Privacy Policy

• Account and authentication: phone number, verification activity, user ID, login sessions, and hashed access credentials.
• Profile and content: display name, gender, avatar configuration, project names and colors, focus history and notes, room configuration, assets, and equipped items.
• Focus and progress: timer mode, target and actual duration, timestamps, pause/background duration, project snapshots, rewards, wallet entries, and notification read state.
• Subscriptions and purchases: Apple product ID, subscription state, original transaction ID, expiry time, and Apple-signed transaction data. We do not receive full payment-card details.
• Device and security logs: our servers and network providers may process IP address, request time, device/OS version, errors, and diagnostics to operate and protect the service.

We request these permissions only when you choose the related feature. Refusing one does not disable unrelated core features.

• Location: Nearby Focus uses roughly kilometre-level location. Coordinates are rounded to 0.01 degrees and sent with country, region, city, accuracy, and capture time. Presence expires after about seven minutes and is not used to build a movement history.
• Microphone and speech recognition: converts speech you choose to record into a focus note. aRoom's business server does not retain raw audio; Apple may process speech recognition, and text is saved only after your confirmation.
• Notifications: provides focus-stage, product, and subscription reminders. You can disable notifications in system settings.
• NFC and screen-use restrictions: supports Room Cards and optional strict-focus controls. Device selections and restrictions are primarily handled locally by Apple system frameworks.

We process information only to create and secure accounts, synchronize projects and focus history, provide room and progress features, verify subscription access, show anonymous nearby-focus counts, deliver reminders you request, respond to support, and protect the service.

Core account and business data is necessary to provide the service you request. Optional location, speech, and notification data is processed when you choose the feature and grant system permission.

Active timer state, some preferences, and caches remain on your device. When signed in, account, project, focus, room/asset, membership, and notification state is synchronized to the cloud for reinstall and cross-device recovery.

The website currently uses no advertising trackers, behavioural analytics scripts, or marketing cookies. Hosting and security providers may still create necessary access logs.

• Apple: App Store payments and subscriptions, notifications, speech recognition, location, and geocoding platform features.
• Alibaba Cloud: compute, database, and network infrastructure for mainland China services.

We will update this page before enabling a production SMS provider. Providers must act only on our instructions and protect information to a standard no lower than this policy. We do not sell personal information.

• Nearby-focus location presence expires after about seven minutes and is removed when you leave the feature or end the focus session.
• Verification and session records are retained only as needed for verification, security review, and session validity.
• Account content is normally retained until account deletion. Transaction, fraud-prevention, or legally required records are retained for the applicable period and then deleted or anonymized.
• After account deletion, data is removed from active systems. Backup copies are cleared through the backup rotation unless law requires longer retention.

Core account and business data for the mainland China version is stored in mainland China. Overseas versions may use overseas service regions. If personal information must cross borders, we will use the legally required safeguards and provide separate notice or obtain separate consent where required.

You can edit profile information, manage system permissions, and start account deletion in the app. You may also contact us to request access, correction, a copy, deletion, withdrawal of consent, or account closure. We may verify your identity and will respond within the period required by applicable law.

aRoom is not directed to children under 14. Minors should use the service with guardian guidance. If we learn that we processed a child's information without appropriate authorization, we will delete it.

We use access controls, encryption in transit, hashed credentials, account isolation, and least-privilege practices. No system can guarantee absolute security; if an incident may affect your rights, we will notify you and take remedial action as required by law.

If our purposes, methods, or information categories materially change, we will update this policy and provide prominent notice through the website, app, or another appropriate channel.

Data controller: 北京蔚蓝航线科技有限公司 (Beijing Weilan Hangxian Technology Co., Ltd.)

Privacy and data requests: hi@aroom.my