Privacy Policy

01Operator and scope

Hibi Journal (日日手帐) is operated by 王楚滢, the personal-information controller. Contact: chuyingw672@gmail.com. This policy covers the current free iOS/iPadOS app and the support website at hibijournal.cn.

You can use the app without registering an account. This release does not offer in-app membership purchases, auto-renewing subscriptions, advertising, or a developer-operated cloud journal account. If later features change how information is handled, we will update this policy and provide the required notice and choices.

02Journals, photos, and local preferences

Your journal text, selected photos, layouts, notebooks and covers, calendar entries and moods, collected materials, color palettes, drafts, recovery copies, and app preferences are stored on your device. We do not provide automatic cross-device journal synchronization in this release.

We do not upload your journal writing or personal photos for analytics or crash diagnosis. Cropping, background cutout, color extraction, page rendering, and video generation run on your device. Our custom analytics events and app-generated error reports exclude journal content and personal photos.

Device backups or Photos synchronization enabled in your Apple settings can create copies outside the app. Files you choose to export or share are handled by the destination you select under its settings and policy. Keeping a file locally does not guarantee that it has been backed up.

03Photos, internet access, and exports

• Importing an image: when you choose a photo for a page, cover, sticker, calendar, or color palette, the system photo picker provides the selected image and necessary file information. We do not scan or upload your entire photo library.
• Saving to Photos: when you save a page or exported video, the app requests the system permission needed to add it to Photos or an album. Declining does not prevent ordinary local editing.
• Internet access: downloading public templates, decorative assets, calendar backgrounds, and sending the analytics or diagnostic information described below uses the network. Cached resources can be used offline where available.
• Exporting and sharing: PNG, PDF, layout JSON, and available notebook videos are generated locally. Files are passed to Photos or the system share sheet only when you choose the relevant action. A shared file may contain your writing and images; choose its recipient carefully.

Manage or revoke Photos access in iOS/iPadOS Settings. These features do not request camera, microphone, contacts, or device-location permission. Declining a permission only affects the feature that needs it.

04Online resources and local diagnostic logs

The app downloads public templates and materials from assets.hibijournal.cn, using Tencent Cloud Object Storage (COS). Resource requests involve the IP address, request time, public resource path, response status, and client/network information needed for delivery, security, and troubleshooting. These requests do not carry your journal writing or personal photos.

Resource-loading failures can also be recorded in small, rotating files on your device, including the public resource address, error code, timing, and network diagnostics. These local files are not automatically uploaded as feedback. You can decide whether to attach relevant excerpts when asking for help. Remote Crashlytics reports, described below, are a separate data flow.

05Product usage analytics

The app includes Google Analytics for Firebase, provided by Google LLC, to understand feature use, material popularity, and whether loading, saving, and exports work. An app-instance identifier distinguishes installations; it is a technical identifier, not a guarantee of anonymity.

• Interaction events: screen visits, official template/material impressions and selections, editing, save outcomes, and export outcomes. Parameters can include public catalog IDs, entry points, page counts, format, timing, duration, and success/failure status.
• SDK events and technical information: first opens, sessions and activity, app-instance/installation or session identifiers, app and SDK version, device model, operating system, language, and related technical information.
• Approximate region: a country, region, or city may be derived from the connection IP address. This is not GPS-location access.
• Limited app properties: for example, app language. We do not provide the SDK with a journal-account user ID, name, email address, journal writing, personal photos, custom notebook titles, private file paths, or raw error messages in our custom analytics events.

The current app excludes advertising-identifier (IDFA) support and disables IDFV collection and advertising-personalization signals. Google signals is not enabled for the connected property. We do not use these events for targeted advertising or cross-app advertising tracking.

Provider information: Firebase Privacy and Security; Google Privacy Policy and contact information.

06Crash and error diagnostics

The distribution version includes Firebase Crashlytics, provided by Google LLC, to find and fix crashes and failures during saving or exporting. It can process crash times, code stacks, error types, app/OS versions, device model and architecture, memory/disk information, app state, and SDK-generated installation and session identifiers.

The error reports we submit from the app contain the error type, code stack, operation category, and, where available, a technical error code. They exclude raw exception messages, journal writing, photos, filenames, private file paths, and response bodies. Native crash reports can contain the SDK’s standard exception and system-diagnostic information; this custom filtering does not mean that native reports contain no technical text.

