9
Gentleflow九重数独 · HarmonyOS 专版

隐私政策(HarmonyOS 版)

九重数独 · 生效及更新日期:2026 年 9 月 26 日

摘要:九重数独 HarmonyOS 版是单机游戏,无需注册账号,不接入广告、分析或第三方追踪 SDK, 游戏进度和偏好保存在应用本机私有存储中。 自 1.8.0 起,主动打开“群星计划”后会向推荐服务发送本机随机标识及应用展示、点击信息,详见第 5 节。 自 1.8.4 起,炼狱排行榜为可选功能:只有你在排行榜页点击“加入”后,本应用才通过华为账号服务获取账号凭证, 并把由其派生的不可逆玩家编号及炼狱成绩上传至我们在华为 AppGallery Connect 上的云服务,详见第 3.1 节。

1. 个人信息处理者

九重数独 HarmonyOS 版(下称“本应用”)由鲁亮(开发者品牌:Gentleflow)开发和运营, 是本政策所述处理活动的个人信息处理者。隐私问题、投诉或权利请求可发送至 gentleflowoverseas@gmail.com。 我们通常会在 15 个工作日内答复。

2. 适用范围

本政策仅适用于从华为应用市场或其他合法渠道取得的“九重数独”HarmonyOS 应用, 包名为 tech.gentleflow.ninefold。iOS 版本的数据处理方式不同,请查看其 独立隐私政策。

3. 本应用如何处理数据

除你主动加入的炼狱排行榜(见 3.1)外,本应用不收集或向开发者服务器传输可识别你的个人信息。 本应用不要求姓名、手机号码、电子邮箱或其他注册资料,也不读取设备标识符、通讯录、相册、 精确位置、剪贴板、相机或麦克风。

当你购买会员时,交易由华为应用市场的应用内支付服务(IAP Kit)使用你在设备上已登录的华为账号完成。 华为会依据其自身政策处理完成交易和订阅管理所需的账号、订单与支付信息;本应用不获取你的华为账号资料, 也不接触你的银行卡号、支付密码等支付要素。

为实现单机游戏功能,本应用会在你的设备本地处理以下功能数据:

  • 游戏进度与统计:已完成关卡、最佳用时、完成次数、地狱模式进度、提示使用情况、游玩日期和脑力档案;用于保存进度、展示统计和继续游戏。
  • 进行中的游戏:题盘、已填数字、笔记、计时和错误次数;用于恢复未完成的对局。
  • 应用偏好:主题、声音、音乐、振动及辅助显示开关;用于按照你的选择提供功能。
  • 同意记录:已同意的政策版本;用于避免每次启动重复询问。该记录仅保存在本机。
  • 会员与购买状态:你所购买的会员方案、购买凭据的校验结果和会员有效期状态;用于在本机开启会员功能并恢复已购项目。

上述功能数据通常不能单独识别你的身份,仅在应用的私有存储中使用,不会由本应用上传给我们。

3.1 炼狱排行榜(可选)

触发条件:只有你在排行榜页点击“加入”后才会开始。不加入则不会发生下述任何处理,排行榜仍可浏览。

  • 华为账号凭证:加入时及此后每次上传成绩前,本应用通过华为账号服务(Account Kit)获取设备上已登录华为账号的 登录凭证(ID Token,含华为为本应用生成的用户标识)。仅申请该标识,不获取昵称、头像、手机号或邮箱。 设备已登录华为账号时不会弹出界面;未登录时由系统显示华为账号登录页,你可以取消。
  • 上传与存储的内容:凭证交给我们的云函数验证真伪后,服务端用密钥把账号标识计算成一个 不可逆的玩家编号,只存储该编号;凭证本身和原始账号标识不存储。与玩家编号一起存储的有: 炼狱模式最佳分数、到达层数、最高连击、是否无失误、所属周次、更新时间、系统地区设置(两位国家/地区代码, 当前不在榜上显示)和榜上名字。
  • 榜上名字:由应用内置词库随机组合生成(如“沉默的渡鸦”),你只能随机更换,不能自行输入文字; 服务端只保存词库编号。
  • 公开范围:其他玩家在排行榜上可以看到你的名字(或四位随机代号)、名次、分数、层数和无失误标记, 看不到你的华为账号信息。
  • 目的:让同一个人在换机、重装后仍对应榜上同一行,并防止冒充和伪造成绩。
  • 本机保存:玩家编号、名字编号和本周已上传的最高分,用于标出你自己的那一行和避免重复上传。

