简体中文 · English

Privacy Policy

Last updated: April 29, 2026 · Version 1.1.0

1. Information We Collect

1.1 Information You Provide

• Apple ID identifier (via Sign in with Apple): used for authentication
• Phone number (only where SMS login is available in your region): used for authentication
• Email address (optional; may be returned by Sign in with Apple via private relay)
• Profile information: username, avatar (optional), birthday (optional)
• Task data: tasks, lists, tags, and notes you create
• Character chats: messages exchanged with AI characters
• Reports: content of reports you submit on AI messages

1.2 Information Collected Automatically

• Device info: device model, OS version
• Usage data: feature usage frequency, error logs
• Apple DeviceCheck markers: at sign-in we may call Apple's DeviceCheck service to obtain a single-use device token (which does not contain identifiers such as device model, IMEI, or advertising IDs), used for anti-fraud and abuse mitigation. For severe Terms-of-Service violations (e.g. automated registration or ban evasion), we may record an abuse marker against this device in Apple's per-device storage; that marker is stored by Apple on Apple servers and persists across reinstalls of our app. This mechanism is provided by Apple and governed by Apple's privacy policies.

2. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve our service
• Process your tasks and reminders
• Generate AI character responses
• Send service-related notifications
• Detect and prevent fraud or abuse

3. Sharing with Third Parties

We do not sell your personal information. We share it only in the following cases:

• Mainland-China LLM service provider: chat content is sent to Aliyun — Qwen (通义千问) to generate AI responses (see Section 4).
• Content-safety moderation service (Mainland China): text you submit (chat messages, nicknames) is sent to Aliyun's content-safety service for compliance moderation (detecting illegal or harmful content). This data is processed within Mainland China and does not cross the border.
• Other service providers: third parties that help us operate the service (cloud hosting, Apple Push Notification, StoreKit)
• Legal requirements: in response to legal process or government requests
• Your consent: in any other case where you give explicit consent

We require every third party to provide protection of your data equal to that described in this policy.

4. AI Features and Third-Party AI Service Providers

BANBAN uses AI to provide:

• Intelligent task parsing and decomposition
• AI character chat

To generate AI responses, we send your chat content (including the relevant conversation context) to the Mainland-China-based LLM service provider Aliyun Qwen (通义千问). This data sharing requires your explicit consent at registration and can be withdrawn at any time in Settings → Personal Data Rights. Once withdrawn, AI character chat will be unavailable; other features remain unaffected.

Our commitments regarding this sharing:

• All inference is performed within Mainland China; your data does not leave the country
• We do not use your conversation data to train any AI models
• We send only the context needed to generate a response
• All transmission to the provider is encrypted with HTTPS
• AI-generated content is for reference only and does not constitute professional advice

Provider's Deep-Synthesis Algorithm Filing (per the PRC Provisions on the Administration of Deep Synthesis of Internet Information Services):

• Algorithm name: DAMO Academy Interactive Multi-Capability Synthesis Algorithm (Qwen)
• Filing number: 网信算备330110507206401230035号
• Technical support entity: Alibaba DAMO Academy (Hangzhou) Technology Co., Ltd.
• Application scope: open-domain multimodal content generation; provides multimodal output based on user input via API

5. Data Security

• All data in transit uses HTTPS encryption
• Sensitive data (such as authentication tokens) is encrypted at rest using industry-standard algorithms
• Periodic security audits and vulnerability scans
• Least-privilege access control

6. Your Rights

Regardless of your region, you have the following rights:

• Access: request a copy of your personal information
• Correction: correct inaccurate information
• Deletion: request deletion of your account and personal data
• Portability: export your data in a machine-readable format
• Withdraw consent: at any time, including third-party AI data sharing
• Object or restrict: object to or restrict certain processing

You can exercise these rights in-app via Settings → About → Personal Data Rights, or by contacting us.

You can delete individual chat messages or your entire chat history with a character at any time, and you can delete your entire account in-app — both take effect immediately on the server.

7. Data Retention

• Active accounts: data is retained while you use the service
• Deleted content: removed from backups within 30 days
• Account deletion: 30-day grace period after request, then permanent deletion
• Legal requirements: some data may be retained longer where required by law

8. Children's Privacy

Our service is intended for users aged 14 and older. At registration, you must confirm that you are at least 14 years old. If we discover that we have collected personal information from a child under 14, we will delete it immediately.

9. Data Storage Location

Your information is processed and stored on cloud infrastructure located in Mainland China. AI inference is also performed by Mainland-China-based service providers (see Section 4); your data does not cross the border. We have not enabled cross-border data transfers; if that changes in the future, we will update this policy and obtain any additional consent required by applicable law.

10. Policy Changes

We may update this privacy policy from time to time. We will notify you of material changes via in-app notification or email.

浙ICP备2025189379号-1