Lumen
Lumen 是一个安静的地方. 我们相信你的情绪只属于你.
生效日期: 2026 年 7 月 25 日 · 最后更新: 2026 年 7 月 25 日
核心承诺
Lumen 是纯本地应用. 你的所有情绪数据 (星火、低语、时间胶囊、心海观察结果) 都只存在于你的 iPhone 上. 我们没有服务器. 我们从不接收、上传、或转发这些数据到任何地方.
- 不收集任何个人数据 — 姓名、邮箱、电话、位置、联系人、通话记录、Apple ID, 一律不收集.
- 不上传你的情绪记录 — 每一颗星火 (mood、POW 数据、低语文本、恒星归属) 都只存在于你的 iPhone 本地 UserDefaults 与 Keychain 中.
- 不共享任何数据 — 我们没有第三方分析、没有广告 SDK、没有崩溃报告服务、没有 A/B 测试平台.
- 不跟踪你 — 我们不使用 IDFA、不做跨 App 追踪、不请求 App Tracking Transparency 权限.
- 无账号 — Lumen 不需要注册, 不需要登录, 不知道你是谁.
数据分类清单
为对齐 App Store "隐私标签" (Nutrition Label) 与欧盟 GDPR 第 13 条要求, 详细列出:
| 数据类别 | 是否收集 | 说明 |
|---|---|---|
| 联系信息 | 否 | 不收集姓名 / 邮箱 / 电话 |
| 健康与健身 | 否 | 不接入 HealthKit |
| 敏感信息 | 否 | 不收集种族、政治、宗教、性取向等 |
| 财务信息 | 否 | 购买由 Apple StoreKit 直接处理 |
| 位置 | 否 | 不请求任何位置权限 |
| 用户内容 | 本地 | whisper 文本、时间胶囊留言 — 只存本地, 不上传 |
| 标识符 | 否 | 不使用 IDFA / IDFV / 设备指纹 |
| 使用数据 | 否 | 不做行为分析 |
| 诊断 | 否 | 不做崩溃上报 |
| Motion 数据 | 本地实时 | 仅呼吸仪式期间读取, 计算完立即丢弃 |
Lumen 使用的手机权限
陀螺仪 (Motion & Fitness)
仅在你双手压屏做仪式时读取, 用于计算"呼吸稳定度". 采样在仪式结束时即弃, 不写入任何持久化存储, 也从不离开你的 iPhone. 你可以在系统"设置 → 隐私 → 运动与健身 → Lumen"里关闭.
本地通知 (Notifications)
用于五种回眸推送:
- 周年彩蛋: 投出星火后的 7 / 30 / 365 天各一次静音提醒
- 每日回眸: 默认关闭, 用户主动开启后每晚 21:00
- 年度回忆录: 每年 12 月 31 日 20:00
- 时间胶囊到期: 用户封存的胶囊到达日期时
- 心海观察 (PRO): 每周日 21:30
全部推送在本地调度, 不依赖任何服务器. 你可以在系统"设置 → Lumen → 通知"里随时关闭.
Lumen 不使用位置、相机、麦克风、照片图库、通讯录、日历、健康、蓝牙、Wi-Fi 网络列表、面容 ID、指纹、剪贴板等任何其他权限.
数据存储与保留
Lumen 的所有数据都存储在你的 iPhone 本地:
- UserDefaults: 星火数组、封存 ID、语言偏好、主题偏好、通知开关状态
- Keychain: "是否已购买 PRO" 的布尔值 (不含 Apple ID)
- App 沙盒临时目录: 分享图片和导出的 JSON, 在 iOS 系统清理临时目录时自动删除
数据保留期限: 你安装 App 期间数据一直保留. 你随时可以:
- 在 App 内"设置 → 数据 → 导出星海"备份为 JSON 文件带走
- 直接卸载 Lumen — 所有数据随 App 一起被 iOS 系统删除, 不可恢复
关于低语与统计
Lumen 里的每一条低语, 都来自真实的人.
一部分是我们和信任的朋友、以及自愿投稿的用户匿名手写的.
一部分来自公开心理学材料的策展和重写.
我们不使用 AI 生成低语.
我们不虚构人物或事件.
我们不上传你的任何数据.
Lumen 里的每一条统计数字, 都来自权威公开报告 (WHO Mental Health Atlas, Gallup Global Emotions Report, APA Stress in America, 中国国民心理健康发展报告 等). 我们标注每一条的来源. 我们不夸大. 如果一个数字过时了, 我们会告诉你它的年份.
关于购买
Lumen 使用 Apple StoreKit 处理购买. Apple 会记录你的购买交易 (这是 App Store 的标准机制, 受 Apple 隐私政策约束), 但 Lumen 本身不知道你的 Apple ID, 也不接收任何账户信息. 我们只在设备本地的 Keychain 中缓存"是否已购买"这一个布尔值.
