Version 1.0 · Effective November 5, 2026
Operator and scope
Privy (隐知) is operated by Li Zheng, an individual developer. This policy covers the Privy iPhone app and privy.verismo.work. Contact: mrbananaeros@gmail.com. The service supports Chinese and English privacy learners.
Information in the app
The first release requires no account and offers no in-app purchases. It includes no advertising SDK, third-party behavioral analytics, cross-app tracking or developer-operated backend. Progress, answers and drafts, bookmarks, review schedules, study time, daily allowance, preferences and reminder settings stay in the app's device sandbox. They support learning continuity, review scheduling and the daily 45-minute free allowance. The app does not proactively upload these learning records to the developer. Records from earlier simulated purchase tests may remain locally; they do not add time in the first release or represent real payments.
Do not enter confidential information about clients, colleagues or other people in free-text answers. Your Apple device backup settings may include app data. System backups are separate from Privy; Privy has no cloud-sync service. We cannot read, recover or remotely delete learning records on your device.
Permissions and external links
Daily reminders are optional and scheduled locally after system permission. Refusing or disabling notifications does not restrict learning. Change reminders in the app or iOS notification settings. The app does not request contacts, camera, microphone or precise location access. Opening the website, legal sources or other external links connects your browser to those websites, whose policies govern their handling of visits.
Website infrastructure and support
Cloudflare provides HTTPS, static content delivery and security for this website. Delivering requests and preventing abuse may involve IP addresses, request times and paths, browser and network information. We have not deployed advertising pixels, behavioral analytics scripts, registration forms or marketing subscriptions. We do not intentionally set marketing cookies. Infrastructure security processing or cookies may still occur; see Cloudflare's policy. We do not build visitor advertising profiles, sell personal information or share it for cross-context behavioral advertising.
If you email us, we receive your address, message and attachments to answer your request. Gmail (Google) receives support email and may process it outside your country. Cloudflare also operates a global network. Send only what is necessary; do not send identity documents, payment cards, confidential examination questions or full study archives. Neither the website nor email automatically receives learning records from the app.
Processing grounds and international handling
Necessary processing supports page delivery, service security and responses to your requests. Where consent is legally required, we will seek the relevant consent. Visiting this site is not blanket consent to unnecessary processing. Where EU or UK data protection law applies, requested service responses rely on the contractual arrangements needed to fulfil the request, and basic security processing relies on the legitimate interest in protecting the service, balanced against individual rights. Processing subject to Chinese law uses a permitted ground under that law; legitimate interests are not treated as a standalone PIPL ground.
International handling must satisfy any applicable contract, assessment, notice, consent or other safeguard requirements. This policy does not replace those procedures. Using Cloudflare or Gmail is not a representation that every international-transfer requirement has been completed.
Retention and deletion
Local records remain until you delete the app or relevant device data. iOS Offload App can retain documents and data; use Delete App for removal, and manage backups separately. The developer test-data reset retains daily allowance, preferences and historical test ledgers; it is not complete erasure. Support messages are kept only while needed for the request and necessary follow-up, with exceptions for legal obligations or a specific dispute. Unneeded information is cleared. We do not maintain a separate website access-log database. Cloudflare infrastructure records follow the applicable service configuration, contract and retention rules; we do not promise that visiting creates no records.
Your choices and rights
Depending on applicable law, you may have rights to information, access, a copy, correction, deletion, restriction, objection, withdrawal of consent and regulatory complaint. Email the contact above and identify whether your request concerns local app data, website access or correspondence. We request proportionate verification and respond within applicable statutory deadlines. Withdrawing consent does not affect earlier lawful processing or access to features that do not require that data. You control device-local learning data; the developer has no remote access. You may complain to the competent regulator.
Children, security and changes
Privy is designed for professional and adult learning, is not marketed to children and does not knowingly collect children's personal information. Contact us if you identify a concern. We use reasonable measures including access controls, HTTPS and data minimization, without promising absolute security. Material changes to features, providers or data use will be reflected in this policy and its date, with additional notice or consent where required.
Provider policies
Cloudflare: https://www.cloudflare.com/privacypolicy/
Google: https://policies.google.com/privacy
Apple: https://www.apple.com/legal/privacy/