Privacy Policy
Your moments stay on your device.
1. Scope and publisher
This policy applies to the Dear Days Android app (拾光 in Chinese), provided by Aicrenio (爱创, “we”, “us”). Dear Days helps you revisit, favorite and organize photos and videos on your device. No app account is required. This policy explains the app’s data handling and what happens when you visit this policy webpage.
2. Photos, videos and media information
Within the access you grant, the app reads photos, videos, thumbnails and available metadata from the system media library, including filenames, media identifiers, capture or modification dates, dimensions, duration, format and camera information. These support random browsing, daily memories, playback, favorites, organizing and media details. Decoding and playback take place on your device. With selected-photo access, only authorized media is accessed. We do not upload photos, videos or thumbnails to our servers or RevenueCat, perform facial recognition, or use your media to train AI models. Cloud sync provided by your system gallery or other apps is governed by their own policies.
3. Records stored on your device
Private app storage holds the media index, random groups and order, browsing positions, review queue, undo and system-operation recovery state, favorites, cumulative statistics, sampling history, and preferences such as language, appearance, group size, hints and reminders. Thumbnail, playback and address caches support the experience. These organizing records and media-browsing statistics are not sent to us or the purchase service. Android system cloud backup is disabled for the app; manufacturer transfer tools or backups you make yourself may operate under separate rules.
4. Media location and system address lookup
The app may read capture coordinates from metadata of media you allow it to access; reading unredacted photo location requires media-location permission. It does not request your device’s current-location permissions or track your live location or journeys. To display a city, district or full address, it passes media coordinates to the device’s Android Geocoder service. That service may use the network and process coordinates and network-request information through its system provider. The provider, processing location and retention depend on your device. Results are cached locally; available information or coordinates are shown if lookup fails. We do not send these coordinates to RevenueCat. You can revoke the relevant permissions or limit accessible media in system settings. The app currently has no separate switch to disable address lookup.
5. Favorites and the system trash
App favorites are local by default. System favorite sync is off by default. When enabled, the app reads system favorite flags for accessible media and requests system confirmation to update them. Gallery apps may maintain separate favorites. Adding media to the review queue does not delete it. Cleanup requests move media to the Android system trash after system confirmation; permanent deletion is not used as a fallback. Restoration and trash retention are controlled by your system or gallery. Uninstalling the app does not automatically reverse confirmed system favorite or trash operations.
6. Sharing you initiate
Only when you initiate sharing does the app use the system share sheet to grant temporary read access to the selected media to the recipient app you choose. Shared files may include original metadata such as capture location; the app does not guarantee that metadata is removed before sharing. Check the content and recipient before sharing. The recipient app and its services process data under their own privacy policies.
7. Pro purchases, subscriptions and restoration
The app integrates purchase and entitlement services from RevenueCat, Inc. Google Play handles payment, subscriptions and restoration in the production Google Play version; development builds may simulate purchases using RevenueCat Test Store. The purchase service may connect at app startup, when returning to the foreground, refreshing entitlements, viewing a paywall, purchasing or restoring. It does not run only when you pay.
8. Purchase-service data and purposes
RevenueCat and the store process an anonymous app user identifier, purchase receipts or tokens, product and transaction information, purchase history, subscription and Pro entitlement status, device/app/SDK technical information, and purchase or paywall events. These support transaction validation, entitlement delivery and restoration, purchase-service operation, fraud prevention, and analysis of purchase or paywall performance. Network requests also expose your IP address to the receiving service. An anonymous identifier does not make purchase data completely unlinkable. The store handles payment details; the app does not receive full bank-card information. We have disabled RevenueCat’s automatic device-identifier collection and do not actively supply advertising identifiers or user attributes such as name, email or phone number. We do not send it photos, videos, media coordinates, favorites or organizing records. The app has no advertising SDK or separate media-browsing analytics service.
9. Permissions and local reminders
Android 11–12 use storage permission needed to read media; Android 13 and later use photo/video permissions, and Android 14 and later support selected-photo access. Media-location permission allows access to original location metadata in authorized media. Reminders are off by default and, when enabled, use local scheduled tasks and notifications. Notification permission allows reminders to appear; boot-related permission restores the schedule after restart. Reminders do not use our remote push service. Internet permission supports network functions such as purchases. The app does not request contacts, microphone, camera, current-location or all-files-management permissions. You can change or revoke permissions in Android settings at any time. When access is reduced, the app stops reading inaccessible media; saved entries may remain to avoid treating loss of access as deletion.
10. Retention, deletion and your choices
Local records generally remain until the relevant state is updated, records are removed, or you clear app storage or uninstall. Caches may refresh due to expiry, size limits or system reclamation. Address-cache results are refreshed on lookup after about 30 days; this is not a guarantee that all old entries are automatically deleted at day 30. Clearing cache is different from clearing all app data. Clearing app storage or uninstalling removes private app records without deleting original system-gallery files. It does not delete previously shared data or store/RevenueCat purchase records. Uninstalling or clearing data does not cancel subscriptions; manage them in Google Play.
11. Privacy requests and third-party retention
You may use the email below to request access, correction, deletion or other applicable privacy rights. We cannot remotely read or delete data stored only on your device; you can manage it through device settings. For purchase-related requests, we may need necessary transaction references to verify your identity and locate records. Do not send photos, full card numbers or passwords. Purchase-service records are retained as needed for service delivery, transaction verification, security and applicable law. Exact retention depends on the data category and provider and does not automatically end on uninstall. We handle requests within our control and as applicable law permits; requests about independently retained store records may need to be directed to the store.
12. Security, recipients and processing locations
Private app records use Android’s isolated app storage. Purchase-service connections use HTTPS, and media changes use system authorization and confirmation. We do not sell your personal data or use your media for ad targeting. Apart from the purchase service, system address service, sharing recipients you select, and email services needed to handle your inquiries, the app does not actively send media or organizing records to other services. Providers may process their service data outside your region; purchase-service processing is not limited to Hong Kong. The Hong Kong server hosts this policy webpage, not your photo library. No storage or transmission method can guarantee absolute security.
13. Visiting this webpage and contacting us
When you visit this policy webpage, the web server may log your IP address, request time, path, browser request information and response status to deliver the page and support operations and security. This policy page itself loads no third-party fonts, advertising or analytics scripts, or tracking cookies. Switching language does not require storing a browser identifier. The current web-server configuration rotates logs daily and keeps 14 historical log files, typically removing older logs after about two weeks; actual timing may vary with rotation execution. These logs are separate from local app media records. When you email us, we and the email service process your address, message and information you choose to provide to respond and handle your request. This information is kept only as needed for the request and necessary follow-up.
14. Policy updates and contact
We will update this policy and its update date when features or data practices change. Additional notice or authorization will be provided where required. The Chinese and English versions describe the same practices; contact us if a translation is unclear. Publisher: Aicrenio (爱创). Privacy contact: aicrenio.go@gmail.com.