推乐乐隐私政策
Tuilele Privacy Policy
生效日期 / Effective Date: June 4, 2026
一、适用范围
推乐乐是一款本地机台游玩记录工具。当前版本主要功能无需注册即可使用，也支持用户按需使用 Apple 登录。
反馈功能需在 Apple 登录后使用。
本应用主要用于本地记录机台数据、收藏机台、保存备注。在当前版本中，用户无需注册或登录 Apple 账号即可主动进入推币机、娃娃机、弹珠机、游艺机等可用房间页面；如需查看远程机台实时视频画面或进行试玩交互，需使用 Apple 登录。其他需要账号识别的能力（例如反馈、删除账号）仍需在 Apple 登录后使用。
如用户主动使用 Apple 登录，本应用会向 Apple 获取用户授权提供的账号标识、邮箱地址及昵称或姓名信息，并通过加密网络请求提交至开发者服务器，仅用于完成登录校验、账号识别和维持当前设备的登录状态。
二、本地数据说明
游玩记录、收藏机台和备注默认仅保存在用户当前设备内。
当前版本中的统计分析、历史汇总等结果，均基于本地数据在设备内完成处理。
如用户登录 Apple 账号，本应用会在当前设备本地保存登录令牌、账号标识、邮箱和昵称或姓名信息，以便展示当前登录状态。
如用户在已登录 Apple 账号状态下使用反馈功能，本应用会向开发者服务器提交用户主动填写的反馈内容、联系方式（如有）以及用于识别当前账号的 uid、openId、渠道等信息，仅用于问题排查、用户支持和产品改进。
除用户主动触发 Apple 登录外，我们不会将游玩记录、收藏机台、备注等本地数据上传至开发者服务器，也不会在未经用户主动操作和明确同意的情况下向第三方提供。
三、导入、导出与备份恢复说明
当用户主动使用导出或备份功能时，本应用仅按照用户指令整理相关本地数据，并将备份内容或记录内容复制到系统剪贴板，便于用户自行粘贴到备忘录、文档或其他由用户选择的保存位置。
当用户主动使用导入或恢复功能时，本应用仅处理用户手动粘贴到应用内的 JSON 或 CSV 文本内容，用于预览、校验及在用户再次确认后的本地恢复操作。
导出到剪贴板后的内容是否继续保存、分享或删除，由用户自行决定。本应用不会将该等内容上传至开发者服务器，也不会在未经用户主动操作的情况下向第三方发送。
本应用不会主动扫描、读取或上传用户设备中的其他文件，也不会主动访问照片、通讯录、定位等与本应用核心功能无关的信息。
四、实时视频与网络请求说明
当用户登录 Apple 账号后主动查看推币机、娃娃机、弹珠机、游艺机等实时体验房间或其他实时体验页面的实时画面或进行试玩交互时，本应用会通过网络加载机台实时视频流，用于在当前设备上播放远程机台画面。
试玩期间，应用与远程机台之间的连接、画面播放、操作指令等仅用于完成本次试玩流程，不会作为本地游玩记录自动写入应用，也不会与本地的游玩记录、收藏机台、备注等数据关联保存；与账号识别相关的信息仅用于登录状态校验和服务访问控制。
实时视频播放可能通过 WebRTC 及相关流媒体服务完成，服务过程中可能产生必要的网络连接信息、设备系统信息、播放状态、错误日志或流地址参数，用于建立连接、播放画面、排查异常和保障服务稳定。
本应用在播放实时视频时仅接收并展示远程机台画面，不会调用或上传用户设备的摄像头、麦克风内容，也不会主动录制、保存或上传用户观看的视频画面。
如用户不希望使用实时视频能力，可以不进入相关房间或实时体验页面，本地记录、统计、导入导出等功能仍可继续使用。
五、当前版本不提供的能力
当前版本不提供游玩记录、收藏机台和备注数据的云同步能力，不提供个性化推荐或广告服务。
除 Apple 登录、反馈提交、账号删除申请，以及用户登录后主动查看实时体验房间或其他实时体验页面的实时画面、进行试玩交互所产生的必要网络请求外，主要记录和统计功能均可在本地设备内完成。
六、数据删除
用户可在应用内主动清空本地数据；清空后将从当前设备删除，且无法恢复。
用户可在应用内退出 Apple 登录，清除当前设备上保存的登录状态。
如用户已登录 Apple 账号，也可在应用内发起删除账号申请；当前版本中，删除申请提交后将进入 15 天等待期，在此期间请勿再次登录该账号，以免影响删除流程。
如用户卸载应用或清除系统存储，相关本地数据也可能被一并删除。
如用户执行导入恢复、覆盖写入或删除操作，原有本地数据可能被替换或丢失，请谨慎操作并根据需要提前备份。
如用户对删除账号流程或与 Apple 登录相关的服务器侧账号信息有疑问，可通过本页载明的联系方式联系我们。
七、联系方式
如对本隐私政策或本应用的数据处理方式有疑问，可通过以下方式联系我们：
1. Scope
Tuilele is a local utility for recording arcade machine play sessions. Core features are available without registration, and Apple Sign In is offered as an optional feature.
