ChanDing (禅定空间) Privacy Policy for iOS

Fuzhou Yunlian Changxiang Software Technology Co., Ltd. ( “we” or “us”), the operator of the ChanDing iOS app, understands the importance of your personal information. We protect your personal information and privacy in accordance with applicable laws and regulations. Please read this Privacy Policy carefully before using our product and services. Where processing is based on consent, we obtain your explicit consent after informing you, through “Agree and Enter” on the first-launch screen, confirmation on the relevant feature screen, or an iOS permission prompt. If you do not consent, you may choose not to use the relevant feature or stop using our product and services. If you have questions about this Policy, please contact us using the details at the end.

The two lists above are included as appendices to this page and explain our personal information processing together with this Policy. Privacy documents that can be read offline are also available in the app; an internet connection is required to view external third-party policies or other online agreements.

This Policy applies to the iOS app and its accompanying app extensions, including widgets, Live Activities, and Screen Time extensions. It explains:

• The information we collect;
• How we use the information we collect;
• The system capabilities and third-party components we use;
• How we store and share information;
• How you can manage your personal information;
• How we protect information security;
• Protection of minors;
• Policy updates and how to contact us.

1. Information We Collect

Note:This iOS version is built around local self-discipline features. Basic focus sessions, four-quadrant tasks, the Pomodoro timer, allowlists, scheduled focus, app supervision, daily usage reports, Time Fragments, habits, friend supervision, and home screen widgets involve on-device processing. After sign-in, focus records and duration-based habit settings can also sync automatically, as explained in Section 1.2. When you choose online features such as WeChat, QQ, or Apple sign-in, membership purchases, avatar uploads, Focus Together, Planets, Challenges, rankings, check-in sync, or online animation resources, we process the information necessary to provide those features.

1.1 Information generated by basic local features

• Task and focus data:Four-quadrant task titles, notes, completion status, quadrant categories, due dates, device-blocking duration settings, associated task titles, and similar information;
• Focus records:The start and end times of focus sessions, planned and actual duration, interruption status, associated tags and tasks, Pomodoro phase settings, and similar information;
• Preferences:Default focus mode, duration presets, focus tags, allowlist configuration status, emergency-exit counts and verification methods, cached supervision codes and letter hints, the user ID, nickname and avatar URL of a linked supervisor, Picture in Picture and lightweight Shield settings, alert sound settings, and similar information;
• Plan settings:Scheduled focus plans, names of app-limit or supervision rules, system tokens for selected apps, categories or websites, daily limits, time periods, days of the week, reminder times, periods during which changes are protected, enabled or disabled status, and similar information;
• Screen Time data:When you authorize Screen Time and view app limits or Time Fragments, the Apple DeviceActivity report extension processes usage for authorized apps, categories or websites on your device. App limits summarize the selected items' total usage for the day. Time Fragments aggregate app usage by hour and display its distribution using app names or identifiers supplied by the system. This does not scan the device's full installed-app list or read chats inside other apps or the body of webpages. Selection tokens and these usage reports are not uploaded to our servers;
• Habits and achievements:Habit names, motivational text, duration or count targets, daily progress, dedicated allowlists and skins, focus achievements, and Planet journey status. Online syncing of duration-based habits is explained below;
• Custom content:Focus skins you import or edit, images, Lottie JSON or sound files you select, share-card styles, motivational text, and similar content;
• State shared with extensions:Necessary state shared among the main app, widgets, Live Activities and Screen Time extensions, including countdowns, the current mode, remaining time, plan snapshots and usage-report loading status. Four-quadrant widgets also read task identifiers, titles, completion status, and total and completed task counts for each quadrant. Habit widgets read habits and daily progress. Adding a widget does not cause these snapshots to be uploaded to a server. Task titles, including completed tasks, may be visible directly on your home screen, so please be mindful of what others can see on your device.

This information is initially stored on your device, using SwiftData, UserDefaults, App Group shared containers, files in the app sandbox, and similar storage, to display statistics, restore sessions and keep widgets and extensions in sync. Screen Time tokens and usage reports are protected by Apple's permissions and sandbox mechanisms and are used locally for the restrictions and displays you configure. When you actively use system sharing, export a skin package, import files or select photos, the selected system capability or third-party app handles that content under its own rules.

