1. Information We Process

1.1 Local data (default)

• Release session content, including goals, emotions, desire types, answers, and completion records
• History, progress statistics, assessment results, harvest journal entries, and in-app preferences
• Local cache data required for app performance

1.2 Account and authentication data (optional)

• Email address, email verification status, and verification-code related information
• Session credentials, such as access tokens and refresh tokens
• Device registration data, including device ID, device name, device model, system version, app version, and device fingerprint generated from Apple system identifiers

1.3 Account cloud sync data (optional)

• Premium users may choose to enable account cloud sync after signing in
• This may include release records, training data, templates, emotion configurations, app settings, and sync status
• Account cloud sync is off by default and can be disabled anytime in the app

1.4 iCloud history import data (optional)

• The current version no longer uses iCloud as the primary sync channel
• iCloud is kept only as a user-triggered, read-only source for importing legacy history from older versions
• Legacy iCloud data remains subject to Apple's iCloud terms and privacy policy

1.5 Cloud voice guidance data (optional)

• Step text and custom text required for Text-to-Speech generation
• Voice parameters such as language, voice style, and related model settings
• Generated audio files, file indexes, and access logs used for caching, delivery, and troubleshooting

1.6 Subscription and membership data

• All purchases and subscriptions are processed by Apple App Store / StoreKit
• We do not collect your bank card number, payment account, or full payment credentials
• To support premium access, purchase restore, and membership binding, we may store subscription status, product ID, original transaction ID, transaction ID, purchase date, and expiration date returned by Apple

1.7 Region and server data

• The app may provide separate China Mainland and Global service regions
• Different regions connect to different servers, and accounts, memberships, orders, and synced data may not interoperate across regions by default
• Before sign-in, the app may call a region-resolution endpoint with the email address you enter to route you to the correct server
• If you choose the Global region, related account and sync data may be stored or processed on servers outside mainland China

2. How We Use Information

• Provide core release practice features, history review, assessment, statistics, and premium features
• Provide optional account cloud sync and cross-device membership checks
• Provide user-triggered iCloud history import from legacy data
• Provide optional cloud voice guidance generation and playback
• Process membership entitlement, restore purchases, and handle subscription status
• Maintain app security, reliability, troubleshooting, and customer support

3. Storage and Security

• Local storage: data is stored on your device by default using iOS secure storage mechanisms such as Core Data and app sandbox protection
• Secure credentials: account session credentials may be stored using iOS secure storage mechanisms such as Keychain
• Account cloud sync: synced data is retained while you use the account cloud sync service and can be deleted through product operations or account deletion requests
• iCloud history import: only reads legacy iCloud data when you actively trigger import
• Cloud voice: only used when enabled, with encrypted network transport (HTTPS) and controlled file access
• We apply minimum-necessary processing for optional cloud features

4. Payments and Subscriptions

• Subscriptions and payments are handled through Apple App Store / StoreKit
• We do not process your bank card data directly
• We only receive and store membership information required to unlock premium features, restore purchases, and verify subscription status

5. Permissions

• Notifications: used for release practice reminders, only after you grant permission
• Photos add-only access: used to save assessment result images to your photo library, only after you grant permission
• iCloud: used only for user-triggered read-only import of legacy history data
• Network access: used for account cloud sync, membership status refresh, region routing, purchase-related requests, cloud voice services, and version checks
• StoreKit / App Store: used for in-app purchases, subscription management, offer code redemption, and purchase restore

6. Third-Party Services

• Apple iCloud / CloudKit for user-triggered read-only legacy history import
• Apple App Store / StoreKit for subscription and billing
• Our data server and payment server for accounts, device binding, cloud sync, membership entitlement, and subscription-related status handling
• Email delivery service for verification email delivery
• Alibaba Cloud Bailian (DashScope) for optional cloud TTS
• Alibaba Cloud OSS for optional cloud audio storage and delivery

7. Your Controls

• You can use the core app without signing in
• You can disable account cloud sync in app settings
• You can disable cloud voice guidance and use system voice instead
• You can manage notification and photo permissions in iOS Settings
• You can delete local data by uninstalling the app
• You can manage legacy iCloud data from iOS iCloud settings
• If you have signed in, you can request account deletion or data handling support through the app or by contacting us

8. Tracking and Advertising

The app does not include third-party advertising SDKs and does not use your data to track you across apps or websites owned by other companies.

9. Children's Privacy

This app is not intended to knowingly collect personal information from children under 13. If you believe a child has submitted personal information, please contact us for removal support.

10. Policy Updates

We may update this policy when features or legal requirements change. Material updates will be reflected in app updates and/or this page.

11. Contact