1. Operator and scope
Restart Day is developed by ANHUI QITAO XINGCHEN NETWORK TECHNOLOGY CO., LTD. This policy applies to the Restart Day app and support or data requests directly related to it.
The app is not publicly available on the App Store. Its production backend, cloud region, and external service providers are not final. This policy will be updated and placed into effect based on the actual release build before submission.
2. Data currently stored on the device
The current development build uses device storage. The following data is not uploaded to a QTX Tech server through ordinary use at this time.
- Display name, selected goals, habit assessment answers, assessment results, and personal commitments
- Check-ins, rest days, interruptions, resumptions, elapsed time, progress reflections, and relief exercises
- Community alias, biography, age, gender, interaction preference, and on-device profile image
- Local posts, replies, group messages, direct-message previews, follows, saves, blocks, reports, search history, and read state
- Membership, referral, campaign, challenge, and Restart Coin preview records
Assessment and goal information may include sensitive details about tobacco, alcohol, sleep, fitness, emotions, or private lifestyle habits. It currently stays on the device.
3. Sign in with Apple and online accounts
When the production account service is enabled, users may choose Sign in with Apple. We will process the unique Apple user identifier, an email address or Apple private relay address, and a name that Apple may provide only on first authorization.
The login session will be kept in secure device storage. The code currently includes a Supabase account client, but it is not connected to a real project. The production provider, region, subprocessors, and retention periods will be listed before release.
4. Photos, videos, and location permissions
Restart Day requests photo-library access only after a user chooses a profile image or media for a community post. Selected media is currently copied to the app document directory and is not uploaded to an unconfigured cloud service.
Restart Day requests foreground location only after a user chooses to add a location. Coordinates are used temporarily for reverse geocoding, while only city and district text is retained in state and posts. The app does not currently request background or continuous location.
The app does not currently request camera or microphone permission.
5. Data boundaries for a future online community
If the release build opens a live online community, we will process profile data, posts, comments, messages, photos, videos, city and district text, follows, saves, blocks, reports, and moderation records to provide the visibility selected by the user, such as public, follower, group, or direct-message access.
A live online community will not open before enforceable reporting, blocking, content moderation, media safety, and appeal mechanisms are complete.
6. Third-party services and tracking
The current repository does not integrate OpenAI, Anthropic, Gemini, or another AI service. User content is not sent to an AI model.
The current build does not integrate advertising, cross-app tracking, website analytics, product analytics, crash reporting, remote push, or a third-party in-app purchase SDK. The iOS privacy manifest currently declares that tracking is disabled.
When a user chooses to email support@qitaostar.cn or privacy@qitaostar.cn, Tencent Enterprise Mail processes the sender address, message body, attachments, and technical metadata needed for delivery on our behalf. We use that information only to handle the related support, privacy, or data request. The email retention period and deletion process will be finalized and published before release.
Any new analytics, moderation, support, payment, push, or AI service will be reviewed before integration and reflected in this policy and the App Store privacy information.
7. Purposes of processing
- Save and display goals, records, and preferences chosen by the user
- Create and maintain an account session after authorization
- Provide community publishing, interactions, messages, and safety controls
- Handle support, privacy rights, reports, and appeals
- Prevent fraud, abuse, unauthorized access, and security incidents
8. Retention, local clearing, and account deletion
Users can clear goals, check-ins, relief records, community preview state, profile data, and local media from within the app. Language, theme, and text-size preferences may remain.
After online accounts are enabled, the app will provide an account-deletion entry point. The current development build implements only the foundation for accepting a request and deactivating the public profile immediately. The permanent purge worker is not deployed. We will not describe remote data as permanently deleted until that process succeeds.
The final policy will define separate retention and anonymization rules for accounts, shared content, messages, media, transactions, reports, moderation records, backups, and security logs.
9. User choices and data rights
Users can manage local data and system permissions in the app and device settings. They may also request access, correction, export, deletion, or withdrawal of applicable consent by contacting the privacy address.
To protect an account, we may require minimum necessary verification through the email associated with it. We will never ask for an Apple ID password or Apple verification code.
10. Minors
The live online community is not open. The current preview profile editor does not accept an age below 14, but this is not a verified age gate.
Before release, the minimum age, guardian process, and minor-safety controls will be finalized based on distribution regions and the final messaging, media, and location features.
11. Security, storage region, and international processing
The current build keeps ordinary business data in the app namespace and account sessions in secure device storage. The production backend is designed around least privilege, row-level access control, private media storage, and trusted-server writes.
The cloud project region, backup location, log retention, and international-transfer arrangement are not final. This draft does not claim that data is stored in any particular country or region.
12. Changes and contact
The final policy will state its effective date, how material changes are announced, complaint channels, and required legal contact information. Questions about this draft or Restart Day data practices can be sent to privacy@qitaostar.cn.