1.2 Information generated by sign-in and cloud features

When you choose to sign in or use online features, we process the following information. After sign-in, focus records and duration-based habit settings may sync automatically, without requiring you to join a Challenge or Planet:

• Sign-in authorization information:The temporary code returned by WeChat sign-in; the accessToken and openId returned by QQ sign-in; the authorization code, identity token and user identifier returned by Apple sign-in, together with the email address, which may be an Apple private relay address, and name you choose to share on first authorization; and the user token returned by our server after successful sign-in;
• Account profile:The user ID, account, nickname, avatar URL, phone number, email address, membership status, membership expiry date and similar information returned by our server or provided through third-party authorization. When you choose to change your avatar, we also process the image you select, crop and confirm for upload, and its server URL;
• Account management information:When you submit an account-deletion request, we process the reason you select or enter and the request status to verify and complete deletion;
• Device and network information:Business API requests include appId, package name, app version, build number, distribution channel, platform, device brand and device model. Some endpoints also include the operating system version, the time recorded on the first online API request (the firstStartTime field), and the sign-in token. The receiving server encounters the IP address necessary for the network connection. This information is used for API compatibility, account identification and network services;
• Membership purchase information:The plan ID you select, backend order number, Apple in-app purchase product ID, Apple transaction ID, original transaction ID, signed transaction information, purchase result, and membership activation or renewal status. We do not collect or store sensitive payment-account information such as your bank card number or Apple ID password;
• Planet feature information:Planet lists, search keywords, joining or leaving a Planet, Planet names, descriptions, groups, passwords, declarations, member information, rankings, activity updates, Time Capsule content, and similar information;
• Focus record sync:After a focus session ends, the app saves the focus record and necessary sync state locally. When you are signed in and meet the sync conditions for the relevant account service, eligible records automatically submit their names or tags, start and end times, duration, type and validity status, linked to your signed-in account, for cloud records, statistics, check-ins and Planet eligibility. Pending records may be retried when the network is available or you sign in again. If a task title is used as a record name, that title is uploaded too. Signing out stops further syncing under that account but does not delete local records or records already held by the server. To request deletion of server-side data, follow Section 6;
• Duration-based habit sync:After sign-in, habit IDs, names, motivational text and configured durations are retrieved and synced, together with any Android allowlist compatibility fields already obtained from the server for the account. These fields are not an app list scanned from iOS. iOS Screen Time selection tokens, count-based habits and local daily progress are not included in uploads through this habit endpoint;
• Challenge and check-in information:Challenge names, start dates, target numbers of days, required focus duration, permitted check-in time periods, focus start and end times, focus duration, check-in record names, and similar information;
• Focus Together information:When you create or join a Focus Together room, we process the room number or invitation code, planned duration, room status, member user IDs, nicknames, avatars, joining, leaving and start times, and similar information;
• Supervision feature information:When you look up and link an emergency-exit supervisor by user ID, we submit that ID to the server and retrieve the user's nickname and avatar to help confirm their identity. Changes to the account's emergency-exit allowance are also submitted to the server. Supervision codes, the supervised user's ID, friend-supervision words and letter hints are generated or processed locally. They are sent to a contact or third-party app you select only when you actively copy or use system sharing;
• Customer support and QQ communities:When you choose “Feedback,” “Contact Support” or a QQ community entry, a WeCom customer-support page or the QQ app opens. The provider processes the account and network information needed to open the service, hold a conversation or join a group under its own rules. Text, images, contact details, order receipts and other material you actively send are processed by the support or community recipient. Please provide only what is needed to resolve your issue. Opening an entry does not automatically send all your tasks, focus history or Screen Time usage reports;
• Online animation resources:Online Lottie list requests, animation IDs, popularity records, and downloaded and cached remote animation files. When remote avatars or animations load, the provider hosting the resource URL receives the network connection information needed to complete the download;

Sign-in credentials are stored in the system Keychain. Necessary account state may also be written to an App Group shared container for use by the main app and relevant features. Production releases do not retain in-app request or response debug logs. Debug builds retain up to the most recent 200 API log entries locally, with some sensitive fields redacted; these can be cleared on the API log screen. Without signing in, you can still use basic focus and local task features after agreeing to this Policy and the User Agreement. Features requiring an account, cloud rankings, Planets, Challenges or sync may be unavailable.

