Skip to main content

Legal

持物 iThings Privacy Policy

This translation is provided for reference only. In case of any discrepancy, the Simplified Chinese version shall prevail.

Last updated: October 24, 2026

Welcome to 持物 iThings (the "App"). 持物 iThings is provided by the iThings development team (DeveloperDawn, "we"). We care about your privacy and the security of your data. This Privacy Policy explains what data the App processes, for what purposes, how it is stored, which third-party services are involved, and how you can manage your data.

Please read this Privacy Policy carefully before using the App. By using the App, you acknowledge the data-processing practices described here.

1. Basic principles

持物 iThings is a personal asset management tool built around local record-keeping. Our design principles are:

  • No ad networks, no IDFA and no cross-app tracking.
  • Data is processed only to the extent necessary to provide features.
  • You stay in control of the data you enter, import, export and delete.
  • Sync, account and backup capabilities differ between iOS and Android; this policy describes them separately.

2. Types of data we process

2.1 Assets and wish list data you enter

To provide asset recording, cost calculation, statistics, reminders, wish lists, virtual subscription tracking, maintenance records and data backup, the App processes data you actively enter or import, including but not limited to:

  • Asset names, categories, tags, prices, purchase dates, purchase channels, status, notes, photos and icons.
  • Maintenance records, resale records, retirement records, warranty or protection information.
  • Usage counts, usage amounts, usage duration, target costs and statistics exclusions.
  • Valuation information for investment assets, currencies, exchange rates and automatic precious metals valuation settings.
  • Subscription cycles, renewal records, cancellation records and expiry reminders for virtual assets.
  • Wish list names, budgets, target dates, countdowns and linked assets.
  • Data from CSV, Excel or iThings backup files you choose to import.

This data is used to display, search, calculate, analyze, back up, sync and remind within the app.

2.2 Account and membership data

Purchases, subscriptions and purchase restoration on iOS are handled by Apple StoreKit and the App Store. The App uses StoreKit to fetch product information, start purchases, verify transaction status and restore purchases, and stores a membership status snapshot locally to unlock Pro features. We never obtain your full card number, billing address or Apple ID password.

The Android and HarmonyOS versions may offer account registration, sign-in, email verification, password recovery, device session management and membership status lookup; the Android version may additionally offer cloud backup snapshots. To provide these features, the iThings backend at https://api.ithingsapp.com may process your email address, display name, encrypted sign-in credentials, email verification status, device sessions, membership status, membership source and necessary request logs.

When you register an account or recover a password, we send a one-time verification code to your email through Alibaba Cloud DirectMail. To complete delivery, Alibaba Cloud may process the recipient address, sender information, message subject and body, delivery status, bounce information and necessary network logs. Verification codes are short-lived; the backend stores only irreversible verification digests, never the codes themselves.

2.3 Android cloud backup snapshots

If you sign in to your account in the Android version and use cloud backup, the App uploads backup snapshots to the iThings backend so the latest backup can be listed, downloaded and restored later.

Backup snapshots may contain assets, wish list items, categories, photos, notes, virtual subscription records and related settings. Cloud backup exists for data recovery and device migration; the files are stored in our server file storage. We take reasonable measures to protect this data, but you should still manage your account and backup files carefully.

2.4 Optional sign-in fields

Virtual assets may include optional fields such as "sign-in account" or "sign-in password" that you fill in yourself. The feature helps you record information related to a virtual asset, but 持物 iThings is not a password manager and does not provide a dedicated password vault.

If you fill in these fields, they are stored on your device together with the asset data; if you enable iCloud sync or Android cloud backup, they may also be synced or backed up with the corresponding data. Be cautious about entering highly sensitive credentials and prefer a dedicated password manager for important ones.

2.5 Photos, camera and photo library

When you add photos to an asset, wish or note, the App may request access to the camera or photo library:

  • With the camera, the App processes only the photo you take and confirm.
  • With the photo library, the App reads photo thumbnails within the scope you authorize so you can choose, and saves only the photos you select.
  • Cropping, compression and background removal are performed on your device whenever possible.

You can manage camera and photo library permissions at any time in system settings.

2.6 App settings and local state

To keep the experience consistent, the App stores certain settings and state on your device, such as language, theme, display preferences, currency, reminder times, categories, channels, home module configuration, cached display data, membership status snapshots, notification scheduling state and backup records.

This information is used to restore interface state, avoid repeated setup, schedule local notifications, determine feature availability, and drive sync status and widgets.

To understand how settings and features are used and to keep slimming the product down, the Android and HarmonyOS versions report anonymized settings-usage statistics to the iThings backend when a setting changes or during routine app launches: they contain only a randomly generated installation identifier, setting names and normalized values (such as on/off, enum choices, or the number of custom entries). They never contain assets, wish list items, notes, photos or anything you type, and are not linked to your account. The iOS version does not take part in these statistics.

