Privacy Policy

1. Who We Are

InSyncCircle is operated by Timeprints (Leshan) Technology Co., Ltd. ("Timeprints," "we," "our," or "us"). This Privacy Policy explains how we collect, use, share, and protect information when you use our website, mobile applications, and related family services (the "Service").

2. Information We Collect

• Account information: Parent account details such as name, email address, login information, language preference, and support messages. If you choose Apple, Google, or WeChat sign-in, we receive the provider account identifier and any profile fields you authorize, such as a verified email or display name. We do not store third-party access tokens or authorization codes.
• Account security information: We encrypt login identifiers and use access controls to identify accounts, prevent duplicate registration, and protect account security. After a change, unlinking, or account deletion is completed, the related online login identifiers are deleted; backups and records required by law are handled under the applicable retention periods.
• Family and child profile information: Child nicknames, avatars, family role settings, task records, reward records, progress data, and other information parents choose to add.
• Service usage information: Device type, browser type, IP address, app version, operating system, access times, feature usage, and diagnostic logs.
• Optional privacy-preserving usage analytics: Anonymous usage analytics, including “Include all children,” is enabled by default for adult and child family profiles the first time an eligible parent signs in to the app. The parent can turn off all analytics or exclude all child profiles at any time. Our first-party service records fixed page categories, visit and session counts, active foreground time, platform, app version, and fixed task or AI workflow result codes. Raw identifiers are not stored in analytics events. During the raw-event period, account, family, installation, session, and workflow identifiers are replaced with keyed pseudonymous values that our service can reproduce only to enforce the preference, deduplicate events, and complete deletion. Daily aggregates retained afterward contain none of those values. We do not collect page parameters, task or message content, AI prompts or generated results, images, precise location, advertising identifiers, or device fingerprints. Guests are not included.
• First-party marketing attribution: When you open one of our promotion links, we may process the public campaign code, a signed attribution ticket, a random first-party visitor or app-installation identifier, timestamps, platform, distribution channel, app version, landing-page and download-button events, and an official Google Play Install Referrer when available. These values help us measure a campaign from visit to parent-account registration and purchase. We do not combine IP address, browser, device model, screen, fonts, graphics data, advertising identifiers, or other device properties, and we do not fingerprint or probabilistically identify you across the web and app.
• Payment information: Purchase platform, purchase status, product, subscription, refund, tax, receipt, order ID, transaction ID, and entitlement information needed to provide paid features. Apple, Google, PayPal, Alipay, or WeChat Pay may process purchases made through their services. We do not store full card numbers.
• AI feature information: Prompts, generated content, and context needed to provide AI task suggestions, reward suggestions, AI conversations, and family reports.
• Voice and speech information: When you choose voice input or continuous voice conversation, we process microphone audio, interim and final speech-recognition results, and the technical session information needed to recognize speech, reduce playback echo, let you interrupt playback, and provide the requested conversation or creative feature. For enhanced voice, the app stores an app-scoped random installation identifier on the device and sends it to the speech provider as technical session data; it is not an account identifier, advertising identifier, or hardware identifier. This can include a child's voice and spoken words. Real-time streaming audio is not intentionally written to our application database or diagnostic logs; recognized text may be used and retained as the prompt, conversation, creation instruction, or other record that the selected feature ordinarily creates. Recordings you expressly choose to save are handled separately under the relevant recording feature.

3. How We Use Information

• Create, secure, and manage parent and family accounts.
• Provide tasks, rewards, family progress records, AI suggestions, and paid entitlements.
• Transcribe voice input and support real-time conversation, playback interruption, and echo reduction when you use those features.
• Process customer support, payment status, subscription access, refunds, and service notices.
• Improve reliability, safety, product quality, and abuse prevention.
• Measure which promotion generated visits, parent-account registrations, purchases, and refunds; compare campaign costs and returns; and detect invalid or automated promotion traffic.
• Comply with legal, tax, accounting, fraud prevention, and platform requirements.

4. How We Share Information

We do not sell personal information. We share information only when needed to provide and protect the Service:

