隐私政策 / Privacy Policy

应用在设备上使用的信息

应用会读取设备的语言设置，用它选择初始界面语言。用户也可以手动选择语言，并开启或关闭音效；这两项选择保存在当前设备上。音效由应用内置文件播放，不需要联网。

为了显示已完成关卡、故事卡片与徽章收藏、继续故事和安排回想，应用在当前设备上保存关卡进度与成绩、尝试次数、连续完成情况、完成及下次回想日期。故事玩法还保存所用的图卡或题目编号、首次回想时选择的答案、卡片之间选择的连接动作、提示次数、完成时间、用时及本机场景编号。记忆方法屋的五种玩法保存最近一次的用时和成绩，用于与同一关的下一次游玩比较。故事卡片与徽章收藏依据本机通关、星级及旧版已获收藏的保留标记确定，不另建账户或上传收藏记录。首次操作指引的完成状态也保存在设备上。旧玩法另有可选的「我的画面」短句输入，用户手动输入的部分最多 80 个字符；短句及选择的提示词会随该关记录保存在设备上。请勿在短句中填写姓名、电话、地址或其他个人信息。

为了继续未完成的故事，应用还会在当前设备保存故事草稿，包括篇章及内容版本、草稿更新时间、当前轮次和阶段、所用图卡及候选项、已安排的图卡顺序、已选回想答案、连接动作、已完成轮次的记录、提示状态、场景编号、已用时间及原回想日期。草稿由游戏中的操作产生，用于在同一设备恢复未完成故事；不是发送给运营者的内容，也不提供云端保存或跨设备同步。

“记忆游戏岛”会在本机保存每关游玩次数、最近和最好星级、完成日期、最近一次用时，以及获得三星时的最好用时。星星总数、路线点亮和满星徽章都由这些本机记录计算；每个游戏的 8 关最好星级均为三星时，收藏册显示该游戏的徽章，不另外保存徽章状态。游戏没有倒计时；不上传这些记录。

这些信息只用于运行游戏、展示个人进度、恢复本机记录和安排本机回想。应用不要求创建账户。

应用还在本机缓存 Google Play 签名购买收据，包括原始购买数据、RSA 签名、商品 ID 和购买令牌；原始数据可能包含订单号、购买时间、包名及购买状态。这些信息用于设备端验签、保存解锁状态及离线访问付费内容，不用于统计或广告，也不发送至运营者后端。应用不接收或保存银行卡等付款工具资料。

如果启用审核访问，审核凭据仅保存在本机，用于重新验证访问权限。退出审核访问或清除本应用数据会删除该凭据；审核访问不会创建 Google Play 购买记录。

传输、共享与第三方服务

本发布版本不把前述游戏进度、草稿、作答和设置记录发送给运营者或第三方服务器，也不出售或分享这些游戏记录。应用无广告。我们没有接入运营者自建的游戏行为分析后端。Google Play Billing SDK 包含自动技术诊断机制，可向 Google 发送购买功能的技术事件，以及应用／SDK 版本、设备与网络环境和用于关联同一 BillingClient 会话内事件的随机标识。这些 SDK 技术诊断不同于本机保存的游戏记录；Google 按其隐私政策处理相关信息。故事动画由应用内置文件在设备上的 WebView 中播放，不请求远程故事内容。

应用使用 Flutter 官方 in_app_purchase 插件接入 Google Play Billing，联网查询商品与本地化价格、发起一次性非消耗购买、确认交易，以及查询和恢复购买归属。支付由 Google Play 处理；相关 Play 账户、支付和交易信息由 Google 按其隐私政策及支付服务规则处理。无需创建本应用账户，但购买及恢复需要相应 Google Play 账户和联网。购买流程前有家长算术及长按验证；它不是身份认证，也不替代 Google Play 的付款授权。

