Overview

Handflow does not require a Handflow account. We do not sell personal data, show advertising, or use third-party advertising or behavioral analytics SDKs.

Data you create

Hands, actions, boards, sessions, notes, tags, opponents, drafts, and app preferences are created by you. They are stored locally on your device using Apple's app storage technologies.

Draft hands, theme, language, guide progress, temporary input, filters, and navigation state remain device-local unless a feature explicitly states otherwise.

iCloud Sync

iCloud Sync is off by default and can be enabled by you. When enabled, completed hands, sessions, notes, tags, opponents, and related synchronization records are stored in your private Apple CloudKit database so they can stay current across devices using the same Apple ID.

Handflow does not receive your Apple ID password. Apple operates iCloud and processes this data under Apple's privacy terms. Turning off sync on one device keeps that device's local data and does not delete existing iCloud data.

Manual backups

A .handflowbackup file is created only when you choose Export Backup. The file is generated locally and you decide where it is saved or shared. Handflow does not automatically upload manual backup files.

Shared hand links

When you create a share link, Handflow prepares a read-only snapshot containing the hand and any note, tag, or opponent cards you chose to include. The snapshot is encrypted on your device with AES-256-GCM before upload.

Our Cloudflare service stores only the encrypted snapshot, a random share identifier, creation and expiration timestamps, and a hash used for revocation. The decryption key stays in the URL fragment after # and is not sent to our server during normal web requests.

Anyone who receives the complete link can open the shared snapshot. A link remains available until its selected expiration time, until you revoke it, or indefinitely if you selected No Expiration. Cloudflare may process standard connection information needed to deliver and protect the service, such as IP address and request metadata, under its own privacy terms.

Purchases

Handflow Pro purchases and restoration are processed by Apple through StoreKit. Handflow does not receive or store your Apple ID password or payment card details. The app reads Apple's verified entitlement information to determine Pro access.

Support communications

If you email support@handflow.app, we receive your email address, message, and any information or attachments you choose to provide. We use this information only to respond, investigate issues, and improve Handflow. Support correspondence is retained only as reasonably needed for those purposes and legal obligations.

Data we do not request

Handflow does not request access to your contacts, precise location, microphone, camera, or health data. Saving a generated share image to Photos occurs only after you choose that action and grant the system Photos permission.

Retention and deletion

• Local records remain until you delete them or remove the app and its data.
• iCloud records follow your in-app changes and deletions while sync is enabled.
• Manual backups remain wherever you chose to save them.
• Shared snapshots are deleted when they expire or when you revoke the corresponding link.
• You can request deletion of support correspondence by contacting us, subject to legal retention requirements.

Service providers and security

Apple provides app distribution, StoreKit, device storage, and optional private CloudKit synchronization. Cloudflare provides the public website, encrypted share-link storage, network delivery, and email routing. We use reasonable technical safeguards, including local-first storage, encrypted transport, client-side encryption for shared snapshots, restricted private CloudKit scope, and expiring or revocable links.

No method of storage or transmission is completely secure. Keep complete share links private because the URL fragment contains the key needed to decrypt that snapshot.

Children

Handflow is intended for adults who record and review live poker hands. It is not directed to children, and we do not knowingly collect personal information from children.

Changes to this policy

We may update this policy when Handflow's features or data practices change. The current version and effective date will always be published on this page.

概述

Handflow 不要求注册 Handflow 账号。我们不会出售个人数据，不展示广告，也不集成第三方广告或行为分析 SDK。

你创建的数据

手牌、行动、Board、场次、备注、标签、对手、草稿和 App 偏好均由你创建，并通过 Apple 的 App 存储技术保存在本机。

Draft、主题、语言、引导进度、临时输入、筛选与导航状态保持在设备本地，除非某项功能明确说明会进行其他处理。

iCloud 自动同步

iCloud 自动同步默认关闭，由你主动开启。开启后，已完成手牌、场次、备注、标签、对手和相关同步记录会存入你的 Apple CloudKit 私有数据库，并在使用同一 Apple ID 的设备之间保持最新。

Handflow 不会获得你的 Apple ID 密码。iCloud 由 Apple 提供，并按照 Apple 的隐私条款处理数据。在某台设备关闭同步会保留该设备的本地数据，也不会删除 iCloud 中已有的数据。

手动备份

只有当你选择“导出备份”时，Handflow 才会在本地生成 .handflowbackup 文件。保存或分享位置由你决定，Handflow 不会自动上传手动备份文件。

手牌分享链接

创建分享链接时，Handflow 会生成只读快照，其中包含该手牌，以及你选择包含的备注、标签或对手手牌。快照会先在设备上使用 AES-256-GCM 加密，再上传至服务端。

Cloudflare 服务只保存加密后的快照、随机分享标识、创建和过期时间，以及用于撤销链接的哈希值。解密密钥保留在完整 URL 的 # 之后，正常网页请求不会把它发送给服务器。

任何获得完整链接的人都可以打开该快照。链接会在你选择的时间到期、被你撤销后失效；如果选择“永不过期”，则会持续可用。Cloudflare 可能依据其隐私条款处理用于提供和保护服务的标准连接信息，例如 IP 地址和请求元数据。

购买

Handflow Pro 的购买与恢复由 Apple 通过 StoreKit 处理。Handflow 不会获得或保存你的 Apple ID 密码和银行卡信息。App 只读取 Apple 验证后的权益信息，用于判断 Pro 权限。

支持沟通

当你发送邮件至 support@handflow.app 时，我们会收到你的邮箱地址、邮件内容，以及你主动提供的附件或信息。这些信息仅用于回复、排查问题和改进 Handflow，并只在实现这些目的或履行法律义务所需的合理期限内保留。

我们不会主动请求的数据

Handflow 不会请求访问通讯录、精确位置、麦克风、相机或健康数据。只有当你主动选择把生成的分享图片保存到相册，并授予系统相册权限后，App 才会执行该操作。

保留与删除

• 本地记录会保留到你主动删除，或移除 App 及其数据。
• 开启同步时，iCloud 记录会跟随 App 内的修改与删除。
• 手动备份会保留在你选择的保存位置。
• 分享快照会在到期或你撤销对应链接后删除。
• 你可以联系我们请求删除支持邮件，但法律要求保留的情况除外。

服务提供方与安全

Apple 提供 App 分发、StoreKit、设备存储和可选的 CloudKit 私有同步。Cloudflare 提供公开网页、加密分享快照存储、网络分发与邮件转发。我们采用合理的技术措施，包括 Local-First 存储、加密传输、分享快照端侧加密、CloudKit 私有范围，以及可过期或撤销的链接。

任何存储或传输方式都无法保证绝对安全。完整分享链接中的 URL 片段包含解密快照所需的密钥，请只发送给你信任的人。

儿童

Handflow 面向记录和复盘 live poker 手牌的成年人，不面向儿童，我们也不会在知情的情况下收集儿童个人信息。

政策更新

当 Handflow 的功能或数据处理方式发生变化时，我们可能更新本政策。最新版本和生效日期会始终发布在本页面。