Ailin Privacy Policy

1. Overview

This Privacy Policy explains how the legal operator identified above (“Ailin,” “we,” “us,” or “our”) handles information in connection with the Ailin iOS application (the “App”).

Ailin is designed to work primarily on your device and does not require an account. Your saved progress and preferences remain on your device. The App sends limited pseudonymous product-usage events and crash diagnostics described below; it does not send user-entered text or the prose you read.

This Policy applies to:

• your use of the App;
• communications you choose to send directly to us, including support and privacy requests; and
• limited purchase and subscription information processed through Apple’s in-app purchase system.

Apple and any third-party websites or services you open from the App have their own privacy practices.

2. Privacy Summary

3. Information Handled When You Use Ailin

3.1 Information stored locally on your device

The App may store limited information on your device so that it can remember your choices and function as expected. This may include:

• App language;
• onboarding completion;
• settings and preferences;
• local progress or completion state;
• the current state of daily content;
• audio playback or content-selection state; and
• subscription entitlement or purchase-status information provided through Apple’s StoreKit framework.

This information is processed locally. Ailin does not receive or have remote access to it in the current version.

Local App information generally remains on your device until you remove it through available device or App controls or delete the App. Depending on your Apple settings, some App data may be included in a device or iCloud backup managed by Apple. You control those backups through your Apple settings.

3.2 Product analytics and crash diagnostics

To understand whether features work and to improve reliability, the App uses Amplitude for product analytics and Firebase Crashlytics for crash reporting. Analytics uses a random installation identifier and may include an app-session identifier, App version and build, language, visual theme, subscription tier, stable identifiers for prepared content, entry point, completion or exit status, scroll-depth milestones, active-duration measurements, and safe categories of purchase or content-loading failures.

Product analytics may describe App lifecycle events, onboarding progress and a broad self-selected onboarding fear group, card, tool, practice, SOS, Support, Understanding, Sleep, paywall, and subscription-funnel interactions, content-load failure categories, audio playback controls, and player seek direction or time deltas. These events use stable technical identifiers such as card IDs, tool IDs, topic IDs, item IDs, tiers, and entry points; they do not include localized titles, card body text, support prose, or user-entered text.

Some events, such as card-read completion, tool completion, or practice completion, are inferred from limited technical signals such as active time, scroll-depth thresholds, and whether the App is in the foreground. These events do not mean that Ailin knows what you read, understood, felt, believed, or experienced medically.

We use analytics to evaluate aggregate product behavior, reliability, content usefulness, onboarding flow, and subscription funnel performance. We do not use analytics events to create an individual medical, psychological, advertising, or health-related behavioral profile.

We do not send your name, email address, advertising identifier, precise location, contacts, emergency-contact details, user-entered text, card or support prose, anxiety rating, diagnosis, HealthKit data, raw StoreKit error messages, receipts, or payment-card information to Amplitude. IP-based location collection, carrier collection, IDFV collection, automatic screen or element capture, and session replay are disabled in the App's Amplitude configuration.

Crashlytics may receive technical crash information such as App and operating-system versions, device type, stack traces, and safe diagnostic attributes. We do not intentionally attach user-entered text, content prose, or health information to crash reports.

You can turn product analytics off in Ailin Settings. Turning it off stops future Amplitude events and resets the App's analytics identifier. Crash reporting is used separately for App reliability.

3.3 Purchases and subscriptions

If you purchase a subscription or other paid feature, Apple processes the transaction through the App Store. Apple may process your Apple ID, payment and billing information, transaction records, device information, and purchase history under Apple’s own terms and privacy policy.

The App may receive limited transaction and entitlement information from Apple to provide or restore paid access. Ailin does not receive your full payment-card number and does not directly process App Store payments.

You can manage or cancel an App Store subscription through your Apple account settings. Deleting the App does not automatically cancel a subscription.

3.3 Information you choose to send to us

You do not need to provide your name, email address, health information, or other personal information to use the App’s core features.

