PRIVACY POLICY
Zuoleme Privacy Policy
Zuoleme (“the App”) helps couples keep track of their intimate life. Because this content is inherently private, privacy is the App’s default architecture, not an optional setting. This policy explains what we collect, why, how it is protected, and the rights you have.
1. Information we collect
1.1 Anonymous account
- Device install identifier — a random string generated on first launch, used to create an anonymous account. It is not derived from and cannot be traced back to your real identity.
- Platform (iOS / Android), for feature compatibility.
- Push token (optional) — created only if you allow notifications, used to deliver pairing and sharing alerts.
We do not ask for or collect your name, phone number, email address, or any government identification.
1.2 Content you actively share
Only after you pair with your partner and explicitly tap “share” on a record does the following reach our server:
- the shared record’s rating, emotion tags, date, duration, location (if you filled it in), and dimension scores;
- wishlist items and votes (optionally anonymous — your interest stays hidden until both of you match);
- pairing invite codes and the pairing relationship.
1.3 Subscriptions
Purchases are processed by Apple. We receive subscription status (tier, expiry, product ID) through RevenueCat to unlock features. We never see your card number or any payment credentials.
1.4 AI conversations
When you actively use the AI features, the text you send (and any record summaries you choose to include) is relayed through our server to a large-language-model provider (Anthropic) to generate a reply. It is used solely for that reply — never for model training, advertising, or profiling. If you don’t use AI features, no such processing occurs.
2. Information that stays on your device
- all intimate records, journal entries, and full rating details;
- photos (encrypted in the App’s private vault);
- location — accessed only when you actively add a place to a record, written only to that local record;
- app lock and disguise-screen settings.
All of the above is stored encrypted on your device. Uninstalling the App erases it (back up first).
3. What we never do
- no advertising SDKs, no third-party ads;
- no analytics, profiling, or crash-tracking services;
- no cross-app tracking as defined by App Tracking Transparency — we never request the IDFA;
- no access to your contacts, messages, or browsing history;
- no selling or renting of your data to anyone.
4. Third-party services
| Service | Purpose | Data involved |
|---|---|---|
| Apple (App Store / StoreKit) | Distribution & subscription billing | Transaction data handled by Apple |
| RevenueCat | Subscription validation | Anonymous account ID, purchase receipts |
| Anthropic | AI reply generation (only when you use AI) | Conversation content you send |
| Expo Push | Notification delivery (only if enabled) | Push token |
5. Retention & deletion
- Local data: fully under your control — delete any record in-app, or uninstall to erase everything;
- Shared content: unshare at any time and it is removed from the server;
- Unpairing: ends both partners’ access to each other’s shared content;
- Account deletion: email us to request deletion of all server data tied to your anonymous account — completed within 15 business days.
6. Security
Local data is stored encrypted; sensitive credentials live in the iOS Keychain. The App supports Face ID / Touch ID and a disguise screen. All transport uses HTTPS. No system is perfectly secure, but our principle of “collect the minimum, keep it local by default” keeps the risk surface small.
7. Age requirement
The App is designed for adults. Do not use it if you are under 18 (or the age of majority where you live).
8. Changes to this policy
Material changes will be announced in-app and reflected in the effective date above. Continued use of the App means you accept the updated policy.
9. Contact
For any privacy questions or requests, email luzhenqian98@gmail.com.