Privacy Notice

Scope and operator. This notice applies to the PopLog iOS app, poplog.cn and PopLog backend services. PopLog is currently in beta. Before public launch, this page will identify the legal operator, registered address and public privacy contact. Beta users can use the channel through which they received their test invitation for privacy, export and deletion requests.

Data we process. We process account data (email address, display name, handle, user ID, avatar, Apple Sign In identifier and security tokens); media data (photos, Live Photos, videos and audio recorded in videos, thumbnails, timestamps, captions and optional coarse location labels); social data (friendships, group membership and roles, invite codes, messages, comments, replies, reactions, reports, blocks and mute settings); and device and operational data (iOS APNs device token, app version, notification delivery records, unread counts, sessions and security audit records). Passwords are not stored in plaintext; the service stores a random salt and a PBKDF2-HMAC-SHA256 derived value for verification.

Automatic daily edits. When automatic daily edits are enabled for a Personal Log or group Log, PopLog's backend reads media already uploaded to that Log and necessary metadata, then creates and stores a daily video in the PopLog service environment. The current implementation uses server-side media processing. It does not send media to a third-party generative AI provider and does not use media, audio, captions or location labels to train a general-purpose model. A group daily edit is available to active members of that group.

Sharing and providers. Personal Log content is private to its account unless you actively share it. Group Logs, group chats, comments and reactions are visible to active members of that group; direct messages are visible to their participants. Authorized operators may access reported content and necessary context for moderation, security and legal obligations. Service providers may include Apple Sign in with Apple, Apple Push Notification service, object storage/CDN/server infrastructure, and an email delivery provider when password-reset email is enabled. If WeChat functionality is enabled and you choose to use it, the WeChat SDK processes data needed for that action under its own terms. The current version does not integrate third-party advertising, behavioral analytics, crash analytics or generative AI SDKs.

Permissions and choices. Camera is used to capture media; microphone records audio with video; location supplies an optional coarse label; Photos Add Only saves media you choose to export; and notifications enable push delivery. You can revoke these permissions in iOS Settings. Revoking a permission does not delete already uploaded data.

Retention, export and deletion. Data is retained while an account is active. In Chat → Settings, you may export account data or delete the account. Deletion removes active service data and attempts to delete associated media. A group with other active members is reassigned to the earliest remaining active member, and other members' group content remains. We retain a minimal deletion audit event with hashed account identifiers and deletion counts for security, abuse prevention and operational compliance. Database backups are retained under server configuration; the current code defaults to the most recent 14 snapshots, so deleted data can remain in a backup until that snapshot expires and is rotated out.

PopLog does not sell personal information or use data for targeted advertising or cross-app tracking. The iOS privacy manifest and App Store Connect App Privacy labels are maintained separately and must remain consistent with this notice, code, SDKs and server configuration.