If you contact us by email or through another support channel, we may receive:

• your name and email address;
• the contents of your message;
• attachments you choose to send;
• technical information you include, such as the App version, device model, or iOS version; and
• records of our response and follow-up communications.

Please do not send medical records, diagnostic documents, government identification numbers, payment-card details, passwords, or information that is not necessary for us to handle your request.

Ailin is not a medical provider, emergency service, or crisis service. Support and privacy communications are not monitored as an emergency channel. Do not use them to request urgent medical or crisis assistance.

3.4 Health-related information

The App does not ask you to create a health profile, does not access HealthKit, and does not send your in-app activity to Ailin as health data.

You may voluntarily include health-related information in a support message. We do not require it. If you send it, we will use it only as reasonably necessary to understand and respond to your request, comply with applicable law, or protect legal rights. Where applicable law requires separate consent or authorization, we will request it before any additional use or delete the information when it is not needed.

We do not sell health-related information, use it for advertising, or use it to create advertising profiles.

3.5 Information the current App does not collect

The current App does not collect or transmit to Ailin:

• precise or approximate location;
• contacts, calendars, photos, camera data, or microphone recordings;
• HealthKit data;
• advertising identifiers;
• browsing history;
• biometric data;
• user-created journal entries or chat messages;
• diagnostic assessments;
• advertising or health-related behavioral profiles;
• third-party advertising data; or
• data for cross-app or cross-site tracking.

4. How We Use Information

When you voluntarily contact us, we may use the information you provide to:

• answer support, feedback, legal, or privacy requests;
• troubleshoot a problem you report;
• protect the security, integrity, and lawful operation of the App;
• investigate misuse, fraud, or violations of applicable terms;
• establish, exercise, or defend legal claims;
• comply with applicable law or valid legal process; and
• maintain necessary records of privacy requests and our responses.

We do not use support communications to diagnose a condition, provide medical treatment, make automated health decisions, or personalize advertising.

5. Legal Bases Where Required

Where applicable law requires a legal basis for processing personal information, the basis will depend on the circumstances and may include:

• performing a contract or taking steps you request, such as providing support connected with your use of the App or a purchase;
• our legitimate interests in responding to communications, securing the App, preventing misuse, maintaining necessary records, and protecting legal rights, where those interests are not overridden by your rights;
• your consent, when we specifically request it;
• compliance with a legal obligation; or
• the establishment, exercise, or defense of legal claims.

If processing is based on consent, you may withdraw that consent at any time by contacting us. Withdrawal does not affect processing that was lawful before withdrawal.

6. How We Disclose Information

Ailin does not sell personal information. We do not share personal information for cross-context behavioral advertising and do not permit third parties to use information from the App to track you across apps or websites.

We may disclose limited personal information in the following circumstances:

6.1 Service providers and professional advisers

We use Amplitude, Inc. to process the limited product-analytics events described above and Google LLC's Firebase Crashlytics to process crash diagnostics. We may also use providers to operate support email, host this Policy, maintain business records, or provide technical infrastructure, and may share information with professional advisers when reasonably necessary. These recipients may use information only to provide the relevant service or professional purpose and are subject to appropriate confidentiality, security, and data-protection obligations.

6.2 Apple

Apple distributes the App and processes App Store purchases and subscriptions under its own terms and privacy policy. The App uses Apple-provided purchase information only as needed to provide and restore paid access.

6.3 Legal and safety reasons

We may disclose information when we reasonably believe disclosure is necessary to:

• comply with applicable law or valid legal process;
• respond to a lawful request from a competent authority;
• protect the rights, property, or safety of users, Ailin, or others;
• investigate fraud, security incidents, or misuse; or
• establish, exercise, or defend legal claims.

6.4 Business transfer

If the Ailin business is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, relevant information may be disclosed or transferred as part of that transaction, subject to applicable law and appropriate safeguards.

