隐私政策
逐分在 Apple Watch 上记分、在 iPhone 上复盘羽毛球比赛。首次使用需通过 Apple 登录并设置昵称与头像。添加好友后，你在 Watch 开赛前选中的好友可以查看这场比赛的摘要。我们不投放广告，也不跨 App 跟踪。
App 处理的数据
- 比赛记录：比赛日期、单打或双打、逐分事件、每局比分、发球方、完成状态、球友称呼和私人备注。
- 健康数据：经你授权后，Apple Watch 创建羽毛球 Workout，并读取该次比赛的时长、心率和 Apple 估算的活动能量。
- 动作数据：经你授权后，Apple Watch 在设备端处理手腕加速度与旋转数据，用于估算挥拍事件、每个事件窗口内的手腕峰值角速度、典型与已观察最快手腕挥拍速度以及数据质量。正常比赛不保存或上传高频原始动作样本。在 TestFlight 或开发版中，你可以主动开始标注动作采集；原始加速度、角速度、重力、动作标签、佩戴方向、提示时刻及 Watch 版本与构建号会保存在手表并同步到配对手机，用于你主动导出后分析识别问题。样本不自动上传服务器，不包含心率、比分、昵称或球友资料，你可以在手机单独删除这些样本。
- 设备同步：Apple Watch 与配对 iPhone 通过 Apple 的 WatchConnectivity 在你的设备之间传输比赛记录。 手机将本账号专用的 Watch 会话同步到配对手表，用于接收和确认运动记录邀请，不复制手机的登录令牌。
保存与共享
完整比赛会保存在本机，有云端存储权益时自动加密备份到你的逐分账号，包括逐分比分、参与者称呼、私人备注、比赛心率样本与挥拍派生结果。HealthKit 中的 Workout 仍由 Apple 的“健康”系统管理。服务器还保存账号标识、你填写的昵称、头像、逐分 ID 和好友关系。Apple 授权凭据加密保存；不索取 Apple ID 密码。 为发送邀请并关联同场运动，服务器还保存通知设备令牌、比赛标识、参与身份、角色、时间和邀请响应；通知载荷不含心率、动作、比分或球友姓名。
在线球友与共同比赛摘要属于会员功能；接受好友本身不会开放比赛数据。你在 Watch 开赛前选择已确认的逐分好友后，这场比赛同步到当前登录的 iPhone 时，我们会另外保存该场加密摘要，最多保留最近 50 场符合条件的 Watch 比赛：比赛时间、单／双打、局分、完成状态、时长、场均与峰值心率、活动能量、估计挥拍与典型手腕拍速。只有被你选为该场参赛者且仍与你保持好友关系的人能读取该场摘要。手动补记、私人备注、其他球友姓名、逐点健康样本及原始动作不包含在球友共享摘要中。摘要不用于广告或营销；球友查看页不保存离线副本。 选中好友会异步发送记录邀请，不自动开启对方的健康采集。对方在自己的 Watch 确认后，仅记录加入后的本人运动，并向发起方共享本场摘要；不确认或没有 Watch 不影响发起方。摘要还可包含有分类结果时的实验性杀球估算。
比赛备份仅供当前账号恢复，不因备份而开放给球友。二维码可通过相机扫描或从系统相册选图识别，仅读取逐分 ID；相机画面和所选图片仅在本机处理，不保存、不上传，也不请求整个相册的访问权限。传输使用 HTTPS。
本人昵称、内置头像和上传的资料照片按账号缓存在手机，支持有效会话离线进入；退出或删除账号清除此账号缓存。日／周／月／年统计在本机计算。分享比赛卡片时，昵称和健康指标默认隐藏，私人备注始终排除；仅用户选择并通过系统分享的图片或 PDF 报告会交给所选接收方，已分享内容不能撤回。
购买与会员
开发内测访问会员云端功能时，还会临时提交 Apple 签名的 App 安装凭据以核对本 App 与测试环境，不保存原始凭据或将其记为正式购买。Apple 处理永久会员付款，我们不读取银行卡或支付密码。本机验证购买后，签名交易会传给当前逐分账号所在区域的服务端独立核验。服务端保存商品、交易标识、账号归属、购买环境、购买时间及退款／撤销状态，后台授权单独保存；购买同步不携带比赛、健康或动作数据。退出账号清除当前会员绑定，退款或撤销不删除比赛。删除逐分账号会清除该 App 的服务端购买关联，但不会删除 Apple 购买。
权限与删除
你可以在系统“设置”或“健康”App 中撤回健康与动作权限。“健康”中的 Workout 需在“健康”App 中管理。联网后符合条件的共享摘要随本机记录更新。解除好友后，对方不能继续读取你的摘要。删除逐分账号会删除云端比赛备份、资料照片、球友资料、好友关系和共享摘要；本机比赛与 Apple 健康记录保留。退出登录会停止本机云备份，不撤回此前上传的摘要。已被对方看见或截图的数据无法收回。相机权限可在系统“设置”中关闭。 通知权限可在系统设置中关闭；删除账号时一并清除邀请关联和通知登记。
数据含义
估计挥拍来自持拍手腕的动作信号，并不等于确认击球。“典型手腕挥拍速度（估算）”取该场可用挥拍事件窗口峰值角速度的中位数，“已观察最快”取最大值，单位均为 °/s。这些数值表示手腕角速度，不是拍头速度、击球速度或球速，也不会换算为 km/h 或 m/s。没有保存拍速派生值的旧记录和手动补记不会回算拍速。心率与能量仅用于运动复盘，不构成医疗诊断、治疗或紧急预警。
界面语言
登录后，iPhone 会随账号请求上报此 App 实际使用的界面语言。服务端按此 App 与账号保存语言代码及最后一次语言变化的时间，用于本地化支持和问题排查。它不包含记录内容，不用于广告或跨 App 跟踪，也不能确认你的国籍。删除此 App 的账号时会一并删除；退出登录停止上报，但保留已有值。
