Introduction

Welcome to StockpileApp. We understand the importance of personal information security. This policy explains how the app collects, uses, stores, and protects your information.

Information Collection and Use

1. Information You Provide

• Baby profile information: baby name, birth date, gender, weight, and related profile details, used only for in-app records and recommendations
• Inventory information: item name, category, stock quantity, model, price, and related inventory records, used only for local inventory management
• Family information: family name, members, invitation codes, and sharing status, used only for family sharing features inside the app

2. iCloud Data Sync

• When iCloud is enabled, data syncs between devices through Apple CloudKit
• Synced private and shared app data is stored in your iCloud account or the accepted CloudKit shared database; we do not operate our own servers for this data
• Inventory information, including item names, quantities, prices, lots, and purchase-related records, is used for in-app inventory management. When iCloud is enabled, this information may sync through Apple CloudKit; inventory included in a shared family may be visible to accepted family members
• To route family join requests, the app may write limited invite/request metadata to Apple CloudKit Public Database, such as family public identifier, invite-code hash, requester display name, requester user record name, request status, and review time
• Data transfer and storage are protected by Apple's iCloud and CloudKit security mechanisms

3. Local Storage

• When iCloud is not enabled, app data is stored only on the device

4. Device Permissions

• Camera: used only for taking baby profile photos and milestone photos
• Photo Library: used only for selecting baby profile photos, milestone photos, videos, and order screenshots for item import
• Notifications: used for local inventory, vaccine, weight, daily care, and restock reminders; iCloud sync may use Apple CloudKit system background notifications required by Apple's framework

5. Item Import

• E-commerce link import is used only to help identify item names, source platforms, and possible quantity information
• Import requests are limited to allowed e-commerce domains, use an ephemeral network session without cookies, and limit response size
• Order screenshot and photo import use on-device text recognition (OCR) to extract item names, quantities, and expiry dates from images you select; images and recognized text are processed on your device and are not uploaded to our servers
• PDF and text-file import parse locally; no document content is sent off-device
• Please do not paste or select images, text, or files containing passwords, payment details, ID numbers, or other sensitive information

6. Family Sharing Permissions

• The family creator (owner) sends an Apple iCloud sharing invitation through the system share sheet (Messages, Mail, AirDrop). Family members join by accepting the invitation and signing in to their own Apple ID
• Members invited to a family can view the records that the owner includes in iCloud family sharing. Household inventory and basic family collaboration are the primary shared scope
• Feeding, sleep, diaper, weight, vaccine, growth photos, and sensitive care notes are not added to family sharing by default. The owner can opt into specific modules using the Family Sharing Scope card; turning a module off prevents future share preparations from including that module, but already-synced records may remain visible until the owner removes them
• The owner can stop sharing or delete the family at any time; stopping sharing will revoke the member's access on their next sync and remove shared records from the member's view
• Members can leave a shared family at any time; leaving the family does not delete records owned by the member on the member's own device
• Family sharing is governed by Apple's iCloud and CloudKit security; we do not host family data on our own servers

7. Data Export

• You can export your own records (feeding, sleep, diaper, weight, vaccine, solid food, inventory) as CSV or PDF from inside the app
• Exports are generated on-device and saved or shared through standard iOS share mechanisms you choose
• Exports do not include other family members' private records; only records you have created or that have been shared with you
• We do not receive copies of your exports

8. Unused System Capabilities

• The app does not use HealthKit or CareKit APIs
• The app does not use NFC and does not require external hardware pairing
• The app does not operate a custom APNs server and does not store device tokens; user reminders are scheduled locally on the device
• The app does not integrate third-party analytics, advertising, attribution, or social media SDKs

9. Lifestyle and Health References

• Weight, vaccine, feeding, solid food, diaper, and baby care content is used only for lifestyle records, reminders, and general reference
• The app does not provide medical diagnosis, treatment, or professional medical advice
• Vaccine schedule data is sourced from official public health authorities and reference sources (for example CDC, UK public health sources, China NIP, and WHO reference data) and is labelled with source information and last-reviewed metadata where available; the app is a reminder and tracking tool, not an authoritative vaccination record
• Please consult a doctor, vaccination clinic, or qualified professional when making health-related decisions

