FlowStrength Privacy Policy
This Privacy Policy explains how FlowStrength, provided by CAI, handles information when you use the app.
1. What the App Stores Locally
FlowStrength is built on a local-first architecture. Your training data is primarily stored on your device. This may include:
- Workout records, training plans, custom exercises, body metric logs, and memos.
- App preferences (rest timers, sound, vibration, theme).
- AI conversation history, AI user instructions, AI memory, and AI training profiles (goals, equipment, schedule, physical constraints/injuries).
The app does not require account registration and does not offer cloud synchronization.
2. AI Assistant and Data Processing
When you interact with the built-in AI assistant:
- Conversations & Context: The app sends your prompt along with the minimum bounded context (workout summaries, plans, training profile, and saved memory) to Google's Gemini API via Firebase AI Logic to generate answers. Data is transmitted securely via HTTPS encryption.
- Image Input: When you choose to attach or capture a photo, the image data is encrypted and sent to Google Gemini solely for multimodal visual understanding and analysis.
- Web Search: When web grounding is needed, your search query is sent to Google to retrieve relevant sources, with citations displayed in the response.
- Abuse Prevention: The app sends an anonymous device integrity attestation to Google via Firebase App Check to protect the AI service.
- Controlled Proposals: The AI cannot automatically create, modify, or delete your workout records. When the AI proposes workout logs or metric drafts, they are presented as suggestions for your explicit review. Data is only saved to your local storage once you manually confirm and apply it.
3. Analytics and Crash Diagnostics (Telemetry)
To monitor app performance, fix crashes, and understand aggregate usage trends, FlowStrength uses Firebase Analytics and Firebase Crashlytics:
- Zero-PII & Aggregated: We collect only anonymous diagnostics and high-level interaction metrics (such as feature usage counts, session duration, and crash stack traces). We do not collect personal identifiers (name, email, phone number, IMEI/MAC address).
- No Sensitive Workout Data: We never collect specific exercise names, weights lifted, reps performed, or AI conversation text in our analytics.
4. In-App Purchases and Subscriptions
FlowStrength offers optional Pro subscriptions processed exclusively through Google Play In-App Billing:
- All payments and financial details (e.g., credit card numbers, billing addresses) are processed and secured solely by Google Play. FlowStrength does not collect, receive, or store your payment details.
- FlowStrength only receives anonymous purchase tokens and subscription entitlement statuses from Google Play to unlock Pro capabilities on your device.
5. Device Permissions
- Microphone: Used only when you tap the microphone button for speech-to-text recognition.
- Camera & Photo Library: Used only when you choose to take or upload an image for AI analysis.
- Notifications & Foreground Service: Used to keep active workout timers and rest countdowns visible in your status bar/lock screen and notify you when timers expire.
- Vibration: Used for tactile alerts when timers complete.
6. Backup Import and Export
When you export a backup, a local JSON file is generated for you to save or share. When you import a backup, the app restores your workouts, plans, exercises, metrics, and preferences. AI conversations, instructions, memory, and training profiles are excluded from backup files to protect your personal notes.
7. Data Retention and Deletion
Because your data is stored locally on your device, you can delete all app data by clearing app storage, uninstalling the app, or deleting exported backup files. You can also delete AI conversations, clear AI memory, or edit/clear AI training profile fields directly in the app settings at any time.
8. Children and Medical Disclaimer
FlowStrength is not specifically directed to children under 13.
FlowStrength is a strength training recording and planning tool only. It is not a medical device and does not provide medical diagnosis, treatment, or clinical rehabilitation advice.
9. Policy Updates
We may update this Privacy Policy periodically. The latest version will always be posted on this page with an updated effective date.