使用分析
我们使用第一方统计记录首次打开、登录、资料完成、会员页展示、购买及进入首页的阶段、结果和前台耗时，以及版本、界面语言、商店地区和 App 专属随机标识。经 Apple 验证的匿名下载标识及原始下载时间用于区分首次下载、更新与重装；不保存原始安装凭证。登录后可关联本 App 账号，不采集比赛内容、健康数据、照片或昵称，不用于广告或跨 App 跟踪。离线事件受保护并排除备份，联网后补传，统计失败不影响使用。匿名行为和来源信息保留 90 天，删除账号时清除关联行为。
联系
Privacy Policy
RallyTrace scores badminton on Apple Watch and reviews matches on iPhone. First use requires Sign in with Apple and a nickname and profile picture. Selected friends can view summaries of matches in which you choose them as participants. We do not run ads or track across apps.
Data processed by the app
- Match records: match date, singles or doubles format, point events, game scores, serving side, completion status, local player names, and private notes.
- Health data: with your permission, Apple Watch creates a badminton workout and reads its duration, heart rate, and active energy estimated by Apple.
- Motion data: with your permission, Apple Watch processes wrist acceleration and rotation on the device to estimate swing events, peak wrist angular speed within each event window, typical and fastest-observed wrist speed, and data quality. Normal matches do not save or upload raw high-frequency motion samples. In TestFlight or development builds, you may explicitly start labeled motion collection. Raw acceleration, rotation, gravity, action labels, wearing configuration, cue time and Watch app version and build are saved on the Watch and synced to the paired iPhone for analysis after you choose to export them. Samples are not automatically uploaded to our servers and exclude heart rate, scores, nicknames and friend information. You can separately delete these samples on the iPhone.
- Device transfer: Apple Watch and its paired iPhone use Apple WatchConnectivity to transfer match records between your devices.
Storage and sharing
Full matches are saved on your device. With the cloud-storage membership benefit, they are automatically encrypted and backed up to your RallyTrace account, including point-by-point scores, participant names, private notes, match heart-rate samples, and derived swing results. Apple Health continues to manage HealthKit workouts. Our server also stores your account identifier, nickname, avatar, RallyTrace ID, and friend connections. Apple authorization credentials are stored encrypted; we do not ask for your Apple ID password.