10. Premium Purchases

• Premium purchases and subscriptions are processed by Apple through StoreKit and the App Store
• We do not receive or store your full payment card information
• Purchase status is used only to unlock premium features on your devices and follows the Apple ID that made the purchase; family data sharing does not automatically share Premium entitlement across Apple IDs

Data Security

Data storage and synchronization rely on Apple's local storage, iCloud, and CloudKit security mechanisms. The app does not use third-party analytics or advertising SDKs and does not sell your data. The app may store Apple MetricKit performance summaries locally on your device for diagnostics; these summaries are not uploaded to our servers and are only available to support if you choose to share them. All data at rest is protected by Apple's file protection (NSFileProtectionCompleteUntilFirstUserAuthentication).

Third-Party Services

The app does not integrate third-party analytics, advertising, attribution, or social media SDKs. Apple frameworks used: CoreData, CloudKit, StoreKit, UserNotifications, Vision (on-device text recognition), PhotosUI, and MetricKit. Each framework is governed by Apple's respective privacy terms.

Data Deletion

You can delete individual data records inside the app at any time. In addition:

• Local reset: Settings → Data Management → "Reset Local Data" deletes the Core Data store, App Group preferences, and local caches from this device. iCloud-synced data may still exist in your iCloud account unless separately deleted (see below)
• Family deletion: Family owners can delete a family from the family detail screen. This stops the iCloud share and removes the shared database; private (non-shared) records remain in the owner's iCloud account
• Family membership: Members can leave a shared family. After leaving, records you created remain on your device and in your private iCloud; shared records you received are removed
• App uninstall: Uninstalling the app removes all local app data from the device. iCloud-synced data may persist in your iCloud account until you delete it via Settings → Apple ID → iCloud → Manage Storage → StockpileApp, or by deleting your iCloud account
• Deletion help: To request help deleting app data associated with your Apple ID, contact us at Stockpilebaby@outlook.com. Because private iCloud data is controlled by your Apple ID, we will guide you through the available in-app and iCloud deletion steps rather than accessing your private database directly

Regional Compliance

The app is designed for use by parents and legal guardians. We do not knowingly collect personal information directly from children. Depending on your jurisdiction:

• United States (COPPA): Baby and child-related data is treated as if collected from a child under 13; the app is intended to be used by parents or guardians, not directly by children
• European Economic Area / United Kingdom (GDPR): The legal basis for processing baby and family data is the legitimate interest of the parent or guardian who uses the app to manage household inventory and care records. You may request access, correction, or deletion of your data at any time
• Other regions: If your local regulations require specific consent for storing child-related data, please use the app in line with your local requirements and contact us for data deletion requests

Children's Privacy

The app is designed to be used by parents or legal guardians, not directly by children under 14. Baby and child-related data should be entered and managed by a parent or legal guardian. We do not knowingly collect personal information directly from children under 14. If you believe a child has provided personal information without parental consent, contact Stockpilebaby@outlook.com and we will assist with deletion.

Contact Us

For privacy questions, data access requests, or deletion requests, contact: Stockpilebaby@outlook.com

For support, see the in-app Settings → Help section.

