成统系列隐私政策 / Privacy Policy

中文 · English

中文

成统系列包括 InstaPunch Center、InstaPunch Reader 和 InstaPunch Live 三个应用，下面分别说明各应用如何处理数据。

InstaPunch Center 隐私政策

生效日期：2026-10-13

InstaPunch Center（以下简称“Center”）是用于定向越野等赛事管理与成绩评估的桌面应用。本政策说明 Center 如何处理数据。

1. 我们不收集任何数据

Center 不要求注册或登录，不包含广告、数据分析、崩溃上报或任何第三方追踪组件，也不会把您的数据发送给开发者或任何第三方。Center 本身不访问互联网。

2. 保存在您设备上的数据

以下数据只保存在您的 Mac 上，由您自行控制：

赛事数据库：您创建或打开的赛事文件，可能包含您录入的运动员信息（如姓名、性别、年龄、单位、组别、号码布、指卡号，以及您选择录入的电话、邮箱、证件号码）、线路和成绩。数据库文件使用 SQLCipher 加密，保存在您选择的位置。
应用设置：语言、主题、最近打开的数据库路径、读卡站连接设置等，保存在应用沙盒内。
诊断日志：加密保存在应用沙盒内，仅用于排查问题。日志不会自动上传；只有您主动把日志文件发给我们时，我们才能看到。
安装标识（机器号）：首次启动时随机生成的标识，用于在赛事数据和读卡记录中区分不同设备。它不来自硬件序列号或广告标识，仅保存在本机。

3. 局域网通信

当您连接 InstaPunch Reader 时，Center 与 Reader 只在您配置的局域网地址之间通信，传输读卡记录和打印任务，内容经过加密。这些数据不会经过开发者的服务器。

4. 运动员数据由赛事组织者负责

如果您在 Center 中录入运动员的个人信息，您（赛事组织者）是这些数据的控制者，应确保已取得必要的同意或具备合法依据，并按适用法律（如欧盟《通用数据保护条例》GDPR、中国《个人信息保护法》）处理。

5. 数据删除

删除赛事数据库文件即可删除其中的全部数据。设置、日志和安装标识保存在应用沙盒目录 ~/Library/Containers/com.xnOrienteering.InstaPunchCenter 中；macOS 删除应用时不会自动清除该目录，如需彻底删除，请在删除应用后手动删除此目录。

InstaPunch Reader 隐私政策

生效日期：2026-10-13

InstaPunch Reader（以下简称“Reader”）是连接读卡站与小票打印机、并把读卡数据传给 InstaPunch Center 的桌面应用。本政策说明 Reader 如何处理数据。

1. 我们不收集任何数据

Reader 不要求注册或登录，不包含广告、数据分析、崩溃上报或任何第三方追踪组件，也不会把您的数据发送给开发者或任何第三方。Reader 本身不访问互联网。

2. 处理的数据

读卡数据：从通过 USB 串口连接的读卡站读取的指卡号、打卡记录和时间。
打印数据：从 Center 收到的成绩小票内容（可能包含运动员姓名、单位、成绩），只用于在您连接的打印机上打印。
读卡备份：为防止数据丢失，读卡记录会加密保存在本机的备份文件（.iprd）中，可用于在 Center 中恢复。
应用设置：Center 的连接地址与密码、读卡站和打印机设置、读卡站与打印机的绑定关系，保存在应用沙盒内。
诊断日志：加密保存在应用沙盒内，仅用于排查问题，不会自动上传。
安装标识（机器号）：首次启动时随机生成，用于让 Center 区分不同的读卡设备，不来自硬件序列号或广告标识。

3. 局域网通信

Reader 只与您配置的 Center 地址在局域网内通信，传输读卡记录、设备清单（读卡站、打印机）和打印任务，内容经过加密。这些数据不会经过开发者的服务器。

4. 数据删除

设置、日志、读卡备份和安装标识都保存在应用沙盒目录 ~/Library/Containers/com.xnOrienteering.InstaPunchReader 中。macOS 删除应用时不会自动清除该目录，如需彻底删除，请在删除应用后手动删除此目录。

InstaPunch Live 隐私政策

生效日期：2026-10-13

InstaPunch Live（以下简称“Live”）用于在大屏上展示赛事成绩，并可按赛事组织者的操作把成绩同步到在线直播页面。本政策说明 Live 如何处理数据。

1. 概述

Live 不要求创建应用账号，不包含广告、数据分析、崩溃上报或任何第三方追踪组件，不会把数据用于追踪或出售给任何人。只有在您主动使用“在线直播同步”功能时，Live 才会把成绩数据上传到开发者运营的服务器。