Layer 1 一次买断与 Layer 2 年度纪念集均为一次性购买, 不涉及订阅、不会自动续费. 你可以随时通过"恢复购买"重新解锁 (基于 Apple ID 家庭共享).
你的权利 (GDPR / CCPA)
因为 Lumen 不收集数据, 传统的隐私法规里的多数权利天然满足:
- 知情权: 本文档即披露, 使用即同意 (无需勾选).
- 访问权: 你的数据一直在你手机里 — 打开 Lumen 即可看. "导出星海"生成完整 JSON 文件.
- 更正权: 星火详情页可编辑 whisper (v1.1+); 时间胶囊可以提前拆封.
- 删除权 ("被遗忘权"): 卸载 App 即彻底删除. 我们没有服务器备份.
- 可携权: "导出星海"输出标准 JSON, 可导入到 Lumen 或未来第三方兼容工具.
- 拒绝跟踪权 (CCPA "Do Not Sell"): Lumen 不销售 / 不共享 / 不跟踪, 无需请求.
- 投诉权: 如认为我们侵犯了你的隐私, 请邮件 same4869@163.com. 你也可以向当地数据保护机构 (欧盟成员国的 DPA / 中国网信办等) 投诉.
关于儿童 (COPPA / GDPR-K)
Lumen 不面向 13 岁以下 (COPPA 定义) 或 16 岁以下 (欧盟 GDPR 定义) 的儿童. 我们不知情地收集儿童数据. 如果你是儿童的父母或监护人, 发现你的孩子在使用 Lumen, 请卸载 App, 所有数据将随之删除.
数据安全
因数据全部本地存储, Lumen 的数据安全等同于你 iPhone 自身的安全 (设备密码 · 生物识别 · Face ID / Touch ID · 系统级加密). 建议给 iPhone 设置强密码.
Keychain 里的 PRO 状态使用 kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly, iCloud 备份时不会带走, 恢复到新设备时不会误显示 PRO — 需要"恢复购买"通过 Apple ID 家庭共享重新解锁.
第三方服务
Lumen 只使用 Apple 官方框架:
- SwiftUI · SpriteKit · UIKit — 系统 UI
- CoreMotion — 陀螺仪采样
- NaturalLanguage — 用户 whisper 的分词与情感分析 (纯本地, 不联网)
- StoreKit — 购买流程
- UserNotifications — 本地通知
不集成任何第三方 SDK — 无 Firebase、无 Sentry、无 Mixpanel、无 Google Analytics、无微信 SDK、无广告 SDK.
政策变更
本隐私政策可能因法律要求或产品变更而更新. 更新时:
- 本页顶部的"最后更新"日期会变化
- 如变更涉及新增数据收集, 我们会在 App 内显著位置提示 (App 更新说明或首次启动引导)
- 不会追溯变更 — 已经生效的隐私约定, 我们不因政策更新而对既有用户失效
联系方式
Lumen 由独立开发者 xunwang 制作. 如果你对隐私有任何疑问或投诉, 请邮件联系 same4869@163.com. 我们承诺在 7 个工作日内回复.
关于心理危机
Lumen 不能替代专业的心理帮助.
如果你正在经历严重的心理危机, 请联系:
- 中国心理援助热线: 400-161-9995
- 北京心理危机研究与干预中心: 010-82951332
- 或联系当地的心理援助热线
Lumen is a quiet place. We believe your emotions belong only to you.
Effective: July 25, 2026 · Last updated: July 25, 2026
Core Promise
Lumen is a fully on-device app. All your emotional data (embers, whispers, time capsules, sea insights) exists only on your iPhone. We have no servers. We never receive, upload, or forward any of it anywhere.
- No personal data collected — no name, email, phone, location, contacts, call history, or Apple ID.
- No emotional records uploaded — every ember (mood, POW data, whisper, star anchor) lives only in your iPhone's local UserDefaults and Keychain.
- No data shared — no third-party analytics, no ad SDKs, no crash reporting, no A/B testing platforms.
- No tracking — no IDFA, no cross-app tracking, no App Tracking Transparency prompt.
- No account — Lumen requires no signup, no login. We don't know who you are.
Data Categories
Per App Store Nutrition Label and EU GDPR Article 13 requirements:
| Category | Collected | Notes |
|---|---|---|
| Contact Info | No | No name / email / phone |
| Health & Fitness | No | HealthKit not used |
| Sensitive Info | No | No race, politics, religion, sexual orientation |
| Financial Info | No | Purchases handled by Apple StoreKit directly |
| Location | No | No location permission requested |
| User Content | On device | Whisper text, capsule messages — local only, never uploaded |
| Identifiers | No | No IDFA / IDFV / device fingerprint |
| Usage Data | No | No behavioral analytics |
| Diagnostics | No | No crash reporting |
| Motion Data | On device · ephemeral | Only during breathing ritual; discarded immediately after |
Permissions Used
Motion & Fitness
Read only while your fingers are pressing the screen during a breathing ritual, to calculate a "breath stability" score. Samples are discarded the moment the ritual ends and never written to persistent storage or leave your iPhone. You can revoke it anytime under Settings → Privacy → Motion & Fitness → Lumen.