宝宝囤（StockpileApp）隐私政策

最后更新：2026年8月1日

引言

欢迎使用宝宝囤。我们深知个人信息安全的重要性，本政策说明我们如何收集、使用和保护您的信息。

信息收集与使用

1. 用户主动提供的信息

• 宝宝档案信息：宝宝姓名、出生日期、性别、体重等，仅用于 App 内记录和推荐
• 物品信息：物品名称、分类、库存数量、型号、价格和相关库存记录，仅用于本地库存管理
• 家庭信息：家庭名称、成员信息、邀请码和共享状态，仅用于 App 内家庭共享功能

2. iCloud 数据同步

• 启用 iCloud 后，数据通过 Apple CloudKit 在多设备间同步
• 同步的私有和共享 App 数据存储在你的 iCloud 账户或已接受的 CloudKit 共享数据库中，我们不使用自有服务器托管这些数据
• 物品名称、库存数量、价格、批次和采购相关记录用于 App 内库存管理。启用 iCloud 后，这些信息可能通过 Apple CloudKit 在设备间同步；纳入家庭共享的库存可能对已接受邀请的家庭成员可见
• 为了转发家庭加入申请，App 可能会向 Apple CloudKit Public Database 写入有限的邀请码/申请元数据，例如家庭公开标识、邀请码哈希、申请人显示名称、申请人用户记录名、申请状态和审核时间
• 数据传输和存储受 Apple iCloud 与 CloudKit 安全机制保护

3. 本地存储

• 未启用 iCloud 时，App 数据仅存储在设备本地

4. 设备权限

• 相机：仅用于拍摄宝宝头像和成长里程碑照片
• 相册：仅用于选择宝宝头像、成长照片、视频和用于导入物品的订单截图
• 通知：用于本地库存、疫苗、称重和日常提醒；iCloud 同步会使用 Apple CloudKit 所需的系统后台通知

5. 物品导入

• 电商链接导入仅用于帮助识别物品名称、平台来源和可能的数量信息
• 导入请求限制在允许的电商域名，使用不保存 Cookie 的临时网络会话，并限制响应大小
• 订单截图和照片导入使用设备本机文字识别（OCR）从你选择的图片中提取物品名称、数量和到期日；图片和识别结果在设备上处理，不会上传到我们的服务器
• PDF 和文本文件导入均在本地解析，不向外部服务器发送文件内容
• 请不要粘贴或选择包含密码、付款信息、身份证号或其他敏感内容的文本、图片或文件

6. 家庭共享权限

• 家庭创建者（owner）通过系统分享面板（信息、邮件、隔空投送）发出 Apple iCloud 共享邀请；家庭成员接受邀请并登录自己的 Apple ID 即可加入
• 受邀加入家庭的成员可以查看创建者纳入 iCloud 家庭共享的记录；家庭库存和基础协作是主要共享范围
• 喂养、睡眠、排泄、体重、疫苗、成长照片和敏感照护备注默认不会进入家庭共享。创建者可以通过「家庭共享范围」卡片选择特定模块；关闭某个模块后，下次共享准备将不再包含该模块，但已同步的记录可能仍可见，直到创建者手动删除
• 创建者可以随时停止共享或删除家庭；停止共享后，成员的下次同步将撤销访问权限并从其视图移除共享记录
• 成员可以随时退出已加入的家庭；退出家庭不会删除成员自己设备上由该成员创建的记录
• 家庭共享由 Apple 的 iCloud 和 CloudKit 安全机制保障，我们不在自有服务器托管家庭数据

7. 数据导出

• 你可以从 App 内导出自己创建的记录（喂养、睡眠、排泄、体重、疫苗、辅食、库存）为 CSV 或 PDF
• 导出内容在设备本地生成，通过 iOS 标准分享机制保存或转发
• 导出内容不包含其他家庭成员的私密记录；仅包含你创建或已与你共享的记录
• 我们不会收到你导出的副本

8. 未使用的系统能力

• 本 App 不使用 HealthKit 或 CareKit API
• 本 App 不使用 NFC，也不需要外部硬件配对
• 本 App 不使用自建 APNs 服务端，不保存 device token；用户提醒均由设备本地调度
• 本 App 不集成任何第三方分析、广告、归因或社交媒体 SDK