设备端 RSA 验签通过后，签名收据缓存可用于离线解锁。只有成功联网查询当前购买归属，并确认已不再拥有该商品时，应用才撤销本机解锁；断网或查询失败不能被当作退款证明。离线时无法立即获知或撤销退款／撤销购买。这是设备端验证，不是后端安全方案，不能保证抵御被修改的客户端或真实收据复制。

保存、安全与删除

记录保存在 Android 为本应用分配的私有存储空间中，受设备系统的应用隔离机制保护。此发布版本关闭 Android 应用数据备份，并在数据提取规则中排除云备份和 Android 设备间迁移。应用没有 iOS 对应版本，也未配置跨平台迁移。因此更换设备或重装应用时，进度不会自动恢复。此处不表示设备本身的屏幕锁或操作系统能提供绝对安全。

本机记录保存在当前设备，直到在应用中被后续记录更新或清除，或者用户清除应用数据或卸载应用；普通应用更新通常会保留它们。要删除全部本机记录，请到 Android「设置 > 应用 > 记忆探险队 > 存储」中选择「清除数据／清除存储空间」，也可以卸载应用。这会删除该设备上的语言与音效选择、故事草稿、进度、成绩、指引状态、收藏保留标记及短句，且应用无法恢复。应用没有服务器端账户或记录，运营者无法远程查看、恢复或删除当前设备上的数据。若曾使用允许系统备份的旧版本，旧备份由相应设备或备份服务管理，需通过该服务的设置处理。

清除数据或卸载还会删除本机签名收据缓存和解锁状态，但不会删除 Google 保存的交易或 SDK 诊断记录，也不等同于退款。有效购买可在联网后用原购买的 Google Play 账户通过「恢复购买」重新确认；游戏进度、草稿和收藏记录不会因此恢复。购买状态被撤销时保留已有游戏进度，付费内容按当前权益锁定。所有用户适用同一免费范围，不沿用旧版免费访问权益；这不删除旧进度或已获收藏。Google 保存的信息及相关隐私请求应通过 Google 的账户和服务渠道处理。

儿童与政策变更

应用不设公开聊天、社交分享或定向广告，也不要求孩子提交姓名、邮箱等身份资料。购买由家长操作，支付交给 Google Play 处理。若今后增加账户、其他联网服务、广告、游戏行为统计、备份或其他改变信息处理方式的功能，我们会先更新本政策和相应的 Google Play 数据披露。

如对本政策有疑问，请联系：mysticsky91@outlook.com。

Information used on the device

The app reads the device language setting to choose an initial interface language. Users may choose another language and turn sound effects on or off. Both choices are saved on the current device. Sound effects play from files bundled with the app and need no internet connection.

To show completed levels, collected story cards and badges, ongoing stories, and scheduled recall activities, the app saves level progress and scores, attempt counts, consecutive successes, completion dates, and next recall dates on the current device. For story activities, it also saves card or task identifiers, the answers chosen on the first recall attempt, actions chosen to connect cards, the number of hints used, completion time, duration, and an on-device scene identifier. The five Memory Methods House modes save the latest duration and score to compare with the next attempt at the same level. Story cards and badges are determined from local completion and star records, together with local markers preserving previously earned collectibles. They do not require an account or an uploaded collection record. The app also saves completion states for first-use guidance. In an older set of activities, users may optionally enter a short “my picture” note. The part typed by the user is limited to 80 characters; the note and any selected prompt word are saved with that level on the device. Please do not enter a name, phone number, address, or other personal information in the note.

To continue an unfinished story, the app also saves a story draft on the current device, including its chapter and content version, draft update time, current round and stage, cards and answer options, arranged card order, selected recall answers, connecting actions, completed round records, hint state, scene identifier, elapsed time, and original recall date. Drafts come from actions within the game and are used to restore unfinished stories on the same device. They are not sent to the operator and do not provide cloud storage or synchronization between devices.

Memory Game Island saves each level’s play count, latest and best star rating, completion date, latest duration, and best duration for a three-star result on this device. Star totals, trail progress, and perfect badges are derived from these local records. A game's badge appears in the collection when all eight levels of that game have a best rating of three stars; no separate badge status is saved. The games have no countdown and do not upload these records.