2. 只保存在您设备上的数据

赛事数据库：Live 读取您选择的 InstaPunch 赛事文件（SQLCipher 加密），用于本地大屏展示，不修改其中的运动员资料。
应用设置：数据库路径、展示设置，以及在线直播使用的赛事 UUID 和访问令牌（Token），保存在应用沙盒内。
诊断日志：加密保存在应用沙盒内，仅用于排查问题，不会自动上传。
安装标识（机器号）：首次启动时随机生成，仅保存在本机。

3. 在线直播同步（仅在您主动操作时）

当您在 Live 中填写赛事 UUID 和 Token，并点击“立即同步”或开启“自动同步”后，Live 会通过 HTTPS 把所绑定组别的成绩上传到 api.xnorienteering.club，用于在线直播页面展示。“协商”和“绑定”步骤只读取云端已有的成绩索引，不上传数据。

上传的数据仅限展示成绩所需的字段：

运动员姓名、编号、性别、号码布、指卡号；
单位（俱乐部）、组别、线路、赛道、队伍名称和棒次；
出发和到达时间、用时、名次、得分与罚分、成绩状态和备注。

运动员的电话、邮箱、证件号码和年龄不会上传。

谁能看到：在线直播页面按组织者在网页端设置的链接、开放时间和观看密码对外展示，未设置密码的链接任何获得网址的人都可以访问。

保存与删除：成绩保存在服务器上，直到组织者在网页端执行“清除在线成绩”、删除直播链接或组别，或联系我们删除。服务器所在地：Los Angeles, California, US。

我们的角色：对于上传的运动员数据，赛事组织者是数据控制者，我们仅按组织者的指示存储和展示这些数据。我们不会将其用于其他目的，也不会出售或与第三方共享，法律要求的情况除外。

4. 组织者的责任

在开启在线直播前，组织者应确保已告知运动员其成绩和姓名会在线公开展示，并已取得必要的同意或具备合法依据（如欧盟《通用数据保护条例》GDPR、中国《个人信息保护法》）。运动员如需查询、更正或删除在线成绩，可联系赛事组织者，或通过文末「联系方式」中的邮箱联系我们，我们会协助组织者处理。

5. 数据删除

在线成绩：由组织者在网页端清除，或联系我们删除。
本地数据：删除赛事数据库文件即可删除其中数据；应用设置、Token、日志和安装标识保存在应用沙盒目录 ~/Library/Containers/com.xnOrienteering.InstaPunchLive 中。macOS 删除应用时不会自动清除该目录，如需彻底删除，请在删除应用后手动删除此目录。

6. 儿童

Live 面向赛事组织者，不面向儿童。运动员中如有未成年人，在线展示其成绩前应由组织者取得监护人同意。

联系方式

如对本政策有任何疑问，或需要查询、更正、删除数据，请发送电子邮件至 sserxiaonian@gmail.com。

English

InstaPunch's timing suite consists of three apps: InstaPunch Center, InstaPunch Reader and InstaPunch Live. The policies below explain how each app handles data.

InstaPunch Center Privacy Policy

Effective date: 2026-10-13

InstaPunch Center ("Center") is a desktop app for managing orienteering and similar events and evaluating results. This policy explains how Center handles data.

Center does not require registration or sign-in, contains no advertising, analytics, crash reporting or third-party tracking components, and does not send your data to the developer or any third party. Center itself does not access the internet.

2. Data stored on your device

The following data is stored only on your Mac and stays under your control:

Event databases: the event files you create or open. They may contain participant information you enter (such as name, gender, age, club, class, bib number and chip number, and, if you choose to enter them, phone number, email address and ID number), as well as courses and results. Database files are encrypted with SQLCipher and stored in a location you choose.
App settings: language, theme, recently opened database paths, reader station connection settings and similar preferences, stored in the app sandbox.
Diagnostic logs: stored encrypted in the app sandbox and used only for troubleshooting. Logs are never uploaded automatically; we can see them only if you send us the log files yourself.
Installation identifier (machine number): a random identifier generated on first launch and used to tell devices apart in event data and readout records. It is not derived from hardware serial numbers or advertising identifiers and is stored only on this device.

3. Local network communication

When you connect InstaPunch Reader, Center and Reader communicate only between the local network addresses you configure, exchanging readout records and print jobs in encrypted form. This data does not pass through the developer's servers.

4. Event organizers are responsible for participant data

If you enter participants' personal information in Center, you (the event organizer) are the controller of that data. You should make sure you have obtained the necessary consent or have another legal basis, and process the data in accordance with applicable law, such as the EU General Data Protection Regulation (GDPR) and China's Personal Information Protection Law.

