隐私政策
Last updated: 2026-03-14
gollog ("the App") is a personal time-management app that logs your day in 10-minute tiles and provides AI-powered insights. This policy explains what data the App collects, how it is used, and how it is stored.
1. Data We Collect
| Data Type | Details | Collection Method |
|---|---|---|
| Activity logs | 10-minute time-block entries (sleep, work, exercise, meals, etc.) | User input |
| Tasks | Task title, priority, completion status | User input |
| Health & Fitness (optional) | Step count, heart rate, sleep analysis (stages & duration), workout sessions, active energy | Apple HealthKit (read-only) |
| Location (optional) | Latitude, longitude, place name. May be collected in the background when permission is granted. | Core Location |
| Calendar (optional) | Event title, time | Apple EventKit (read-only) |
| Voice & audio (optional) | Voice recordings during voice-chat sessions | Microphone & Speech Recognition |
| Device context (optional) | Wi-Fi network name (SSID), charging status, battery level。SSID用于与用户注册的家庭/车辆WiFi进行比较，实现自动场所识别。 | System APIs (automatic) |
| Notifications | Push token | System permission |
| Device identifier | Random UUID (anonymous) | Auto-generated on first app launch |
| Purchases | Subscription status | Apple StoreKit |
The App does not require account registration and does not collect your name, email, or phone number.
2. Apple HealthKit Data
- HealthKit data is accessed in read-only mode. The App does not write data to HealthKit.
- HealthKit data is never used for advertising, marketing, data brokerage, or tracking.
- HealthKit data is never sold to third parties.
- HealthKit data is not stored on iCloud or any server; it is processed on-device only.
- When the AI analysis feature is used, sleep and workout summary text may be included in AI prompts sent to the OpenAI API (see Section 4).
3. Location Data
- Location is used to attach geographic context (place name) to time-block entries and to provide local weather information.
- The App may request "Always" location permission to record location while in the background. You can choose "While Using the App" or deny location access entirely.
- Latitude and longitude are sent to the Open-Meteo API (a free, open-source weather service) to retrieve current weather. No API key or user identifier is included in these requests.
- Location data is stored on-device only and is never used for advertising or tracking.
4. AI功能与数据处理
本应用使用AI根据您的时间块数据提供个性化洞察。
| 处理模式 | 说明 | 数据传输 |
|---|---|---|
| 端侧AI | 通过Apple Intelligence或本地分析引擎进行分析 | 无外部传输 |
| 云端AI（默认） | 应用直接连接OpenAI API进行分析 | 当前消息和匿名化数据摘要直接发送至OpenAI（见下文） |
| 用户自备API密钥（BYOK） | 用户输入自己的OpenAI密钥 | 直接发送到用户自己的OpenAI账户（不经代理） |
使用云端AI时，应用与OpenAI API（api.openai.com）建立直接TLS连接。gollog服务器（api.gollog.app）仅负责身份验证和API密钥发放，在物理上无法接收或拦截您的对话内容。
- 服务器角色（仅密钥发放）：gollog服务器验证您的设备并发放短期有效的OpenAI API密钥。应用随后使用该密钥直接连接OpenAI。服务器不存在任何可访问您对话的技术路径。
- 发送给OpenAI的内容：每次请求仅发送当前消息和匿名化数据摘要（时间块统计、睡眠/运动概要）。不会发送先前的对话记录。
- 服务器记录的内容：设备ID（匿名UUID）、密钥发放时间戳、订阅状态。仅用于身份验证和计费。消息内容、AI响应和Token使用量永远不会被记录。
- 对话历史存储在设备上的SwiftData数据库中。
- 对话历史永远不会发送到任何服务器，永远不会离开您的设备。
- 您可以随时在应用内查看和删除对话历史。
- 每次AI交互仅发送当前用户消息和上下文摘要，不包含先前的对话记录。
语音聊天模式：使用语音聊天时，录音将直接发送到OpenAI Whisper进行语音转文字，AI响应可能通过OpenAI Text-to-Speech进行语音合成。临时音频文件在处理后立即删除。
发送给OpenAI的数据不包含您的姓名、电子邮件或设备标识符。发送给OpenAI的HealthKit数据经过匿名化处理（仅为汇总统计数据，不含原始健康记录）。关于OpenAI如何处理API数据的详情，请参阅OpenAI API数据使用政策。
5. Data Storage & Retention
- Activity logs, tasks & chat history: Stored on-device in SwiftData.
- HealthKit data: Processed in device memory only; never persisted in the App's own database.
- API keys & usage counters: Encrypted and stored in the iOS Keychain. Note: Keychain items may persist after the App is uninstalled. To remove them, reset the Keychain via iOS Settings or contact us.
- Voice recordings: Temporary WAV files are created during voice chat and deleted immediately after transcription.
- Retention: All SwiftData records are deleted when the App is uninstalled. Keychain entries may remain (see above).
6. Purpose of Data Use
| Purpose | Applicable |
|---|---|
| App functionality (time logging, location context, sleep/workout display, weather, notifications) | Yes |
| AI-powered personalised insights | Yes |
| Third-party advertising | No |
| Developer advertising or marketing | No |
| Analytics (user behaviour measurement) | No (in-app) |
| Tracking (cross-app data linking) | No |
7. Third-Party Sharing
The App does not sell personal data or share it with data brokers.
| Third Party | Data Shared | Purpose |
|---|---|---|
| OpenAI | Time-block summary, tasks, sleep/workout summary text, voice audio (in voice-chat mode) | AI insight generation, speech-to-text, text-to-speech |
| Open-Meteo | Latitude, longitude | Weather forecast retrieval (no API key or identifier sent) |
| Apple (StoreKit) | Subscription transaction info | In-app purchase processing |
If you configure a custom analysis server (Glogger), time-block data may also be sent to that user-specified HTTPS endpoint.
8. Your Rights
- Access: You can view all recorded data directly within the App.
- Deletion: Uninstalling the App removes all on-device SwiftData records. To clear Keychain items, go to iOS Settings or contact us.
- Revoke permissions: You can revoke HealthKit, Location, Calendar, Microphone, Speech Recognition, and Notification permissions at any time in iOS Settings.
- Contact: For privacy requests, email privacy@gollog.app.
9. Website Analytics
The gollog.app website uses Google Analytics and Microsoft Clarity. These cookies are activated only after user consent and do not apply to the App itself. See our Cookie Policy for details.
10. Children's Privacy
The App does not knowingly collect personal data from children under the age of 14.
11. Changes
If this policy is updated, the revised version will be posted on this page with an updated date.