10. Contact
For privacy questions, contact: 5946jiale@gmail.com
隐私政策（简体中文）
本隐私政策说明由 CAI 提供的 FlowStrength 在你使用本应用时如何处理信息。
1. 应用在本地存储的信息
FlowStrength 采用本地优先架构，你的训练数据主要保存在你的设备本地，包括：
- 训练记录、自定义训练计划、动作库数据、身体指标测量记录与备忘录。
- 应用偏好设置（计时器、声音、振动、主题等）。
- AI 对话历史、AI 使用说明（User Instructions）、AI 记忆（Memory）以及 AI 训练画像（包含目标、器械条件、训练频次、伤病约束）。
本应用无需注册或登录账号，不提供云端同步。
2. AI 助手与数据处理
当你使用内置 AI 助手时：
- 对话与上下文：应用会将你的提问及回答所需的最小范围训练上下文（训练记录摘要、计划、训练画像、已保存的记忆），通过 Firebase AI Logic 加密发送给 Google 的 Gemini API 生成回答。Google 仅作为受托处理方处理这些数据。
- 图片输入：如果你主动拍摄或上传图片，图片数据将加密传输至 Google Gemini 仅用于多模态视觉理解与分析。
- 联网搜索：当需要网页搜索时，搜索词会发送至 Google 检索来源并在回答中展示来源引用。
- 防滥用校验：应用通过 Firebase App Check 向 Google 发送匿名设备完整性证明，用于防止服务滥用。
- 受控草案机制：AI 无法直接自动修改或删除你的训练数据。AI 生成的补录训练或身体指标仅以“草案（Proposal）”形式展示，必须由你在本地手动审查并确认应用后才会保存到数据库。
3. 统计分析与崩溃诊断（Telemetry）
为了提升应用稳定性、定位崩溃并优化产品体验，FlowStrength 使用了 Firebase Analytics 与 Firebase Crashlytics：
- 匿名化与最小化（Zero-PII）：仅收集匿名应用互动指标（如功能使用频次、页面停留）与崩溃日志堆栈，不收集任何个人身份信息（姓名、邮箱、手机号、设备硬件唯一标识符如 IMEI/MAC）。
- 严禁收集业务敏感明文：绝不上报具体训练动作名称、组数重量/次数、身体数值或 AI 对话文本。
4. 应用内购买与订阅服务
FlowStrength 提供可选的 Pro 订阅服务，所有结算均通过 Google Play 结算系统 完成：
- 支付交易与财务数据（如信用卡号、账单地址）由 Google Play 独立处理和保护，FlowStrength 不接触、不收集、亦不存储任何支付卡号或金融信息。
- FlowStrength 仅接收 Google Play 返回的匿名购买凭证与订阅状态用于解锁对应功能权益。
5. 设备权限使用说明
- 麦克风权限：仅在你点击语音输入按钮时请求，用于系统语音转文字。
- 相机与相册权限：仅在你主动拍照或选取图片供 AI 识别时请求。
- 通知与前台服务权限：用于在训练期间保持计时器、组间休息倒计时常驻通知与锁屏提醒。
- 振动权限：用于休息倒计时结束时的震动提醒。
6. 备份导入与导出
当你主动导出备份时，应用会生成本地 JSON 文件供你自行保存或分享；当你主动导入备份时，应用可恢复训练、计划、动作、指标与设置。AI 对话、使用说明、记忆及训练画像不包含在备份文件中。
7. 数据保留与删除
应用数据主要保存在你的设备本地，清除应用数据或卸载应用即可永久删除所有数据。你可以随时在应用设置中删除 AI 对话、清除 AI 记忆，或修改/清空 AI 训练画像。
8. 儿童隐私与医疗免责声明
FlowStrength 并非专门面向 13 岁以下儿童设计。
FlowStrength 仅为力量训练记录与规划工具，非医疗器械，不提供任何医疗诊断、治疗或临床康复建议。
9. 政策更新
我们可能会不时更新本隐私政策，最新版本会发布在此页面，并更新生效日期。
10. 联系方式
如有隐私相关问题，请联系： 5946jiale@gmail.com