Privacy Policy

chdl (从夯到拉) is a personal tier-list app for travel destinations. The English version below is canonical; the Chinese version is provided for clarity.

Operator

This app is published and operated on the App Store by Yan Xu, an Apple Developer Program member (team 54SUM9X595). For legal inquiries, GDPR / CCPA data requests, or any privacy concern, contact xieziyi1998@gmail.com.

本 App 由 Yan Xu 在 App Store 上架并运营（Apple 开发者团队编号 54SUM9X595）。本 App 相关的法律咨询、GDPR / CCPA 数据请求或任何隐私问题，请发邮件至 xieziyi1998@gmail.com。

English

What we collect

chdl does not collect, store, or transmit any personal usage data, analytics, or device identifiers to our servers. We have no servers. We do not use any third-party analytics, advertising, or crash-reporting SDKs.

What stays on your device

By default, all of the following remain entirely on your iPhone or iPad:

• Tier lists you create
• Places you add (names, notes, addresses, coordinates)
• Photos you attach to places
• City tags
• Bookmarks of community lists

If you uninstall chdl, this data is deleted along with the app.

What syncs to your personal iCloud (Pro feature)

If you purchase Pro, the same data above is mirrored into your personal iCloud account's private CloudKit database. Apple stores it on your behalf. The chdl developer cannot read this data — it is private to your Apple ID. See Apple's iCloud Privacy Policy for details.

You can disable iCloud sync at any time by signing out of iCloud or toggling iCloud Drive for chdl in iOS Settings.

What becomes public (only when you choose to publish)

Each tier list has a "Public" / "Private" switch defaulting to Private. When you toggle a list to Public:

• The list's title, place names, notes, addresses, coordinates, photos, and city tag are written to a public CloudKit database (Apple-hosted).
• Any other chdl user can browse this list in the app's Discover tab.
• The list is not searchable on the public internet.

When you toggle the list back to Private, or delete it, the public record is removed.

User-generated content moderation

Because Discover allows users to publish content visible to other users, we apply the following safeguards:

• An EULA agreement must be accepted on first launch, listing zero-tolerance community rules.
• Every publish is scanned against a keyword blocklist before reaching the public database.
• Every published canvas can be reported via an in-app menu (举报内容 · Report) — reported canvases are immediately removed from the reporter's feed.
• Every published canvas can be blocked by creator (屏蔽该作者 · Block creator).
• The developer acts on reports within 24 hours by removing offending content from the public database.

Third-party services

• AMap (高德) — When you search for a place inside chdl, AMap receives the search query and may receive your approximate location to bias results. We send no other data. AMap privacy policy
• Apple iCloud — Pro sync and the public Discover feed only. Apple privacy policy

Photo and Location permissions

• Photo Library access is requested only when you tap "Add Photo" on a place (uses Apple's PHPicker, which doesn't share your full library with the app) or "Save Image" on a share card.
• Location access (when in use) is requested only when you tap a place search field, used to bias AMap results by proximity. The app fully works without granting it.

Your data, your control

• Delete a place or tier list inside the app to remove all of its data, including any iCloud copy and any published Discover entry.
• To request deletion of any published content you can no longer access (e.g. lost device, signed-out iCloud), email the address below.

Children's privacy

chdl is not directed at children under 13. We do not knowingly collect data from children.

Changes to this policy

If this policy changes materially, we will update the "Last updated" date at the top and post the new version at the same URL.

Contact

For privacy-related questions or deletion requests, email xieziyi1998@gmail.com.

中文（Chinese）

我们收集什么

chdl 不向任何服务器发送、收集、储存任何个人使用数据、统计信息或设备标识。我们没有服务器。 我们不接入任何第三方统计、广告或崩溃监测 SDK。

留在你设备上的

默认情况下，以下数据完全留在你的 iPhone 或 iPad 上：

• 你创建的 Tier List
• 你添加的地点（名称、备注、地址、经纬度）
• 你为地点添加的照片
• 城市标签
• 你收藏的社区 Tier List

卸载 chdl，这些数据随 app 一起清除。

同步到你私人 iCloud 的（Pro 功能）

购买 Pro 后，上述同样的数据会同步到 你自己的 iCloud 账号的私人 CloudKit 数据库 中。苹果代你储存这些数据。chdl 开发者无法读取它们 —— 它们对应你的 Apple ID 私有。详见 Apple 的 iCloud 隐私政策。

任何时候你都可以在 iOS 设置里关闭 iCloud 或为 chdl 关闭 iCloud Drive，停止同步。

公开发布到社区的（仅当你主动选择）

每个 Tier List 都有"公开/私密"开关，默认私密。当你把某个 List 切换为公开后：

• 该 List 的名称、地点、备注、地址、经纬度、照片、城市标签会被写入一个公开的 CloudKit 数据库（由苹果托管）
• 其他 chdl 用户可以在「发现」tab 浏览到它
• 该 List 不会被公网搜索引擎索引

把它切回私密或删除时，公开记录会被移除。

用户内容的审核机制

因为「发现」允许用户发布内容供其他用户浏览，我们设置以下保护机制：

• 首次启动时必须同意社区规则（零容忍政策）
• 每次发布前都会扫描关键词黑名单，不合规内容无法发布
• 每张已发布的 Tier List 在 app 内都可以「举报内容」—— 被举报的内容会立即从举报者的「发现」中消失
• 每张已发布的 Tier List 也可以「屏蔽该作者」
• 开发者会在 24 小时内审核所有举报并下架违规内容

第三方服务

• 高德地图（AMap） —— 当你在 chdl 内搜索地点时，高德会收到你的搜索词，可能会收到你的大致位置用于按距离排序结果。我们不会发送任何其他数据。高德隐私政策
• Apple iCloud —— 仅在 Pro 同步和「发现」公开数据时使用。Apple 隐私政策

照片和位置权限

• 照片库访问 仅在你点击地点的"添加照片"（使用苹果 PHPicker，本身不会把你的相册暴露给 app）或在分享卡片上点击"保存图片"时请求
• 使用期间位置访问 仅在你点击地点搜索框时请求，用于让高德按距离推荐结果。不授权也能正常使用 app

你对你的数据的掌控

• 在 app 内删除一个地点或 Tier List，会一并清除它的本地数据、iCloud 副本，以及任何已发布的 Discover 记录
• 如果你无法再访问某条已发布内容（比如丢了设备、退出 iCloud），可以发邮件给我们删除

儿童隐私

chdl 不面向 13 岁以下儿童。我们不会主动收集儿童数据。

政策变更

本政策若有重大变更，我们会更新顶部"Last updated"日期，并在原 URL 发布新版本。

联系方式

隐私相关问题或删除请求，发邮件至 xieziyi1998@gmail.com。