Privacy Policy
Cradle Story is a baby-care simulation. It is built so that almost everything you do stays on your iPhone. There is no account, no sign-in, no advertising and no cross-app tracking. This policy explains the small amount of data that does leave your device, why, and how long it is kept.
1. Who we are
Cradle Story is published by BurningFlower INC (“we”, “us”). You can reach us at [email protected].
2. What stays on your device
Your saves, your baby's name and details, every care action, your night reports, diary, collected cards and settings are stored only on your iPhone, in the app's private storage shared with its own widgets. We do not receive them. If you delete the app, this data is deleted with it. It may be included in your own device backups, which Apple handles under its own terms.
Cradle Story does not ask for or collect your contacts, microphone, precise location, health data or real information about any child. If you add a photo to a challenge card, you pick it yourself; it stays on your device and is never uploaded. Saving a card to Photos only asks for permission to add images.
3. What we collect
| Data | When | Why | Linked to you? |
|---|---|---|---|
| A random installation ID | First launch | Lets our servers recognize this copy of the app for invites and Live Activity updates | It is not tied to your name, Apple ID or email |
| Baby name, sex, temperament, your nickname, comparison summary | Only when you send or accept a partner invite | So your partner can raise the same baby and see the comparison card | Tied to the installation ID |
| Live Activity push tokens and today's reminder times | When Daily Moments are on | To start and update the Live Activity at the right time | Tied to the installation ID |
| App usage events, purchase events, app instance ID, general region from IP | While you use the app | Analytics, to understand which features work | Not linked to your identity |
We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising.
4. Partner invites
Inviting someone is optional. When you create an invite, the app uploads what your partner needs to start the same baby: the baby's name, sex and temperament, your optional nickname, the game settings and content version, and, for a Real Night challenge, the plan of that night. You see this on the share screen before anything is sent. As you both reach comparison points (the first month, the challenge night, the end of the chapter), each app uploads a short numeric summary, such as how many cues were read correctly on the first try. Your full care log is never uploaded.
- Anyone with the code can see a preview of the invite until someone accepts it. After that, only the two of you can read it.
- Each side can write only its own summary.
- You can revoke an invite at any time in Me › Saves & invites.
5. Analytics
We use Google Analytics for Firebase to count things like sessions, screens viewed, which care actions are chosen, whether hints are on, and purchases. Events are tied to a random app instance ID, not to your identity. We do not collect the advertising identifier (IDFA) and do not use analytics data for advertising. Google derives a general region (such as country or state) from your IP address. See Google's Privacy Policy.
6. Notifications and Live Activities
If you keep Daily Moments on, the app sends our server the times of today's remaining moments and a push token from Apple, so a Live Activity can appear on your Lock Screen when your baby “needs” you. Real Night alarms and local notifications are scheduled on your device and do not involve our servers.
7. Purchases
The one-time unlock is sold through Apple. Apple processes the payment; we never see your card or Apple ID. The app checks your purchase with Apple on the device. Family Sharing works through Apple as well.
8. Who we share data with
- Your partner, only through an invite you create or accept, as described above.
- Service providers who run infrastructure for us under contract: Cloudflare (hosting for our website, content downloads, and the invite and notification services), Google (Firebase Analytics), and Apple (push delivery and purchases).
- Legal reasons, if required by law or to protect rights and safety.
9. How long we keep data
| Data | Kept until |
|---|---|
| Invite that nobody accepted | Deleted 30 days after it was created |
| Accepted challenge (invite data and summaries) | Deleted after the end-of-chapter comparison, at most 180 days after acceptance |
| Revoked invite | Deleted 7 days after you revoke it |
| Push tokens | Deleted 24 hours after the Live Activity ends or expires |
| Notification data for an installation | Deleted after 30 days without use |
| Analytics events | Kept for 14 months in Google Analytics, then deleted |
| Server logs (IP address, request time) | Kept for up to 30 days for security and troubleshooting |
10. Your choices and rights
- Turn off anonymous analytics in Me › Content & privacy.
- Turn off Daily Moments in Me to stop sending reminder times and push tokens.
- Turn off Live Activities or notifications in iPhone Settings › Cradle Story.
- Revoke invites in Me › Saves & invites, or delete a save to leave a challenge.
- Delete the app to remove all data stored on your device.
Depending on where you live, including California and other U.S. states, you may have the right to know, access, correct or delete personal information and to opt out of its sale or sharing (we do neither). Because we have no accounts, the easiest way to delete invite data is to revoke it in the app. You can also email [email protected] with your invite code and we will delete it. We will not discriminate against you for using these rights.
10a. If you are in the EU, EEA, UK or Switzerland
BurningFlower INC is the controller of the personal data described in this policy.
- Legal bases: we process invite data and notification data to provide the features you ask for (performance of a contract); we process analytics data based on our legitimate interest in understanding and improving the App, and you can switch analytics off at any time in Me › Content & privacy.
- Your rights: you can ask to access, correct or delete your data, restrict or object to processing, and receive your data in a portable format. Email [email protected]. You can also complain to your local data protection authority.
- International transfers: data is processed in the United States. Transfers rely on our providers' certifications under the EU–U.S. Data Privacy Framework and its UK and Swiss extensions (Cloudflare and Google participate), or on the European Commission's Standard Contractual Clauses.
- We don't make decisions about you based solely on automated processing.
11. Children
Cradle Story is made for adults and is rated 16+ on the App Store. It is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us information, contact us and we will delete it. The baby in the game is fictional; please do not enter real information about a child.
12. Security and location of data
Data in transit is encrypted with HTTPS. Server access is limited to people who need it to run the service. Our services run on Cloudflare. Invite and notification data is stored in the United States; requests may pass through Cloudflare's global network on the way. If you use the App outside the United States, the limited data described above is transferred to and processed in the United States. No system is perfectly secure, so we keep what we collect to a minimum.
13. Changes
If we change this policy, we will update the date at the top. If a change is significant, we will tell you in the app before it takes effect.
14. Contact
BurningFlower INC · [email protected]
隐私政策
Cradle Story 是一款育儿模拟应用。它的设计是让你做的几乎所有事都只留在你的 iPhone 上：没有账号、不用登录、没有广告，也不做跨 App 追踪。本政策说明少量会离开你设备的数据是什么、为什么、保留多久。
1. 我们是谁
Cradle Story 由 BurningFlower INC（“我们”）发布。联系邮箱：[email protected]。
2. 只留在设备上的数据