7. Retention and Deletion

7.1 Local App information

Ailin cannot remotely view or delete information that exists only on your device. You can remove it through any available reset controls or by deleting the App. Information contained in an Apple-managed backup is controlled through your Apple backup settings.

Product analytics and crash diagnostics are retained only for as long as reasonably necessary for product measurement, reliability, security, and legal compliance, subject to the retention settings and deletion capabilities of Amplitude and Firebase. You can stop future product analytics and reset the local analytics identifier in Ailin Settings. You may also contact us about deletion or another privacy right.

7.2 Support communications

We generally retain support and feedback communications for no longer than 12 months after the request is resolved, unless a longer period is reasonably necessary for security, fraud prevention, legal compliance, dispute resolution, or legal claims.

7.3 Privacy-request records

We may retain a limited record of a privacy request and our response for up to 24 months, or longer if required by applicable law, to demonstrate that the request was handled.

When information is no longer needed, we will delete it, de-identify it, or securely isolate it until deletion is reasonably possible, subject to legal and technical limitations.

8. Data Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the nature and limited amount of personal information we process.

No method of electronic transmission or storage is completely secure. We cannot guarantee absolute security. You are responsible for maintaining appropriate security for your device, Apple account, device backups, and email account.

9. International Processing

The legal operator of Ailin is based in the United States. Analytics is configured for Amplitude's United States region. Communications, analytics events, and crash diagnostics may be processed in the United States and in countries where our service providers operate.

Where applicable law requires safeguards for an international transfer, we will use an appropriate lawful mechanism. Privacy laws in the United States or another destination may differ from those where you live.

10. Your Privacy Rights

Depending on where you live and the law that applies, you may have rights to:

• request access to personal information we hold about you;
• request correction of inaccurate information;
• request deletion of information;
• request restriction of or object to certain processing;
• receive certain information in a portable format;
• withdraw consent where processing is based on consent; and
• complain to a competent privacy or data-protection authority.

Ailin does not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising.

To submit a privacy request, contact support@ailinlabs.com and describe your request and country or region. We may ask for information reasonably necessary to verify your identity and protect against fraudulent requests. We will not discriminate against you for exercising an applicable privacy right.

Because Ailin does not receive information stored only on your device, we cannot provide a copy of or remotely delete that local information. You control it directly as described in Section 7.

An authorized agent may submit a request where applicable law permits. We may require evidence of the agent’s authority and may need to verify the request directly with you.

11. Children and Age Eligibility

Ailin is intended for users aged 16 and older. It is not directed to children under 16.

We do not knowingly collect personal information through the App from children under 16. If we learn that a child under 16 has sent personal information to us without any consent required by applicable law, we will take reasonable steps to delete it. A parent or legal guardian may contact us at support@ailinlabs.com.

12. External Links

The App may provide links that open a third-party website or service, such as Apple subscription management, legal information, or a verified external support resource. Once you leave the App, the third party’s terms and privacy policy apply.

We do not control third-party privacy practices, content, availability, or security. Review the third party’s privacy information before providing personal information.

Apple’s Privacy Policy is available at:
https://www.apple.com/legal/privacy/

13. Changes to This Privacy Policy

We may update this Privacy Policy when the App’s features, data practices, legal requirements, or service providers change.

If we make a material change, we will provide notice appropriate to the change, such as by updating the Policy in the App and at its public URL and changing the effective date. Where required by law, we will request consent before applying a materially different use of personal information.

14. Contact Us

For privacy questions, requests, or complaints, contact:

Please do not use this contact for emergency or crisis assistance. Ailin is not an emergency service, and this contact is not monitored for urgent safety situations. If you or another person may be in immediate danger, contact local emergency services or an appropriate verified crisis resource in your country.

This Privacy Policy describes the current Ailin iOS version. It must be reviewed and updated before release if Ailin materially changes its accounts, servers, cloud sync, analytics, advertising, AI features, user-entered content, push notifications, location, HealthKit access, or other data-processing features.