Privacy Policy
This policy covers accounts, tasks, plans, calendars, focus timing and reviews in the mainland China release of AtomicPlan. We process information to provide these services, with your consent where required, or on another lawful basis.
1. Information we process and why
- Accounts and authentication. Your user ID, display name, email, invitation-registration details, salted password verification values, email-verification status, sessions and single-use credentials support registration, sign-in, synchronization, security verification and password recovery. Your password is submitted over an encrypted connection for authentication; the server stores a verification value rather than your plaintext password.
- Sign in with Apple. If you use this feature, Apple provides an app-specific account identifier and sign-in credentials. We verify the credentials with Apple and store an encrypted token to revoke authorization. This sign-in method does not request your name or email from Apple.
- Content you record. Goals, plans, task titles, notes, categories and colors, dates, time zones, recurrence rules, estimates, deadlines, completion status, outcome notes and retained conversation history let us save, display and adjust your arrangements.
- Execution and review. Focus start, pause, stop and measured duration, completion, postponements, edits, points, accepted suggestions and operation receipts support execution history, prevent duplicate submissions or rewards, and provide your own progress and reviews. These records are not used for external credit scoring.
- Optional preferences. Your schedule time zone, task order and other preferences saved previously support displays and arrangements. Optional preferences are not required for basic recording.
- Device, network and security information. Requests transmit an IP address and connection information such as browser or device type. Session records store a device description, digests of IP and browser information, and sign-in and recent-activity times. We also process request paths, times, status, latency, errors and abuse-prevention records for security, troubleshooting and service operation. Digests remain protected as personal information; we do not describe them as anonymous.
- Support communications. Your email address, issue description and any attachments you choose to send help us respond, verify identity and handle requests. Do not send passwords, verification links, identity documents or unrelated sensitive information.
You provide this information, generate it when using relevant features, or transmit it when connecting to the service. Account information and necessary connection information are required for account-based synchronization; withholding them may prevent that service from operating. We do not read your contacts, system calendars, precise location, photos, microphone or health database. The in-app calendar contains arrangements you record in AtomicPlan.
2. Necessary storage on your device
The app and website use necessary sign-in and cross-site-request-protection cookies, plus local storage for drafts, pending submissions and operation recovery. Server sessions expire, and you can revoke device sessions in account settings. Your browser or operating system may cache page resources. These storage mechanisms are not used for advertising tracking.
Signing out ends the corresponding sign-in state; it does not delete your account or guarantee removal of drafts or caches on other devices. To remove a device's local copies, clear the website or app data in browser or system settings. This does not delete the server account. Protect devices you share with others.
You can explicitly set local reminders and separately allow system notifications. The server stores reminder dates, times and offsets. Your device keeps notification permission state and settings for sound, title display and interaction haptics, and submits selected reminders to iOS for scheduling. Notification content hides task titles by default; you can change this under Notifications and haptics. Refusing notifications does not prevent task recording. Synchronized completion, cancellation, deletion or sign-out clears local reminders; changes made on other devices require this device to reconnect and synchronize. Future reminders may not be replenished if you do not reopen the app. Capacitor Local Notifications and Haptics provide these on-device features; the current version has no APNs server push or advertising or behavioral analytics integration for them. You can disable notifications in system settings and haptics in the app.
3. AI, advertising and tracking
AI Planning is disabled in this release; this feature does not send planning content to a model provider.
The current initial release does not integrate advertising networks, sell or rent personal information, combine account or usage records with other companies' app or website data for targeted advertising or advertising measurement, or provide this information to data brokers. Third-party behavioral analytics and third-party crash reporting are not enabled.
If we later add AI, third-party analytics or another new use of data, we will update the relevant disclosures first and obtain separate permission before transmitting data where applicable law or platform rules require it. Reading this policy does not authorize future AI data sharing.
4. Providers, disclosure and processing locations
Tencent Cloud Lighthouse hosts the application server, self-managed database, cache and restricted same-server business backups in Shanghai, China. They process account, plan, task, execution and necessary network and security data for hosting, synchronization, security and recovery. Alibaba Cloud DirectMail in Hangzhou, China processes recipient addresses, single-use verification or reset links, message content and necessary delivery information for email verification and password recovery. Google (Gmail) provides the support mailbox. Its processing is described below.
Email verification and password recovery transmit your recipient address, message content and single-use link through Alibaba Cloud DirectMail and your receiving email provider. Links expire after 30 minutes. We do not include plan content in these emails or configure email-open or click tracking. If you choose an overseas mailbox, its provider also processes delivery information under its service rules. See Tencent Cloud Lighthouse’s service agreement and Alibaba Cloud’s DirectMail terms.
Overseas support mailbox. If you choose to email recooce@gmail.com, Google (Gmail) and your email provider process your email address, subject, message, attachments and necessary delivery information to deliver mail and help us respond, verify and resolve your request, potentially in the United States and other regions. AtomicPlan does not automatically upload your plans, tasks or Focus records to Gmail. Viewing this page does not contact Google. An email link only opens your mail app; you choose the content and confirm sending there.
You may contact us at the support address in this policy to exercise rights relating to support mail. See Google's Privacy Policy and Privacy Help Center for its processing rules, contact channels and rights procedures. Send only what is needed to resolve the issue, without account passwords, verification links, identity documents or your complete task database. Viewing, editing and deleting your account in the app does not require emailing Gmail.
