Wear OS · Android · Development builds
隐私 / Privacy
更新 / Updated: 2026-10-01 · 开发中，尚未公开发布 / In development, not publicly released
范围与联系
本说明更新于2026年10月1日，适用于RallyArc开发中的Wear OS与Android版本。Google Play开发者展示名为Beyond Matrix。该版本尚未公开发布，商店试用和购买尚未接入。Apple与华为版本有各自的说明和商店权益。隐私问题可联系support@fatclaw.com。
比赛与设备传输
比分、赛制、逐分时间、历史和设置保存在应用私有目录。手表独立记录比赛，手机接收历史副本，不参与逐球提交。比赛和运动记录可通过Google Play服务Data Layer送到配对Android手机，包括用户已授权记录的心率。传输可能直接使用蓝牙，也可能经网络由Google服务器中转；Google文档说明其云中转采用端到端加密。视频不通过该通道传输。RallyArc没有自建账号、广告、行为分析SDK或自建云存储，不把“无自建服务端”视为数据从不离开设备。实际配对设备仍待验收。
运动与健康权限
只有主动开始独立运动记录时才请求活动识别权限；心率默认关闭，主动开启后才请求适用的传感器权限。运动时长来自系统观测，心率只保存实际采样时间和bpm；缺失样本保持未知。拒绝权限不妨碍记分，批准权限后仍需再次点击操作。权限撤销不会删除已有比分或样本。恢复只能绑定本应用已保存身份；系统无运动时在最后已记录点保存中断，不补造时长。RallyArc不请求位置或通讯录。
Health Connect独立副本
手机仅在你明确选择保存并授权后写入所选RallyArc运动和可选心率，并读取本应用对应记录核对结果。没有心率时不以虚构值补齐。删除Health Connect副本是单独确认操作，不删除本机运动、手表原记录、比分或视频；失败不能视为删除成功。已删除本地运动时，可从Health Connect系统设置管理其独立副本。不保证其他健康应用会显示这些记录。
视频与读取授权
你通过系统选择原视频；应用保留读取授权和校时信息，在手机上预览与叠分，不修改或主动上传原片。你明确导出后，成片保存在应用私有目录，再由你选择外部保存位置并核对保存结果。成片可以包含你选定运动的心率，分享接收者也能看到。移除视频选择会移除该项目的校时与心率绑定；仅在没有其他比赛引用该原片时释放持续读取授权，不删除提供方原片。删除本机成片与移除选择是两个独立动作，已保存到外部位置的副本由你另外管理。
保留与逐副本删除
比赛原始记录保留，目前没有逐场删除入口。已停止运动可在手表或手机详情分别删除该端副本；只保留最小UUID、revision和格式标记以阻止同步重放复活，手机删除还会解绑视频的该运动心率选择。不会自动删除另一端、Health Connect或既有成片。卸载或清除应用数据会丢失该端私有记录和视频；系统备份已关闭，购买恢复不恢复比赛或媒体。请先把要保留的成片保存到外部位置。
网页与支持邮件
本说明页由GitHub Pages托管。访问网页时，GitHub按其隐私政策处理常规请求信息；本页不包含分析脚本或跟踪像素。发送支持邮件会主动提供你的邮箱及邮件内容，用于处理问题。请勿发送健康记录、原视频或支付凭据。数据处理方式改变时会更新本页，最终商店说明须与正式版本一致。
Scope and contact
Updated October 1, 2026. This notice covers the Wear OS and Android development builds of RallyArc. The Google Play developer display name is Beyond Matrix. This version has not been publicly released, and store trials and purchases are not yet connected. Apple and Huawei versions have their own notices and store rights. Contact support@fatclaw.com for privacy questions.
Matches and device transfer
Scores, rules, point times, history and settings are kept in private app storage. The watch records each match independently; the phone receives history copies and does not commit points. Google Play services Data Layer can transfer match and workout records, including authorized heart-rate samples, to a paired Android phone. Transfer may use Bluetooth or a network relay on Google servers. Google documents end-to-end encryption for its cloud relay. Videos are not transferred through this channel. RallyArc has no app account, ads, behavior analytics SDK or operator cloud storage. This does not mean data never leaves the device. Paired-device acceptance is still pending.
Workouts and health permissions
Activity permission is requested when you choose to start a separate workout. Heart rate is off by default and requests the applicable sensor permission only when enabled. Workout time comes from system observations; heart-rate records contain actual sample times and bpm, with missing measurements left unknown. Denial does not block scoring. Granting permission requires another explicit action before recording or recovery. Revocation does not delete saved scores or samples. Recovery must match this app’s saved identity; if the system has no workout, the record is interrupted at the last saved observation without invented duration. RallyArc does not request location or contacts.
Separate Health Connect copies
The phone writes a selected RallyArc workout and optional heart rate to Health Connect only after your explicit action and permission, then reads the matching records from this app to check the result. Missing heart rate is not fabricated. Deleting a Health Connect copy requires separate confirmation and keeps local workouts, watch originals, scores and videos. A failed operation is not a successful deletion. If the local workout has already been removed, manage its independent copy in Health Connect settings. We do not promise that another health app will display these records.
Videos and read access
You select the source video through the system picker. The app retains read access and timing information, previews and overlays scores on the phone, and does not modify or automatically upload the original. An explicit export saves a completed video privately; you then choose an external destination and the app checks the saved result. A video can include heart rate from your selected workout, visible to its recipients. Removing a video selection removes that project’s timing and heart-rate binding. Lasting read access is released only when no other match references the source; the original is not deleted. Deleting a private export and removing a selection are separate actions. Manage copies saved elsewhere separately.
Retention and separate deletion
Original match records are retained; there is currently no per-match deletion. A stopped workout can be removed separately from watch or phone details. A minimal UUID, revision and format marker remains to prevent sync replay from restoring it; phone deletion also removes its heart-rate selection from video projects. Other devices, Health Connect and existing exports are not deleted automatically. Uninstalling or clearing app data loses that device’s private records and videos. App backup is disabled; reinstalling does not restore matches or media. Save exports you want to keep to an external location first.
Website and support messages
This notice is hosted by GitHub Pages, whose privacy policy covers normal website request information. The page contains no analytics script or tracking pixel. Sending a support email provides your email address and message for handling the issue. Please do not send health records, source videos or payment credentials. This page will be updated when data practices change; final store disclosures must match the released version.
联系 / Contact
Google Data Layer · GitHub Pages privacy · Apple 隐私 / Apple privacy