Data we collect

We collect the following data:

• Account info: email, name (for authentication)
• Sensor data: movement data during tremor tests
• Test results: frequency, amplitude, motion band
• Voice practice results (numbers such as loudness, pitch and duration) and the everyday phrases you edit — synced to your account when you are signed in; see “Voice practice” below
• Hand tapping and tracing practice results (numbers such as hits, accuracy, rhythm, which hand you traced with, how much of the drawing stayed on the track and how big it was) — synced to your account when you are signed in; see “Hand tapping and tracing practice” below

We follow data minimization principles.

How we use your data

Your data is used solely for:

• Providing rehabilitation training features and progress tracking
• Showing in-app summaries and reports for your personal reference
• Improving the app only if we use anonymized data with your consent

Data storage & security

When you sign in, account and synced training data may be stored with Google Firebase, including voice practice results and your edited practice phrases. Before anything is synced, the app asks for your explicit consent once after you sign in; if you do not agree, you are signed out and can use guest mode, where data stays on your device. Guest and local-only data stay on your device. Your voice itself (audio) is never stored or uploaded.

• HTTPS/TLS for network traffic to our cloud services
• Access limited by your account and Firestore security rules
• You can export or delete data from the app

Data sharing

We do not sell your personal health data.

Data leaves the app only when:

• You explicitly export or share files yourself
• The law requires disclosure

Google Firebase processes sign-in and protected backend requests. Reports are not sent automatically or directly to healthcare providers.

Your data rights

• Access: view all your data
• Portability: export your data
• Erasure: delete your data
• Withdraw: revoke consent anytime
• Contact: for any privacy inquiries

Security measures

We protect your data with the security controls available in our current stack:

• TLS for cloud requests
• Firebase Authentication for signed-in accounts
• Firestore rules that restrict access to your own data
• On-device AES encryption for sensitive local health fields (such as tremor sensor samples and medication nicknames), with the key stored in the iOS Keychain
• In-app export and account deletion

Files you export are written in a readable format for your own use. Full-file encryption of the entire local database is not claimed.

Optional medication nickname list

If you enable the optional medication nickname list, nicknames, reminder times, and check-ins are stored on this device. When you are signed in, they can also sync to your Stedholm cloud account so you can restore them on another iPhone. Optional local notifications may fire on this device only if you allow notification permission. You can delete this data in the app (including account deletion). This feature is not medical advice and is not included in data export unless you separately agree each time you export.

Voice practice

Voice practice uses the microphone only while you are practicing, to measure how loud your voice is and how high or low its pitch is, in real time. By default nothing is recorded, and no audio is saved or uploaded; the sound is turned into loudness and pitch numbers on your device and then discarded.

If you turn on “Hear your own voice at the end” (off by default), the app keeps two short clips during that session only: the sentence you read in your usual voice at the start, and the same sentence read at the end. They are held in the phone's memory so you can play them back on the results page, and are discarded when you leave that page or start again. They are never written to storage, uploaded, or included in exports.

Practice results (numbers only — for example, how much louder than your usual voice you spoke, how long you held a sound, and how many repetitions, including high and low pitch glides, reached the target), your “Ah” goal, and any everyday phrases you edit are stored on this device. If you are signed in, they are also synced to your account (Google Firebase) so you can get them back on a new phone or after signing in again. As a guest they stay on this device only. We use this data only to show your practice and progress to you; we do not use it for advertising and do not sell or share it.

You can export this data or delete it at any time: deleting your training records removes practice results from this device and your account; deleting your account removes everything, including your phrases and goal. When you sign out, the copy on this device is removed and comes back the next time you sign in.

Hand tapping and tracing practice

Hand tapping practice uses only taps on the screen. For each round the app counts how many taps hit the circles, how far they landed from the centre, and how even the rhythm was, and then keeps only these numbers. Where you touched and how your finger moved are not saved or uploaded.

In tracing practice you draw shapes along a wide track with your finger, using the hand you choose (your writing hand or the other one). Each time you finish a shape, the app works out how much of the line stayed on the track and how big you drew compared with the track, and then keeps only these numbers and which hand you used. The shapes you drew and how your finger moved are not saved or uploaded.

Results are stored on this device. If you are signed in, they are also synced to your account (Google Firebase) together with your other training records; as a guest they stay on this device only. You can export or delete them at any time in the same way as your other training records.

Contact us

Stedholm is operated by an independent individual developer (domain: stedholm.com).

