隐私

Responsible provider and contact

Dotch · DotGrid · orh4nyz@gmail.com

通知与通话

Notification text, sender images and call information are processed on your phone to display the island and never leave it.

日历

Calendar access is optional. The next event's name, time and place are read on the phone only to show them on the island; they are not stored or sent anywhere.

Today's events are read the same way for the StandBy Calendar face.

天气

The StandBy Weather face is optional. With approximate location access, the phone's last known approximate position, rounded to about 1 km, is sent over HTTPS to Open-Meteo for the forecast; a city you choose instead is looked up there by name. Android may provide the town name. Coordinates are not stored; only the last forecast stays on the phone. Open-Meteo may see connection information such as your IP address.

侧边面板

剪贴板和联系人只留在这部手机上。通讯录权限是可选的，只用于显示你添加的人的照片；不会发送任何内容。

你在手机自带的选择器中选人，Dotch 只能看到你选的那一位。点按即可在拨号界面打开对方的号码。通讯录权限是可选的：Dotch 只为显示你添加的人的照片而请求它；照片只在这部手机上读取，不会发送到任何地方。

Android 不会向后台应用显示剪贴板。剪贴板分区只在面板打开的那一刻读取最后复制的文字；最多 5 条文字保留在这部手机上，不会发送到任何地方。

相机、麦克风和网络

Dotch only asks Android whether the camera or microphone is in use and whether the internet and hotspot are on. It records nothing, sees nothing they capture and reads no network names. This stays on the phone.

歌曲识别是 Dotch 自己通过麦克风收听的唯一功能。

歌曲识别

Dotch 仅在你要求时通过麦克风聆听最多 12 秒，以找出你周围正在播放的歌曲。不会录音；只会将声音的指纹发送给 Apple 进行匹配。

为使用 Apple 的服务，Dotch 会先从我们的服务器获取一个短期有效的密钥，只发送设备 ID 的哈希值以及你的访问凭证或 Google Play 购买信息，服务器核验后不予保存。不会有任何音频到达我们的服务器。Apple 能看到连接的 IP 地址。你可以在岛设置中关闭歌曲识别。

Headphones and Bluetooth

Nearby devices access is optional. Dotch reads the name and battery level of connected headphones to show them on the island. For AirPods it listens only for the short Bluetooth signal their case sends, reads the battery from it and can connect them again; the address of the last AirPods is kept on the phone for that. Bluetooth is not used to find your location, and none of this is sent anywhere.

音频视觉化

Audio permission is used to visualize playback; the wave reads only what the phone plays, not the microphone. Dotch does not save or upload audio. Capture stops while hidden or when the screen is fully off; if the player shows on the Always-On Display, the wave keeps moving there.

歌曲识别是 Dotch 自己通过麦克风收听的唯一功能。

试用与购买

To preserve your 14-day trial, a hash of an app-scoped device ID is sent to the server. The server additionally protects that identifier and stores the original trial dates. The hosting provider may process normal connection information such as IP addresses. Google Play handles payments; Dotch does not receive card details.

Purchase check

A purchase is checked by sending the server the Play purchase token, the product and a hash of the device ID, so it can ask Google Play. The server keeps only a hash of the token, the product and, if you bought on this phone, the price paid and its currency. A purchase is active on one device at a time.

With a sale the server also keeps the Google Play order number and the buyer's country, and sends the developer a private Telegram message (app, product, amount and country; no name, e-mail, purchase token or device identifier).

App integrity

When a new trial starts, Dotch gets a short-lived token from Google Play Integrity and sends it to the server. The server asks Google whether this is an unmodified Play copy; it does not store the token.

Daily check-in and counts

At most twice a day (when you unlock the phone or open the app) Dotch sends the server: a hash of the device ID, your access type (free, lifetime or supporter), the app version and whether Dotch's two essential permissions are on. This lets the developer see active-user and sales counts. No name, account, notification, call or music content is sent.

