Privacy Policy

Ching (清數理財) · Last updated: 8 April 2026 · Effective: 8 April 2026

1. Data Controller

Ching (清數理財) is developed and maintained by iloveworking Ltd, based in Hong Kong ("we", "us", "our").

Contact: chingsupport@iloveworking.dev

2. What We Collect

Ching is a local-first personal finance app. Your financial data (transactions, accounts, budgets, stock holdings) is stored in a SQLite database on your device only. No account or login is required.

3. AI Advisor (Optional)

When you enable the AI Advisor feature and give consent, a summary of your financial data is sent to our server for analysis:

• Account balances (grouped by type, not individual account names)
• Transaction list for the selected month (category, amount, merchant — capped at 200 entries)
• Budget usage (if enabled in scope settings)
• Stock holdings (if enabled in scope settings)

You control exactly what data is shared via Settings > AI & Privacy — you can exclude accounts, budgets, investments, or couple data individually.

4. Where AI Data Goes

When you use the AI Advisor, your financial snapshot passes through:

AI responses are cached on your device for up to 24 hours, then automatically discarded. Your IP address is processed by Cloudflare for rate limiting and is not stored beyond the request.

5. Payment Notification Capture (Optional, Android Only)

If you enable "Auto-Capture Payments", the app uses Android's Notification Listener Service to read payment notifications from supported apps (Octopus, Google Pay, PayMe, HSBC, BOCHK).

• The app reads only the notification title and text to extract transaction amount, merchant name, and payment method
• This data is stored locally on your device only and is never transmitted to any server
• You must explicitly grant Notification Access permission — the app cannot read notifications without your consent
• You can revoke this permission at any time in Android Settings > Apps > Special App Access > Notification Access

6. Report Issue (Optional)

If you use the "Report Issue" feature in Settings, the following data is sent to our Cloudflare Worker for debugging purposes:

• App log files (last 3 most recent files — contain app events, errors, and timestamps; no financial data)
• A screenshot you select from your gallery (optional)
• Device information (model, OS version, app version)
• Your email address (if you choose to provide it for follow-up)

This data is stored in Cloudflare KV for support purposes and is retained for up to 30 days, after which it is automatically deleted. No financial data (transactions, balances, accounts) is included in bug reports.

7. Partner Mode (Optional)

If you enable Partner Mode, selected transactions are synced between you and your partner via Cloudflare Workers. You choose whether to share all transactions or only split expenses.

The following data is stored on our Cloudflare database while the partnership is active:

• A randomly generated device identifier (UUID)
• Your chosen display name (e.g., "Alice")
• A Firebase Cloud Messaging (FCM) token for push notification delivery
• Shared transaction data (amounts, categories, merchant names, dates)

This data is deleted when either partner disconnects. Undelivered transactions are cleaned up after 24 hours. Inactive devices are purged after 30 days.

8. Analytics

We use Firebase Analytics (operated by Google LLC, USA) to understand app usage patterns. Firebase collects:

• Interaction events — which features are used, session duration, screen views (21 event types; no transaction amounts, merchant names, or account balances are included)
• Device information — device model, operating system version, app version, language, country/region
• Identifiers — an anonymous Firebase App Instance ID (not linked to your identity). We do not use the Advertising ID for advertising or tracking purposes

Firebase does not receive your financial data. We do not use analytics data for advertising or user profiling. You can review Firebase's privacy documentation.

9. Push Notifications

We use Firebase Cloud Messaging (FCM) to deliver push notifications (e.g., partner sync alerts). When you grant notification permission, a unique device token is generated by Firebase and sent to Google's servers to route notifications to your device. This token does not contain personal or financial information. You can disable push notifications at any time in your device settings.

10. Legal Basis for Processing

• AI Advisor: Consent — you explicitly enable this feature and agree via an in-app consent dialog. You may withdraw consent at any time by disabling the feature.
• Report Issue: Consent — you actively choose to submit a bug report. No data is sent without your action.
• Partner Mode: Consent — you choose to enable syncing and select what data to share.
• Notification Capture: Consent — you explicitly grant notification listener permission.
• Analytics: Legitimate interest — we collect anonymised usage data to improve the app. This does not include financial data.