1.3 iOS permissions and system capabilities required for features

When you use the relevant features, we request the following permissions or use the following system capabilities as needed:

1.4 Information we do not collect (iOS version)

• The app does not proactively collect the IDFA advertising identifier, integrate advertising tracking, or use AppTrackingTransparency for cross-app or cross-website tracking. The runtime processing scope of third-party SDKs is described in the sharing list and their guidance;
• Contacts, SMS messages, call records or precise location;
• Camera or microphone data, calendar read or write data, or health data;
• Alipay sign-in or payments, or WeChat Pay;
• Sensitive payment-account information such as bank card numbers, Apple ID passwords or payment-account passwords.

2. How We Use Your Information

• To provide core features such as focus and Pomodoro timing, app blocking, allowlists, app supervision, scheduled focus and emergency exits;
• To display focus statistics, history, four-quadrant tasks, habits, daily usage summaries, Time Fragments, home screen widgets, Live Activities and share cards;
• To save preferences, skin assets, alert sound settings and recent state so you can resume using the app;
• To complete WeChat, QQ or Apple sign-in, maintain account sessions, display membership status and profile information, and change your avatar or submit account-deletion requests at your direction;
• To process membership purchases through Apple StoreKit, submit Apple transaction credentials to our server, verify them, and grant or renew membership benefits;
• To provide online features including Focus Together, supervisor-account lookup, Planets, Challenges, rankings, check-in sync, Time Capsules and online animation resources;
• To send local notifications when focus ends, Pomodoro phases change, plans are triggered, or in Challenge-related situations;
• To keep the service secure and stable and troubleshoot network, sign-in and feature issues.

3. Apple System Frameworks and Extensions We Use

The app and its extensions use the following Apple frameworks. Local storage, usage reports and state shared with extensions do not in themselves mean that information is uploaded to an outside company. Online processing for Apple sign-in and in-app purchases is described separately in the Personal Information Shared with Third Parties list:

4. Third-Party Services and Components

The app integrates the WeChat Open Platform SDK and QQ Connect SDK for optional sign-in. Apple sign-in and StoreKit purchases use system services. WeCom support, QQ communities and system sharing are external services that you initiate. Lottie and ZIPFoundation render animations and compress or decompress files locally; using them does not itself transmit personal information to their authors.

Recipients, purposes, information types, triggers, processing methods and policy links are described in the appendix titled Personal Information Shared with Third Parties. The app currently does not integrate advertising, third-party analytics or tracking, Alipay or WeChat Pay SDKs. You can choose not to use an optional sign-in method or service if you do not agree to it.

5. Storage and Sharing of Information

5.1 Storage location and retention

• Basic tasks, focus records, settings, focus skins and alert sounds are stored on your device. Focus records uploaded after sign-in and duration-based habit settings are also processed by our servers;
• Screen Time selection tokens, supervision codes, friend-supervision letter hints and cached linked-supervisor information are stored locally. Daily usage and Time Fragments reports are processed and displayed only on your device and are not uploaded to our servers;
• The main app and widgets or extensions share necessary state snapshots through the App Group group.com.friendlove.tasktodo.shared. This remains on your device and is not sharing with an outside company;
• Sign-in tokens and account credentials are stored in the system Keychain. Account information and necessary state, including the token, are also cached in the local App Group;
• Account profiles, avatars you upload, deletion requests, and data for online features such as Focus Together, Planets, Challenges, rankings, check-in sync, Time Capsules and online animations are stored on our servers or in third-party service providers' systems;
• Unless laws or regulations require otherwise, we retain information only for as long as necessary to fulfill its purpose. Local data is usually deleted by the system when you uninstall the app, but Keychain items, system backups or server-side account data may remain under the applicable system or service rules.

5.2 Sharing and disclosure

We do not sell your personal information. We do not share it with third parties except in the following circumstances:

• With your explicit consent in advance;
• To complete third-party services you initiate, such as WeChat, QQ or Apple sign-in authorization or Apple in-app purchases;
• When you choose “Share Focus Card,” export a skin package, or use the system share sheet to send content to a third-party app you select;
• When you use interactive features such as Focus Together, Planets or rankings, your nickname, avatar, focus status or content you actively publish is shown to other room members or relevant users under the feature's rules;
• When entrusted service providers process relevant information on our behalf to provide necessary services such as server hosting and network transmission;
• When lawfully required by laws, regulations, judicial authorities or administrative authorities.

