Soymilk Focus Privacy Policy

This policy covers the Soymilk Focus app and official website. It explains how personal information is handled and the choices available to you.

1. Who we are

Based on your App Store account region, services for mainland China are provided by 武汉市东西湖区豆软软件工作室, a sole proprietorship. Services for other regions are provided by Jingtong Hu, an independent developer in Canada. “We” means the relevant service provider.

Jingtong Hu is our privacy contact. For privacy questions, complaints or requests concerning your personal information, email jingtonghu@soymilkfocus.com.

2. Information we handle and why

We handle the following information according to the features you use:

The website uses browser local storage for your language preference. Hosting and web asset services process IP and connection information needed to serve the website.

3. AI and voice features

When you use AI chat or task assistance, your input, relevant conversation and task context needed for the request, such as task titles, schedules, durations and language, are sent to our servers and Alibaba Cloud Model Studio's Qwen service to generate responses and perform relevant task operations.

We collect and retain your messages, AI responses, relevant task information and operation records, and account-associated usage records to review requests, investigate faults, protect the service, manage allowances and handle feedback or disputes. Sections 5 and 6 explain retention and deletion.

We do not use your AI content to train our own models. Model Studio handles API data under its privacy notice and service agreement.

Voice features use the microphone and Apple's speech recognition service with your permission. Apple may process audio online. Our AI service receives the recognized text and necessary task context, rather than the original recording. The app currently does not save audio files.

AI and voice features are optional; you can manage tasks manually. You can manage the relevant device permissions in system settings.

4. Service providers and sharing

We use the following services for the relevant features:

We require third parties that receive personal information from us to provide protection at least equivalent to that described in this policy and comply with applicable data protection requirements. You can use these contacts to learn about a provider's handling of information or exercise your rights, or ask us for assistance. We do not sell or rent personal information or use it for advertising targeted across apps. Where disclosure is required by law or a business transfer involves personal information, we limit it to what is necessary and meet applicable notification and protection obligations.

5. Storage and security

Our principal online services and database are in mainland China, where information may be lawfully accessed by local courts or law enforcement authorities. See section 4 for service providers and their handling of information.

Retention depends on the feature, account use, request handling and legal requirements:

• Device records generally remain until you delete or reset them.
• Account information, AI content, feedback and account-associated usage records are retained until you delete your account or we complete an earlier deletion request.
• Records needed for transactions, security, disputes or authorization revocation may be retained after account deletion. Retention is determined by legal requirements and the time needed to verify billing, address security risks, resolve disputes or complete authorization revocation. We delete or anonymize these records when that period ends.

We keep database backups for recovery. Under our retention rules, daily automatic backups are retained on a rolling 7-day basis. Monthly backups and backups made for migrations, releases or maintenance are retained for up to six calendar months from their original creation date, then deleted unless a longer retention period is required by law. Data independently retained by providers is handled through their respective processes.

We protect information using measures including encrypted account and AI connections, encrypted database connections and secure device credential storage. We respond to personal information security incidents and provide notifications required by law.

6. Your choices and rights

You can manage local records in the app, use deletion or reset functions to clear the corresponding data, and adjust permissions in system settings. Declining optional permissions does not affect unrelated features.

You can delete your account in account settings or email our privacy contact to request access, a copy, correction or completion, deletion or transfer of personal information, or withdraw consent. Where applicable, you can also restrict or object to processing or obtain a machine-readable copy. We handle requests within applicable deadlines, verify identity where reasonably necessary and explain requests we cannot fulfill. You may complain to the relevant privacy authority. Withdrawing consent does not affect earlier lawful processing based on consent.

Account deletion removes account information, AI content, feedback and associated usage records used in our day-to-day service. Records and backups that must be retained are handled under section 5. Device records must be cleared separately; clearing chat on your device does not delete the server copy. Account deletion does not cancel an Apple subscription; cancel renewal through Apple's subscription management.

Processing necessary for your account, purchases and requested services relies on performance of a contract. Optional permissions and AI information sharing rely on your consent. Depending on the activity, necessary security, fault investigation, feature analysis and dispute handling rely on applicable legal obligations or, where applicable law permits reliance on legitimate interests, our legitimate interests in maintaining the service, improving features and protecting users. You may email our privacy contact to object to processing based on legitimate interests.

7. Children and sensitive information

The service is not directed to children under 13, or under 14 in mainland China. A higher applicable local minimum age takes precedence. If you believe a child has provided personal information to us, please contact us.

Please avoid submitting unnecessary sensitive information or another person's private information. Before introducing features specifically handling sensitive information, we will explain their necessity, effects on your rights and protective measures, and obtain any consent required by law.

8. Policy changes

The latest policy and effective date are available in the app or on the website. We give notice of important changes as required by law. If the purposes, methods or categories of information change, we provide a new notice and obtain required consent. If we later introduce online processing of assessments or reflections, we explain the arrangements before activation and let you choose whether to enable it.