11. International Data Transfers

When you use optional features that transmit data, your information may be processed outside Hong Kong:

• AI Advisor: Processed via Cloudflare (global network, primarily US/Japan/Singapore) and Anthropic (United States)
• Report Issue: Processed via Cloudflare Workers (global network)
• Analytics & Push Notifications: Processed by Google (United States)
• Partner Mode: Processed via Cloudflare Workers (global network)

These transfers are necessary to provide the services you have opted into. Our service providers maintain appropriate security safeguards for cross-border data processing.

12. Third-Party Service Providers

The following table summarises all third-party services that may process your data when you use optional features:

Service	Provider	Purpose	Data Processed	Privacy Policy
Cloudflare Workers & AI Gateway	Cloudflare, Inc. (USA)	AI request routing, Partner Mode sync, Report Issue	Financial snapshot, bug reports, IP address, request metadata	Link
Claude API	Anthropic, PBC (USA)	AI financial analysis	Financial snapshot (grouped balances, transactions)	Link
Firebase Analytics	Google LLC (USA)	App usage analytics	Interaction events, device info, app-instance ID	Link
Firebase Cloud Messaging	Google LLC (USA)	Push notifications	Device token (FCM token)	Link

We do not use any advertising networks, social media SDKs, or other third-party tracking services beyond those listed above.

13. Cookies and Local Storage

Ching is a native mobile application and does not use cookies. All app preferences are stored locally on your device using standard Android/iOS storage mechanisms (SharedPreferences / UserDefaults). This privacy policy page itself does not set any cookies or use any tracking scripts.

14. Data Retention

• Local data (transactions, accounts, budgets) — stored on your device indefinitely until you uninstall the app, clear app data, or delete individual entries
• AI Advisor cache — responses cached on your device for up to 24 hours, then automatically deleted. Anthropic does not retain API request data beyond 30 days per their data retention policy
• Report Issue data — logs, screenshots, and device info stored in Cloudflare KV for up to 30 days, then automatically deleted
• Partner Mode data — transaction data on our server is automatically deleted after your partner retrieves it. Undelivered transactions are cleaned up after 24 hours. Inactive devices are purged after 30 days
• Firebase Analytics — Google retains analytics data for up to 14 months, after which it is automatically deleted
• FCM device tokens — tokens are refreshed periodically by Firebase; old tokens are invalidated automatically

15. What We Do Not Do

• We do not sell or share your data with advertisers
• We do not use your financial data for model training
• We do not permanently store your financial data on our servers
• We do not require an account or collect your identity
• We do not use cookies or web-based tracking technologies
• We do not profile you for marketing purposes
• We do not share your data with any advertising networks or data brokers

The AI Advisor provides automated analysis and suggestions based on your financial data. These are informational only and do not constitute financial advice. No automated decisions with legal or similarly significant effects are made about you.

16. Your Rights

Under the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) and applicable data protection laws, you have the right to:

• Access your data: Since most data is stored locally on your device, you can view it directly in the app. For server-side data (Partner Mode, analytics), contact us.
• Correct your data: Request correction of any inaccurate personal data we hold.
• Delete your data: Delete all local data by uninstalling the app or clearing app data. For server-side deletion, contact us or disconnect Partner Mode within the app.
• Export your data: Use the in-app backup feature (Settings > Backup & Restore) to export your data.
• Withdraw consent: Disable AI Advisor, Partner Mode, or notification capture at any time in Settings. Withdrawal does not affect prior lawful processing.
• Opt out of analytics: Uninstall the app to stop all analytics collection. Analytics data is anonymous and cannot be linked to your identity or deleted individually.

To exercise these rights, contact us at chingsupport@iloveworking.dev. We will respond within 40 days as required by Hong Kong law.

If you believe your data privacy rights have been violated, you may lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD).

17. Children's Privacy

Ching is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

18. Security

We protect your data through: local-first architecture (data stays on your device by default), encrypted API key storage (Flutter Secure Storage), encrypted HTTPS connections for all server communications, and API key authentication for server endpoints.

19. Changes to This Policy

This policy may be updated to reflect changes in our practices or legal requirements. We encourage you to review this page periodically. The "Last updated" date at the top indicates when the policy was last revised. Continued use of the app after changes constitutes acceptance of the updated policy.

20. Contact

For questions, data access requests, deletion requests, or concerns:

Email: chingsupport@iloveworking.dev

For formal data access or correction requests under the Personal Data (Privacy) Ordinance (Cap. 486), we will respond within 40 days as required by law.

In the event of any inconsistency between the English and Chinese versions of this policy, the English version shall prevail.