3. Sync and storage

3.1 iCloud sync on iOS

If you enable iCloud sync, the iOS version syncs your assets, wish list, categories, photo references and related records to your personal private iCloud database through Apple CloudKit to keep data consistent across devices.

iCloud sync is provided by Apple's iCloud/CloudKit service. We cannot sign in to your Apple ID and never read your private iCloud database through our own servers.

3.2 The iThings backend

The API domain of the iThings backend is https://api.ithingsapp.com. The backend provides precious metals public quote proxying; Android and HarmonyOS account registration, sign-in, email verification, password recovery, device sessions and membership status management; Android backup snapshot upload, latest snapshot lookup and download; and the anonymized settings-usage statistics from the Android and HarmonyOS clients (see 2.6).

4. Network requests and third-party services

To implement certain features, the App may access the following services when you actively use the relevant feature:

  • Apple services: StoreKit, iCloud/CloudKit, the App Store, the iTunes Search API, system notifications, the camera and the photo library.
  • Google Play or Android system services, depending on the distribution channel and system capabilities of the Android version.
  • The iThings backend at https://api.ithingsapp.com for precious metals public quote proxying and for Android accounts, membership status and cloud backup.
  • Alibaba Cloud DirectMail for delivery of Android and HarmonyOS account verification and password recovery emails.
  • The public quote services Gold API and Metals.Dev. The iOS, Android and HarmonyOS clients request fixed precious metals quotes only from the iThings backend; the backend fetches and caches live quotes from Gold API first and falls back to Metals.Dev when it is unavailable. This process never uploads asset names, metal weights, notes, photos or account data; the backend and network providers may process technical information such as IP addresses and request times for security protection and troubleshooting.

The App integrates no ad networks, third-party analytics SDKs or cross-app tracking SDKs. Settings-usage statistics (see 2.6) are processed by the iThings backend; no third-party analytics service is used.

5. Backup, import and export

持物 iThings supports exporting .chiwu backup files and importing iThings backups, CSV or Excel spreadsheets.

  • A backup file may contain your complete assets, wish list, categories, photos and notes.
  • You decide where backup files are saved, shared, uploaded or deleted.
  • If you send a backup file to someone else or store it on a third-party cloud drive, chat tool or email service, the handling of that file is governed by that service's own policy.
  • Imported files are parsed on your device and written to local data following the conflict strategy you choose.

Please keep backup files safe and avoid sharing backups containing private information with untrusted parties.

6. Data sharing and disclosure

We do not sell, rent or trade your personal data.

Your data may be processed by third-party services, or shared by you, in the following situations:

  • When you enable iCloud sync, data is processed by Apple iCloud/CloudKit.
  • When you purchase, subscribe to or restore membership, transactions are handled by the respective app store or payment channel.
  • When you use App Store icon search, the search term is sent to the Apple iTunes Search API.
  • When you use precious metals quotes or automatic valuation, the app requests only fixed public quotes from the iThings backend; the backend then fetches and caches quotes from Gold API or Metals.Dev without ever sending your asset names, weights, notes, photos or account data.
  • When you sign in or use cloud backup on Android, the relevant data is processed by the iThings backend.
  • When you export or share backup files, photos or screenshots yourself, the recipients and related third-party services may process that content.
  • Where laws, regulations, court orders or regulatory requirements explicitly require disclosure, we cooperate to the necessary extent.

7. Data security

We reduce data risk in the following ways:

  • Local data is protected by the app sandbox and system permission management.
  • iCloud sync on iOS relies on Apple CloudKit.
  • The Android backend serves its API over HTTPS.
  • Backup files and server data are protected by reasonable access control and storage safeguards.
  • No ad or cross-app tracking SDKs.

No system can guarantee absolute security. Please protect your device passcode, Apple ID, iCloud account, Android account and backup files. Be cautious when recording sensitive credentials in virtual assets.

8. Your choices and rights

You can manage your data in the following ways:

  • View and edit assets, wish list items, categories, notes, photos and settings in the app.
  • Delete individual records, photos, categories or related data in the app.
  • Export a backup file using the backup feature.
  • Import data from a backup file, CSV or Excel spreadsheet.
  • Turn off iCloud sync in the iOS version, or manage iCloud permissions in system settings.
  • Sign out, manage device sessions or use backup restore in the Android version.
  • Turn off camera, photo library and notification permissions in system settings.
  • Manage auto-renewing subscriptions through the app store or system subscription settings.
  • Uninstall the app to remove local app data from the device; data already synced to iCloud or the server may remain under the corresponding service's mechanisms.

If you have questions about data deletion or privacy handling, contact us using the details at the end of this policy.

9. Children's privacy

The App is not directed at children under 13, and we do not knowingly collect personal information from children. If a guardian believes a child has entered personal information into the App without consent, please delete the relevant content from the device, iCloud or account data promptly, or contact us for help with handling it.

10. Policy updates

We may update this Privacy Policy due to changes in product features, legal requirements or review requirements. Significant changes will be announced through in-app entry points, release notes or other appropriate channels. Once published, the updated policy applies to subsequent versions.

11. Contact us

If you have any questions, comments or requests about this Privacy Policy or our data processing, contact us at: