Privacy Policy

Smart Personal Secretary (Bundle ID com.chaohe.assistant) · Effective 25 October 2026

1. In one sentence

Your schedule stays on your device. We do not collect your name, email, phone number, location, contacts or photos. There is no account system, no advertising, no third-party analytics SDK and no tracking (no IDFA).

2. Data that stays on your device

• Schedule content: stored locally on your iPhone with SwiftData. It is never uploaded to our server.
• Calendar data: if you turn on Apple Calendar sync, events are written through the system EventKit into your own Apple Calendar. Those records belong to you and Apple; our server never touches them.
• Audio: recorded only while you actively use voice input, used for immediate transcription, and not retained on your device or our server afterwards.
• Device identifier: a random UUID generated on the App's first run and kept in the App's own storage. It is not the vendor identifier (IDFV) and not the advertising identifier (IDFA). It exists only for the usage limits in section 4.

3. System permissions

• Microphone: used only when you tap voice input, to turn speech into schedule text.
• Calendar: used only when you enable calendar sync. Both can be revoked any time in Settings → Privacy; the rest of the App keeps working.

4. What our server holds, and for how long

The intelligent features (voice-to-schedule, AI-generated descriptions, deep-thinking mode) run through a lightweight proxy operated by the developer. It deliberately stores almost nothing:

• Usage counters: two counters per device in Cloudflare Workers KV — requests today (key q:<deviceId>:<date>, auto-deleted after 24 hours) and requests this minute (key r:<deviceId>:<minute>, auto-deleted after 120 seconds). They contain numbers only, never your content.
• Runtime logs: per request, the first 8 characters of the device identifier, the HTTP method, the path, the status code and the duration. Request bodies and response contents are not logged.
• Passthrough for generation: to produce a result, the text of that one request (and the audio for transcription) is forwarded to the AI provider — DeepSeek for text, Alibaba Cloud Model Studio (DashScope) for speech. Our proxy does not persist that content.

So deleting your data needs no support ticket: uninstalling the App removes every schedule and setting on the device, and the server-side counters expire on their own within at most 24 hours.

5. Subscriptions and purchases

Pro is billed by the Apple App Store and Apple holds your payment details. We never see your card number, billing address or Apple ID. After a purchase, the App hands Apple's signed transaction receipt to our proxy once, to confirm that this device is entitled; the proxy then issues a temporary token valid for 6 hours. We do not store transaction history.

6. What we do not do

• No registration, no email required;
• We do not collect, and do not let you enter, your own third-party API keys — the AI capability is provided from the developer's own accounts;
• No cross-app tracking, no selling of data, no advertising;
• No profiling and no analysis of what your schedules say.

7. Children

The App is not directed at children under 13 and does not knowingly collect personal information from them.

8. Changes and contact

Material changes to this policy are published on this page with a new effective date. To ask for early removal of a device's usage records, or for any privacy question:

Email: privacy@ailiaili.app