Online friends and shared match summaries are membership features. Accepting a friend does not by itself give access to your match data. When you select an accepted RallyTrace friend on Apple Watch before a match and that match syncs to the currently signed-in iPhone, we separately store an encrypted summary. We retain up to the latest 50 eligible Watch matches: match time, singles or doubles format, game scores, completion status, duration, average and peak heart rate, active energy, estimated swings, and typical wrist speed. Only a person selected to participate in that match who remains your friend can read its summary. Friend summaries exclude manual entries, private notes, other player names, individual health samples, and raw motion data. Summaries are not used for advertising or marketing; the friend-viewing screen does not retain an offline copy.
Full match backups can be restored only by the current account. Backups do not grant friends access. QR scanning reads only RallyTrace IDs; camera images are not saved or uploaded. Data is transferred over HTTPS.
Your own nickname, preset avatar, and uploaded profile photo are cached per account on iPhone for offline access with a valid session. Signing out or deleting the account clears that account’s cache. Day, week, month, and year statistics are calculated on the device. Match sharing cards hide names and health metrics by default and always exclude private notes. Only images or PDF reports you choose to share through the system share sheet are sent to your selected recipients. Shared files cannot be recalled.
Purchases and membership
When accessing member cloud features during development beta testing, the app temporarily submits an Apple-signed installation credential to verify the app and test environment. The raw credential is not saved or treated as a production purchase. Apple handles payment for lifetime membership; we do not read card details or payment passwords. After local purchase verification, signed transactions are sent to the service region of your current RallyTrace account for independent verification. The service stores the product, transaction identifier, account ownership, purchase environment, purchase time, and refund or revocation status. Administrator grants are stored separately. Purchase synchronization does not include match, health, or motion data. Signing out clears the current membership binding; refunds or revocations do not delete matches. Deleting your RallyTrace account removes this app’s server-side purchase association but does not delete your Apple purchase.
Permissions and deletion
You can withdraw Health and Motion permissions in system Settings or the Health app. Manage Health workouts in the Health app. Eligible shared summaries update from local records when connected. Removing a friend stops their access to your summaries. Deleting your RallyTrace account deletes cloud match backups, profile photos, player profiles, friend connections, and shared summaries. Matches on your device and Apple Health records remain. Signing out stops cloud backup on this device and does not withdraw summaries previously uploaded. Data another person has already viewed or captured cannot be recalled. Camera permission can be disabled in system Settings.
Meaning of the data
An estimated swing is derived from motion signals at the racket wrist and does not confirm contact with the shuttle. Typical wrist speed is the median peak wrist angular speed across usable swing-event windows in a match; fastest-observed wrist speed is the maximum. Both are measured in °/s. They describe wrist angular speed, not racket-head, impact, or shuttle speed, and are not converted to km/h or m/s. Older records without derived speed values and manual entries are not reprocessed to fill in wrist speed. Heart rate and energy are for activity review, not medical diagnosis, treatment, or emergency alerts.
Interface language
After sign-in, your iPhone reports this App's active interface language with account requests. Our service stores the language code and the time of its last change for this App and account to support localization and troubleshooting. It contains no record content and is not used for advertising, cross-app tracking, or determining nationality. Deleting this App's account removes it. Signing out stops reporting while retaining the existing value.
Usage analytics
Our first-party service records first opening, sign-in, profile completion, membership page displays, purchase outcomes and reaching home, with foreground duration, version, interface language, storefront and App-specific random identifiers. An Apple-verified anonymous download identifier and original download time distinguish first downloads, updates and reinstalls; raw installation credentials are not retained. Events may be linked to this App’s account after sign-in. Analytics excludes match content, health data, photos and nicknames, and is not used for advertising or cross-app tracking. Offline events are protected, excluded from backups and retried online; failures do not block use. Anonymous events and source information are retained for 90 days; deleting the account removes linked events.