Privacy Policy

01Information we collect

We collect information only within the scope necessary to provide features, specifically:

Information you actively provide

• Account information: the phone number you register with (used for login and account security verification).
• Conversations & content: your text and voice conversations with REACHE, and images you actively send (such as flight or order screenshots).
• Items you enter: schedules, notes, to-dos, contact remarks, and other information you'd like REACHE to manage for you.

Information we access only after your authorization

• Voice (requires microphone permission): used for voice conversations and speech-to-text.
• Images (requires camera/photo permission): used to recognize screenshots and photos into schedule items.
• Location (requires location permission): used for weather, nearby recommendations, and commute estimates.

Automatically generated information

• Device & logs: device model, OS version, app version, crash logs, and necessary access timestamps — used to keep the service stable and secure.

02How we use this information

We use the information we collect for one purpose only: to help REACHE run real life better, together with you.

We do not use your private conversations or memory network for advertising, and we also do not do not use them to train general-purpose models unrelated to you (unless you separately and explicitly authorize us to improve the service, and only after de-identification).

03Device permissions

The following permissions all require your active authorization, and can be revoked anytime in system settings. Revocation disables only the corresponding feature, without affecting REACHE's other capabilities.

• Microphone: enabled only when you use voice conversation/calls, for recording and speech recognition (to text).Voice is used only to recognize content and deliver features; it is not used for voiceprint/biometric identity recognition, nor is there any silent background recording.
• Camera / Photos: accessed only when you actively take a photo or select an image, to recognize screenshots and receipts into schedule items.
• Location: used for weather, nearby recommendations, and commute estimates. You may choose "While Using" authorization.
• Notifications: used for timely reminders and proactive briefings. Can be turned off in system settings.
• Contacts: only after you actively enable the "Contacts" feature and grant permission do we access it, to quickly find a contact by name, help you call with one tap, and link the right person in plans involving others.After you grant permission, we read and upload the contact's name and phone number to our own servers located in mainland China, used to build your network within REACHE, call by name with one tap, and link the right person in plans involving others; this data is never shared or sold to any third party, and is never sent to third-party AI services. It is permanently deleted when you delete your account. You can revoke this permission or remove imported contacts anytime in system settings, after which the feature is disabled.
• System calendar: REACHE uses its own in-app calendar, and does not read your device's system calendar by default. If an "import system calendar" feature is offered in the future, we will request your consent via a separate prompt before accessing it.

04Third-party services & sharing

To deliver certain features, we transfer relevant data, within the minimum necessary scope, to security-assessed third-party providers for processing. These providers may use the data only to provide services to us, and for no other purpose.

• Speech recognition / visual recognition / large-model capabilities: used to transcribe your voice, recognize image content, and generate intelligent replies.
• Web search: used to retrieve public web content when your request needs real-time information.

For reasons of commercial confidentiality and partner authorization requirements, the table below lists our entrusted-processing scope by service category, and does not disclose specific provider names. Each category has passed our security and compliance assessment and may process data only within the minimum necessary scope to provide the corresponding feature, following our instructions, and for no other use:

If you are legally entitled to know the specific entrusted processor for a feature, contact us via the email below; we will explain to the extent permitted by law and without breaching confidentiality obligations.

Except for the situations above, or where required by law or with your separate consent, we do not do not share or transfer your personal information to any third party, and never sell your personal information.

05Data storage & cross-border transfer

Your data is stored on our cloud servers located within mainland China (Hangzhou, Zhejiang). We protect data security with encrypted transmission and access controls.

06Data security

We adopt industry-standard security measures to protect your information, including but not limited to:

• Transport-layer encryption (HTTPS / TLS) to prevent data from being intercepted in transit.
• Access controls and the principle of least privilege, so only necessary personnel/systems can access data.
• Accounts log in via phone-number verification, and passwords are not stored in plaintext.

Despite our best efforts, please understand that no security is absolute on the internet. In the event of a personal-information security incident, we will notify you promptly as required by law and take remedial measures.