你的存档、宝宝的名字和信息、每一次照顾操作、夜间报告、日记、收集到的卡片和设置，都只保存在你的 iPhone 上（App 与它自己的小组件共用的私有存储），我们收不到。删除 App 时这些数据会一起删除；它们可能包含在你自己的设备备份里，由 Apple 按其条款处理。
Cradle Story 不会请求或收集你的通讯录、麦克风、精确位置、健康数据，也不收集任何真实孩子的信息。如果你给挑战卡加照片，是你自己选的那一张，只在你的设备上使用，从不上传；把卡片存到相册只会请求“添加照片”的权限。
3. 我们收集什么
| 数据 | 什么时候 | 用途 | 是否与你关联 |
|---|---|---|---|
| 随机生成的安装 ID | 首次启动 | 让服务器识别这份 App，用于邀请和实时活动更新 | 不与你的姓名、Apple ID 或邮箱关联 |
| 宝宝名字、性别、性格，你的昵称，对照摘要 | 仅在你发出或接受伴侣邀请时 | 让另一半养同一个宝宝并看到对照卡 | 与安装 ID 关联 |
| 实时活动推送令牌、当天剩余提醒的时间 | 开启“日常时刻”时 | 在合适的时间启动和更新实时活动 | 与安装 ID 关联 |
| 使用事件、购买事件、App 实例 ID、由 IP 推算的大致地区 | 使用 App 时 | 数据分析，了解哪些功能好用 | 不与你的身份关联 |
我们不出售你的个人信息，也不为跨情境行为广告“共享”它。
4. 伴侣邀请
邀请是可选的。创建邀请时，App 会上传对方开局需要的内容：宝宝的名字、性别、性格，你填写的昵称（可不填），游戏设置和内容版本；如果是真实一夜挑战，还包括那一晚的计划。发送前你会在分享页上看到这些。你们各自到达对照节点（第一个月、挑战夜、第一章结束）时，App 会上传一份简短的数字摘要，例如第一次就读对信号的次数。完整的照顾记录从不上传。
- 在有人接受之前，持有邀请码的人可以看到邀请预览；接受之后只有你们两人能读取。
- 每一方只能写入自己的摘要。
- 你可以随时在“我 › 存档与邀请”里撤回邀请。
5. 数据分析
我们使用 Google Analytics for Firebase 统计使用次数、浏览的页面、选择了哪些照顾操作、是否开启提示、购买等。事件只与随机的 App 实例 ID 关联，不与你的身份关联。我们不收集广告标识符（IDFA），也不把分析数据用于广告。Google 会根据 IP 地址推算大致地区（如国家或州）。详见 Google 隐私权政策。
6. 通知和实时活动
如果你开着“日常时刻”，App 会把当天剩余时刻的时间和 Apple 提供的推送令牌发给我们的服务器，这样宝宝“需要你”时，锁屏上能出现实时活动。真实一夜的闹钟和本地通知都在设备上安排，不经过我们的服务器。
7. 购买
一次性解锁通过 Apple 销售，由 Apple 处理付款，我们看不到你的银行卡或 Apple ID。App 在设备上向 Apple 核验购买。家人共享也通过 Apple 实现。
8. 我们与谁共享
- 你的另一半：仅通过你创建或接受的邀请，范围如上。
- 服务提供商：按合同为我们提供基础设施的公司，包括 Cloudflare（托管官网、内容下载以及邀请和通知服务）、Google（Firebase Analytics）、Apple（推送和购买）。
- 法律原因：法律要求时，或为保护权利和安全时。
9. 保留多久
| 数据 | 保留到 |
|---|---|
| 没人接受的邀请 | 创建后 30 天删除 |
| 已接受的挑战（邀请数据和摘要） | 第一章对照完成后删除，最长为接受后 180 天 |
| 已撤回的邀请 | 撤回后 7 天删除 |
| 推送令牌 | 实时活动结束或过期后 24 小时删除 |
| 某个安装的通知数据 | 30 天未使用后删除 |
| 分析事件 | 在 Google Analytics 中保留 14 个月后删除 |
| 服务器日志（IP 地址、请求时间） | 为安全和排查问题最多保留 30 天 |
10. 你的选择和权利
- 在“我 › 内容来源与隐私”里关闭匿名统计。
- 在“我”里关闭“日常时刻”，就不再发送提醒时间和推送令牌。
- 在 iPhone 设置 › Cradle Story 里关闭实时活动或通知。
- 在“我 › 存档与邀请”里撤回邀请，或删除存档退出挑战。
- 删除 App，即删除设备上的全部数据。
根据你所在地（包括加利福尼亚州等美国各州）的法律，你可能有权了解、访问、更正或删除个人信息，并拒绝其被出售或共享（我们两者都不做）。由于没有账号，删除邀请数据最简单的方法是在 App 里撤回；你也可以发邮件到 [email protected] 并附上邀请码，我们会删除。你行使这些权利不会受到差别对待。
10a. 如果你在欧盟、欧洲经济区、英国或瑞士
BurningFlower INC 是本政策所述个人数据的控制者。
- 法律依据：处理邀请数据和通知数据，是为了提供你要求使用的功能（履行合同）；处理分析数据，基于我们了解和改进 App 的正当利益，你可以随时在“我 › 内容来源与隐私”里关闭统计。
- 你的权利：你可以要求访问、更正或删除你的数据，限制或反对处理，以及以可携带的格式获取数据。请发邮件至 [email protected]。你也可以向当地数据保护机构投诉。
- 跨境传输：数据在美国处理。传输依靠服务商在欧盟—美国数据隐私框架及其英国、瑞士扩展下的认证（Cloudflare 和 Google 均已参加），或欧盟委员会的标准合同条款。
- 我们不会仅凭自动化处理对你做出决定。
11. 儿童
Cradle Story 面向成年人，在 App Store 的分级为 16+。它不面向 13 岁以下儿童，我们也不会在知情的情况下收集他们的个人信息。如果你认为有儿童向我们提供了信息，请联系我们删除。游戏里的宝宝是虚构的，请不要输入任何真实孩子的信息。
12. 安全与数据所在地
传输中的数据使用 HTTPS 加密，服务器只有运营服务所需的人员可以访问。我们的服务运行在 Cloudflare 上，邀请和通知数据存储在美国，请求可能经过 Cloudflare 的全球网络。如果你在美国以外使用本 App，上述有限的数据会传输到美国并在美国处理。没有绝对安全的系统，所以我们尽量少收集。
13. 政策变更
修改本政策时，我们会更新顶部的日期；重大变更会在生效前在 App 内告知你。
14. 联系我们
BurningFlower INC · [email protected]