Wallo 隐私说明 / Privacy Notice
独立分发版本审阅预览，更新于 2026-09-11。正式软件尚未公开发售；商用前仍需发行方确认支持信息保留政策和正式生效日期。本文说明当前客户端及临时网页的处理方式。
中文
Wallo 由 METLIVI PTE. LTD. 发行。产品与隐私问题可联系 contact@metlivi.com。
在你的 Mac 上处理的信息
Wallo 在本机保存目标名称、待办内容、状态和排序、窗口分组、语言及部分偏好设置。取得屏幕录制权限后，应用读取窗口标题、所属应用、位置、系统窗口标识及用于准确匹配的文档标识，生成低分辨率窗口预览。预览保存在运行内存中，不保存为录像，不上传给发行方或 Lemon Squeezy。
辅助功能权限用于识别和切换你选择的窗口。Wallo 监听按键事件以识别双击 Command 和工作面板导航，不保存按键历史，也不把按键内容加入授权请求。你主动复制待办时，相应文字会写入系统剪贴板。你可以在 macOS 系统设置中撤回屏幕录制或辅助功能权限；相关窗口功能会停止，但有效授权下的本地目标和待办仍可管理。
购买与软件授权
无需注册或登录 Wallo。购买由 Lemon Squeezy 托管结账处理，平台负责收集结账所需的信息并交付授权码。Wallo 客户端不收银行卡或支付账户资料。发行方可通过 Lemon Squeezy 商户后台查看订单、购买者联系资料和授权状态，用于交付和处理购买支持。
激活时，客户端向 api.lemonsqueezy.com 发送授权码与随机生成的设备实例名称。验证和停用时发送授权码与平台返回的设备实例 ID。初次商品预检只发送授权码，不产生设备使用权益。这些请求不包含目标、待办、窗口信息、预览或硬件标识。服务连接还会向接收方提供 IP 地址等正常网络传输信息；托管结账和外部服务的数据处理适用 Lemon Squeezy 隐私政策。
客户端在本机钥匙串保存授权码、实例、商品身份、验证时间和设备绑定摘要。设备绑定通过本机硬件标识计算，仅用于发现被迁移到另一台 Mac 的授权记录；原始标识不持久化，原始值和摘要都不会发给 Lemon Squeezy 或发行方。普通运行日志只记录授权错误类别，不记录授权码或接口响应正文。
网络、保存与删除
本版本没有 Wallo 云账户、云同步、广告、追踪或第三方分析 SDK。应用仅进行上述授权请求，以及由你点击打开购买、更新和支持网页。外部网页和支付服务有各自的数据处理规则，不属于本机工作数据存储。
此临时网站由 Fly.io 托管。访问页面会向托管服务发送 IP 地址、浏览器请求及正常网络传输信息，适用 Fly.io 隐私政策。本站没有登录、广告或分析脚本，不设置应用 Cookie；网页服务未启用逐次访问日志，但托管服务可能按其政策处理运行和网络信息。
本地目标和待办保留到你在应用中删除。删除目标会删除其中待办，并解除其窗口分组，不关闭这些窗口。退出应用会释放预览内存；卸载应用不保证同时删除 macOS 偏好设置或钥匙串记录。
要换机，先在 Wallo 菜单的“授权与更新…”中停用旧 Mac；服务端确认后，应用清除相应本机许可并释放名额。仅清除失效本地记录不会删除平台订单，也不代表释放服务端设备名额。系统备份、剪贴板历史和你自行保存的截图由对应系统或工具管理。
支持与更新
主动发送支持邮件会把邮件正文、发件地址及附件交给收件邮箱服务和发行方。请只提供排查所需的信息，遮盖截图中的个人内容，不发送密码、银行卡信息或完整授权码。购买问题可以提供订单号和购买邮箱，便于核对订单。
关于发行方持有的支持资料、订单资料或隐私请求，请使用上面的联系方式；关于 Lemon Squeezy 直接处理的资料，也可以依其隐私政策联系平台。此审阅稿不承诺尚未确定的支持数据保留天数。发布前须确认该政策，后续新增数据处理时同步更新公开说明。
English
Wallo is published by METLIVI PTE. LTD. Contact contact@metlivi.com for product or privacy questions.
Information processed on your Mac
Wallo stores goals, task text, status and order, window assignments, language and selected preferences locally. With Screen Recording permission, it reads window titles, app names, positions, system window identifiers and document identifiers used for accurate matching. Low-resolution previews remain in runtime memory; Wallo does not record them as videos or upload them to the publisher or Lemon Squeezy.
Accessibility permission lets Wallo identify and focus the window you choose. It observes keyboard events for double Command and board navigation, without retaining a keystroke history or including keystrokes in license requests. Copying a task writes its text to the system clipboard. You can revoke these permissions in macOS System Settings. The corresponding window features stop; local goals and tasks remain manageable with a valid license.
Purchase and licensing
No Wallo account or sign-in is required. Lemon Squeezy hosts checkout, collects the information needed for the transaction and delivers the license key. The Wallo app does not collect card or payment-account details. The publisher can access orders, purchaser contact details and license status in the merchant dashboard to deliver the product and handle purchase support.
Activation sends the key and a randomly generated instance name to api.lemonsqueezy.com. Validation and deactivation send the key and the provider’s instance ID. An initial product check sends only the key and does not unlock a device. These requests exclude goals, tasks, window information, previews and hardware identifiers. Network connections also expose ordinary transport information, including the IP address, to the receiving service. Hosted checkout and provider processing are covered by Lemon Squeezy’s privacy policy.
The local Keychain stores the license key, instance, product identity, verification time and a device-binding digest. The digest is computed from a local hardware identifier to detect a license record restored onto a different Mac. The raw identifier is not persisted; neither it nor its digest is sent to the publisher or Lemon Squeezy. Normal app logs record error categories, not license keys or API response bodies.
Network access, retention and deletion
This version has no Wallo cloud account, cloud sync, advertising, tracking or third-party analytics SDK. Its network features are the license requests above and purchase, update or support pages opened by your actions. External websites and payment services have their own practices.
Fly.io hosts this preview website. Visiting sends the hosting service your IP address, browser request and ordinary network transport information, subject to Fly.io’s privacy policy. This site has no sign-in, advertising or analytics scripts and sets no application cookies. Per-request access logging is disabled in the web server; the hosting service may still process operational and network information under its own policy.
Local goals and tasks remain until you delete them. Deleting a goal also deletes its tasks and removes its window assignments without closing those windows. Exiting releases preview memory. Uninstalling does not necessarily remove macOS preferences or Keychain items.
To transfer a slot, choose License & Updates in the Wallo menu and deactivate the old Mac. After server confirmation, Wallo clears the local license and releases the slot. Clearing an unusable local record does not delete your order or itself release a server slot. Backups, clipboard histories and screenshots you save are controlled by their respective systems.
Support and changes
Sending a support email shares its content, sender address and attachments with the mailbox service and publisher. Include only information needed to resolve the issue, redact screenshots and do not send passwords, card information or a complete license key. For purchase support, the order number and purchase email can help locate the order.
Contact the publisher above about its support or order records and privacy requests. For information handled directly by Lemon Squeezy, use the contact process in its policy. This review draft does not promise an unconfirmed support-record retention period. That policy and the effective date must be confirmed before publication; future data-practice changes must be reflected in the public notice.