Privacy

A one-paragraph summary

Do is a private, offline-first journal for intimate moments. Everything you record stays on your device. If you turn on iCloud, your records sync through your own private iCloud database, encrypted by Apple and accessible only by you. We — the developer — never receive your records, and never will.

Data we do not collect

• No analytics, no event tracking, no crash telemetry with personal data
• No advertising identifiers
• No third-party SDKs of any kind
• No accounts, sign-ups, or email registration on our side

Data on your device

All records (including time, duration, notes, attached photos, and heart rate) are stored locally using Apple’s SwiftData framework. When you delete a record in the app, it is removed from the local database immediately.

iCloud sync (optional)

If you enable iCloud sync in Settings → iCloud, Do mirrors your records into your own iCloud private database. This means:

• Apple transports and stores the data, encrypted, under your Apple ID.
• Only the devices signed into your Apple ID can read it.
• We, the developer, have no visibility into your private iCloud data.

You can turn iCloud sync off at any time and keep everything local. You can also choose between sync strategies (merge, local-overwrite, cloud-replace) the first time you turn the feature on.

Partner Sharing (optional, Premium)

When two users choose to bond as partners, Do creates a shared CloudKit zone between your two iCloud accounts. The shared records travel directly between you and your partner via Apple’s CloudKit sharing — they are never sent to our servers. Either partner can unbond at any time, which removes the shared zone.

Apple Health (optional)

If you grant Health permissions, Do can write sexual activity entries (as a standard HealthKit category) and optionally save workout sessions from Apple Watch to the Health app. Do only writes to Health; it does not read anything back and does not transmit Health data elsewhere.

Location (optional)

You may attach a location to a record. Location data is stored alongside the record and syncs with the rest of your iCloud data. We do not transmit it to any other party.

Subscriptions

Subscriptions are managed entirely by Apple via StoreKit. We only receive the subscription status (active / expired) required to gate Premium features. Payment information is never sent to us.

Data export and deletion

• Export: Settings → Data Backup produces a .dobackup file on your device that you can save, transfer, or import elsewhere.
• Delete: removing records in the app deletes them from your device and your iCloud database. Uninstalling the app removes the local copy; you can also clear the iCloud copy from Settings → iCloud → Clean Cloud Data.

Children

Do is intended for adults. The app is rated 17+ on the App Store and should not be used by minors.

Contact

If you have a privacy question, email us at support@xiaoyehua.dev. We read every message.

Changes to this policy

When we update this page, the date at the top changes and the latest text replaces the previous one. There is no mailing list to notify, because we don’t have your email.