Add managed content and keyboard usage insights

Introduce versioned official content workflows and privacy-safe keyboard analytics, while preventing repeat DeviceCheck sign-ins from incorrectly restricting eligible accounts.
2026-08-21 13:34:03 +08:00
parent b5212dcdc2
commit d0abe27623
55 changed files with 4690 additions and 111 deletions
@@ -7,6 +7,9 @@
 - Product analytics installations linked to the account and all of their events
  are deleted by database cascade. The service stores only the digest of a
  random installation UUID and never stores user content in analytics events.
+- Keyboard usage contains daily Chinese, English, other-character and
+  input-session counters only. It never contains text or keystrokes and is
+  purged after 90 days regardless of account linkage.
 - Pseudonymous immutable credit-ledger entries, StoreKit transaction audit data,
  and time-limited anti-abuse tombstones remain after deletion where required to
  prevent replay, preserve financial integrity, and stop repeated trial abuse.