Supporter name and e-mail

If you bought the supporter package you may give a name and an e-mail, both optional. Once the developer approves it, the name shows to everyone in the in-app supporters list. Only the developer sees your e-mail; it is used only to invite you early to DotGrid's new apps and is not shared. You can change or remove both at any time.

Supporters list: if you give a supporter name, it shows to everyone in all four Dot apps (Dotch, DotWatt, DotSetup and Dotype), with the Dot apps you support; your e-mail never shows.

Deleting your data

The "Delete my data on the server" button on the trial and purchase screen removes your supporter name and e-mail and this device's last-seen record at once; the device then stops sending its daily check-in. The trial start date (one trial per device) and the purchase check stay on the server.

Authorized access code

An optional access code and a hash of the app-scoped device ID are verified over HTTPS. The server stores the code hash, protected device identifier and authorization dates. A signed access receipt lasts at most 24 hours and access can be revoked. This does not change trial dates or purchase status.

Gift code

When a gift code is entered, the code and a hash of the app-scoped device ID are verified once over HTTPS. The server stores the code hash, the protected identifier of the device that used it and the date it was used; the code cannot be used on another device. Only a server-signed receipt is kept on the device, and it works offline. Now and then, at most once a day, Dotch asks whether the code has been revoked. This is not a Google Play purchase.

Screen snapshots

While the glass background is on, and to tell whether the PIN screen is open on the lock screen, Dotch takes a momentary screen snapshot through Android's accessibility permission. The image is processed in memory on your phone and scaled down; only the blurred background or a yes/no result is used. It is never saved or sent to a server.

专辑封面

Remote artwork provided by the music app may be fetched over HTTPS. The image provider may see connection information.

Retention and deletion

The protected trial identifier and original dates stay on the server while needed to enforce one trial per device; they are not deleted when the trial ends. Request access, correction or deletion at orh4nyz@gmail.com. A necessary and permitted minimal anti-abuse record may be retained; the reason is explained in response. Support emails are kept only while needed for the request, related issues or applicable obligations.

Some features change the phone's own settings: they can hide pop-up notifications, the lock-screen media player and status bar icons. Dotch gives them back when you switch it off or use Uninstall in its settings. If you remove Dotch from Google Play or the home screen instead, Android does not tell the app, so these stay changed; you can turn them back on in the phone's settings.

更新通知

To tell you when a new version is on Play, Dotch uses Google's Firebase Cloud Messaging. Once Dotch's service starts running, the phone registers with Google: Google creates a random installation ID and a messaging token for this copy of the app and adds it to the shared "updates" topic. The token is not sent to Dotch's server, and Dotch does not link it to your name, your account or anything shown on the island. The message itself carries only the new version's number. Google may process connection information such as your IP address. Firebase Analytics is switched off. You can switch the "Updates" notification off in Android's settings; the registration with Google stays, but nothing is shown.

Dotch 的通知

Android's notification permission is optional and covers only Dotch's own notices: a new version, a reminder before the trial ends and the one-time setup notification where you type the Wireless debugging pairing code. That code is used only on the phone, to pair Dotch with the phone itself; it is not stored or sent anywhere.

Service providers

Supabase hosts the trial service in Frankfurt. Google Play handles purchases. Providers may process normal connection and security information. Feedback email reaches us only when you send it.

Google's Firebase Cloud Messaging delivers the update notifications.

Telegram delivers the developer's private sale notifications.

歌曲识别由 Apple 的 ShazamKit 找出歌曲。

Settings file and bug report

Exporting your settings writes one file to the place you choose. It holds only your Dotch settings, including the apps you picked; trial and purchase records, the edge panel's people and copied texts and the weather city are left out. The bug report is a text you can read before you send it: the Dotch version, the phone model and Android version, which permissions and switches are on, your access type, the island's recent state changes and Dotch's own crash and memory notes. It carries no notification, message, media or contact content and goes only into the e-mail you choose to send.

You control permissions

You can revoke permissions in Android settings and switch Dotch off in its main menu. Resetting appearance preferences does not reset trial or purchase records.