6. How You Can Manage Your Personal Information

• You can edit or delete local content in the app, including four-quadrant tasks, habits, tags, duration presets, scheduled plans, app-limit plans, custom skins and alert sounds. You can also change your account avatar, unlink a supervisor or regenerate a friend-supervision code;
• You can sign out in the app to stop further account-dependent syncing. Signing out does not delete information already on the server. To request account deletion, go to “Me → tap your avatar to open User Information → Delete Account.” To access, correct or delete server-side account data, email us at chenai@skyingidea.com;
• You can manage the app's Family Controls authorization in iOS Settings → Screen Time;
• You can manage notification permission in iOS Settings → Notifications;
• You can manage Picture in Picture in iOS Settings → General → Picture in Picture;
• You can remove widgets from your home screen to reduce the visibility of tasks and progress. This does not delete the tasks themselves. You can also withdraw consent or request deletion using the contact details below; permissions for local features can be revoked in system settings;
• Uninstalling the app can remove most local sandbox data. System backups, Keychain items and server-side account data are handled under applicable system or service rules.

After verifying your identity, we handle requests to access, copy, correct or delete personal information, withdraw consent or delete an account in accordance with applicable laws and regulations. Where no statutory deadline applies, we aim to complete verification and processing within 15 working days.

6.1 Account deletion

If you signed in with WeChat, QQ or Apple and want to delete your account, tap your avatar on the “Me” page to open User Information, then choose “Delete Account” to submit a request. If you cannot use this route, email chenai@skyingidea.com for assistance. To protect account security, we may need to verify your sign-in account, user ID, most recent sign-in method or other information that demonstrates account ownership.

• Processing time:After identity verification, we process the request as required by applicable laws and regulations. Where no statutory deadline applies, we aim to complete verification and account deletion within 15 working days.
• Effect of deletion:After deletion is complete, you cannot sign in with that account. Related membership status, Planets, Challenges, rankings, cloud check-ins, Time Capsules and other data or benefits may not be recoverable.
• Data handling:After deletion is complete, we delete or anonymize personal information associated with the account, including the profile, uploaded avatar, sign-in credentials, and server-side Focus Together, focus, Challenge and Planet records. Exceptions apply to information that must be retained under laws or regulations or is necessary to fulfill legal obligations, handle complaints or disputes, conduct security audits, or protect your or others' lawful rights and interests.
• Local data:Deleting an account does not automatically delete tasks, focus records, Screen Time plans, skin assets, alert sounds, supervision codes or other content on your device. You can delete or reset this content in the app, or uninstall the app to remove most local sandbox data.
• Using the app again:After deletion, you can still use basic local features without signing in. Signing in again with WeChat, QQ or Apple may create a new account record.

7. Information Security

We take reasonable measures to protect information, including iOS app sandboxing and App Group access isolation, storing sign-in credentials in Keychain, requesting permissions only as needed, applying the principle of least privilege, transmitting online data using HTTPS/WSS, and encrypting some request parameters. The internet is not completely secure. Please safeguard your device and system passcode and take care when sharing focus cards, Planet declarations, Time Capsules or other content you actively publish or submit. If a security incident occurs, we will notify you and take remedial measures as required by applicable laws and regulations.

8. Protection of Minors

This product is primarily intended for adults. If you are a minor, please read this Policy and use the service under your guardian's guidance. We do not proactively collect personal information from children under 14. If we discover collection without guardian consent, we will delete it as soon as possible.

9. Updates to This Privacy Policy

We may revise this Policy from time to time. We will notify you of material changes through in-app notices, renewed consent, release notes or similar means. If you do not agree to the updated Policy, you may stop using the relevant features or uninstall the app. Where processing personal information is necessary to provide a feature, that feature may no longer be available without your agreement.

10. Contact Us

For questions, comments, complaints or requests to exercise your personal information rights, please contact us as follows:

• Operator: Fuzhou Yunlian Changxiang Software Technology Co., Ltd.
• Contact email: chenai@skyingidea.com
• Processing time: After verifying your identity, we handle requests as required by applicable laws and regulations. Where no statutory deadline applies, we aim to complete verification and processing within 15 working days.

This is the iOS-specific Privacy Policy for ChanDing, revised based on the current iOS app's features. This Policy applies only to the current iOS app; please refer to this document.