• Privacy / data requests privacy@stedholm.com
• User support support@stedholm.com

我们收集的数据

我们收集以下数据：

• 账户信息：邮箱、姓名（用于身份验证）
• 传感器数据：震颤测试期间的运动数据
• 测试结果：频率、振幅与晃动档位
• 语音练习结果（音量、音调、时长等数字）和您编辑的日常短句，登录后同步到您的账户，详见下方「语音练习」
• 手部点按和描画练习结果（点中次数、准确率、节奏、描画用的哪只手、画在轨道里的比例、画的大小等数字），登录后同步到您的账户，详见下方「手部点按和描画练习」

我们遵循数据最小化原则，只收集必要的数据。

数据使用方式

您的数据仅用于以下目的：

• 提供康复训练功能与进度追踪
• 在 App 内向您展示摘要与报告（仅供个人参考）
• 仅在使用匿名数据且获得您同意时用于改进应用

数据存储与安全

登录后，账号与已同步的训练数据（包括语音练习结果和您编辑的练习短句）可能存储在 Google Firebase。开始同步之前，应用会在您登录后请您明确同意一次；如果不同意，会退出登录，您可以改用游客模式，数据只保留在您的设备上。游客与仅本地数据保留在您的设备上。您的声音本身（音频）从不保存或上传。

• 与云服务通信使用 HTTPS/TLS
• 访问受账号身份与 Firestore 安全规则限制
• 可在 App 内导出或删除数据

数据共享

我们不出售您的个人健康数据。

数据仅在以下情况离开本应用：

• 您主动导出或分享文件
• 法律要求披露

Google Firebase 处理身份验证和受保护的后端请求。报告不会自动发送，也不会直接发送给医疗机构。

您的数据权利

• 访问权：查看您的所有数据
• 可携带权：导出您的数据
• 删除权：删除您的数据
• 撤回权：随时撤回同意
• 联系我们：如有隐私疑问请联系我们

安全措施

我们使用当前技术栈中可用的安全能力保护您的数据：

• 云请求使用 TLS
• 登录账号使用 Firebase Authentication
• Firestore 规则限制仅访问您自己的数据
• 对本机敏感健康字段（如震颤传感器采样、用药昵称）使用 AES 加密，密钥保存在 iOS Keychain
• App 内提供导出与账户删除

您主动导出的文件为便于阅读的明文格式。本政策不宣称对整个本地数据库文件做全库加密。

可选的用药昵称清单

若您开启可选的用药昵称清单，昵称、提醒时间与打卡记录会保存在本设备。登录后还可同步到您的 Stedholm 云端账户，以便在另一台 iPhone 上恢复。若您允许通知权限，可选的本地通知仅在本机触发。您可在应用内删除这些数据（含删除账户）。该功能不是医疗建议；数据导出默认不含用药，仅在你每次导出时单独同意才会写入文件。

语音练习

语音练习只在您练习时使用麦克风，用来实时测量您说话的音量和音调高低。默认情况下我们不录音，也不保存或上传任何音频；声音在您的设备上被换算成音量和音调数字后即被丢弃。

如果您打开「练习结束时听听自己的声音」（默认关闭），本次练习中会临时保留两小段声音：开头用平时的声音读的那句话，以及结束前重读的同一句话。它们只放在手机内存里，供您在完成页当场回放；离开完成页或重新开始练习时即被丢弃，不会写入存储、不会上传，也不会出现在导出数据中。

练习结果（只有数字，例如比您平时说话大声多少、一个音持续了多久、有几次达到目标，包括高 / 低音滑动）、「啊」的目标时长以及您编辑的日常短句保存在本设备。登录后，它们也会同步到您的账户（Google Firebase），换手机或重新登录后可以找回；游客只保存在本设备。我们只用这些数据向您展示练习情况和进步，不用于广告，也不出售或分享。

您可以随时导出或删除这些数据：删除训练记录会同时清除本设备和账户里的练习结果；删除账户会清除全部数据，包括短句和目标。退出登录时会清除本设备上的这一份，下次登录后会恢复。

手部点按和描画练习

手部点按练习只使用您在屏幕上的点按。每一轮结束后，应用只保留几个数字：点中圆的次数、离圆心多远、节奏是否均匀。您点在哪里、手指怎么移动，不保存也不上传。

描画练习里，您用自己选的那只手（写字的手或另一只手），沿着一条宽轨道用手指画图形。每画完一遍，应用算出有多少线画在轨道里、画得和轨道比有多大，只保留这几个数字和用的是哪只手。画出来的图形和手指怎么移动，不保存也不上传。

练习结果保存在本设备。登录后，它们会和其他训练记录一起同步到您的账户（Google Firebase）；游客只保存在本设备。您可以像其他训练记录一样随时导出或删除。

联系我们

Stedholm 由个人开发者运营（域名：stedholm.com）。

• 隐私与数据请求 privacy@stedholm.com
• 用户支持 support@stedholm.com