Privacy Policy

1. Information We Do Not Collect

Unlike traditional web services, our mobile applications and platforms are engineered to minimize cloud-stored data:

• No Personally Identifiable Information (PII): We do not collect or store your legal name, passport numbers, national ID numbers, birth dates, phone numbers, email addresses, or government identification documents on our central servers.
• No Appointment Modification Tokens: Rescheduling tokens, confirmation keys, and reservation links extracted from emails or screenshots are saved strictly in your device’s native Secure Keychain (iOS) or EncryptedSharedPreferences (Android) using kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly protection.
• No Financial Account Credentials: Payment transactions for voluntary community tips are handled directly and securely by Apple StoreKit or Google Play Billing. We never receive, process, or store your credit card numbers or billing accounts.

2. Information We Process

To operate our decentralized discovery mesh and high-priority alert system, our systems process minimal anonymous technical telemetry:

• Anonymous Device GUID: A randomly generated pseudonymous identifier used to manage push notification delivery preferences and device registration.
• Device Push Notification Token: Apple Push Notification service (APNs) device token or Firebase Cloud Messaging (FCM) token required to deliver real-time slot alerts and native high-priority background wake to your device.
• Public Slot Telemetry: Public appointment availability timestamps observed and reported by mesh nodes to coordinate slot matrices across the network.
• Voluntary Tip Verification: Cryptographic transaction receipt identifiers issued by Apple or Google confirming voluntary tip transactions. Transaction IDs are checked against an audit log to prevent replay attacks, with zero financial or personal data stored.

3. How We Use Anonymous Telemetry

The minimal anonymous data collected is used solely to:

• Coordinate non-overlapping background polling schedules across participating client mesh nodes to prevent overloading official scheduling infrastructure.
• Arbitrate and dispatch sub-second push notifications and native background wake when new appointment slots are detected.
• Verify client attestation and prevent malicious spam abuse using Apple DeviceCheck and Google Play Integrity.

4. Data Storage and Security

We maintain rigorous digital and physical safeguards to protect all telemetry:

• All network communications between your device and our coordinator API require mandatory TLS 1.3 encryption.
• Backend databases utilize hardware-level encryption at rest (AES-256) with strict role-based access isolation and zero storage of applicant PII.
• Local application data is secured using the operating system’s hardware-backed Secure Enclave / Keystore with kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly protection.

5. California Privacy Rights (CCPA / CPRA)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have specific statutory rights:

• Right to Know & Access: You may request disclosure of any telemetry data categories collected. Because we do not store personal names or emails, telemetry is associated solely with your anonymous device GUID.
• Right to Deletion: You may delete all device registration records instantly by uninstalling the application or tapping "Delete Account & Data" in app settings.
• Do Not Sell or Share My Personal Information: We do not sell or share your personal information under any circumstance.

6. Dedicated Product Policies

For comprehensive disclosures governing specific consumer applications:

• BaoDao Alert (寶島鈴): Dedicated Privacy Policy available at baodaoalert.com/privacy and Account & Data Deletion portal at baodaoalert.com/deletion.

7. Children’s Privacy

Our applications and services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect system updates or legal compliance. When updates occur, the effective date will be revised at the top of this document.

9. Contact & Data Inquiries

If you have questions, feedback, or legal inquiries regarding this Privacy Policy, please contact our legal operations desk: