憩目 · Qimu

隐私政策

最后更新：2026 年 7 月 25 日

憩目不收集你的任何数据。你的用眼记录和设置只保存在你自己的设备上，我们看不到，也拿不到。

简体中文

我们收集什么

什么都不收集。

憩目没有任何遥测、没有分析、没有崩溃上报、没有广告 SDK、没有账号系统。我们（开发者）永远不会收到关于你如何使用憩目的任何信息。

憩目在你设备上保存了什么

这些文件只存在于你自己的设备上，从不离开它：

文件	内容
`settings.json`	你的憩目作息、感知开关、语言、主题
`stats.json`	你的用眼统计：每天的屏幕时长、完成与跳过的憩目次数
`license.json`	试用起始日期、是否已购买 Pro
`logs/*.log`	运行日志（用于排查问题），只在本机，最多保留 7 天

Android：它们在应用自己的私有目录里，由系统按包名隔离，别的应用读不到。卸载应用即随之删除。

Windows：它们在 %LOCALAPPDATA%\Packages\<憩目的包名>\LocalCache\Roaming\Qimu\。你随时可以直接删掉整个文件夹 —— 憩目会重新开始，不会有任何数据留在别处。

macOS：它们在 ~/Library/Containers/com.qimuapp.qimu/（App Store 版的沙盒容器）里。你随时可以删掉整个容器 —— 憩目会重新开始，不会有任何数据留在别处。

憩目会读取哪些设备信息（以及它读不到什么）

为了做到"该提醒时提醒、不该打扰时闭嘴"，憩目要问系统几件事。每一项都是只读的，而且都拿不到你的内容：

Android

屏幕是亮着还是灭着 —— 用来判断你在不在看屏幕。屏幕灭了就停止计时，不会把你揣在兜里的时间算成用眼。
环境光亮度（lux） —— 只在你主动打开「暗光提醒」时使用。憩目读的是光线传感器返回的一个亮度数值，它不是摄像头，看不到任何图像。

🔴 Android 版不访问麦克风，也不查询你在用哪个应用。

桌面版靠"麦克风是否被占用"来避开会议、靠"前台是否全屏"来避开演示。手机上这两件事都不需要——不看屏幕自然会熄屏，熄屏信号已经把它们覆盖掉了。所以那两个探针在 Android 上是恒定值，一次系统查询都不发。

Windows

你有多久没碰键盘鼠标了 —— 只知道"距上次输入过去了多少毫秒"，读不到你按了哪个键、点了哪里。
前台是不是全屏应用 —— 用的是 Windows 自己用来决定"能不能弹通知"的那个接口，只返回一个状态。憩目不知道你在用哪个应用，更看不到窗口内容或标题。
是不是有应用正在使用麦克风 —— 用于在你开会、通话时暂停提醒。

🔴 说清楚这一条：憩目不访问麦克风，不录音，一个字节的音频都不碰。

它读的是 Windows 隐私中心自己维护的一条记录（注册表里的 CapabilityAccessManager\ConsentStore\microphone），这条记录只说明"当前有没有某个应用握着麦克风"。憩目既不知道是哪个应用在用，也不知道你说了什么。你可以在「设置 → 憩目计划 → 会议 / 通话免打扰」里随时关掉。

macOS

你有多久没碰键盘鼠标了 —— 只知道"距上次输入过去了多少秒"（系统的事件计时器），读不到你按了哪个键、点了哪里。
屏幕上有没有铺满全屏的窗口 —— 只读窗口的位置、大小与层级，用于在你演示、观影时不打扰。憩目刻意不读窗口标题（读标题在 macOS 上要「屏幕录制」权限，我们不要那个权限）——所以它不知道你在用哪个应用，更看不到内容。
是不是有应用正在使用麦克风 —— 问的是系统的音频设备状态（设备是否处于占用中），用于开会、通话时暂停提醒。憩目不访问麦克风本身，不录音，一个字节的音频都不碰。
屏幕是否已锁定 —— 锁屏时暂停计时，解锁再继续。

网络

憩目本身不做任何网络请求——没有服务器，也没有可上报的地方。

唯一的例外，我们主动写在这里：当你购买憩目 Pro、或应用校验你是否已购买时，会连接应用商店（Android 是 Google Play，Windows 是 Microsoft Store，macOS 是 App Store）。这条链路由对应的商店处理，遵循它们各自的隐私声明（Google / Microsoft / Apple）。我们收不到你的付款信息，也收不到你的账号信息——我们只会从商店得到一个答案：买了 / 没买。

反馈邮件

点「反馈建议」时，憩目会拉起你自己的邮件应用，并预先填好一段正文，其中含一小段诊断信息：应用版本、安装渠道、系统版本、当前语言与主题。

憩目自己不发送任何东西——发不发、发之前改成什么样，都由你决定，而且你在点发送前能看到全部内容。

儿童

憩目不面向 13 岁以下儿童，也不会有意收集他们的任何信息（我们不收集任何人的信息）。

变更

这份政策若有变更，我们会更新页首的日期。如果哪天憩目真的开始收集任何数据，我们会在应用里主动告诉你，而不是把它埋在这一页里。

联系

qimuapp@gmail.com

English

Privacy Policy

Last updated: 25 July 2026

Qimu collects nothing. Your eye-care records and settings stay on your own device. We can't see them and we can't get them.

