Wallo 隐私说明 / Privacy Notice

更新并生效于 2026-10-27。本文说明 Wallo 独立分发客户端与官方网站的数据处理方式。

中文

Wallo 由 METLIVI PTE. LTD. 发行。产品与隐私问题可联系 contact@metlivi.com。

在你的 Mac 上处理的信息

Wallo 在本机保存目标名称、待办内容、状态和排序、窗口分组、语言及部分偏好设置。取得屏幕录制权限后，应用读取窗口标题、所属应用、位置、系统窗口标识及用于准确匹配的文档标识，生成低分辨率窗口预览。预览保存在运行内存中，不保存为录像，不上传给发行方或 Lemon Squeezy。

辅助功能权限用于识别和切换你选择的窗口。Wallo 监听按键事件以识别双击 Command 和工作面板导航，不保存按键历史，也不把按键内容加入授权请求。你主动复制待办时，相应文字会写入系统剪贴板。你可以在 macOS 系统设置中撤回屏幕录制或辅助功能权限；相关窗口功能会停止，但有效授权下的本地目标和待办仍可管理。

购买与软件授权

无需注册或登录 Wallo。购买由 Lemon Squeezy 托管结账处理，平台负责收集结账所需的信息并交付授权码。Wallo 客户端不收银行卡或支付账户资料。发行方可通过 Lemon Squeezy 商户后台查看订单、购买者联系资料和授权状态，用于交付和处理购买支持。

激活时，客户端向 api.lemonsqueezy.com 发送授权码与随机生成的设备实例名称。验证和停用时发送授权码与平台返回的设备实例 ID。初次商品预检只发送授权码，不产生设备使用权益。这些请求不包含目标、待办、窗口信息、预览或硬件标识。服务连接还会向接收方提供 IP 地址等正常网络传输信息；托管结账和外部服务的数据处理适用 Lemon Squeezy 隐私政策。

客户端在本机钥匙串保存授权码、实例、商品身份、验证时间和设备绑定摘要。设备绑定通过本机硬件标识计算，仅用于发现被迁移到另一台 Mac 的授权记录；原始标识不持久化，原始值和摘要都不会发给 Lemon Squeezy 或发行方。普通运行日志只记录授权错误类别，不记录授权码或接口响应正文。

网络、保存与删除

本版本没有 Wallo 云账户、云同步、广告、追踪或第三方分析 SDK。应用仅进行上述授权请求，以及由你点击打开购买、更新和支持网页。外部网页和支付服务有各自的数据处理规则，不属于本机工作数据存储。

此网站由 Fly.io 托管。访问页面会向托管服务发送 IP 地址、浏览器请求及正常网络传输信息，适用 Fly.io 隐私政策。本站没有登录或广告功能。网站直接加载 Google Analytics 4，使用统计 Cookie 记录访问和页面浏览；不会向统计事件加入窗口、目标、待办、授权码或表单正文。网页服务未启用逐次访问日志，但托管服务可能按其政策处理运行和网络信息。

点击官网下载入口时，网站会把点击时间、安装包可用状态、网络 IP 地址和浏览器提供的 User-Agent（可能包括设备、系统及浏览器型号）发送到发行方的 Lark 通知群，用于了解下载使用情况及排查交付问题。这不代表下载、安装或激活成功；不附加姓名、邮箱、授权码或应用工作数据，不调用地区查询服务。网站不持久化这些点击记录；Lark 群消息由发行方工作区管理。可联系 contact@metlivi.com 请求删除相关记录。

本地目标和待办保留到你在应用中删除。删除目标会删除其中待办，并解除其窗口分组，不关闭这些窗口。退出应用会释放预览内存；卸载应用不保证同时删除 macOS 偏好设置或钥匙串记录。

要换机，先在 Wallo 菜单的“授权与更新…”中停用旧 Mac；服务端确认后，应用清除相应本机许可并释放名额。仅清除失效本地记录不会删除平台订单，也不代表释放服务端设备名额。系统备份、剪贴板历史和你自行保存的截图由对应系统或工具管理。

支持与更新

主动发送支持邮件会把邮件正文、发件地址及附件交给收件邮箱服务和发行方。请只提供排查所需的信息，遮盖截图中的个人内容，不发送密码、银行卡信息或完整授权码。购买问题可以提供订单号和购买邮箱，便于核对订单。

关于发行方持有的支持资料、订单资料或隐私请求，请使用上面的联系方式；关于 Lemon Squeezy 直接处理的资料，也可以依其隐私政策联系平台。支持记录未设固定保留天数，可通过上述联系方式提出删除请求。后续新增数据处理时同步更新公开说明。

English

Wallo is published by METLIVI PTE. LTD. Contact contact@metlivi.com for product or privacy questions.

