Privacy & Your Data
Updated：2026-10-05
About this notice
Idea Rewind is for privately capturing and revisiting ideas. Service provider: 闫逸飞 (Yifei Yan). This notice describes how the current version of Idea Rewind handles data. Updated 2026-10-05. We will update it when features or data practices change.
Content on your device
Idea text, cabinets and their links, bookmarks, archived status, images, videos, recordings and files are stored in the local app library. Drafts, preferences, your motto and review schedules/events currently remain local. You do not need an Idea Rewind account or phone number.
Optional iCloud sync
On iOS, Apple CloudKit can sync ideas, cabinets, related states and attachments using the current iCloud account’s private database. Enabling sync enrolls new content. Existing and imported content requires separate confirmation in the migration preview. The app uses a digest of an iCloud-provided account identifier to distinguish sync identities; it never receives your Apple account password. Enrolled content, attachments and sync metadata are transmitted to Apple when online, subject to Apple’s iCloud service and privacy terms. Turning sync off stops future sync but does not erase uploaded copies. Android does not use iCloud; its separate cloud space is in development testing.
Android Google sign-in and cloud space (development testing)
The Google Play edition’s separate cloud space is not publicly available yet. In authorized Android test builds, signing in explicitly uses Google Credential Manager to obtain a short-lived identity proof for verification by Idea Rewind’s server. The server stores a digest of Google’s stable account identifier and a random device identifier, not your Google password, profile, email or original identity proof. Device sessions use system-encrypted storage. Only ideas, cabinets and attachments you enroll with sync enabled are sent to Alibaba Cloud in mainland China. Existing content requires a separate preview and confirmation. This space is separate from iCloud and does not automatically merge across platforms. Signing out pauses sync and keeps local content.
Android cloud account deletion (development testing)
The Android test service now offers deletion in the app and on the website, with fresh verification of the same Google account and a separate confirmation. Deletion revokes all cloud sessions and removes cloud notes, cabinets, attachment references and original purchase tokens. Attachments are cleaned after issued upload tickets expire; failures are retried. Local notes, iCloud, exported files and device backups are unaffected. Signing in again creates an empty space without automatically uploading existing local content. Minimal Google subject and purchase ownership/token digests and deleted-account markers remain to prevent duplicate claims and restore your own purchases; they contain no note content or original tokens. Deletion does not cancel Google Play subscriptions. Encrypted operational backups for the test service are planned to expire after seven days, with deletion markers reapplied during recovery; activation and off-host recovery remain pending.
Google Play purchases (development testing)
Checkout is enabled only in authorized Android test builds and is not publicly available. Test transactions use Google Play test payment methods. Google Play handles payment. Idea Rewind’s server verifies products and transactions and stores encrypted purchase tokens, a random account association and entitlement deadlines to prevent duplicate ownership and restore purchases. It does not receive card numbers or Google passwords. Devices cache only verified account-specific access for at most 24 hours and never beyond subscription expiry. Google Play handles payments, refunds and renewals under its terms. The test service receives Google Pub/Sub purchase status notifications: pending notifications contain purchase tokens and may remain queued for 24 hours. The server retains only message digests and processing timestamps for 30 days, not notification bodies.
Google API forwarding (development testing)
The active Android test service uses an overseas Cloudflare service to forward requests for public Google signing certificates and restricted purchase verification and acknowledgement. Cloudflare temporarily processes purchase tokens, short-lived service access tokens and the pseudonymous account association in purchase results before forwarding them to Google or returning results to Alibaba Cloud. Idea Rewind’s forwarding code does not persist these credentials, and service logs exclude bodies and credentials. Google private keys and your sign-in identity proof remain processed on Alibaba Cloud. Notes, attachments, contact details and device sessions do not pass through this forwarding service. It does not provide refunds, subscription cancellation or a general network proxy. Cloudflare’s infrastructure operational data is governed by its privacy policy.
Media, reminders and system integrations
Camera, microphone or photo access is requested only when you use the relevant feature. Photos, videos and files selected in system pickers are copied into the app. Manage permissions in system Settings. Denying media access does not prevent text capture. Daily reminders are local notifications and do not show idea text. Widgets and the share extension exchange necessary content through shared storage on your device. Widgets hide idea text by default; if you enable it, others may see those excerpts.
App Store purchases
iOS Pro purchases and restores use Apple StoreKit. The app reads and verifies products, purchase validity and expiry to provide the corresponding features. It does not receive card numbers or Apple account passwords and does not upload purchase receipts to a self-hosted server. Shared storage on the device contains the recall widget’s access deadline, not payment details. Apple handles payment, refunds and renewals under its terms.
Sharing, export and backups
You initiate sharing and export. Content is passed to the app or storage destination you choose, whose own terms govern its processing. Exported backups are not additionally encrypted and may contain text and attachments. Store them securely. System device backups may include app data, depending on your system settings.
Retention and deletion
Deleted items remain recoverable in Recently Deleted until you permanently delete them individually. Permanent deletion removes local text, drafts and cabinet links and cleans managed attachment files that no other record or draft uses. When online with sync enabled, enrolled cloud records are replaced by content-free deletion markers. Other devices remove the corresponding record when syncing, including older unsynced edits. Shared cloud attachment files are currently retained after individual note deletion. Deleting an Android cloud account cleans its cloud attachments as described above. Clearing an entire iCloud space is not yet available. This is not secure erasure of all backups or underlying storage. Exported backups, original migration sources and system backups are not automatically deleted.
Feedback
You can submit feedback in the app without an account. Tapping Submit sends your description, optional contact details, selected screenshots and version information (unless disabled) to the feedback service on Alibaba Cloud in mainland China. Notes, recordings, account identifiers and logs are not automatically included. Screenshots are re-encoded to remove metadata. A random installation ID and your network IP address are used to prevent abuse; only keyed digests are stored in the database, not used for advertising. Feedback, contact details and screenshots are cleaned daily under a 90-day retention policy. Request counters older than 10 minutes are cleared on subsequent requests. Any operational backup copies must also expire under the backup retention schedule. Unsent drafts remain separate on your device and are excluded from note exports and iCloud sync, but may be included in system device backups. Contact details are optional; without them we may be unable to follow up. Contact support with your receipt number to request deletion.
External services and contact
The released iOS app uses Apple CloudKit for sync; Android development testing is described above. The inactive CloudBase sign-in entry and SDK have been removed. The current version includes no advertising or behavioral analytics service. Expo, React Native and media components support local interfaces, storage and system capabilities. Diagnostic data handled by the operating system or distribution channel is governed by its settings and terms. For questions about data processing or requests, contact zoroiscrying@outlook.com.