4. 设备权限与系统能力

  • 振动权限(ohos.permission.VIBRATE):用于按你的设置提供按键和游戏结果触感反馈。你可在应用“设置”中关闭振动。
  • 网络权限(ohos.permission.INTERNET):用于华为应用内支付(IAP Kit)查询商品与价格、 发起支付、校验购买凭据和管理订阅;也用于在你主动打开群星计划后获取推荐、图标和详情,并上报展示与点击; 以及读取排行榜,并在你加入排行榜后上传第 3.1 节所述数据。除此之外,本应用不会通过网络向开发者服务器上传你的游戏数据或个人信息。 点击隐私政策、用户协议或联系我们时,本应用会请求 HarmonyOS 交由系统浏览器或邮件应用打开相应地址; 后续网络访问由你选择的系统应用完成。

网络状态权限(ohos.permission.GET_NETWORK_INFO)支持推荐服务及应用市场相关网络能力,无需运行时授权弹窗。

5. 第三方 SDK、共享与对外提供

群星计划(AppUnions):设置中的可选应用互推功能直接连接 群星计划服务(appunion.chiyoushu.com), 用于展示其他独立开发者的鸿蒙应用。只有主动点开入口后才发起该功能的请求;不点开即可避免此功能的数据传输。 推荐、详情请求包含本应用编号及平台标识 harmonyos;展示或点击时还会发送被推荐应用编号、 本机随机生成并持久保存的 client_id(UUID)和每次事件的随机去重编号;展示事件另含可见状态。 client_id 不是设备标识符,不与账号或游戏进度关联,清除应用数据或卸载会删除本机标识。 网络连接会使服务方接收到 IP 地址等必要连接信息。服务方按其自身规则处理收到的数据。 不发送游戏进度、购买记录、设备标识符或华为账号,不做个性化广告或跨应用追踪。 本应用未集成群星计划 SDK,未展示横幅或插屏广告。点击下载后由系统打开应用市场或目标网站。

华为账号服务(Account Kit)与 AppGallery Connect 云服务:炼狱排行榜使用华为账号服务获取第 3.1 节所述登录凭证, 并使用华为 AppGallery Connect 提供的云函数和云数据库(由华为软件技术有限公司提供,数据处理位置为中国)存储排行榜数据。 该云服务由我们作为开发者使用,排行榜数据由我们控制;华为作为服务提供方依据其服务协议处理。

本应用集成华为应用内支付服务(IAP Kit,由华为软件技术有限公司提供),用于会员订阅、一次性购买、 恢复购买与订阅管理。调用时会向华为传输完成交易所必需的信息(如商品标识、订单与购买凭据,以及你已登录的华为账号), 具体处理规则适用华为的隐私声明。除此之外,本应用不集成广告 SDK、统计分析 SDK、崩溃上报 SDK 或其他会向第三方传输个人信息的 SDK;除上述由你主动使用功能所需的数据传输外,不出售、出租、交换或公开披露你的个人信息, 也不进行跨应用追踪或个性化广告。

本应用调用 HarmonyOS 提供的应用存储、振动、备份恢复和外部链接等系统能力。华为及设备系统运营方可能依据你的 设备设置和其自身政策处理应用分发、系统安全、备份恢复或故障诊断所需的信息;该等平台处理不由本应用控制。 你可在设备设置及华为相关服务中管理这些选项。

6. 存储地点、安全与保存期限

游戏数据和偏好保存在你的 HarmonyOS 设备上的应用私有目录。HarmonyOS 的沙箱和访问控制用于防止其他普通应用直接读取。 若你在系统中启用了应用备份,系统可能按照你的备份设置备份和恢复本应用数据;我们无法读取该系统备份。

本机数据保留至你在应用内重置相应进度、清除应用数据或卸载应用。系统备份副本的保存期限由你的华为账号、 设备设置及相应系统服务规则决定,你可通过系统提供的备份管理功能处理。

排行榜数据存储在华为 AppGallery Connect 云数据库(中国),仅能通过我们的云函数写入,传输全程加密。 周榜记录在约 8 周后自动删除;总榜记录和名字在排行榜运营期间保留,你可随时按第 7 节请求删除; 排行榜停止运营时,我们将删除全部排行榜数据。

7. 你的选择与权利

  • 在“设置 › 关于”中随时重新查看本政策和用户协议。
  • 在“设置 › 数据 › 重置进度”删除关卡进度、统计、脑力档案及地狱模式记录。
  • 在“设置 › 数据 › 撤回隐私同意”撤回同意;应用会退出,下次启动时再次征求你的选择。撤回不影响此前处理的合法性,也不会自动删除本机游戏数据。
  • 通过系统清除应用数据或卸载本应用,删除应用私有目录中的全部本机数据。
  • 排行榜:不点击“加入”即不参与。已加入的,清除应用数据或卸载后本应用不再上传,直到你再次点击“加入”。 如需删除已上传的排行榜记录,请发邮件并附上你在榜上显示的名字,我们核实后删除该玩家编号的全部记录和名字。
  • 通过上方邮箱提出查阅、复制、更正、删除、解释说明或投诉请求。除排行榜数据外,本应用不向我们上传数据, 我们通常没有可按你的身份检索的其他服务器端记录,但会说明核查结果并协助你使用本机或系统功能。

8. 未成年人保护

本应用不以收集个人信息为目的,也不会为儿童或其他用户建立广告画像。不满 14 周岁的未成年人应在父母或其他监护人 指导下阅读本政策和使用本应用;如未来功能需要处理儿童个人信息,我们会在处理前另行告知并依法取得监护人同意。

9. 数据出境

排行榜数据存储于华为 AppGallery Connect 的中国数据处理位置,不向境外提供。群星计划收到的数据及其处理规则见第 5 节; 我们不对第三方服务的存储地点作未经核实的承诺。 通过系统浏览器访问本页面时,GitHub Pages 可能依据其服务规则处理网络连接所必需的信息; 该访问发生在系统浏览器中,你也可以在首次同意后离线使用主要游戏功能。

10. 政策更新

若本应用的数据处理方式、权限或第三方 SDK 发生变化,我们会先更新本政策及应用市场隐私声明。 对你的权益有重大影响或需要另行同意的变更,将通过应用内醒目方式告知并在处理前重新征得同意; 不会仅以继续使用视为同意新增的个人信息处理。

11. 联系我们

个人信息处理者:鲁亮(Gentleflow)
联系邮箱:gentleflowoverseas@gmail.com
应用:九重数独 HarmonyOS 版(tech.gentleflow.ninefold)

Privacy Policy (HarmonyOS)

Ninefold Sudoku · Effective and last updated September 26, 2026

Summary: The HarmonyOS edition is an offline game. It requires no account, and includes no advertising, analytics, or third-party tracking SDK. Progress and preferences remain in the App's private on-device storage. From version 1.8.0, opening AppUnions sends a locally generated random identifier and app impression/click information to the recommendation service, as described in section 5. From version 1.8.4, the Hell leaderboard is optional: only after you tap “Join” on the leaderboard page does the App obtain a HUAWEI ID credential and upload an irreversible player number derived from it, together with your Hell scores, to our cloud service on Huawei AppGallery Connect, as described in section 3.1.

1. Controller and contact

This edition of Ninefold Sudoku (“the App”) is developed and operated by Lu Liang (developer brand: Gentleflow), the controller for the practices described here. Contact gentleflowoverseas@gmail.com. We normally respond within 15 business days.

2. Scope

This policy applies only to the HarmonyOS App with bundle name tech.gentleflow.ninefold. The iOS edition has a separate policy.

3. Data handled by the App

Apart from the leaderboard you choose to join (section 3.1), the App does not collect identifiable personal information or transmit it to a developer server. No name, phone number, email, device identifier, contacts, photos, precise location, clipboard, camera, or microphone data is requested.

When you buy Premium, the transaction is completed by AppGallery in-app purchase (IAP Kit) using the HUAWEI ID already signed in on your device. Huawei processes the account, order, and payment information needed to complete the purchase and manage the subscription under its own policy. The App does not receive your HUAWEI ID profile and never handles your card number or payment credentials.

The App locally stores game progress and statistics, unfinished puzzles, preferences, the accepted-policy version, and your Premium plan and entitlement status. This information is used only to save games, show statistics, restore play, apply your settings, and remember your privacy choice. It remains in the App's private on-device storage and is not uploaded by the App.

3.1 Hell leaderboard (optional)

When: only after you tap “Join” on the leaderboard page. If you don't join, none of the following happens; you can still browse the board.

  • HUAWEI ID credential: when you join and before each score upload, the App uses HUAWEI Account Kit to obtain a sign-in credential (ID token containing the user identifier Huawei issues for this App) for the HUAWEI ID signed in on the device. Only that identifier is requested — no nickname, avatar, phone number, or email. No screen appears if a HUAWEI ID is signed in; otherwise the system shows the HUAWEI ID sign-in page, which you can cancel.
  • What is uploaded and stored: our cloud function verifies the credential, then derives an irreversible player number from the account identifier with a secret key and stores only that number; the credential and the raw identifier are not stored. Stored with it: best Hell score, floor reached, best combo, flawless flag, week, update time, your system region setting (two-letter code, not currently shown), and your board name.
  • Board name: generated from the App's built-in word list (e.g. “Silent Raven”). You can reshuffle it but cannot type text; the server stores only word-list indices.
  • Visibility: other players see your name (or a four-character code), rank, score, floor, and flawless mark — never your HUAWEI ID details.
  • Purpose: keep you on the same row across devices and reinstalls, and prevent impersonation and forged scores.
  • Stored on device: your player number, name indices, and this week's uploaded best, used to mark your own row and avoid duplicate uploads.