5. Deleting data

Deleting an event database file deletes all data in it. Settings, logs and the installation identifier are stored in the app sandbox directory ~/Library/Containers/com.xnOrienteering.InstaPunchCenter. macOS does not remove this directory when you delete the app; to delete everything, remove this directory manually after deleting the app.

InstaPunch Reader Privacy Policy

Effective date: 2026-10-13

InstaPunch Reader ("Reader") is a desktop app that connects reader stations and receipt printers and sends readout data to InstaPunch Center. This policy explains how Reader handles data.

1. We do not collect any data

Reader does not require registration or sign-in, contains no advertising, analytics, crash reporting or third-party tracking components, and does not send your data to the developer or any third party. Reader itself does not access the internet.

2. Data processed

Readout data: chip numbers, punch records and times read from reader stations connected via USB serial ports.
Print data: result receipts received from Center (which may include participant names, clubs and results), used only for printing on the printers you connect.
Readout backups: to prevent data loss, readout records are saved encrypted in backup files (.iprd) on this device and can be used to restore records in Center.
App settings: the Center connection address and password, reader station and printer settings, and the bindings between reader stations and printers, stored in the app sandbox.
Diagnostic logs: stored encrypted in the app sandbox, used only for troubleshooting, and never uploaded automatically.
Installation identifier (machine number): generated randomly on first launch so that Center can tell reader devices apart. It is not derived from hardware serial numbers or advertising identifiers.

3. Local network communication

Reader communicates only with the Center address you configure on the local network, exchanging readout records, the device inventory (reader stations and printers) and print jobs in encrypted form. This data does not pass through the developer's servers.

4. Deleting data

Settings, logs, readout backups and the installation identifier are stored in the app sandbox directory ~/Library/Containers/com.xnOrienteering.InstaPunchReader. macOS does not remove this directory when you delete the app; to delete everything, remove this directory manually after deleting the app.

5. Children

Reader is intended for event organizers and is not directed at children.

6. Changes to this policy

If the way Reader handles data changes, we will update this policy and its effective date.

InstaPunch Live Privacy Policy

Effective date: 2026-10-13

InstaPunch Live ("Live") displays event results on large screens and, when the event organizer chooses, can sync results to an online live results page. This policy explains how Live handles data.

1. Overview

Live does not require an app account, contains no advertising, analytics, crash reporting or third-party tracking components, and does not use data for tracking or sell it to anyone. Live uploads result data to servers operated by the developer only when you actively use the online live sync feature.

2. Data stored only on your device

Event databases: Live reads the InstaPunch event file you select (encrypted with SQLCipher) to show results on a local screen. It does not modify the participant information in it.
App settings: the database path, display settings, and the event UUID and access token used for online live results, stored in the app sandbox.
Diagnostic logs: stored encrypted in the app sandbox, used only for troubleshooting, and never uploaded automatically.
Installation identifier (machine number): generated randomly on first launch and stored only on this device.

3. Online live sync (only when you choose to use it)

After you enter an event UUID and token in Live and click "Sync now" or turn on "Auto sync", Live uploads the results of the bound classes over HTTPS to api.xnorienteering.club for display on the online live results page. The "Negotiate" and "Bind" steps only read the index of results already in the cloud and do not upload any data.

Uploaded data is limited to the fields needed to display results:

participant name, number, gender, bib number and chip number;
club, class, course, lane, team name and leg;
start and finish times, elapsed time, position, points and penalties, result status and remarks.

Participants' phone numbers, email addresses, ID numbers and ages are not uploaded.

Who can see the results: the online live results page is shown according to the link, opening hours and viewing password that the organizer sets on the web. Anyone who has the address of a link without a password can view it.

Retention and deletion: results are kept on the server until the organizer uses "Clear online results" on the web, deletes the live link or class, or contacts us to delete them. Server location: Los Angeles, California, US.

Our role: for uploaded participant data, the event organizer is the data controller, and we only store and display the data as instructed by the organizer. We do not use it for any other purpose and do not sell or share it with third parties, except where required by law.

4. Organizer responsibilities

Before turning on online live results, the organizer should make sure participants have been told that their names and results will be shown publicly online, and that the necessary consent or another legal basis is in place (for example under the EU General Data Protection Regulation (GDPR) or China's Personal Information Protection Law). Participants who want to access, correct or delete their online results can contact the event organizer, or contact us at the email address in the Contact section, and we will help the organizer handle the request.

5. Deleting data

Online results: cleared by the organizer on the web, or deleted by us on request.
Local data: deleting an event database file deletes the data in it. App settings, the token, logs and the installation identifier are stored in the app sandbox directory ~/Library/Containers/com.xnOrienteering.InstaPunchLive. macOS does not remove this directory when you delete the app; to delete everything, remove this directory manually after deleting the app.