The feedback feature is available only after the user signs in with Apple.
The app is used to save play records, favorite machines, and notes locally on the device. In the current version, users can actively enter available room pages such as coin pusher, claw machine, pinball, and arcade rooms without registering or signing in with Apple. Viewing the live remote machine video or trying out room interactions requires Apple Sign In. Other features that require account recognition (such as feedback and account deletion) still require Apple Sign In.
If the user actively chooses Apple Sign In, the app obtains the account identifier, email address, and nickname or name authorized by the user from Apple, and sends them to the developer server over an encrypted network request only for login verification, account recognition, and maintaining the signed-in state on the current device.
2. Local Data
Play records, favorite machines, and notes are stored locally on the user’s device by default.
Analytics, summaries, and history views in the current version are generated locally on the device from local data.
If the user signs in with Apple, the app stores the login token, account identifier, email, and nickname or name locally on the current device to show the signed-in state.
If the user uses the feedback feature while signed in with Apple, the app submits the feedback content voluntarily entered by the user, contact information if provided, and account-identifying information such as uid, openId, and channel to the developer server only for issue investigation, user support, and product improvement.
Except when the user actively initiates Apple Sign In, we do not upload play records, favorite machines, notes, or similar local data to developer servers, and we do not provide such data to third parties without user-initiated action and clear consent.
3. Import, Export, Backup, and Restore
When the user actively uses export or backup features, the app only prepares the relevant local data on the user’s instruction and copies the backup content or record content to the system clipboard so the user can paste it into Notes, documents, or another destination chosen by the user.
When the user actively uses import or restore features, the app only processes JSON or CSV text manually pasted into the app for preview, validation, and local restore after the user confirms again.
Whether the clipboard content is later saved, shared, or deleted is decided by the user. The app does not upload that content to developer servers and does not send it to third parties without user-initiated action.
The app does not proactively scan, read, or upload other files on the user’s device, and it does not access photos, contacts, location, or other information unrelated to the core function of the app.
4. Live Video and Network Requests
When the user signs in with Apple and actively views the live video or tries room interactions in live experience rooms such as coin pusher, claw machine, pinball, or arcade rooms, or another live experience page, the app loads a live video stream over the network to play the remote machine view on the current device.
During the trial, the connection between the app and the remote machine, video playback, and operation commands are used only to complete the current trial session. They are not automatically written into local play records and are not associated with locally stored play records, favorite machines, or notes. Account recognition information is used only for sign-in state verification and service access control.
Live video playback may use WebRTC and related streaming services. During service operation, necessary network connection information, device system information, playback status, error logs, or stream address parameters may be generated for connection setup, video playback, troubleshooting, and service stability.
When playing live video, the app only receives and displays the remote machine view. It does not access or upload the user's device camera or microphone content, and it does not proactively record, save, or upload the video viewed by the user.
If the user does not want to use live video features, the user may avoid entering related rooms or live experience pages. Local records, statistics, import, and export features can still be used.
5. Features Not Provided in This Version
The current version does not provide cloud sync for play records, favorite machines, or notes, and it does not provide personalized recommendations or advertising services.
Except for Apple Sign In, feedback submission, account deletion requests, and necessary network requests generated when the signed-in user actively views live video or tries interactions in a live experience room or another live experience page, core record and analytics features operate locally on the device.
6. Data Deletion
Users can clear local data inside the app. Once cleared, the relevant data is removed from the current device and cannot be recovered automatically.
Users can also sign out of Apple Sign In inside the app to clear the login state stored on the current device.
If the user has signed in with Apple, the user can also initiate an account deletion request inside the app. In the current version, once the deletion request is submitted, a 15-day waiting period begins. During this period, the user should not sign in to the same account again, otherwise the deletion process may be affected.
If the app is uninstalled or device storage is cleared, related local data may also be deleted.
If the user performs import, restore, overwrite, or delete actions, existing local data may be replaced or lost. Users should operate carefully and create backups when needed.
If the user has questions about the account deletion flow or server-side account information related to Apple Sign In, the user can contact us using the contact information on this page.
7. Contact
If you have questions about this Privacy Policy or how the app handles data, contact: