01Scope and principles
This policy applies to ChanMing and its dedicated support pages, not to external sites opened from notes. The current app has no ads, third-party behavioral analytics SDK, cross-app advertising tracking or AI upload feature. We do not upload notes to an operator-run content server or sell note content.
02Local notes and attachments
Text, titles, checklists, images, file attachments, folders, properties, templates, saved views, and note/heading links are stored in the app’s local library. Search, layout, formula rendering, organization and exports primarily run on your device. Appearance, language, icon and list preferences also remain on-device.
Temporary files, thumbnails, link previews, recovery records and sync caches support display, recovery and performance. Local storage is not a separate encrypted vault; protect your device with its lock and security features.
03Optional iCloud sync
Sync is off by default. After you enable it in Settings > iCloud Sync, the app uses Apple CloudKit to store notes, deletion states, original attachments and references, folders, properties, templates, saved views, heading links, and necessary conflict/sync records in your current Apple Account’s private database for your devices.
The app processes a CloudKit account identifier and derives a scoped fingerprint locally to prevent accidental account mixing; it does not read your Apple Account password. Different accounts are not automatically merged. The app may register with Apple for push notifications at launch to receive sync-change hints; sync still depends on your setting and account state. Device push tokens are not uploaded to an operator-run server.
Turning sync off stops uploads/downloads on this device and keeps existing local, cloud and other-device content. Apple provides iCloud under its own policies, availability and storage limits. We do not promise additional end-to-end encryption or immediate background delivery.
04Photos, files and the clipboard
The app handles items you provide through system photo/file pickers or drag and drop. The photo picker does not require access to your entire photo library. The current app does not request contacts, location, camera or microphone permissions.
Copy, cut and paste actions read/write relevant text, formatting and attachments through the system clipboard. Universal Clipboard may apply under your OS settings. Do not paste private content into other apps unless you intend to share it.
05Web previews and external resources
Displaying a link preview uses Apple LinkPresentation to request that URL; cached previews may refresh when stale. Pasting external HTML with remote images or files may request those resources to complete import. The destination site or resource host receives the requested URL, IP address and system request information. URLs themselves may contain private tokens.
These requests do not send the entire note to the site. The destination handles requests under its own policy. Import downloads use an ephemeral session without deliberately forwarding browser login cookies. Avoid untrusted sources and hide link previews when not needed. Opening an external link hands it to the system browser or associated app, under that service’s policies.
Preview addresses, titles and thumbnails may remain in a local cache; hiding a preview does not promise immediate cache erasure. Formula resources ship with the app; ordinary formula rendering does not use an online formula service.
06Purchases and Pro
The current Pro benefit is alternate app icons on supported iPhone/iPad devices. The default teal icon is free. Monthly, yearly and lifetime products provide the same entitlement. The current Mac version does not support alternate-icon switching and suppresses purchase offers. The editor, themes and iCloud sync are not Pro-gated.
Apple StoreKit/App Store handles purchasing, renewals, refunds and restoration. The app locally verifies Apple-provided products and transaction entitlements, including subscription/revocation state. It does not receive full payment-card details or your Apple Account password and does not send receipts to an operator-run verification server. Apple may provide sales/refund information through its developer reports under Apple’s policies.
07Support and diagnostics
If you email recarp@163.com, we receive your address, message and files/screenshots/logs you choose to attach, for responding, troubleshooting and handling related requests. Redact personal information first. Do not send passwords, card numbers or a full note library. The email provider processes mail under its own policies.
The app records operational states such as sync events through system logging. It has no integrated third-party SDK that automatically uploads usage or crash telemetry. Diagnostics you share voluntarily, Apple system diagnostics and analytics you permit Apple to share are separate channels.
08Retention, deletion and backups
You can edit/export notes, move them to Trash, restore them or permanently delete them. With sync enabled, changes propagate on subsequent syncs. Backups, pre-import recovery points, conflict copies, old account libraries and retained attachments may still contain data; permanent deletion does not mean every historical copy/cache is physically erased immediately.
Disabling sync or uninstalling the app does not automatically remove iCloud data or cancel subscriptions. To remove cloud data, first consider retained copies and use system iCloud storage management. Be careful re-enabling sync on devices with old data. We have no operator control to remotely erase your private library.
Backups, export and restore are user-initiated. Restore creates a separate local library without overwriting the original or joining its old sync queue. Files go to the location/app you choose; iCloud Drive or other file services then control their storage and sharing. Archive files have no additional app-level password protection; choose a trusted destination.
Support mail is retained for as long as needed to handle the request. You may request deletion of information no longer required, subject to legal retention or unresolved disputes. We do not request access to your private iCloud library by email.
09Your choices and minors
You can keep local-only use, disable sync, revoke system access to files/photos, export or delete data, cancel renewal in Apple subscription management, and contact us to access, correct or delete support information you supplied. We may verify the request’s origin, but never request your Apple Account password.
ChanMing is a general-purpose note tool, not a service specifically directed to children, and does not actively request age. Minors should use device, network and purchase features with parental guidance as required locally. Contact us if a child provided personal data through support.
10Support website and changes
The dedicated static pages include no analytics scripts, ads, tracking cookies, sign-in or upload forms. They use local assets, links and email contact. Routine access logs are disabled for the HTTPS /chanming/ path. Dedicated error logs and shared HTTP/TLS gateway logs may include IP addresses, times and request information for delivery, security and troubleshooting, not advertising tracking. Server logs are checked for rotation daily and retain up to 14 rotated files; empty logs are not rotated, so this is not a guaranteed 14-day deletion deadline. Hosting/network services may also process connection information for security and operation.
We will update this policy and its date if practices change, with notice for material changes where required. Apple privacy policy: https://www.apple.com/legal/privacy/ . For policy questions or data requests, contact recarp@163.com.