PRIVACY / A CLEARER UNDERSTANDING

Privacy, in plain sight.

What stays on your device, what syncs, and what happens when you contact us.

Updated 12 November 2026Operator: 陈科研

This policy applies to the TieNote app and website from its first public publication.

Local encryption

Your records are encrypted on your device.

Optional sync

Your Apple account. Your iCloud storage.

No separate account

Start recording without a TieNote login.

01Scope and your records

This policy covers the TieNote app and its product, privacy and support website, operated by 陈科研. Basic recording does not require a separate TieNote account.

Notes, formatting, note types, people and organizations, custom information, projects, categories, milestones, dates, places and links are stored in an encrypted local database. Selected avatars and attachments are also encrypted on your device. The system calendar stores event titles, times, places, notes and alerts; TieNote stores event links and crossed-out markers.

Local keyword search does not send search terms or note text to a web search or AI service. Place search uses Apple Maps, as described below. This release does not offer AI analysis or online people searches and does not read system contacts.

02Local protection and backups

The local database uses SQLCipher encryption. Device keys are stored in Keychain. App Lock uses Face ID, Touch ID or the device passcode through system authentication; TieNote does not receive biometric templates or your device passcode. An enabled lock remains active offline or if Pro access is revoked.

App Lock protects access inside the app, not system calendars, exported files or screenshots. The local database is excluded from system backup. Deleting the app or losing its key may make records unrecoverable. Keep a complete encrypted data package and its password separately. The developer cannot recover a forgotten package password.

03Attachments, places and calendar access

Photos, videos and avatars are selected through system pickers; files and existing audio are imported through the file picker. TieNote processes only selected items, not your entire photo library. Original files may retain metadata such as capture location; automatic removal is not guaranteed. Viewing attachments may create protected temporary decrypted files. This release does not provide in-app photography, video capture, scanning or audio recording.

You can enter a place manually or search Apple Maps for a name or address. Search queries are sent to Apple; a selected place is saved with the record after confirmation. TieNote does not access your current location or continuously track your location.

The app requests calendar access when you use calendar features. It reads selected sources and creates, edits or deletes permitted events after your confirmation. Creating an event from a note prefills only its title, not its body, attachments or contact details. Events may sync through the selected calendar account and be visible to people with access. Deleting a note or unlinking an event does not automatically delete the system event.

Manage calendar access in system settings. Denying it does not prevent basic recording. TieNote does not request Contacts, Camera, Microphone or Location permissions and does not use advertising tracking. Apple services are covered by Apple’s Privacy Policy.

04Optional iCloud sync

When you enable TieNote sync, records are encrypted on your device and stored in your Apple account’s private CloudKit database. iCloud Keychain shares sync keys with trusted devices. Records and media, including photos and avatars, transfer separately. Text may appear before its attachments finish downloading. A complete data package cannot be exported while required attachments are still pending.

Sync uses your available iCloud storage and requires local device space. Pro does not include extra iCloud storage. Per-note, per-file and per-operation safeguards are not a storage plan for the entire library. Encrypted files, deletion records and necessary version history also take space; deleting a record does not immediately free all historical storage.

Insufficient space, unverified accounts or keys, or failed checks may pause affected sync work while preserving local records. The app checks for updates when you return, but immediate or continuous background delivery is not guaranteed. Turning sync off does not delete existing local or cloud copies. Sync propagates edits and deletions and cannot replace an independent backup. Records from an old account are not automatically uploaded to a new account. Reconnecting and merging with iCloud after restoring requires confirmation.

05Purchases and access

Pro is a one-time, non-consumable Apple In-App Purchase with no automatic renewal. Prices, currencies and availability are shown by Apple. Apple handles payment; TieNote does not receive bank card details. Verified Apple transactions determine access. Data packages and local preferences are not proof of purchase.

Refunds or revoked access do not delete your existing records. Supported imports and restores are free, subject to authentication, package passwords and file checks; export requires Pro. Restore purchases from the Pro page in Settings. Apple handles refund requests; approval is not guaranteed. App use is subject to Apple’s Standard End User License Agreement.

06Deletion, imports and external copies

Deleting a person or project removes its links and keeps the notes. Deleting a category moves its projects to Uncategorized. Deleted content disappears from active lists and local search, but deletion records, conflict history and existing packages may retain content. Immediate physical erasure is not promised. Removing the app does not delete cloud or other external copies.

A package contains supported TieNote records, attachments and links, not system events themselves, purchase entitlements or device keys. Import checks the file and password and shows a preview. Append Import adds new records, skips confirmed duplicates and does not overwrite the local version. Conflicting content, deletion records or incompatible links may prevent the import. It does not automatically restore deleted records.

After a second confirmation, Overwrite from Package replaces the current local library. Current records and edits missing from the package will be lost; this action cannot be undone. TieNote then attempts to clean up the replaced library, without offering a retained library or switch-back feature. If cleanup is pending, retry cleanup rather than restoring again. Imports do not change system calendars, purchases or App Lock preferences, or automatically create system events. You may need to relink events manually.

Exported packages are saved to the location or service you choose, such as iCloud Drive, another cloud provider or a receiving app. TieNote’s sync switch does not control these copies; manage them where they are stored. Do not send packages, passwords or keys to support.

07This website and service providers

The product, privacy and support website uses Cloudflare Pages static hosting. We do not add login, advertising, analytics scripts or a feedback-file upload form. Copy Template copies fixed text only after you press it; it does not read clipboard contents.

Cloudflare processes requests, including network information such as IP addresses, to deliver and protect the website. See Cloudflare’s Privacy Policy. Email links open your mail app; support receives an email only after you send it. Support mail is hosted by Alibaba Cloud Mail. This website does not automatically read or upload records from your app.

08Support information and retention

When you contact tienote@dajingtech.com, the operator, 陈科研, receives your sender address, message and voluntary attachments to answer questions, troubleshoot issues and handle privacy requests. Prefer app versions, steps and redacted screenshots. Do not send passwords, verification codes, keys or complete private data packages.

Support emails and attachments are kept for six months after case closure, then deleted from copies the operator controls. A case is closed when the issue is resolved or a response is completed and you are informed. Further feedback reopens the case. Information necessary for legal requirements or an unresolved dispute is retained only until that reason ends. Mail-provider backups follow the provider’s processes; simultaneous immediate erasure is not promised.

09Diagnostics

The app does not add third-party analytics or crash-collection SDKs, behavioral tracking or a separate diagnostic upload service. It does not automatically send full databases to support. Apple may process purchase, crash or usage information according to your system sharing settings.

For a specific fault, we review only necessary crash or performance reports Apple makes available according to user sharing settings. Reports are used for troubleshooting and stability, not advertising, profiling or matching identities to support emails. We do not download raw reports by default. Necessary downloaded diagnostic files are access-restricted, kept for no more than 30 days and deleted earlier when the issue is resolved. They are not uploaded to public repositories or third-party AI services. Apple controls its copies under its own rules; financial and tax reports are outside this diagnostic retention period.

10Privacy requests and policy updates

To ask about processing or request access, correction or deletion of support information the operator holds, contact tienote@dajingtech.com. We verify only information necessary for the request and do not routinely require identity documents. The operator cannot remotely read or edit your local database by looking up your name.

We update this policy when services or information handling change. Material changes will be explained through an appropriate app or website notice.