What we collect

Nothing.

Qimu has no telemetry, no analytics, no crash reporting, no ad SDKs and no accounts. We (the developer) never receive any information about how you use Qimu.

What Qimu stores on your device

File	Contents
`settings.json`	Your break schedule, smart-rest switches, language, theme
`stats.json`	Your stats: daily screen time, breaks completed and skipped
`license.json`	Trial start date, whether Pro was purchased
`logs/*.log`	Local diagnostic logs, kept for 7 days at most

Android: they live in the app's own private directory, isolated by the system per package — no other app can read them. Uninstalling the app deletes them.

Windows: they live in %LOCALAPPDATA%\Packages\<Qimu's package name>\LocalCache\Roaming\Qimu\. You can delete that folder at any time — Qimu will simply start over. Nothing is kept anywhere else.

macOS: they live in ~/Library/Containers/com.qimuapp.qimu/ (the App Store build's sandbox container). You can delete that container at any time — Qimu will simply start over. Nothing is kept anywhere else.

What device information Qimu reads (and what it cannot see)

To know when to remind you and — just as importantly — when to stay quiet, Qimu asks the system a few things. Every one of them is read-only, and none of them can see your content:

Android

Whether the screen is on or off — used to tell whether you are actually looking at it. Time with the screen off doesn't count.
Ambient light level (lux) — used only when you turn on the low-light reminder yourself. Qimu reads a single brightness number from the light sensor. It is not a camera and sees no image whatsoever.

🔴 On Android, Qimu does not access the microphone and does not ask which app you are using.

The desktop version uses "is the microphone busy" to avoid meetings and "is a full-screen app in front" to avoid presentations. Neither is needed on a phone — when you stop looking, the screen turns off, and that signal already covers both. Those two probes are constants on Android; they issue no system query at all.

Windows

How long since you last touched the keyboard or mouse — only the number of milliseconds since the last input. Qimu cannot see which keys you pressed or where you clicked.
Whether a full-screen app is in the foreground — this uses the same API Windows itself uses to decide whether a notification may be shown, and returns only a state. Qimu does not know which app you are using and cannot see window contents or titles.
Whether any app is currently using the microphone — used to pause reminders during a meeting or call.

🔴 To be completely clear: Qimu does not access the microphone. It does not record. It never touches a single byte of audio.

It reads a record that Windows' own privacy centre maintains (the registry key CapabilityAccessManager\ConsentStore\microphone), which only indicates whether some app currently holds the microphone. Qimu cannot tell which app it is, and cannot tell what was said. You can turn this off under Settings → Break Schedule → Meeting / call do not disturb.

macOS

How long since you last touched the keyboard or mouse — only the number of seconds since the last input (the system's event timer). Qimu cannot see which keys you pressed or where you clicked.
Whether any window currently fills the screen — Qimu reads only window position, size and layer, to stay quiet while you present or watch. It deliberately does not read window titles (that would require the "Screen Recording" permission on macOS, which we refuse to ask for) — so it does not know which app you are using and cannot see any content.
Whether any app is currently using the microphone — this asks the system's audio-device state (is the device in use), to pause reminders during a meeting or call. Qimu does not access the microphone itself. It does not record. It never touches a single byte of audio.
Whether the screen is locked — timing pauses while locked and resumes when you come back.

Network

Qimu itself makes no network requests — there is no server, and nowhere to report to.

The one exception, stated here plainly: when you purchase Qimu Pro, or when the app checks whether you already own it, it contacts the app store (Google Play on Android, Microsoft Store on Windows, the App Store on macOS). That connection is handled by the respective store under its own privacy statement (Google / Microsoft / Apple). We never receive your payment details or your account details — the store tells us exactly one thing: owned, or not owned.

Feedback email

Tapping "Send feedback" opens your own mail app with a pre-filled body containing a short diagnostic block: app version, install channel, OS version, current language and theme.

Qimu itself sends nothing — whether you send it, and how you edit it first, is entirely up to you, and you can read every word before you tap send.

Children

Qimu is not directed at children under 13, and we do not knowingly collect information from them (we do not collect information from anyone).

Changes

If this policy changes, we will update the date at the top. If Qimu ever does start collecting data, we will tell you inside the app — not bury it on this page.

Contact

qimuapp@gmail.com