07Your rights

You always retain full control over your personal information:

The app's "Me → Settings" provides functions such as "Export memories," "Clear all memories," and "Delete account." You may also exercise these rights via the email at the end of this policy, and we will respond within the statutory time limit.

08Data retention & deletion

We retain your information only for as long as necessary to provide the service. When you clear memories or Delete account, we will delete or anonymize the corresponding data (except where laws and regulations require otherwise, e.g., certain logs must be retained for a period by law). Deletion may not be immediately removed from all backups, but backups are rotated and overwritten within a reasonable cycle.

Specific retention periods (retained during the life of the account to provide the service; after expiry or deletion, handled as follows):

• Conversation records / memory network / schedules and notes: retained for the life of the account to provide the service; you can export or wipe them in one tap anytime in "Me → Data."
• Basic account information (phone number, etc.): retained until account deletion; after deletion, removed or anonymized within 15 days (recoverable during the cooling-off period).
• Operational / security logs: as required by the Cybersecurity Law and similar regulations, retained for no less than 6 months, then rotated and deleted.
• Financial records such as transactions / invoices: retained for the period required by law (typically several years).

After deletion or clearing, data may persist briefly in backups, which are rotated and overwritten within a reasonable cycle, except where laws and regulations mandate retention.

09Protection of minors

REACHE is intended primarily for adults. If you are under 14, please use it only with the consent and accompaniment of a guardian; we do not knowingly collect children's personal information. If a guardian finds that a child has provided information without consent, contact us via the email below to delete it.

9.5App stores & platforms (Apple App Store / Google Play)

REACHE is distributed via Apple App Store and Google Play . When you download, use, or make in-app purchases through these platforms, they also process some data under their own privacy policies. We explain as follows:

• In-app purchases (IAP): subscriptions and value-added services are completed via Apple App Store in-app purchase (iOS) or Google Play Billing (Android).We do not collect, store, or have any access to your bank card number or payment password — payments are handled entirely by Apple / Google. We only receive and verify transaction receipts, to confirm your subscription status and grant you the corresponding benefits.
• iOS device permissions: on iOS, permissions such as microphone, camera, photos, location, and contacts are each requested via system prompts; you can toggle each anytime in "Settings › REACHE." Revoking one disables only that feature, without affecting others.
• No cross-app tracking:REACHE We do not use the IDFA (advertising identifier), do not track users across apps or websites, and do not share your data with ad networks. Therefore REACHE does not present an App Tracking Transparency (ATT) request.
• Push notifications: timely reminders and proactive briefings are delivered via Apple Push Notification service (APNs) / Google FCM. Push content contains only necessary reminder information, and you can turn it off anytime in system settings.
• Platform privacy policies: Apple and Google, as platforms, are independently responsible for the data they process; please refer to their respective privacy policies.

Account and business data (memories, schedules, conversations, etc.) are processed by us under this policy and stored on servers within mainland China; the platforms process only the data necessary for distribution and payment.

10International users: GDPR / CCPA supplement

European Economic Area users (GDPR)

If you are in the European Economic Area, our legal bases for processing your personal data include: necessity to perform our service agreement with you, your consent, and our legitimate interests in providing and improving the service. You have the rights granted by the GDPR, including access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and the right to object. You also have the right to lodge a complaint with your local data protection authority.

California, USA users (CCPA / CPRA)

If you are a California resident, you have the right to know the categories and purposes of personal information we collect, to request deletion, and to request correction.We do not "sell" or "share" your personal information (as defined by the CCPA). Exercising your rights will not result in discriminatory treatment.

11Policy updates

We may update this policy from time to time. For material changes, we will notify you prominently in the app or via notification, and update the "effective date" at the top. Continued use of REACHE indicates your acceptance of the updated policy.

12Contact us

If you have any questions or comments about this privacy policy, or wish to exercise your rights, please contact us as follows, and we will respond as soon as possible:

• Personal information processor / data controller: Hangzhou Reache Digital Technology Co., Ltd. (under the Personal Information Protection Law, we are the processor of your personal information)
• Contact email:contact@reache.yun