隱私權

Responsible provider and contact

Dotch · DotGrid · orh4nyz@gmail.com

通知與通話

Notification text, sender images and call information are processed on your phone to display the island and never leave it.

日曆

Calendar access is optional. The next event's name, time and place are read on the phone only to show them on the island; they are not stored or sent anywhere.

Today's events are read the same way for the StandBy Calendar face.

天氣

The StandBy Weather face is optional. With approximate location access, the phone's last known approximate position, rounded to about 1 km, is sent over HTTPS to Open-Meteo for the forecast; a city you choose instead is looked up there by name. Android may provide the town name. Coordinates are not stored; only the last forecast stays on the phone. Open-Meteo may see connection information such as your IP address.

側邊面板

剪貼簿和聯絡人只留在這支手機上。聯絡人權限可自行選擇，只用來顯示你加入的人的照片；不會傳送任何資料。

你在手機內建的選擇器中選人，Dotch 只看得到你選的那一位。輕觸即可在撥號畫面開啟對方的號碼。聯絡人權限可自行選擇：Dotch 只為了顯示你加入的人的照片而要求這項權限；照片只在這支手機上讀取，不會傳送到任何地方。

Android 不會向背景中的應用程式顯示剪貼簿。剪貼簿區塊只在面板開啟的那一刻讀取最後複製的文字；最多 5 則文字保留在這支手機上，不會傳送到任何地方。

相機、麥克風和網路

Dotch only asks Android whether the camera or microphone is in use and whether the internet and hotspot are on. It records nothing, sees nothing they capture and reads no network names. This stays on the phone.

歌曲辨識是 Dotch 自己透過麥克風收聽的唯一功能。

歌曲辨識

Dotch 僅在你要求時透過麥克風聆聽最多 12 秒，以找出你周圍正在播放的歌曲。不會錄音；只會將聲音的指紋傳送給 Apple 進行比對。

為了使用 Apple 的服務，Dotch 會先從我們的伺服器取得一個短期有效的金鑰，只傳送裝置 ID 的雜湊值以及你的存取憑證或 Google Play 購買資訊，伺服器核對後不會保存。不會有任何音訊傳到我們的伺服器。Apple 能看到連線的 IP 位址。你可以在島設定中關閉歌曲辨識。

Headphones and Bluetooth

Nearby devices access is optional. Dotch reads the name and battery level of connected headphones to show them on the island. For AirPods it listens only for the short Bluetooth signal their case sends, reads the battery from it and can connect them again; the address of the last AirPods is kept on the phone for that. Bluetooth is not used to find your location, and none of this is sent anywhere.

音訊視覺化

Audio permission is used to visualize playback; the wave reads only what the phone plays, not the microphone. Dotch does not save or upload audio. Capture stops while hidden or when the screen is fully off; if the player shows on the Always-On Display, the wave keeps moving there.

歌曲辨識是 Dotch 自己透過麥克風收聽的唯一功能。

試用與購買

To preserve your 14-day trial, a hash of an app-scoped device ID is sent to the server. The server additionally protects that identifier and stores the original trial dates. The hosting provider may process normal connection information such as IP addresses. Google Play handles payments; Dotch does not receive card details.

Purchase check

A purchase is checked by sending the server the Play purchase token, the product and a hash of the device ID, so it can ask Google Play. The server keeps only a hash of the token, the product and, if you bought on this phone, the price paid and its currency. A purchase is active on one device at a time.

With a sale the server also keeps the Google Play order number and the buyer's country, and sends the developer a private Telegram message (app, product, amount and country; no name, e-mail, purchase token or device identifier).

App integrity

When a new trial starts, Dotch gets a short-lived token from Google Play Integrity and sends it to the server. The server asks Google whether this is an unmodified Play copy; it does not store the token.

Daily check-in and counts

At most twice a day (when you unlock the phone or open the app) Dotch sends the server: a hash of the device ID, your access type (free, lifetime or supporter), the app version and whether Dotch's two essential permissions are on. This lets the developer see active-user and sales counts. No name, account, notification, call or music content is sent.

