Hold On! · Privacy Policy
ChinSion Technology (Hangzhou) Co., Ltd. ("we", "us") develops and operates "Hold On!" (the "App"). We understand how much your personal information matters to you, and we process it in accordance with the Personal Information Protection Law of the People's Republic of China and other applicable laws, following the principles of lawfulness, legitimacy, necessity and good faith.
In one sentence: to let you post requests, vote, see results and track savings, we process your account identifier, the content you actively provide, and essential device logs. We do not read your contacts or location, we integrate no third-party advertising or analytics SDKs, and we never sell your personal information.
1. What we collect
1.1 Account and sign-in
- Login identifier: when you use Sign in with Apple, Apple returns an app-specific user identifier (sub) and credential, which we use to create and recognise your account. If you choose Apple's "Hide My Email", we never receive your real email address.
- Session data: the session token created after sign-in and its expiry, used to keep you signed in.
- Alias and avatar: an anonymous alias and geometric avatar generated for your account (computed from a random seed, containing no photo of you). A private display name you set is visible only to you.
1.2 Content you provide
- Request details: item name, amount and currency, category, your reason for buying, alternative plan, number of reviewers, time limit, and destination (Plaza or Approval Group).
- Images: product screenshots or photos you upload, stored in our object storage and shown to other users on the request detail page.
- Votes and interactions: your vote (approved / rejected / just watching), your written reason, Flowers you send, and requests you watch for progress.
- Group information: group name, group notice, group settings, membership relations and join history.
- Feedback and reports: the text of your feedback, report category and description, and any contact details you choose to provide.
- Preferences: blocked keywords, blocked users, notification preferences (results / progress / group requests / quiet hours) and the personalised-feed switch.
1.3 Information generated while you use the App
- Your request results and savings records (computed from amounts and your "bought / didn't buy" feedback).
- Notification records and their read status.
- Logs for troubleshooting and risk control: access time, API error codes, app version, OS version, device model.
- Push token: created only after you grant notification permission, used to deliver result, progress and group notifications to your device.
2. Device permissions
| Permission | Purpose | Optional? |
|---|---|---|
| Photos | Reads only the image you select when you tap "Upload screenshot" | Can be disabled in system settings; browsing and voting still work |
| Camera | Opens only when you choose "Take a photo" to photograph the item | Can be disabled in system settings |
| Notifications | Delivers result, progress and group notifications | Can be disabled in system settings or in-App under Settings → Notifications |
The App does not request contacts, microphone, precise location or health data. If a future feature needs a new permission, we will explain why before asking and update this policy.
3. How we use your information
- Core features: creating your account, publishing requests, showing Plaza and group content, recording votes and Flowers, settling results, generating savings statistics.
- Safety and moderation: detecting prohibited content and abnormal behaviour, handling reports and appeals, applying the enforcement ladder.
- Notifications: with your permission, sending relevant reminders through Apple Push Notification service.
- Improvement and troubleshooting: diagnosing crashes and API errors, improving performance and interaction.
- Security and compliance: preventing fraud, vote manipulation and attacks, and cooperating with lawful investigations by regulators or judicial authorities.
We do not use your information to serve third-party advertising, to track you across apps, to sell or rent it to anyone, or to profile you on the basis of sensitive personal information (such as health, religion or financial accounts).
4. Personalised feed
The Plaza is sorted by a combination of popularity and recency. You can turn off "Personalised recommendations" under Settings → Privacy & Content; with it off, the Plaza is shown in reverse chronological order with no sorting based on your history. Our recommendations use only your public content and interactions inside this App — never cross-app tracking data.
5. Anonymity and traceability
In the front end the App shows only system-generated aliases and geometric avatars; other users cannot see your Apple account, real name or email. Please understand, however, that front-end anonymity does not mean the back end is untraceable. We retain the link between alias and account identifier and use it only to: handle reports concerning you or filed by you, identify and pursue violations, and cooperate with lawful investigations by regulators or judicial authorities. We never disclose that link to other users or to third parties for commercial purposes.
