Effective date: October 17, 2026
This policy explains how QingFu handles information used to provide your personal logging service.
You may provide meal names, ingredients and photographs; bowel-movement records and photographs; symptoms and discomfort levels; notes and chat messages; and account information if you register an account.
The app creates an anonymous ID to associate records with your installation. We also process your interface language, device time zone and operational or error logs to display records correctly and maintain the service.
For compatibility diagnostics and product analytics, we store device region settings, platform and OS version, app version and build environment, and the latest time the server receives an authenticated request. Device region settings do not establish your physical location. We also record paywall views, purchase-completion and restore-completion callbacks, with relevant product identifiers. A client callback does not establish payment or an active subscription. These events contain no photographs, chat text or symptom content, and we do not collect hardware device identifiers or the advertising identifier IDFA for these analytics.
In iOS versions that support Apple Ads attribution, we obtain an attribution token through Apple AdServices and send it to RevenueCat. RevenueCat uses it to request the advertising source and any campaign, ad group, keyword and country or region information returned by Apple. This information is associated with the existing anonymous ID and subscription status to measure acquisition and subscription conversion. It contains no meal, bowel-movement or symptom records, photographs or chat content. The country or region comes from Apple, not GPS location.
We do not require your real name or identity documents. Information you voluntarily enter in records, account fields or support messages may still contain personal information. We do not request GPS location or contacts. Camera and photo-library access is used for photographs you choose to capture or select.
We use information to store and display your records, estimate food ingredients through AI, help you review possible food–symptom associations, verify subscription rights and maintain the service. We do not sell your personal data or use your records for advertising.
We summarize activity, feature-use counts and subscription-flow events by anonymous account to improve the product experience.
We use Apple Ads attribution to assess subscription conversions and revenue from advertising and adjust our promotion budget. This measurement is not used for ad targeting or personalized advertising.
When you use AI, selected meal or stool photographs, descriptions and relevant records are sent to the configured AI provider. Symptom analysis uses meals and bowel movements from the preceding 48 hours. Chat may use records from the preceding seven days and recent conversations. Recording an entry manually does not require sending it to AI.
Current AI provider: Volcengine (Doubao) — provider privacy policy
We use RevenueCat to synchronize subscription rights, and Apple processes purchases and payments. Your anonymous ID, product information and subscription status are used to verify purchases. See the RevenueCat Privacy Policy and Apple Privacy Policy.
iOS versions that support Apple Ads attribution also use RevenueCat to process the attribution token and standard attribution data returned by Apple, as described above. This does not request App Tracking Transparency (ATT) permission or collect IDFA. We do not send health records to Apple or RevenueCat for advertising attribution.
Records are stored on the service's servers. Production data transmission uses HTTPS. Account passwords are hashed rather than stored as plain text. Anonymous records are linked to an app-generated ID without requiring a real-world identity. Photograph caches are stored on your device and can be cleared in the app.
You can delete individual entries in the app. Pro users can export the most recent 7, 30 or 90 days of meal, stool and symptom records from Me → Export Data. This CSV export excludes chat messages and local photographs and is not a complete backup.
To request deletion of an account or all records associated with an anonymous ID, contact us using About → Data Management, and include the anonymous ID shown there. Do not send passwords or payment credentials.
Access to anonymous records depends on the ID saved on your device. After uninstalling, clearing app data or changing devices, access to previous records may be lost. Local photographs may also be lost. Restore Purchases restores subscription rights; it does not restore or merge records. Deleting the app does not cancel your subscription or automatically delete records on the server.
The app is not intended for children under 14. We do not knowingly collect children's personal information.
We may update this policy. Significant changes will be announced in the app. Continuing to use the app indicates acceptance of the updated policy.
Email: sawyer_li@yeah.net
Last updated: October 17, 2026