Supporter name and e-mail

If you bought the supporter package you may give a name and an e-mail, both optional. Once the developer approves it, the name shows to everyone in the in-app supporters list. Only the developer sees your e-mail; it is used only to invite you early to DotGrid's new apps and is not shared. You can change or remove both at any time.

Supporters list: if you give a supporter name, it shows to everyone in all four Dot apps (Dotch, DotWatt, DotSetup and Dotype), with the Dot apps you support; your e-mail never shows.

Deleting your data

The "Delete my data on the server" button on the trial and purchase screen removes your supporter name and e-mail and this device's last-seen record at once; the device then stops sending its daily check-in. The trial start date (one trial per device) and the purchase check stay on the server.

Authorized access code

An optional access code and a hash of the app-scoped device ID are verified over HTTPS. The server stores the code hash, protected device identifier and authorization dates. A signed access receipt lasts at most 24 hours and access can be revoked. This does not change trial dates or purchase status.

Gift code

When a gift code is entered, the code and a hash of the app-scoped device ID are verified once over HTTPS. The server stores the code hash, the protected identifier of the device that used it and the date it was used; the code cannot be used on another device. Only a server-signed receipt is kept on the device, and it works offline. Now and then, at most once a day, Dotch asks whether the code has been revoked. This is not a Google Play purchase.

Screen snapshots

While the glass background is on, and to tell whether the PIN screen is open on the lock screen, Dotch takes a momentary screen snapshot through Android's accessibility permission. The image is processed in memory on your phone and scaled down; only the blurred background or a yes/no result is used. It is never saved or sent to a server.

專輯封面

Remote artwork provided by the music app may be fetched over HTTPS. The image provider may see connection information.

Retention and deletion

The protected trial identifier and original dates stay on the server while needed to enforce one trial per device; they are not deleted when the trial ends. Request access, correction or deletion at orh4nyz@gmail.com. A necessary and permitted minimal anti-abuse record may be retained; the reason is explained in response. Support emails are kept only while needed for the request, related issues or applicable obligations.

Some features change the phone's own settings: they can hide pop-up notifications, the lock-screen media player and status bar icons. Dotch gives them back when you switch it off or use Uninstall in its settings. If you remove Dotch from Google Play or the home screen instead, Android does not tell the app, so these stay changed; you can turn them back on in the phone's settings.

更新通知

To tell you when a new version is on Play, Dotch uses Google's Firebase Cloud Messaging. Once Dotch's service starts running, the phone registers with Google: Google creates a random installation ID and a messaging token for this copy of the app and adds it to the shared "updates" topic. The token is not sent to Dotch's server, and Dotch does not link it to your name, your account or anything shown on the island. The message itself carries only the new version's number. Google may process connection information such as your IP address. Firebase Analytics is switched off. You can switch the "Updates" notification off in Android's settings; the registration with Google stays, but nothing is shown.

Dotch 的通知

Android's notification permission is optional and covers only Dotch's own notices: a new version, a reminder before the trial ends and the one-time setup notification where you type the Wireless debugging pairing code. That code is used only on the phone, to pair Dotch with the phone itself; it is not stored or sent anywhere.

Service providers

Supabase hosts the trial service in Frankfurt. Google Play handles purchases. Providers may process normal connection and security information. Feedback email reaches us only when you send it.

Google's Firebase Cloud Messaging delivers the update notifications.

Telegram delivers the developer's private sale notifications.

歌曲辨識由 Apple 的 ShazamKit 找出歌曲。

Settings file and bug report

Exporting your settings writes one file to the place you choose. It holds only your Dotch settings, including the apps you picked; trial and purchase records, the edge panel's people and copied texts and the weather city are left out. The bug report is a text you can read before you send it: the Dotch version, the phone model and Android version, which permissions and switches are on, your access type, the island's recent state changes and Dotch's own crash and memory notes. It carries no notification, message, media or contact content and goes only into the e-mail you choose to send.

You control permissions

You can revoke permissions in Android settings and switch Dotch off in its main menu. Resetting appearance preferences does not reset trial or purchase records.