9. 生活记录和健康参考

• 体重、疫苗、喂养、辅食、排泄和照护内容仅用于生活记录、提醒和一般参考
• 本 App 不提供医疗诊断、治疗或专业医疗建议
• 疫苗计划数据来自各国公共卫生权威机构和参考来源（例如中国 NIP、美国 CDC、英国公共卫生来源和 WHO 参考数据），并在可用时标注数据来源和最后核对信息；本 App 是提醒和记录工具，不是权威接种证明
• 涉及健康决策时，请咨询医生、接种门诊或具备资质的专业人员

10. 高级版购买

• 高级版购买和订阅由 Apple 通过 StoreKit 和 App Store 处理
• 我们不会接收或保存您的完整付款卡信息
• 购买状态仅用于在你的设备上解锁高级功能，并跟随发起购买的 Apple ID；家庭数据共享不会自动跨 Apple ID 共享高级版权益

数据安全

数据保存和同步依赖 Apple 提供的本地存储、iCloud 和 CloudKit 安全机制。本 App 不使用第三方分析或广告 SDK，也不会出售你的数据。App 可能会在你的设备本地保存 Apple MetricKit 性能摘要用于诊断；这些摘要不会上传到我们的服务器，只有在你主动选择分享给客服时才会用于支持排查。所有静态数据由 Apple 的文件保护机制（NSFileProtectionCompleteUntilFirstUserAuthentication）保护。

第三方服务

本 App 不集成任何第三方分析、广告、归因或社交媒体 SDK。使用的 Apple 框架：CoreData、CloudKit、StoreKit、UserNotifications、Vision（设备本机文字识别）、PhotosUI 和 MetricKit。各框架分别遵循 Apple 的隐私条款。

数据删除

你可以在 App 内随时删除单个数据记录。除此之外：

• 本机重置：设置 → 数据管理 → 「重置本地数据」会删除本设备的 Core Data 存储、App Group 偏好和本地缓存。iCloud 同步的数据仍可能存在于你的 iCloud 账户，除非另行删除（见下）
• 删除家庭：家庭创建者可以在家庭详情页删除家庭。这会停止 iCloud 共享并移除共享数据库；私有（非共享）记录保留在创建者的 iCloud 账户
• 退出家庭：成员可以随时退出已加入的家庭。退出后，你在自己设备上创建的记录仍保留在你的私有 iCloud；你接收到的共享记录会被移除
• 卸载 App：卸载 App 会移除本机的所有 App 数据。iCloud 同步的数据可能仍存在于你的 iCloud 账户，可通过「设置 → Apple ID → iCloud → 管理存储 → StockpileApp」删除，或删除整个 iCloud 账户
• 删除协助：如需请求协助删除与你的 Apple ID 相关的 App 数据，请联系 Stockpilebaby@outlook.com。由于 iCloud 私有数据由你的 Apple ID 控制，我们会指导你完成 App 内和 iCloud 中可用的删除步骤，而不是直接访问你的私人数据库

地区合规

本 App 设计供父母或法定监护人使用。我们不有意直接收集儿童的个人信息。根据你所在的司法管辖区：

• 美国（COPPA）：宝宝和儿童相关数据被视为 13 岁以下儿童数据；本 App 仅供父母或监护人使用，不直接面向儿童
• 欧洲经济区 / 英国（GDPR）：处理宝宝和家庭数据的法律依据是父母或监护人使用本 App 管理家庭库存和照护记录的合法利益。你可随时请求访问、更正或删除你的数据
• 其他地区：如果你所在地区的法规对儿童相关数据存储有特定同意要求，请按当地要求使用本 App，并联系我们处理数据删除请求

儿童隐私

本 App 设计供父母或监护人使用，不直接面向 14 岁以下儿童。宝宝和儿童相关数据应由父母或法定监护人输入和管理。我们不有意直接收集 14 岁以下儿童的个人信息。如果你认为有儿童在无父母同意的情况下提供了个人信息，请联系 Stockpilebaby@outlook.com，我们将协助删除。

联系我们

如有隐私问题、数据访问请求或删除请求，请联系：Stockpilebaby@outlook.com

如需支持，请见 App 内「设置 → 帮助」。