Privacy policy

01Scope and operator

This policy covers JotIt for iOS and its official privacy and support websites. The operator is Shanghai Qishan Cultural Communication Co., Ltd. (上海祁杉文化传播有限公司), App filing 沪ICP备2026044636号-1A. JotIt manages schedules, tasks and expenses and offers optional parsing and question-answering features.

02Information we process

• Schedules and reminders: titles, times, notes, repetition rules and reminder settings are processed and stored on your device.
• Expenses and statistics: amounts, categories, dates and notes are processed and stored locally.
• Profile: your chosen nickname and avatar are stored and displayed locally.
• Voice and image input: speech transcripts and text extracted from images create suggestions. Recognition uses system or on-device capabilities. Original images are not uploaded.
• Online AI: after your explicit consent, submitted text, speech transcripts, OCR text and necessary summaries are sent first to our encrypted relay and then to the DeepSeek API to parse requests and generate responses or suggestions.
• Subscriptions and credits: Apple-signed transaction proofs, product and original transaction identifiers, purchase and expiry dates, credit periods and usage counts validate Pro and calculate balances. Proofs go to our private verification service, not to the AI model.
• Credits and security: App Attest identifiers and proofs, request digests, network addresses and results verify the app and requests, limit rates and prevent replay or abuse. They are not sent to the AI model.
• Optional usage analytics: screen views, feature use and outcomes, app version, language, a random session identifier and a separately siloed App Attest verification identifier are processed only after you enable analytics.

No app account is required. We do not purchase personal information from contact lists, advertising platforms or data brokers.

03System permissions

Notifications deliver reminders. Microphone and speech recognition permissions convert voice input into text. Camera and photo access support images you choose to recognize and content you choose to save. Permissions are requested when needed and can be withdrawn in iPhone Settings.

04Optional usage analytics

Usage analytics is off by default. If you enable it, the app sends only fixed-allowlist fields through our encrypted service to measure feature adoption, flow completion and stability. Analytics never includes calendar entries, tasks, accounts, amounts, locations, images, audio, OCR text or AI conversation content.

Opt-in events are normally retained for 30 days. A separately siloed pseudonymous identifier links events from the same app installation to measure active devices and retention. It is not used to identify a real-world person, for advertising, for cross-app or cross-website tracking, or combined with other companies’ data. You can turn usage analytics off at any time in Settings; once disabled, no new usage events are queued or sent.

05Optional online AI

Online AI is off by default. Only after you see the prominent disclosure and tap “Agree & Send” does the app, when you initiate a request, send necessary text over HTTPS first to the encrypted relay operated by Shanghai Qishan Cultural Communication Co., Ltd. and then to the API of third-party AI provider Hangzhou DeepSeek Artificial Intelligence Co., Ltd. (DeepSeek).

Sent content may include text you submit, speech transcripts, on-device OCR text and summaries you permit, such as counts and category totals. When you explicitly request details, the app may send necessary event dates, times, titles, locations and categories and expense dates, titles, amounts and categories within the query scope. Original images and the complete local databases are never sent.

Apple App Attest validates app and request integrity. Our relay processes verification key identifiers, Apple-signed attestations, request digests, counters and network addresses for rate limits and replay and abuse prevention. These are not used for advertising tracking and are not sent to DeepSeek.

06Third-party services

Online parsing and analysis use the DeepSeek API. The data recipient is Hangzhou DeepSeek Artificial Intelligence Co., Ltd. (DeepSeek). The corresponding registered generative AI service is 求索对话 DeepSeek Chat, filing Beijing-DeepseekChat-202404280016.

Under its Privacy Policy and open-platform terms, DeepSeek may process and retain submitted inputs in the People’s Republic of China and use them to provide, secure, develop and improve its services and models. Do not submit sensitive information you do not want a third party to process.

We share user data only when the third party provides the same or an equivalent level of protection required by this policy and applicable rules. We reviewed DeepSeek’s public Privacy Policy and open-platform terms and confirm that this integration is operated on that basis. If this condition is no longer met, we will stop sharing or change providers. We periodically review the applicable policies and terms.

App integrity checks use Apple App Attest. Pro subscriptions and restoration use Apple StoreKit. Apple handles purchases, charges, renewal and refunds. Apple-signed transaction proofs go only to our private verification service and are not sent to DeepSeek.

The app has no advertising SDK, does not track you across apps for advertising and does not sell personal information.

07Storage, retention and security

Schedules, expenses, profiles, preferences and backups are primarily stored on your device. We use access controls, transport encryption and data minimization.

Our own relay does not log AI prompts, response bodies or original images; DeepSeek’s processing and retention of received content follow the policies described in section 6. Anonymous credit counts, request digests and duplicate-operation markers are kept for up to 45 days. Operational logs without message bodies are generally kept for 30 days. Signed transaction proofs are not written to the credit database. App Attest public keys, counters and attestation receipts remain while the verification system is in use.

Usage analytics events are processed only after you opt in and are normally retained for 30 days. The analytics identifier is purpose-siloed and is not used for advertising or combined with other companies’ data.

Deleting records, clearing local data or uninstalling removes relevant device data according to iOS behavior. You manage exported backups yourself. Uninstalling does not automatically delete older anonymous server security records. Contact us about processing such records.

08Your choices and rights

• View, correct or delete schedules, expenses, nicknames and avatars.
• Export files and restore backups.
• Clear AI conversations, disable online AI or local-data analysis.
• Turn optional usage analytics on or off at any time in Settings. Once disabled, no new usage events are queued or sent.
• Manage or cancel Pro and restore valid purchases.
• Withdraw notification, microphone, speech recognition, camera or photo permissions.
• Contact us to request access, deletion, restriction of processing or an opt-out from model training for data processed by the third party. We handle requests under applicable law and coordinate with DeepSeek when needed.

Withdrawing consent does not affect processing already performed before withdrawal.

09Children

The app is not specifically designed for children. Children under 14 should use it with parental or guardian consent and guidance.

10Website information

The privacy and support websites are static pages without product analytics, advertising tracking or account login. Hosting providers may process routine network logs for operation and security.

11Contact

Operator: Shanghai Qishan Cultural Communication Co., Ltd. (上海祁杉文化传播有限公司).

Primary email: weizhichao@qishanlabs.com. Backup email: 281916057@qq.com.

12Policy updates

We update this policy and its version and date when features, processing or applicable rules change. If you disagree, stop using the relevant features or delete the app.