We provide necessary information only to providers performing hosting, security, email or other necessary services. We require them to follow the entrusted purposes and provide confidentiality and security protections at least equivalent to this policy and applicable platform rules, without independent advertising or unrelated uses. We may also disclose the minimum necessary information to comply with valid legal requirements, protect account security or address an actual dispute. Otherwise, we do not disclose personal information to unrelated third parties without your separate authorization.
The principal business-data storage location is described above. Accessing the service from another country or region transmits necessary information to that location, where data-protection rules may differ. We must complete any legally required cross-border notices, separate consent and other safeguards before the relevant transfer; continued use does not replace those requirements.
5. Retention
While your account exists, we retain information needed for recording, synchronization, execution history and reviews. Archiving, completing work, signing out or uninstalling the app does not automatically delete your account. Deleting or cancelling an individual item in the interface may leave associated history, operation receipts or backups subject to the following rules.
Online account content and associated operation history remain while the account exists and are removed from the online account store on deletion. Ordinary business backups on the same server are created daily and retained for 30 days. An hourly check removes expired backups and catches up after an interruption. Access to minimal deletion-prevention records is restricted. The latest records must be reapplied before a restored backup serves users. Request-performance metrics use an eight-day window, with older entries removed on new requests. Ordinary application logs rotate by size. Account-linked authentication events remain while the account exists and are removed from the online account store on deletion. Security records requiring separate legal retention and mail-delivery records are limited by applicable requirements and their processing purposes. Support-mail retention is specified below.
Support communications. YanXing Xiong (Fox Anderson) is responsible for handling requests. Within 30 days after an issue is resolved, we remove related messages and attachments from the support mailbox and known working copies we control. We restrict access and use of minimum records still needed for an unresolved issue, a specific legal obligation or an actual dispute, and remove them when that reason ends. Email providers retain underlying copies under their own policies.
If a legal obligation or actual dispute requires longer retention, we retain only relevant minimum records, restrict their use, and delete them or irreversibly de-identify them when that requirement ends. We do not retain complete plan content indefinitely merely because it might be useful.
6. Account and data deletion
In the app, open “Me → Account and privacy,” or visit account settings. Verify your current password or Apple Account as prompted and confirm deletion. We revoke any linked Sign in with Apple authorization during deletion. If you cannot recover access, contact privacy support.
Confirmation immediately disables the account and revokes all device sessions. We report deletion as complete only after online personal business data, the account and authentication credentials have been removed. If cleanup is interrupted, the account remains disabled and you can retry as instructed; it is not reactivated. Deletion is irreversible, and the original user ID cannot be registered again.
To prevent old requests or restored backups from reactivating a deleted account, we keep a minimal deletion record: digests of the account identifier and deletion-request credential, status and timestamps. It contains no original plan content or plaintext password, but is not anonymous. We retain it while necessary to prevent restoration and do not use it for personalization or marketing.
Offline backups and existing external logs do not disappear instantly when you confirm deletion. They remain access-restricted and follow the retention rules above. The latest deletion records must be reapplied before a restored backup serves users. We do not control copies that you export, screenshot or send to others.
7. Access, correction, copies and withdrawal
You can view and edit your plans, tasks and preferences, manage your verified email and device sessions, and delete your account in the app. You may also email privacy support to request access, correction, a copy or deletion of your information. Where applicable law provides, you can request restrictions, object to processing, withdraw consent-based permissions and complain to the relevant authority.
Withdrawal does not affect lawful processing before withdrawal. Withholding optional information or withdrawing optional permissions does not prevent basic recording, although stopping authentication or processing necessary for synchronization may make the corresponding service unavailable. We do not unreasonably discriminate against you for exercising privacy rights.
We verify that a request comes from you and respond within the time required by applicable law. If we cannot fulfill a request, we explain why and how to seek a review. There is currently no one-tap in-app export; you can request a copy through support. We do not ask for your account password to submit these requests.
8. Security
We use HTTPS, salted password verification, restricted sessions, account-data isolation, access controls, log redaction and backup-recovery validation. Necessary operations personnel may handle data only within their responsibilities. The server must process readable plan content to provide synchronization and reviews; this is not an end-to-end encrypted service.
No network service can guarantee absolute security. If a security incident affects personal information, we will take remedial action and notify affected users or authorities as applicable law requires.
9. Children
The initial AtomicPlan release is for users aged 14 or older. Child accounts and a parental-consent process are not offered. Before displaying the account-details form, the device checks the age you enter; the server also checks age eligibility when registration is submitted. Your exact age is used only for that registration check; we do not retain it, your birth date or identity documents. Age is self-declared.
If you are under 14, do not register or submit personal information. Users aged 14 through 17 should use the service with guidance from a parent or guardian and only as local law permits.
A parent or guardian who discovers that a child submitted personal information may contact privacy support. After verification, we will stop the relevant processing and delete information we are not legally permitted to retain.
10. Changes to this policy
This page identifies the text version and effective date. We will draw attention to material changes in purposes, data categories, recipients or rights through a visible in-app notice or another reasonable method. Changes requiring consent will not introduce the relevant new processing before valid consent is obtained.
11. Privacy and support contact
Responsible operator: YanXing Xiong (Fox Anderson)
Email: recooce@gmail.com
Describe your user ID, the issue and the action you want us to take. Do not include your password, single-use links or unrelated identity documents. You can use “AtomicPlan privacy request” as the subject line.