Privacy

Records are processed on your device

The app has no accounts, advertising, third-party analytics SDK or journal cloud service. Event text, photos, dates, personal ratings, saved moments, follow-ups, style preferences and observer questionnaire answers are kept in the app's private directory with iOS file protection. The app does not upload these contents to our servers.

Whether system backups include app data depends on your iOS and iCloud settings. Those services are provided by Apple.

Photos, notes and observer profiles

The app uses the system photo picker to receive only photos you choose. It does not request access to your entire library. Saved copies are resized and re-encoded; the app does not actively read photo location.

Fate notes come from an original offline library, without a language model, photo analysis or observer profile input. The questionnaire is optional. The latest 12 answer sets can be included in a complete backup, or deleted from the profile page.

Answers, music and widgets

The Answer Book and everyday decision draws run randomly on device. Questions are not uploaded or analyzed. Questions and results in the app remain only in the current page session. The Answer Book widget keeps its current answer and the latest 20 draw indices in the local App Group.

Fate Symphony reads records and composes on device, with M4A audio and PNG artwork exports. Widgets read only counts, dates, follow-up direction and musical phrase statistics through the local App Group. They do not read journal text, photos, receipts or questionnaire answers. Summaries may be visible on your Home Screen after adding a widget; remove it at any time. Neither the app nor its extension performs network tracking.

Backups, sharing and deletion

Exported JSON backups include records, photos, follow-ups, preferences and questionnaire answers. They are not separately encrypted; choose a trusted location. Restoring replaces current content. A pre-restore file may remain in the private app directory for fault recovery.

Share images are created on device and passed to another app only after you select a destination in the system share sheet. Check the preview for text, excerpts and statistics. Deleting a record removes its associated photo and follow-ups. Uninstalling removes the local private directory. Delete system backups, exported files and previously shared content separately in their respective services or locations.

Website visits and support

Only when you open a support, privacy or research link does your browser access that service. No journal, photo or questionnaire data is attached. This support website is hosted on an Alibaba Cloud server. The server may log IP addresses, access times, requested paths, browser information and response status to serve pages, troubleshoot and maintain security. These logs are not associated with your journal. These pages use no advertising, analytics scripts or tracking cookies.

When you email support, we receive the email address and information you choose to send, only to handle and reply to your request. Please omit unnecessary sensitive data. Contact the same address for access, correction or deletion requests concerning support emails.

Updates and contact

If data handling changes, we will update this page and the in-app policy. Contact developer 于相之 at 401629818@qq.com for privacy questions.

Pro purchases

Apple handles subscription purchases, payment and restoration. The app does not read payment-card details. It verifies signed Apple transactions on device to obtain product identifiers, expiry and subscription state. No transaction, journal or photo data is sent to a developer server. Only the necessary membership expiry is shared locally with widgets. Cancelling or expiring a subscription does not delete your journal, backups or exported files.