Privacy Policy

This policy applies to your use of the Do iOS app and its companion Apple Watch app, widgets and related features. It does not apply to any third-party product or service, even if you access it through the app.

The app is built local-first: unless you actively enable iCloud sync or couple sharing, your data never leaves your device.

We designed the whole product around the following principles, which run through every section of this policy:

For clarity, we group information into the categories below. Unless stated otherwise, all of it stays on your device (and any private iCloud you choose) and is inaccessible to our servers.

The content recorded in this app qualifies under most legal frameworks as "sensitive personal information" or a "special category of personal data," and may relate to your sex life, sexual orientation and health.

We process this information only when you enter it, only on your device, and only to provide you the recording feature. We do not transmit it to our servers, do not use it for analytics, profiling, advertising or any commercial purpose, and do not share it with any third party. You can further protect it with an app lock (Face ID / Touch ID / passcode).

We process your information on your device, only for the following purposes:

Where laws such as the EU General Data Protection Regulation (GDPR) apply, our legal bases for processing your information include:

We take technical and organizational measures proportionate to the sensitivity of the information:

iCloud sync is optional and off by default. If you enable it, the app stores your data via Apple CloudKit in a "private database" tied to your Apple ID. That database is hosted by Apple and accessible only to you; as the developer we cannot read its content.

You can turn off sync anytime, after which data stays local only. Turning off sync does not delete data already synced to your iCloud — use the in-app wipe to remove it.

With your permission, the app can read data such as heart rate and calories from Apple HealthKit to enrich your records, and with your consent write related workout data back to the Health app.

Data obtained through HealthKit is used only on your device, never uploaded to our servers, and never used for advertising or sold, fully in line with Apple’s HealthKit privacy requirements. You can review or revoke access anytime in Settings › Health › Data Access & Devices.

Location recording is optional and off by default. If enabled, the app reads your current location when you create a record to tag the place and logs a weather snapshot via Apple WeatherKit.

Location and weather data are saved only as part of that record, locally and in your private iCloud, and never sent to our servers. You can turn off location recording or revoke the permission in system settings anytime.

Couple sharing is optional. When you pair with a partner, relevant records sync between your devices via Apple CloudKit’s shared-database mechanism, and each of you can write your own perspective.

Data moves between your iCloud and your partner’s; we cannot read shared content. Note: once shared, your partner can see the corresponding records on their device. You can unpair anytime; afterward new records are no longer shared and already-shared data is handled per CloudKit’s rules. Only record information about another person with their informed consent.

The app integrates no third-party ad or analytics platforms. To function, we rely only on the following Apple system services, each governed by Apple’s privacy policy:

We do not sell or rent your personal information, nor share it for third parties’ marketing. Because we generally cannot access your record content, in the vast majority of cases we have no data to disclose.

In the rare cases required by law (e.g. a valid court order), we can only provide the limited information we actually hold — which typically does not include your record content, as it is not on our servers.

Your data stays on your device (and any iCloud you choose) until you delete it. We set no fixed retention period because we do not hold your records.

Wherever you are, you have meaningful control over your data, and most rights can be exercised directly in the app:

Depending on where you live, you may have additional rights:

Because data stays on your device by default, cross-border transfers usually do not occur. If you enable iCloud features, storage and transmission are handled by Apple per its infrastructure and privacy policy, which may involve Apple data centers in different regions.

The app is designed for adults, rated 17+ on the App Store, and requires users to be at least 18 (or the age of majority where they live). We do not offer the service to minors and do not knowingly collect their information. If you believe a minor has provided us information, contact us and we will delete it.

Although we hold almost none of your personal information on servers (greatly reducing breach risk), if a security incident affecting information we do hold occurs, we will notify affected users and relevant regulators within the period required by applicable law.

We may update this policy from time to time to reflect changes in features, law or practice. For material changes, we will update the "Last updated" date and version at the top of this page and, where appropriate, notify you in-app. We recommend reviewing this page periodically. Continuing to use the app after changes take effect means you are aware of the updated policy.

If you have any questions, requests or complaints about this policy, your data or your rights, contact us at:

Email: support@xiaoyehua.dev. We will respond within a reasonable period and as required by applicable law.