• Payment and subscription providers: Apple, Google, PayPal, Alipay, WeChat Pay, and RevenueCat may process the payment, store transaction, subscription, entitlement, fraud-prevention, support, cancellation, or refund information needed for purchases made through their services. We may receive the order, entitlement, tax or receipt, refund, and support information needed to provide the Service. RevenueCat manages App Store and Google Play subscription and entitlement status for us; it does not receive your password or family content. Privacy notices are available from Apple, Google, PayPal, and RevenueCat.
• Sign-in providers: Apple, Google, or WeChat processes your authorization and returns the minimum account identifier needed to sign you in or link your account. Their own privacy notices govern data processed directly by them.
• Speech-recognition providers: Depending on the voice mode and service availability, microphone audio and related technical session data may be sent to Microsoft Azure Speech or the Alibaba Cloud Intelligent Speech Interaction Mobile SDK and service operated by Alibaba Cloud Computing Co., Ltd. to return recognition results. Enhanced continuous voice sends audio directly from the device to Alibaba Cloud speech infrastructure in Beijing, China, including when the user's service and data region is outside mainland China. These providers may process and retain limited request, security, or operational data according to our configuration, applicable contracts, their policies, and law; our decision not to write real-time audio to our application database does not mean that providers retain nothing. See the Microsoft Privacy Statement and the Alibaba Cloud Intelligent Speech Interaction Privacy Policy.
• Service providers: Hosting, storage, analytics, email, customer support, security, and AI infrastructure providers may process information for us under contractual safeguards.
• App stores and promotion partners: Apple and Google may provide campaign-level acquisition reports under their own privacy terms. Creators, agencies, and advertising partners receive only aggregated campaign results; we do not provide them with parent account details, child or family information, payment instruments, or individual purchase histories.
• Alibaba Cloud EMAS mobile monitoring: Stability diagnostics is enabled by default on a new mobile-app installation when the installed build and service policy support it, and you can turn it off at any time. Alibaba Cloud may process device model, screen resolution, operating-system version and language, app version, crash diagnostics, startup and lag performance, and memory diagnostics to help us identify stability issues. Network-request collection and EMAS Remote Log are disabled. We do not attach InSyncCircle account IDs, family information, or business content to this monitoring data. See the EMAS Privacy Policy.
• Legal and safety reasons: We may disclose information when required by law, court order, regulator request, fraud prevention, security protection, or to protect users and the Service.

5. Children's Privacy

InSyncCircle is designed for families and is controlled by parents or legal guardians. Children use the Service under guardian supervision. Voice features may process a child's voice and spoken words when the feature is actively used, including speech made while assistant audio is playing; we use them to recognize the requested input and provide the conversation or creative response, not to build advertising profiles or marketing attribution. Marketing attribution is attached only to the parent login account and is not built from child profiles, family content, tasks, images, voice, or child activity. Privacy-preserving usage analytics for child profiles is enabled by default when an eligible parent first establishes the family preference; children are not asked to make this choice themselves. A parent can turn off “Include all children” or all anonymous usage analytics at any time. We collect only the child information needed to provide family tasks, rewards, progress records, and child-facing features. If you believe a child account or child information was created without proper guardian permission, contact us and we will review and delete the information where required.

6. Security and Retention

We use administrative, technical, and organizational safeguards to protect information. No online service can guarantee absolute security. For real-time voice recognition, transient audio buffers are used to deliver the stream and are released when the session closes; we do not intentionally persist that streaming audio in our application database or diagnostic logs. Recognized text follows the retention of the conversation, prompt, creation, or other record produced by the feature. A speech provider may retain limited data under the applicable service configuration, contract, provider policy, or legal obligation, so this application-side practice is not a promise of zero provider-side retention. Recordings you expressly save follow the retention and deletion controls of the relevant recording feature. Raw pseudonymous usage-analytics events are kept for no more than 90 days; anonymous daily aggregates that no longer contain user, family, installation, session, or workflow pseudonymous values are kept for no more than 13 months. If analytics is turned off, the family-level off preference remains until family deletion so collection cannot restart by default; the pseudonymous value for the parent who last changed that preference is removed within 90 days. When deletion of a family account is completed, its analytics permission record and remaining raw usage events are deleted in the same transaction. Existing daily aggregates cannot be separated by or linked back to that family and remain subject to the 13-month limit. Unsent usage events on a device are kept for no more than 7 days and are deleted when the relevant permission is withdrawn. Raw pseudonymous marketing events are normally kept for no more than 90 days, while IP address and browser information used by the network gateway for short-term abuse prevention is normally kept for no more than 7 days. Signed tickets expire under the applicable campaign window. Aggregated campaign reports may be retained for long-term business comparison, and account attribution, payment, cost, and audit records are kept only as needed for account operation, financial records, disputes, and legal obligations.

7. Your Rights

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to the processing of your personal information, and to withdraw consent where processing is based on consent. Eligible parents can turn anonymous usage analytics and the separate “Include all children” option on or off in the parent settings page. Parents and legal guardians may also request review or deletion of child information. You can exercise other rights by contacting us at support@LifeArchive.me.

California Residents

We do not sell personal information. California residents may request access, deletion, correction, and information about categories of personal information collected, used, and shared.

European Economic Area and United Kingdom Residents

We process personal information based on contract performance, consent, legal obligation, and legitimate interests. You may contact your local data protection authority if you believe your rights have not been handled properly.

China Residents

You may request access, copying, correction, deletion, account deregistration, explanation of processing rules, and withdrawal of consent where applicable under the Personal Information Protection Law.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new update date. Material changes may also be notified through the Service or by email where appropriate.

9. Contact Us

If you have questions or requests about this Privacy Policy, contact us at support@LifeArchive.me.