Privacy Policy

Effective: October 24, 2026

Overview

Nexora Studio ("we") develops and publishes mobile applications. We are committed to protecting your privacy. This policy explains what data our apps collect and how it is used.

Data We Collect

Our apps are designed to minimize data collection. We do not collect personal information such as your name, email, or location. The only data collected is anonymous usage analytics through Firebase Analytics and crash reports through Firebase Crashlytics, which help us improve app stability and user experience. For Pharos share links we also keep an anonymous daily count of web page visits.

  • Analytics data — anonymous app usage patterns (screen views, feature usage frequency)
  • Crash reports — device model, OS version, and stack traces when an error occurs
  • Share link page visits (Pharos) — when a Pharos banner, light sea, heartbeat letter or reaction challenge link is opened in a web browser at pharoslight.online, that day's visit count goes up by one; on heartbeat letter pages, the day's count of letters opened and of taps on the main button also goes up by one. No cookies are used, and no IP address, device details, heart rate, message or banner content is stored; the shared content sits after the "#" in the link and is never sent to our server.

Third-Party Services

Our apps use the following third-party services, each governed by their own privacy policies:

  • Firebase Analytics
  • Firebase Crashlytics
  • Netlify (hosts pharoslight.online)
  • Light sea clock synchronization: the Android app requests network time from time.google.com, then time.cloudflare.com, falling back to time.akamai.com; the web player requests time.akamai.com. These requests contain no invitation payload or user identifier. These services receive the IP address needed to answer the request.

Heartbeat Letters (Pharos)

Heart rate, optional heart-rate variability, waveform, measurement time, your message and the optional name you address the letter to are encoded only in the fragment after “#” in a shared link. Anyone with the link can read them. These values do not pass through our servers and are never included in analytics. The letterbox keeps at most 20 letters you sent and 20 you received, only on this device, with individual deletion. When you choose to install Pharos and open a letter after installation, its payload is passed through Google Play Install Referrer; a long message, and if needed the name, may be omitted from that transfer.

Microphone for the Candle Game (Pharos)

With your permission, the candle screen uses the microphone only while it is in the foreground to compute sound volume on the device. We do not record, save or upload audio. The microphone is released when you leave the screen or the app goes into the background. You can use the press-and-hold alternative without microphone permission. A birthday name stays on the device unless you choose to share a card or banner containing it.

Permissions

Our apps only request permissions that are essential for core functionality. For example, a flashlight app requires camera permission to control the LED flash. Pharos also uses the camera to scan QR codes only while the scanner is open; no photos are taken or saved. We never request permissions unrelated to the app's purpose.

Children's Privacy

Our apps are not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided data through our apps, please contact us and we will promptly remove it.

Data Security

We implement industry-standard security measures to protect any data processed by our apps. However, no method of electronic transmission is 100% secure, and we cannot guarantee absolute security.

Changes

We may update this policy from time to time. Any changes will be posted on this page with an updated effective date.

Contact

If you have questions about this privacy policy, please reach out to us at nexorastudio.app@gmail.com.

概述

Nexora Studio("我们")开发和发布移动应用程序。我们致力于保护您的隐私。本政策说明我们的应用收集哪些数据以及如何使用这些数据。

数据收集

我们的应用在设计上尽量减少数据收集。我们不会收集您的姓名、邮箱或位置等个人信息。唯一收集的数据是通过 Firebase Analytics 获取的匿名使用分析数据和通过 Firebase Crashlytics 获取的崩溃报告,用于改善应用稳定性和用户体验。Pharos 的分享链接另有一项按天统计的匿名网页访问次数。

  • 分析数据 — 匿名应用使用模式(页面浏览、功能使用频率)
  • 崩溃报告 — 设备型号、系统版本以及发生错误时的堆栈信息
  • 分享链接网页访问(Pharos) — 有人在浏览器中打开 pharoslight.online 上的 Pharos 灯牌、灯海、心跳信或反应挑战链接时,当天的访问次数加一;在心跳信页面,当天「拆开信」与「点主按钮」的次数也各加一。不使用 Cookie,不保存 IP 地址、设备信息、心率、留言或灯牌内容;分享内容位于链接「#」之后,不会发送到我们的服务器。

第三方服务

我们的应用使用以下第三方服务,各服务受其自身隐私政策约束:

  • Firebase Analytics
  • Firebase Crashlytics
  • Netlify(托管 pharoslight.online)
  • 灯海网络校时:Android App 依次向 time.google.com、time.cloudflare.com 请求网络时间,失败后使用 time.akamai.com;网页播放器使用 time.akamai.com。请求不含邀请载荷或用户标识,服务方会收到完成网络请求所需的 IP 地址。

心跳信(Pharos)

心率、可选的心率变异性、波形、测量时间、留言与可选的「致」称呼仅编码在分享链接「#」之后的片段中,任何拿到链接的人都能查看。这些数据不经过开发者服务器,也不会进入使用分析。信匣仅在本机保存寄出与收到的信各最近 20 封,支持单条删除。选择安装后自动打开心跳信时,载荷会经 Google Play Install Referrer 传给 App,较长的留言(必要时连同称呼)可能不随安装传递。

吹蜡烛麦克风(Pharos)

获得授权后,仅在吹蜡烛页处于前台时读取麦克风,在设备上计算音量,不录音、不保存、不上传任何音频。离开页面或切到后台即释放麦克风。也可不授权,改用长按吹气。生日名字只在本机使用,除非您主动分享含有名字的卡片或灯牌。

权限说明

我们的应用仅请求核心功能所必需的权限。例如,手电筒应用需要相机权限来控制 LED 闪光灯。Pharos 也会仅在扫码页使用相机扫描二维码,不拍照、不保存照片。我们绝不会请求与应用用途无关的权限。

儿童隐私

我们的应用不面向 13 岁以下的儿童。我们不会故意收集儿童的数据。如果您认为儿童通过我们的应用提供了数据,请联系我们,我们将及时删除。

数据安全

我们采用行业标准的安全措施来保护应用处理的所有数据。但任何电子传输方式都无法保证 100% 的安全性。

政策变更

我们可能会不定期更新本政策。任何变更将在此页面发布并更新生效日期。

联系方式

如果您对本隐私政策有任何疑问,请通过 nexorastudio.app@gmail.com 与我们联系。