The app uses this information only to run the activities, show personal progress, restore records on the same device, and schedule on-device recall. No account is required.

The app also caches Google Play signed purchase receipts on this device, including original purchase data, its RSA signature, product ID, and purchase token. Original data may include an order ID, purchase time, package name, and purchase state. This information supports on-device verification, saved unlock status, and offline access to paid content. It is not used for analytics or advertising or sent to an operator backend. The app does not receive or store payment card details.

When review access is enabled, its credential is stored only on this device to revalidate access. Exiting review access or clearing app data deletes that credential. It does not create a Google Play purchase.

Transmission, sharing, and third-party services

This release does not send gameplay progress, drafts, answers, or settings to the operator or a third-party server, sell those gameplay records, or share them with other apps. There are no ads. We do not operate a gameplay analytics backend. The Google Play Billing SDK includes automatic technical diagnostics that can send billing-related technical events to Google, together with app/SDK versions, device and network context, and a random identifier linking events within the same BillingClient session. These SDK diagnostics are separate from locally stored gameplay records. Google handles the related information under its privacy policy. Story animations run from files bundled with the app in an on-device WebView and do not request remote story content.

The app uses the official Flutter in_app_purchase plugin with Google Play Billing to query products and localized prices, initiate a one-time non-consumable purchase, acknowledge transactions, and query or restore ownership online. Google Play processes payments; Google handles related Play account, payment, and transaction information under its privacy policy and payment service rules. No app account is required, but purchases and restoration need the relevant Google Play account and an internet connection. A parent arithmetic and long-press check precedes the purchase flow; it is not identity verification and does not replace Google Play payment authorization.

After on-device RSA verification, a cached signed receipt can enable offline access. The app removes local access when a successful online query of current ownership shows that the product is no longer owned. Being offline or a failed query is not proof of a refund. Refunds or revocations cannot be detected or applied immediately offline. This is device-side verification, not a backend security system, and cannot guarantee protection against modified clients or copied genuine receipts.

Storage, security, and deletion

Records are stored in the private storage area assigned to this app by Android and protected by the operating system's app isolation. This release disables Android app-data backup and excludes cloud backup and Android device-to-device transfer through its data extraction rules. The app has no iOS counterpart and does not configure cross-platform transfer. Progress therefore will not automatically return after reinstalling the app or moving to a new device. This does not mean that the device screen lock or operating system provides absolute security.

Local records stay on this device until updated or cleared within the app, or until the user clears the app's data or uninstalls it; ordinary app updates generally preserve them. To delete all local records, use Android Settings > Apps > Memory Explorers > Storage > Clear storage/Clear data, or uninstall the app. This removes language and sound choices, story drafts, progress, scores, guidance states, markers preserving collectibles, and notes from that device, and the app cannot restore them. The app has no server account or server copy of these records. The operator cannot remotely view, restore, or delete data held on the user's device. If an earlier app version allowed a system backup, any older backup is managed by the relevant device or backup service and should be handled through that service's settings.

Clearing data or uninstalling also deletes the local signed receipt cache and unlock state, but does not delete transaction or SDK diagnostic records held by Google or request a refund. A valid purchase can be checked again online using Restore purchases with the original purchasing Google Play account. This does not restore game progress, drafts, or collectibles. Revoking purchase access preserves existing game progress while paid content follows current entitlements. The same free limits apply to all users; earlier free access is not retained. Existing progress and earned collectibles are not deleted by this change. Information held by Google and related privacy requests are managed through Google account and service channels.

Children and policy changes

The app does not provide public chat, social sharing, or targeted ads, and it does not ask children for a name, email address, or other identity details. Purchases are intended for parents, with payment handled by Google Play. If accounts, other network services, ads, gameplay analytics, backup, or other changes to information handling are added later, we will update this policy and the corresponding Google Play disclosures first.

For privacy questions, contact: mysticsky91@outlook.com.