应用 / App：时间胶囊-寄往未来的信 / Time Capsule
平台 / Platforms：iOS
最后更新 / Last Updated：2026 年 10 月 10 日
本页面说明时间胶囊（Time Capsule）当前功能的数据处理方式；如需适用于特定司法辖区的法律意见，请咨询专业人士。
This page describes Time Capsule's current data practices. Consult a qualified professional for jurisdiction-specific legal advice.
本政策适用于 NorthCity 提供的「时间胶囊-寄往未来的信」（Time Capsule，下称“本应用”）iOS 应用及其支持页面，说明我们如何在你使用日记、写信投递、公开信箱、实体信件及会员服务时处理相关信息。
本应用无需注册账号即可使用。与许多应用不同，你的日记内容默认只保存在你自己的设备上。
你在日记、草稿、标签、时间徽章中记录的文字、图片等内容默认保存在你的设备本地（应用私有数据库），仅用于为你提供记录、回顾、小组件与提醒功能。这些本地数据不会自动上传到我们的服务器，我们无法看到。
你可以选择开启 iCloud 同步：开启后，上述私人数据会存储在你 Apple ID 对应的 iCloud 私有数据库（CloudKit Private Database）中，仅你本人及其设备可以访问。开发者无法查看或导出你的日记内容。你可以随时关闭同步。
为了让信件能在指定日期寄出，当你写信并确认寄出时，信件内容、指定投递日期、收信邮箱（及可选备用邮箱）、信件形式（文字 / 图片 / 是否公开）会上传并保存在我们的服务器中，用于到期时自动发送邮件到收信邮箱。若信件包含图片，图片会存储在我们的云对象存储服务中。
写信时你可以主动选择将信件放入公开信箱。只有在你主动选择公开并确认后，信件内容（及图片）才会公开展示给其他用户浏览。公开内容是自发行为，可能被他人浏览、复制、截图或转发，请勿在公开信件中填写你或他人的隐私信息。
若你订购实体信件投递服务，需要提供寄信人与收件人的姓名、联系电话和收件地址。这些信息仅用于制作、寄送实体信件及必要的物流联系。
本应用没有账号体系。为了识别内购权益、关联信件投递记录，服务器会保存由应用生成的匿名设备标识（推送服务生成的 Client ID），不包含你的姓名、手机号或邮箱账号。你可以随时通过 App 内的“恢复购买”恢复已有权益。
在你授权通知后，我们会通过 Apple 推送服务（APNs）与第三方推送服务（个推）向你的设备发送信件到期提醒、胶囊解锁提醒等服务通知。你可以在系统设置中随时关闭通知。
本应用的部分功能会展示 Google AdMob 广告。首次启动后，我们会通过 App Tracking Transparency（ATT）向你请求追踪授权：
你可以随时在系统“设置 → 隐私与安全性 → 跟踪”中更改授权。未获得授权时，我们不会为跨 App 追踪的目的访问 IDFA。
我们使用 Firebase Analytics 了解功能的整体使用情况（如启动、版本分布、功能使用频率），用于改进产品。在获得追踪授权的情况下，统计信息中可能包含广告标识符；未授权时不包含。
拒绝任一权限只影响对应功能，不影响其他功能使用。本应用当前不请求定位权限。
我们仅将上述信息用于：提供日记、写信投递、公开信箱、实体信件与会员功能；在约定日期完成投递；发送你开启的提醒；展示广告并衡量广告效果（仅在获得授权时用于个性化）；排查你主动反馈的问题；以及履行法律义务。
上述第三方在其自身隐私政策约束下处理相关数据。
你可以：不开通、随时关闭 iCloud 同步；选择信件是否公开；在系统设置中更改通知与追踪授权；在 App 内恢复购买；以及通过文末邮箱提出隐私相关请求。删除 App 不会删除已投递的记录和已公开的信件。
本应用并非专门面向儿童设计。未成年人应在父母或监护人的指导下使用，请勿在公开信件中填写个人身份、住址、学校等敏感信息。
我们采取数据最小化、传输加密（HTTPS/TLS）、权限隔离与访问控制等措施保护你的信息。但任何存储或传输方式都无法保证绝对安全。
当产品功能、数据处理方式或法律要求发生变化时，我们会更新本政策及“最后更新”日期，并通过 App 更新说明、应用内提示或本页面告知。
This policy applies to the Time Capsule (时间胶囊-寄往未来的信) iOS app provided by NorthCity and its support pages. It explains how information is handled when you use the journal, scheduled letter delivery, the public letterbox, physical letter orders, and membership features.
No account is required. Unlike many apps, your journal entries are stored on your own device by default.
Text, photos, tags, and badges you create in the journal are stored locally on your device (in the app’s private database) by default and are used only to provide journaling, review, widget, and reminder features. This local data is not automatically uploaded to our servers, and we cannot see it.
You may optionally enable iCloud sync. When enabled, this private data is stored in the iCloud Private Database (CloudKit) associated with your Apple ID, accessible only to you and your devices. The developer cannot view or export your journal. You can turn sync off at any time.
To deliver a letter on the date you choose, the letter content, delivery date, recipient email (and optional backup email), and letter type (text / photo / public status) are uploaded to and stored on our servers so the letter can be emailed to the recipient on the due date. Photos attached to letters are stored in our cloud object storage.
When writing, you may voluntarily choose to publish a letter to the public letterbox. Only after you actively opt in and confirm is the letter content (and image) shown publicly to other users. Public posting is voluntary, and content may be viewed, copied, screenshotted, or forwarded by others. Do not include sensitive personal information about yourself or others in public letters.
If you order a physical letter, we collect the sender’s and recipient’s names, phone numbers, and mailing address. This information is used only to produce and deliver the physical letter and for necessary logistics contact.
The app has no account system. To recognise purchases and associate delivery records, our servers store an anonymous device identifier generated by the app (the Client ID issued by our push service). It does not include your name, phone number, or email account. You can restore purchases in the app at any time.
With your permission, we use Apple Push Notification service (APNs) and a third-party push service (GeTui) to send delivery reminders and capsule unlock notifications. You can disable notifications in iOS Settings at any time.
Some features display Google AdMob ads. After first launch, we request tracking permission through App Tracking Transparency (ATT):
You can change this at any time in Settings → Privacy & Security → Tracking. Without authorisation, we do not access the IDFA for cross-app tracking.
We use Firebase Analytics to understand overall feature usage (such as launches, version distribution, and feature frequency) to improve the product. With tracking authorisation, analytics may include the advertising identifier; without it, they do not.
Declining any permission only affects the corresponding feature. The app does not request location access.
We use the information above only to provide the journal, letter delivery, public letterbox, physical letter, and membership features; to deliver letters on the appointed date; to send reminders you enable; to display ads and measure ad performance (personalised only with authorisation); to respond to support requests you initiate; and to comply with legal obligations.
These providers process data under their own privacy policies.
You can keep iCloud sync off; choose whether a letter is public; change notification and tracking permissions in iOS Settings; restore purchases in the app; and contact us with privacy requests. Deleting the app does not delete delivered records or published letters.
The app is not specifically directed to children. Minors should use it with guidance from a parent or guardian and should not include personal identity, home address, school, or other sensitive information in public letters.
We apply data minimisation, encrypted transport (HTTPS/TLS), permission isolation, and access controls to protect your information. No storage or transmission method can guarantee absolute security.
We may update this policy and its “Last Updated” date when features, data practices, or legal requirements change, and will provide notice through release notes, in-app messaging, or this page.