1. Operator and scope
SchoolSignal (Chinese name: 小本记; “the App”) is operated by Shanghai Zehengce Enterprise Management Consulting Co., Ltd. This policy covers the iPhone App, widgets, Live Activities, Share Extension, App Intents, and support provided through this website.
Apple’s App Store, iCloud, StoreKit, notifications, calendars, Spotlight, and related services are also governed by Apple’s own terms and privacy policy.
2. Data we process and why
- School-planning information you enter
- Learner nicknames, school region and time zone, timetables, routines, actions, locations, dates, and completion state are used to create Today, Schedule, and Tomorrow Readiness views. We recommend nicknames and the minimum necessary identity information.
- Sources you choose to import
- Photos, screenshots, PDFs, text, files, and ICS calendar content are processed on the device to create evidence-linked drafts. The App does not dereference remote URLs or attachments found inside ICS files.
- Information generated on the device
- Recognition suggestions, confidence, conflicts, confirmed records, readiness plans, change history, import state, and aggregate local metrics support core features, recovery, and diagnostics you explicitly export.
- Optional iCloud data
- When you enable sync or sharing, confirmed records, evidence references, sync metadata, and learner-scoped sharing permissions are stored and synchronized through Apple CloudKit.
- System integration data
- Notifications, App-created or linked calendar items, Spotlight items, widget snapshots, and the minimum Live Activity summary are used only for the system surfaces you choose.
- Purchase state
- StoreKit supplies verified entitlement, trial, grace-period, restoration, refund, and revocation state. Apple handles payment methods and full transaction records; we do not receive card details.
- Support messages
- If you email us, we process your email address, message, and attachments you choose to send in order to respond. Please omit unrelated student identity, original notices, and other sensitive material.
3. On-device recognition and local storage
Text recognition, rule-based parsing, and system language-model suggestions on supported devices run on the iPhone. Results remain suggestions or unconfirmed drafts; low-confidence output cannot silently create reminders, calendar events, or shared changes.
Domain records, import staging, backup preparation, and diagnostic exports live in the App sandbox or App Group and use iOS data protection. Extensions and system surfaces receive only the restricted payload needed for their task.
The App uses UserDefaults for interface and feature preferences and reads file timestamps for safe import, backup, migration, and cleanup. These uses are declared in Apple’s required privacy manifest.
4. Optional iCloud sync and household sharing
Core planning works locally without an iCloud account. If you enable sync, records are stored through the CloudKit container iCloud.top.applover.schoolsignal associated with your Apple account.
A household owner must explicitly create an invitation and select learner scope plus read-only or editing access. Apple Family Sharing for a subscription does not automatically share household data; CloudKit data sharing is a separate choice.
When stopping sync, you can choose whether to keep a local copy. Leaving or revoking a share affects participant access. Deleting CloudKit data is a separate, high-risk flow that describes the impact on shares and other devices first.
5. Permissions and system surfaces
- Camera, Photos, and Files: used only when you choose an import source; manual text and other available paths remain alternatives.
- Notifications: used for reminders you choose. Related notifications are reconciled when confirmed records, courses, or school time zones change.
- Calendars: write access adds confirmed items. Full access is requested only if you enable conflict detection, and the App compares only busy times from selected calendars.
- Spotlight, widgets, and Live Activities: use a minimal summary. You can hide specific content, turn off Spotlight, or clear App-owned surfaces with local data erasure.
- Siri, Shortcuts, and App Intents: are invoked by Apple’s system. Deep links and parameters are validated and cannot directly perform a high-risk mutation.
Denial or revocation does not block planning features that do not need the permission. Permissions can be changed in iOS Settings.
6. Retention, backup, and deletion
Source retention
You can choose delete-after-parsing, 30 days, one year, or keep-until-deleted. A minimal text evidence excerpt may remain after an original source is removed so a confirmed record remains traceable, until the related record is deleted.
Backups and diagnostics
A complete backup is created only when you request one and is saved or shared to a location you choose. A sanitized diagnostic export is also user-initiated and excludes notice text, OCR content, learner nicknames, schools, amounts, attachments, CloudKit identifiers, and StoreKit transaction material. Temporary diagnostics follow the App’s cleanup rules.
Deletion choices
Clear Local Data attempts to remove domain data, scheduled notifications, App-created or linked calendar items, Spotlight items, widget snapshots, Live Activities, pending imports, sharing queues, and local metrics. It also disables sync on that device to avoid immediate restoration.
Delete All iCloud Data is separate and may affect other devices and shared members; an offline request is not falsely reported as complete. Apple purchase records, verified entitlements, and Apple-maintained transaction history are not erased by clearing App content.
7. Subscriptions and purchases
Apple StoreKit handles purchase, trial eligibility, renewal, refund, billing retry, grace period, and restoration. The App stores or caches the minimum entitlement state and an idempotent import-quota ledger so it can display offline status and avoid duplicate consumption.
You can view, cancel, or restore applicable subscriptions in Apple account subscription management. Subscription changes never delete existing data; export, deletion, and stopping sharing remain available.
8. Sharing, service providers, and disclosure
We do not sell personal information or provide App content to advertisers. Data becomes available to another service or person only when:
- you enable an Apple system service such as iCloud, StoreKit, notifications, calendars, Spotlight, widgets, Live Activities, or Shortcuts;
- you invite a household member to a defined CloudKit scope, or export and share a static file, backup, or diagnostic;
- you contact support; or
- disclosure is required by law or reasonably necessary to protect lawful rights, safety, and the public, within applicable legal limits.
9. Children and family data
The App organizes family and school information and may contain a minor’s courses and tasks. Parents, guardians, or other authorized users are responsible for entering, sharing, and deleting that information and should use nicknames and the minimum necessary content.
The App does not offer a developer-operated online child account and does not actively collect child data through a developer server. Minors should use paid, sharing, export, and deletion features with guardian consent and guidance.
10. Your choices and rights
In the App you can view and edit records, export a complete backup, change source-retention settings, clear local metrics, stop iCloud sync, leave or revoke sharing, clear local data, and—if you are the owner—delete CloudKit data.
For questions or requests about access, correction, or deletion, email help@applover.top. To protect the data, we may need to verify control of the relevant device, Apple account, or sharing scope. Apple-account and purchase-record requests may need to be directed to Apple.
11. Security, regions, and international processing
We use data minimization, on-device processing, iOS complete file protection, a restricted App Group, explicit confirmation, stable deletion identifiers, and sanitized diagnostics. No system is absolutely secure; protect your device passcode, Apple account, and exported backups.
Apple processes iCloud and App Store data according to your account, region, and service configuration, and the actual storage region can vary. Cross-region real-time household sharing may be limited by product region policy; a redacted static export is offered instead of bypassing the restriction.
12. Policy changes and contact
If data handling changes materially, we will update the version and effective date and, where appropriate, provide an in-App notice. A revised policy will not be used to retroactively authorize incompatible processing.
Operator: Shanghai Zehengce Enterprise Management Consulting Co., Ltd.
Product: SchoolSignal / 小本记
Email: help@applover.top