Worth It Privacy Policy

1. Operator and scope

Personal-information handler and app operator: Peilin Li. This policy applies to the Worth It iOS and Android apps and account-sync services. For privacy requests, email 747127514@qq.com.

2. Account sign-in

Sign in with Apple on iOS processes the Apple account identifier and the name or email you choose to share. Android email-code sign-in processes the email, verification result, and account identifier. Android slider verification processes movement coordinates and timing, image dimensions, IP address, and verification result to prevent abuse. Challenges normally expire within two minutes and email codes within five minutes.

3. Journal content you save

Income, spending, amount, time, category, satisfaction, life value, merchant or subject, notes, photo attachments, goals, settlement notes, time letters, review feedback, and generated reviews are associated with your account and synced so you can view, edit, restore, or request reviews. These records may reflect personal spending or finances; avoid entering another person's sensitive information.

4. Photos, receipts, and voice

Images are processed on device first. iOS uses Apple Vision and Android uses Google ML Kit. The recognition function does not automatically upload the source image. If you continue with AI organization, receipt text with obvious long identifiers hidden is sent through our backend. A compressed image is uploaded only if you separately save it as an entry attachment. Voice is transcribed on device; raw audio is not uploaded, and transcript text is sent only after you choose AI organization.

5. AI organization and reviews

When you actively request voice organization, receipt structuring, or a weekly or monthly review, the necessary transcript, receipt text, or entries from the selected period are submitted to DeepSeek. Raw audio is not submitted. A receipt image is not sent to DeepSeek. AI output may be inaccurate and is not financial, investment, lending, medical, or legal advice.

6. Pro purchases

Apple processes iOS purchases, and the official Alipay checkout processes Android purchases. We store the product option, merchant order number, platform transaction number, amount, currency, payment/refund status, and entitlement dates for access, refunds, and reconciliation. We do not receive bank-card numbers, payment passwords, or SMS verification codes.

7. Operations and security

To connect, troubleshoot, prevent abuse, and protect accounts, servers process IP address, request time/path/status, device and OS type, app version, platform, language, network state, User-Agent, and necessary error logs. Worth It has no advertising SDK, does not obtain OAID or advertising identifiers, and does not read contacts, messages, call logs, precise location, or the installed-app list.

8. Device permissions

Camera is requested when you capture a receipt or life photo; microphone when you start voice entry; notifications when you enable a review, settlement, or time-letter reminder; legacy storage only on Android 9 or earlier when saving a share image; network state for connectivity and Alipay; and boot completed to restore reminders you enabled. You can turn permissions off in system settings.

9. Processors and third-party services

Tencent Cloud provides China-region hosting, databases, and networking for accounts, journals, attachments, and logs; privacy statement.

Alibaba Cloud email sends Android verification codes and processes email address, message content, and delivery status; privacy policy.

DeepSeek, operated by Hangzhou DeepSeek Artificial Intelligence Co., Ltd., processes necessary text or entries you actively submit to AI; privacy policy.

Google ML Kit performs Android receipt recognition on device. Input images and results are not sent to Google, while diagnostics may include device/app data, a per-install identifier, performance, feature version, and errors; data disclosure.

Alipay SDK runs only when you start an Android Pro purchase and processes order, device, app, and network data needed for payment; policies.

Apple handles necessary information for iOS sign-in, App Store purchases, and system features under its displayed policies. sherpa-onnx is an open-source offline Android speech component and sends no recording or transcript to the project operator; project.

10. Location and retention

Worth It server data is stored in mainland China. Account and journal data remain while the account is active; deleting an entry removes its online content. Verification data follows its short validity period. Payment orders, security logs, or dispute records remain only for legal, reconciliation, or security requirements and are then deleted or anonymized. The operating system may clear temporary image caches, and we remove them when no longer needed where practical.

11. Access, correction, deletion, and account closure

You may edit or delete entries in app and permanently close the account under Profile → account card → Delete Account. Closure deletes entries, photo attachments, goals, reviews, settlement notes, and time letters, clears credentials, and invalidates old tokens. Payment and security audit records may remain linked only to an anonymized deleted account for the required period. Signing in again creates a new empty account.

For access, copy, correction, withdrawal, or appeal requests, email us. We verify identity and respond within fifteen working days.

12. Personalization

Worth It currently provides no personalized advertising, targeted marketing push, or profile-based automated decision-making. AI reviews run only when requested, so there is no personalization switch.

13. Minors

Worth It is primarily for adults and is not directed to children under 14. Minors should read this policy with a guardian. Contact us to remove a child's information processed without guardian consent.

14. Policy updates

If features, service providers, or material processing change, we update the policy version and prominently request active confirmation again before related network features continue. Continued use alone does not replace active agreement.