Privacy Policy
Introduction
SuperEgo (超我) (the “App”, “we”, “us”) respects your privacy. This policy explains — in plain language — what we collect, why we collect it, how we store and share it, and the rights you have over your information.
By tapping Agree or continuing to use the App, you confirm that you have read and accepted this policy.
1. Information We Collect
1.1 Information you provide
- Account: Apple User ID, name and email obtained via Sign in with Apple.
- Questionnaire: core values, life vision ("My Why"), core habits, fears you share.
- Tasks & Journal: the daily tasks you create, completion status, skip reasons, journal entries and mood tags.
- Coach chats: your conversation messages with the AI coach.
1.2 Health data (HealthKit) — only with your explicit permission
| Read | Purpose |
|---|---|
| Steps | Display daily activity and feed alignment score |
| Sleep | Help personalize daily retrospectives |
| Heart rate | Adjust task difficulty/state suggestions |
| Write | Purpose |
|---|---|
| Mindful minutes | Record completed tasks as Health mindful minutes |
1.3 Device & usage info
- Device model, OS version, timezone (for local notifications).
- Push notification token (only if you grant notification permission).
- De-identified crash logs and request statistics.
1.4 What we do not collect
We do not collect precise location, contacts, SMS, background activity tracking, or any biometric data other than the HealthKit fields listed above.
2. How We Use Your Information
- Provide, operate, maintain and improve the App.
- Generate personalized tasks, retrospectives, milestones and coach replies.
- Send you essential notifications (task reminders, weekly reviews).
- Protect your account, prevent fraud and abuse.
- Comply with legal obligations.
3. AI Services & Data Processors
The coach feature is powered by third-party large-language models. When invoked we send only the minimum required context (no passwords, no HealthKit data):
| Provider | Role | Processing region |
|---|---|---|
| DeepSeek | Default chat model | China mainland |
| Doubao (Volcano Engine, ByteDance) | Task generation | China mainland |
We have data-processing agreements with each provider that restrict use to our instructions and prohibit using your data to train third-party models. Your chat history is stored in our own database.
4. Storage & Cross-Border Transfer
- Location: data is stored on Alibaba Cloud ECS servers in mainland China.
- Retention: while your account is active. After deletion requests, all related data is permanently erased within 30 days.
- Cross-border: we do not transfer your personal data overseas on our own. Apple Push Notification (APNs) traffic is handled solely by Apple under Apple's own compliance regime.
5. Sharing & Disclosure
We never sell your personal information. We share only when:
- You have given explicit consent.
- It is required to deliver the service (cloud storage, AI inference, push).
- Required by law, regulation, or valid legal process.
- Required in the context of a merger, acquisition or asset sale (still bound by this policy).
6. Third-Party SDKs
| SDK | Purpose | Data collected |
|---|---|---|
| Sign in with Apple | Authentication | Apple User ID, email (if any) |
| HealthKit | Health read/write | Fields listed in §1.2 |
| APNs | Push notifications | Device token |
| DeepSeek API | Chat generation | Conversation context |
| Doubao API | Task generation | Questionnaire / context |
7. Your Rights
- Access: review your account data in-app.
- Correction: fix questionnaire answers, name, etc.
- Export: request a JSON/CSV copy of your data.
- Deletion: delete your account and associated data (in-app Settings → Delete Account).
- Withdraw consent: revoke HealthKit, Apple Sign-In, push, etc. individually.
- Complain: contact us below; you may also lodge a complaint with your local data protection authority.
8. Security
- In transit: TLS 1.2+ enforced (HTTPS only).
- At rest: strong database credentials; JWT secrets ≥ 32 bytes; password-protected Redis.
- Access control: least-privilege, secrets separated from code, container network isolation.
- Backups: daily automated backups, retained for 7 days.
9. Children
The App is not intended for children under 14, and we do not knowingly collect personal data from children. If we learn that we have done so inadvertently, we will delete the data promptly.
10. Changes to this Policy
We may update this policy to reflect changes in our practices or applicable law. Material changes will be announced in-app and on our website, and where required we will ask for your renewed consent.
11. Contact Us
For questions, complaints or data requests:
Email: huangxiuqinapple@sina.com
General: huangxiuqinapple@sina.com
We will respond within 15 business days.