Notifications
Used for five types of quiet local reminders:
- Anniversary: One silent reminder at T+7 / 30 / 365 days after placing an ember
- Nightly Echo: Off by default; opt-in schedules 9 PM daily
- Year in Stars: December 31 at 8 PM
- Time Capsule: When a sealed capsule reaches its unlock date
- Sea Insight (PRO): Sunday 9:30 PM
All notifications are scheduled locally with no server involvement. You can disable them anytime under Settings → Lumen → Notifications.
Lumen does not use Location, Camera, Microphone, Photos, Contacts, Calendar, Health, Bluetooth, Wi-Fi network list, Face ID, Touch ID, Clipboard, or any other permissions.
Data Storage & Retention
All Lumen data is stored locally on your iPhone:
- UserDefaults: Ember array, sealed IDs, language preference, theme preference, notification toggles
- Keychain: A single boolean for "PRO unlocked" (no Apple ID stored)
- App Sandbox Tmp Directory: Share images and exported JSON, auto-deleted by iOS when it cleans tmp
Retention: Data persists as long as Lumen is installed. You can:
- Back up as JSON via Settings → Data → Export Starfield
- Uninstall Lumen — all data is deleted with the app by iOS, unrecoverable
Whispers & Statistics
Every whisper in Lumen comes from a real person.
Some are written anonymously by us, trusted friends, and users who volunteered.
Some are curated and rewritten from public psychology materials.
We do not use AI to generate whispers.
We do not fabricate people or events.
We do not upload any of your data.
Every statistic in Lumen comes from authoritative public reports (WHO Mental Health Atlas, Gallup Global Emotions Report, APA Stress in America, etc.). We cite our sources. We do not exaggerate. If a number is outdated, we tell you its year.
Purchases
Lumen uses Apple StoreKit for purchases. Apple records your transactions per the App Store standard mechanism (subject to Apple's Privacy Policy), but Lumen itself does not know your Apple ID and receives no account information. We only cache a single "PRO unlocked" boolean in local Keychain.
Layer 1 one-time purchase and Layer 2 yearly keepsake are both non-subscription, non-renewing. You can restore purchases anytime (via Apple ID Family Sharing).
Your Rights (GDPR / CCPA)
Because Lumen does not collect data, most traditional privacy rights are naturally satisfied:
- Right to be informed: This document; use of the app implies consent (no checkbox needed).
- Right of access: Your data is on your phone — open Lumen to see it. "Export Starfield" generates a complete JSON.
- Right to rectification: Edit whisper in ember detail (v1.1+); time capsules can be unsealed early.
- Right to erasure ("Right to be Forgotten"): Uninstall the app to delete everything. We have no server backups.
- Right to data portability: "Export Starfield" outputs standard JSON, importable back to Lumen or future compatible tools.
- Right to opt out of tracking (CCPA "Do Not Sell"): Lumen does not sell / share / track. No request needed.
- Right to lodge a complaint: If you believe we have violated your privacy, email same4869@163.com. You may also file a complaint with your local data protection authority (EU member state DPAs, California AG's office, etc.).
Children (COPPA / GDPR-K)
Lumen is not directed at children under 13 (US COPPA) or under 16 (EU GDPR). We do not knowingly collect data from children. If you are a parent or guardian and discover your child is using Lumen, please uninstall the app; all data will be deleted.
Data Security
Because all data is stored locally, Lumen's data security is equivalent to your iPhone's own security (device passcode · biometrics · Face ID / Touch ID · system-level encryption). We recommend setting a strong device passcode.
The PRO status boolean in Keychain uses kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly, which is excluded from iCloud backups. Restoring to a new device does not falsely show PRO — "Restore Purchase" via Apple ID Family Sharing is needed to unlock again.
Third-Party Services
Lumen only uses Apple's first-party frameworks:
- SwiftUI · SpriteKit · UIKit — system UI
- CoreMotion — gyroscope sampling
- NaturalLanguage — on-device tokenization and sentiment analysis of your whispers (fully offline)
- StoreKit — purchases
- UserNotifications — local notifications
No third-party SDKs integrated — no Firebase, no Sentry, no Mixpanel, no Google Analytics, no ad SDKs.
Changes to This Policy
This policy may be updated due to legal requirements or product changes. When updated:
- The "Last updated" date at the top of this page will change
- If changes involve new data collection, we will prominently notify inside the app (release notes or first-launch dialog)
- No retroactive changes — previously effective privacy commitments will not be voided for existing users by policy updates
Contact
Lumen is made by independent developer xunwang. For any privacy questions or complaints, email same4869@163.com. We commit to replying within 7 business days.