4. Permission and system capabilities

  • Vibration: ohos.permission.VIBRATE provides haptic feedback according to your in-App setting.
  • Network: ohos.permission.INTERNET is used by AppGallery in-app purchase (IAP Kit) to load products and prices, start payment, verify purchases, and manage subscriptions. It also loads AppUnions recommendations, icons and details and reports impressions and clicks after you open the feature, and reads the leaderboard and, after you join, uploads the data described in section 3.1. Otherwise the App uploads no game data or personal information to a developer server. Legal and contact links are handed to your system browser or mail app, which handles any later connection.

Network state permission (ohos.permission.GET_NETWORK_INFO) supports network capabilities used by recommendations and AppGallery and requires no runtime permission prompt.

5. SDKs and disclosure

AppUnions: This optional feature connects directly to AppUnions (appunion.chiyoushu.com) to recommend other independent HarmonyOS apps. Requests for this feature start only after you open its entry in Settings. Recommendation and detail requests include this App's ID and the harmonyos platform. Impressions and clicks additionally send the recommended app's ID, a locally generated and persisted random client_id (UUID), and a random event identifier for deduplication; impressions include visibility status. The client_id is not a device identifier and is not linked to your account or game progress. Clearing App data or uninstalling removes the local identifier. The service also receives connection information such as your IP address and handles received data under its own rules. No game progress, purchase records, device identifier, or HUAWEI ID is sent. There is no personalized advertising or cross-app tracking. No AppUnions SDK, banner, or interstitial is integrated. Download buttons open the system store or destination website. You can avoid this feature's transmissions by not opening it.

HUAWEI Account Kit and AppGallery Connect cloud services: the Hell leaderboard uses Account Kit to obtain the credential in section 3.1, and stores leaderboard data with AppGallery Connect Cloud Functions and Cloud DB (provided by Huawei, data processing location: China). We use these services as the developer and control the leaderboard data; Huawei processes it as the service provider under its service terms.

The App integrates AppGallery in-app purchase (IAP Kit, provided by Huawei) for Premium subscriptions, one-time purchase, restore, and subscription management. Using it transmits the information required to complete a transaction, such as product identifiers, orders, purchase tokens, and the signed-in HUAWEI ID; Huawei's own privacy statement governs that processing. Apart from that, the App contains no advertising, analytics, crash-reporting, or other third-party SDK that transmits personal information. Apart from the optional feature transmissions described above, we do not sell, rent, publicly disclose, or use personal information for cross-app tracking or personalized advertising.

The App uses HarmonyOS system storage, vibration, backup/restore, and external-link capabilities. Huawei or the device system operator may process information needed for distribution, security, backup, or diagnostics under your settings and their own policies. That platform processing is outside the App's control.

6. Storage, security, and retention

App data is protected by HarmonyOS app-private storage and sandbox controls. If system app backup is enabled, HarmonyOS may back up and restore this data under your system settings; we cannot read that backup. Local data remains until you reset it, clear App data, or uninstall the App. System backup retention is controlled through your device and Huawei services.

Leaderboard data is stored in AppGallery Connect Cloud DB (China), can be written only through our cloud function, and is encrypted in transit. Weekly rows are deleted automatically after about 8 weeks; all-time rows and names are kept while the leaderboard operates and can be deleted on request (section 7). If the leaderboard is discontinued, we delete all its data.

7. Your choices

  • Review these documents anytime under Settings › About.
  • Use Settings › Data › Reset progress to delete progress and gameplay statistics.
  • Use Settings › Data › Withdraw privacy consent. The App closes and asks again at the next launch; withdrawal does not automatically delete local game data.
  • Clear App data or uninstall to remove the App's private on-device data.
  • Leaderboard: not tapping “Join” means not participating. After joining, clearing App data or uninstalling stops uploads until you tap “Join” again. To delete uploaded leaderboard records, email us with the name shown for you on the board; after verification we delete all records and the name for that player number.
  • Email us to request access, correction, deletion, explanation, or to complain. Apart from leaderboard data, nothing is uploaded, so we normally hold no other server record that can be retrieved by identity.

8. Children

The App does not build advertising profiles or seek children's personal information. Children under 14 should use it with a parent or guardian. We will provide a new notice and obtain legally required guardian consent before any future processing of children's data.

9. International transfers

Leaderboard data is stored in AppGallery Connect's China data processing location and is not transferred abroad. If you open this page in a browser, GitHub Pages may process connection data under its own terms. The principal game can be used offline after the first consent.

10. Updates

We will update this policy and the AppGallery privacy declaration before changing data practices, permissions, or third-party SDKs. Material changes will be prominently disclosed, and fresh consent will be requested before processing where required.

11. Contact

Controller: Lu Liang (Gentleflow)
Email: gentleflowoverseas@gmail.com
App: Ninefold Sudoku for HarmonyOS (tech.gentleflow.ninefold)


用户协议 / Terms of Use · 九重数独支持 · 全部 Gentleflow 政策