01Scope and operator
This policy covers JotIt for iOS and its official privacy and support websites. The operator is Shanghai Qishan Cultural Communication Co., Ltd. (上海祁杉文化传播有限公司), App filing 沪ICP备2026044636号-1A. JotIt manages schedules, tasks and expenses and offers optional parsing and question-answering features. We process information for clear purposes, with data minimization, transparency and security.
02Information we process
- Schedules and reminders: titles, times, notes, repetition rules and reminder settings are processed and stored on your device to create, show, search and trigger reminders.
- Expenses and statistics: amounts, categories, dates and notes are processed and stored locally for recording, queries and totals.
- Profile: your chosen nickname and avatar are stored and displayed locally.
- Voice and image input: speech transcripts and text extracted from images create suggestions for schedules, expenses or queries. Recognition uses system or on-device capabilities. Original images are not uploaded.
- Online AI: text you submit, speech transcripts, OCR text and necessary summaries are sent over encrypted connections with your permission to parse requests and generate responses or suggestions.
- Subscriptions and credits: Apple-signed transaction proofs, product and original transaction identifiers, purchase and expiry dates, credit periods and usage counts are used to validate Pro, restore purchases and calculate balances. Apple handles payments. Proofs go to our private verification service, not to the AI model.
- Credits and security: App Attest identifiers and proofs, request digests, network addresses and results are used to verify the app and request integrity, share credit allowances, limit rates and prevent replay or abuse. The key identifier is stored in the device keychain. The server retains public keys, counters, attestation receipts and security records, not AI model input.
No app account is required. We do not purchase personal information from contact lists, advertising platforms or data brokers.
03System permissions
Notifications deliver reminders at your chosen times. Microphone and speech recognition permissions convert voice input into text. Camera and photo access support images you choose to recognize and content you choose to save. Permissions are requested when needed and can be withdrawn in iPhone Settings. Refusing a permission affects only the features that depend on it.
04Optional online AI
Online AI is off by default. Only after you allow it and initiate a request does the app send necessary text over HTTPS. This may include submitted text, speech transcripts, on-device OCR text and summaries you permit, such as counts, category totals or records within a requested range. Original images are never sent to online AI. Analysis prefers aggregated summaries; record details are used only when you explicitly request them and only as needed.
Apple App Attest validates the app and request integrity. Registration and requests process random verification key identifiers, Apple-signed attestations, request digests, counters and network addresses for rate limits and replay and abuse prevention. These do not include your account, device name or advertising identifier, are not used for advertising tracking and are not sent to DeepSeek.
AI results may be inaccurate. The app labels AI-generated content. Check it before saving, sharing or acting on it.
05Third-party services
Online parsing and analysis use the DeepSeek API. The corresponding registered generative AI service is 求索对话 DeepSeek Chat, filing Beijing-DeepseekChat-202404280016. Necessary text may be processed by that provider under its applicable privacy policy and terms. Enabling AI does not automatically upload your complete schedule database, complete expense database or original images.
App integrity checks use Apple App Attest. Registration connects to Apple’s attestation service. Device security hardware protects the private key, and our server checks Apple’s signed attestation.
Pro subscriptions and purchase restoration use Apple StoreKit. Apple handles purchases, charges, renewal and refunds. We do not receive full card numbers or Apple ID passwords. Apple-signed transaction proofs accompany App Attest-protected AI requests to our private verification service. It extracts only the necessary product and original transaction identifiers, purchase and expiry times, and revocation or upgrade status, then derives an irreversible subscription allowance identifier. Neither the proof nor these fields are sent to DeepSeek.
The app has no advertising SDK, does not track you across apps for advertising and does not sell personal information.
06Storage, retention and security
Schedules, expenses, profiles, preferences and backups are primarily stored on your device. The operator does not create cloud copies of this local business data unless you initiate export or system backup features. Information for online AI, shared allowances and security is processed only as needed. We use access controls, transport encryption and data minimization. No internet service can guarantee absolute security. We handle incidents and required notifications according to applicable law.
Our server does not log AI prompts, response bodies or original images. Anonymous credit counts, request digests and duplicate-operation markers are kept for up to 45 days to support monthly allowance accuracy. Operational logs without message bodies are generally kept for 30 days. Signed transaction proofs are used in short-lived in-process verification caches and are not written to the credit database. App Attest public keys, counters and attestation receipts remain while the security verification system is in use, to validate later requests and prevent replay.
Deleting records, clearing local data or uninstalling removes relevant device data according to iOS behavior. You manage and delete exported backups yourself. Uninstalling or reinstalling does not automatically delete older server security records; old records cannot identify a new installation. Contact us about processing such records. Because the app has no account, we may be unable to locate or disclose an anonymous record if we cannot reliably establish that it belongs to you.
07Your choices and rights
- View, correct or delete schedules, expenses, nicknames and avatars.
- Export JSON, calendar or expense files and restore backups.
- Clear AI conversations, disable online AI or local-data analysis.
- Manage or cancel Pro in system subscription settings and restore valid purchases in the app.
- Withdraw notification, microphone, speech recognition, camera or photo permissions.
- Contact us with questions, complaints or requests under applicable law.
Withdrawing consent does not affect processing already performed on the basis of prior consent. We verify necessary information and handle requests under applicable law.
08Children
The app is not specifically designed for children. Children under 14 should use it with parental or guardian consent and guidance. Guardians who believe a child provided personal information without appropriate consent can contact us.
09Website information
The privacy and support websites are static pages, without product analytics, advertising tracking or account login. Hosting providers may process routine network logs such as IP addresses, browser types and access times for operation and security, under their applicable terms.
10Contact
Operator: Shanghai Qishan Cultural Communication Co., Ltd. (上海祁杉文化传播有限公司).
Primary email: weizhichao@qishanlabs.com. Backup email: 281916057@qq.com.
11Policy updates
We update this policy and its version and date when features, processing or applicable rules change. We provide appropriate notice for material changes affecting your rights. If you disagree, you may stop using the relevant features or delete the app.