Information processed on your Mac

Wallo stores goals, task text, status and order, window assignments, language and selected preferences locally. With Screen Recording permission, it reads window titles, app names, positions, system window identifiers and document identifiers used for accurate matching. Low-resolution previews remain in runtime memory; Wallo does not record them as videos or upload them to the publisher or Lemon Squeezy.

Accessibility permission lets Wallo identify and focus the window you choose. It observes keyboard events for double Command and board navigation, without retaining a keystroke history or including keystrokes in license requests. Copying a task writes its text to the system clipboard. You can revoke these permissions in macOS System Settings. The corresponding window features stop; local goals and tasks remain manageable with a valid license.

Purchase and licensing

No Wallo account or sign-in is required. Lemon Squeezy hosts checkout, collects the information needed for the transaction and delivers the license key. The Wallo app does not collect card or payment-account details. The publisher can access orders, purchaser contact details and license status in the merchant dashboard to deliver the product and handle purchase support.

Activation sends the key and a randomly generated instance name to api.lemonsqueezy.com. Validation and deactivation send the key and the provider’s instance ID. An initial product check sends only the key and does not unlock a device. These requests exclude goals, tasks, window information, previews and hardware identifiers. Network connections also expose ordinary transport information, including the IP address, to the receiving service. Hosted checkout and provider processing are covered by Lemon Squeezy’s privacy policy.

The local Keychain stores the license key, instance, product identity, verification time and a device-binding digest. The digest is computed from a local hardware identifier to detect a license record restored onto a different Mac. The raw identifier is not persisted; neither it nor its digest is sent to the publisher or Lemon Squeezy. Normal app logs record error categories, not license keys or API response bodies.

Network access, retention and deletion

This version has no Wallo cloud account, cloud sync, advertising, tracking or third-party analytics SDK. Its network features are the license requests above and purchase, update or support pages opened by your actions. External websites and payment services have their own practices.

Fly.io hosts this website. Visiting sends the hosting service your IP address, browser request and ordinary network transport information, subject to Fly.io’s privacy policy. This site has no sign-in or advertising features. It loads Google Analytics 4 directly and uses analytics cookies to measure visits and page views. Analytics events do not include window, goal or to-do contents, license keys, or form contents. Per-request access logging is disabled in the web server; the hosting service may still process operational and network information under its own policy.

Clicking the website download endpoint sends the click time, package availability, network IP address and browser-provided User-Agent (which may include device, operating system and browser details) to the publisher’s Lark notification group to understand download activity and investigate delivery issues. A click does not establish a completed download, installation or activation. Names, email addresses, license keys and app work data are not included, and no location lookup is performed. The website does not persist these click records; messages are managed in the publisher’s Lark workspace. Contact contact@metlivi.com to request deletion of relevant records.

Local goals and tasks remain until you delete them. Deleting a goal also deletes its tasks and removes its window assignments without closing those windows. Exiting releases preview memory. Uninstalling does not necessarily remove macOS preferences or Keychain items.

To transfer a slot, choose License & Updates in the Wallo menu and deactivate the old Mac. After server confirmation, Wallo clears the local license and releases the slot. Clearing an unusable local record does not delete your order or itself release a server slot. Backups, clipboard histories and screenshots you save are controlled by their respective systems.

Support and changes

Sending a support email shares its content, sender address and attachments with the mailbox service and publisher. Include only information needed to resolve the issue, redact screenshots and do not send passwords, card information or a complete license key. For purchase support, the order number and purchase email can help locate the order.

Contact the publisher above about its support or order records and privacy requests. For information handled directly by Lemon Squeezy, use the contact process in its policy. No fixed retention period is specified for support records; you can request deletion using the contact above. Future data-practice changes will be reflected in this notice.

Wallo uses window previews to help you recognize current windows. The macOS permission, preview capture, local project storage, license network requests, and screenshots you create are separate data paths.

Preview lifecycle

With Screen Recording permission, Wallo can read supported window information and generate low-resolution previews. Under the current implementation contract, those preview images stay in runtime memory. Wallo does not record them as video, write them as a screenshot library, or upload them to the publisher or Lemon Squeezy. Exiting the app releases preview memory.

Window titles, app names, positions, system window identifiers, and document identifiers used for matching are separate metadata. Goals, to-do text and status, order, window assignments, language, and selected preferences are stored locally.

Network and external-system boundaries

License activation and validation send only the documented license and instance fields to Lemon Squeezy; they exclude goals, tasks, window information, previews, and hardware identifiers. Opening purchase, update, support, or other external pages is a user-initiated network action governed by those services.

Data Wallo does not control

macOS backups, clipboard history, screenshots or screen recordings you create, and files saved by other apps follow their own settings. Uninstalling Wallo does not necessarily remove preferences or Keychain items. Review this Privacy section again whenever capture, caching, logging, analytics, licensing, or network behavior changes.