement restoration, and update checks may generate timestamps, endpoint results, network addresses, and necessary security logs to complete requests, prevent fraud, and diagnose failures. These logs do not contain book text or payment passwords.

2. How We Use Information

We use information only to:

• sync books you select between your phone and Garmin watches or Apple Watch devices, and — only in builds and distribution channels where we have explicitly enabled Wear OS, and only after you turn it on — between your phone and Wear OS watches;
• create sessions, process orders, and grant, restore, or revoke Pro benefits;
• provide the optional relay and mainland China APK updates;
• diagnose crashes, improve reliability, and protect account and payment security;
• respond to support, refund, account-deletion, and data-rights requests; and
• meet applicable transaction-record and security obligations.

3. Third-party Services and SDKs

We do not sell personal information. We send a provider only the information necessary to deliver a feature you selected or to operate the service.

3.1 SDKs involved in the mainland China Android build

Until the current policy version is accepted, the mainland China build does not initialise these SDKs or create Garmin, sign-in, payment, entitlement-restoration, or update-check services. Declining exits the App; you may choose again the next time it opens.

3.2 Other service providers

• RevenueCat, Apple, and Google Play billing services: Used only by the applicable international store builds for subscriptions, receipt validation, and app distribution. Mainland China Alipay / WeChat orders are not processed through RevenueCat. Wear OS Data Layer processing is disclosed separately in the table above.
• Cloudflare and Tencent Cloud: Provide APIs, security services, and the optional relay described in Section 1. Selected chapters are held only after you start a relay transfer and only for its temporary lifetime.

4. Retention and Security

• Local data: Retained until you delete it in the App, clear the App's data in system settings, or uninstall the App.
• Relay content: Becomes inaccessible one hour after creation and is automatically deleted; physical removal from underlying storage or backups may take a little longer.
• Account profile: Retained while the account exists. After a verified deletion request, information not required by law is deleted or anonymised within a reasonable period.
• Orders and payment records: Retained for support, fraud prevention, accounting, and the period required by applicable law, then deleted or anonymised.
• Diagnostic and security logs: Retained only as long as needed for reliability, security, and dispute handling, then deleted or anonymised.

We use access controls, encryption in transit, and least-privilege practices. No internet service is absolutely secure; if an incident requires notice under applicable law, we will provide that notice.

5. Your Rights and In-app Controls

You can:

• view, change, or delete local books and reading data in the App, or remove all local data through the system's Clear Storage action or by uninstalling;
• manage Bluetooth, notification, and other permissions in system settings; denying a non-essential permission does not prevent local reading;
• reopen this policy at Settings → About → Privacy Policy;
• use Settings → About → Withdraw Privacy Consent to clear the consent record and exit immediately. The prompt appears again next time. Withdrawal does not automatically delete local books or a server account;
• sign out from Payment & Subscription. Signing out clears the local token and cached entitlement, but does not delete the server account, orders, or legally required records;
• email [email protected] to request deletion of the mainland China account and associated personal information. Include the sign-in method, account nickname, and latest order number (if any) so that we can verify identity. Deletion does not automatically issue a refund and purchased benefits may become unrecoverable; and
• contact us to request access, correction, a copy, deletion, restriction, withdrawal, refund assistance, or to lodge a complaint.

6. Android Permissions and System Capabilities

The App does not make contacts, call logs, SMS, or precise location a condition of its core service.

7. Children

The App is not designed as a service specifically for children under 14. Minors should review this policy and use the service with a guardian. A guardian who believes we processed a minor's information may contact us below.

8. Policy Changes

If the purposes, information categories, SDKs, or recipients materially change, we will update the policy version. The mainland China build will ask for explicit acceptance again; acceptance of an older version is not treated as acceptance of a materially changed version.

9. Operator and Contact

• Operator: 武汉牛拉松科技有限公司
• Contact address: 武汉市江岸区塔子湖兴隆苑3栋1404, Wuhan, Hubei, China
• Email: [email protected]

Contact us at the address above to exercise a data right, request account deletion, submit a complaint, or ask a privacy question. We will process the request after verifying identity and as required by applicable law.