When Analytics is enabled, its feature-event history may be attached as a diagnostic breadcrumb trail before an error. Crashlytics is not a journal backup or screen-recording service.

Firebase Privacy and Security

07Providers, sharing, and overseas processing

We do not sell your personal information or share journal content with advertisers. Providers must protect information under their applicable data-processing terms and commitments, with protection no less than that required for the relevant data under this policy. Disclosure required by law or to protect lawful rights will be limited to what is necessary.

For questions about overseas processing or to exercise applicable privacy rights, contact us using the address below or use the provider’s linked privacy contact channel. Publication of this policy does not itself constitute consent to new processing.

08Retention and deletion

• Local content: stored until you delete it using the relevant app feature or remove the app and its data. Draft and recovery copies may remain for recovery; unused local images can be removed by Storage management. Exported files, Photos copies, and device backups must be managed separately.
• Downloaded assets: kept in a local cache, which can be evicted under its storage limit or cleaned in Settings → Storage management. Cleaning preserves saved journals, drafts, recovery copies, and the personal images used by them. Removed online assets need to be downloaded again.
• Local diagnostics: stored in size-limited rotating files; there is no unlimited log history.
• Analytics: the connected property retains event-level data for 2 months and user-level data for 14 months. The user-level retention clock is reset by new user activity. Google deletes expired data through its regular deletion process. Standard aggregated reports are not governed by these same retention settings.
• Crashlytics: Google retains crash reports and associated identifiers for 90 days before starting removal from live and backup systems, as described in its service policy.
• Delivery and security logs: the hosting/delivery providers retain relevant technical records for their service, security, and legal obligations under the linked policies. We do not create a separate journal-content database from these requests.
• Support email: your email address, message, and attachments are used to address the request and necessary follow-up, and deleted when no longer needed, unless a legal obligation requires retention. Do not send information unrelated to your request.

Google Analytics retention information; Firebase Privacy and Security. Uninstalling the app does not automatically delete information already received by a provider.

09Your choices and requests

Usage analytics and crash reporting are enabled automatically after the app starts and the services initialize, for the feature analysis and troubleshooting purposes described above.

You can review, edit, export, and delete supported local content in the app and manage Photos access in system Settings. There is no app account to close. Contact us to request information about processing, access, correction, deletion, a copy, restriction/objection, or withdrawal of consent where applicable.

Email chuyingw672@gmail.com, describing the request and app version. We may ask for the minimum technical information needed to identify relevant records. Your email address alone does not identify an Analytics installation or Crashlytics report; if we cannot locate a record, we will explain the limitation rather than promise deletion we cannot perform. We do not ask for your complete private journal, Apple ID password, or unrelated identity documents.

We normally respond within 15 working days. If a request is complex or subject to a legal exception, we will explain the reason and next steps. Withdrawal does not affect processing lawfully carried out before withdrawal; statistics that cannot be linked back to an individual may not be reversible.

10Protecting information

We use the operating system’s app isolation, local storage, HTTPS for production online services, and limits on custom event/error fields to reduce unnecessary disclosure. Providers apply the safeguards described in their linked policies. No storage or transmission method can be guaranteed absolutely secure.

Keep your device and app up to date, protect access to your device, and keep copies of important exports. If a personal-information security incident occurs, we will take appropriate remedial steps and provide notifications as required.

11Young users

The app is not designed specifically for children. Users under 14 should read this policy and use the app with a parent or guardian and the appropriate consent. A guardian who believes a child’s information was processed without appropriate authorization can contact us to request review and deletion of identifiable records where applicable.

12Updates and contact

This policy takes effect on the date shown above. We will update the date when it changes. Material changes to purposes, data categories, providers, or user choices will be communicated appropriately, and further consent will be requested where required. A website update alone does not grant permission for new processing.

Operator: 王楚滢
Product: Hibi Journal (日日手帐)
Privacy and support: chuyingw672@gmail.com
Website: hibijournal.cn

This support website does not embed Firebase Analytics, advertising scripts, external web fonts, or feedback-upload forms. Its hosting infrastructure processes ordinary web requests. Clicking an email link opens your chosen mail app; you decide what to send.