6. Storage
- Location: your information is stored on cloud servers located in the mainland of the People's Republic of China. We do not transfer information collected in China outside China.
- Retention: account information is kept while you use the App; requests, reasons and images are kept while the content exists. After you delete your account, account information and profile are deleted or anonymised; published requests may be retained in anonymised form without any account identifier, so that existing discussions remain readable.
- Logs and security records: generally retained for no more than 6 months, unless the law requires otherwise.
7. Sharing, transfer and public disclosure
- No sharing: we do not share your personal information with third parties except as described in this policy. We do not sell your personal information.
- Processors: we use Tencent Cloud (CloudBase, including cloud functions, PostgreSQL database and object storage) as our infrastructure provider, which processes data only as necessary to provide technical services and is bound by confidentiality and security obligations through contracts and access controls.
- Legal disclosure: we may disclose necessary information where required by law, for litigation or dispute resolution, or in response to a lawful request from an administrative or judicial authority.
- Business changes: in a merger, split or asset transfer your information may be transferred; we will require the recipient to remain bound by this policy, and otherwise seek your consent again.
- Public content: requests you post in the Plaza and content you post in Approval Groups are shown to the relevant users, including the item details, amount, reason, images and your anonymous alias. Please do not put real names, addresses, phone numbers, card numbers or other sensitive information into your content.
8. Third-party services and SDKs
| Service | Provider | Purpose and data involved |
|---|---|---|
| Sign in with Apple | Apple Inc. | Sign-in and identity verification; involves the user identifier (sub) returned by Apple, under Apple's privacy policy |
| Apple Push Notification service (APNs) | Apple Inc. | Delivering result, progress and group notifications; involves the device push token |
| Cloud hosting, database and object storage | Tencent Cloud Computing (Beijing) Co., Ltd. | Server runtime, data and image storage; servers located in mainland China |
The current version integrates no third-party advertising, analytics, crash-reporting or profiling SDKs. If that changes, we will list each SDK's name, the categories of data it collects and a link to its privacy policy, and ask for your consent again.
9. Security
- We protect your information with HTTPS encryption in transit, least-privilege access, row-level database isolation, and separation of secrets from configuration.
- Only employees who need access for their work may do so, within their authorisation, and they are bound by confidentiality obligations.
- If a personal-information breach, tampering or loss occurs, we will notify you and report to regulators as required by law.
- Please note that no internet service can be absolutely secure. Do not enter or upload card numbers, payment passwords, identity documents or other sensitive information in the App.
10. Your rights
- Access and correction: you can view your requests, the reviews you took part in and your savings records under "Me"; item details and reasons can be edited or withdrawn while the request is open.
- Deletion: you can delete your content (requests, blocked keywords, blocked users). Deleted content is no longer displayed, though records needed for report handling or legal retention may be kept for a limited period.
- Withdrawing consent: you can disable notification, photo or camera permissions in system settings, or turn off personalised recommendations in the App. Withdrawal does not affect processing already carried out on the basis of your consent.
- Account deletion: to delete your account, email dev@chinsion.com with your alias; we verify identity and process the request within 7 business days.
- Copy of your data: you may request an export of the requests and reasons you provided at the same address; we provide it in a readable format within 15 business days.
- Complaints: if you believe our processing harms your rights, contact us first; you may also complain to the cyberspace or market-regulation authorities.
11. Minors
The App is intended for adults, carries a 17+ App Store age rating and offers no payment capability. We do not knowingly collect personal information from minors. If you are under 14, please do not register or use the App; if a guardian finds that a minor has used the App without consent, contact us and we will delete the relevant information.
12. Changes to this policy
We may update this policy as features or laws change. Updated versions are published on this page with a new date; for material changes to processing purposes, data categories or sharing recipients, we will ask for your consent again through an in-App prompt.
13. Contact us
- Email: dev@chinsion.com
- Operator: ChinSion Technology (Hangzhou) Co., Ltd.
We respond to requests within 15 business days.
This English text is provided for convenience only. The Chinese version of this policy is the governing text; in case of any inconsistency, the Chinese version prevails.