Privacy Policy

This policy applies to the Chixu (ValTick) Android app, related APIs, the web account-deletion page, and services that link to it. ValTick is a personal asset-recording, valuation, attribution, public-event and reminder tool. It does not provide investment advice, execute trades, or guarantee returns.

1. Data we process

• Account and identity: phone number, country code, internal user ID, verification status and sessions; when you choose Google Sign-In, the account identifier, name, email and avatar returned under your authorization.
• Financial ledger: accounts, instruments, markets, quantities, costs, currencies, cash, deposits, liabilities, custom assets, watchlists, cash flows, net-worth snapshots, attribution, reminders and corrections that you enter or confirm.
• Screenshot import: selected screenshots are recognized on-device with Google ML Kit and are not currently uploaded to the ValTick Server. Recognized text, bounding boxes, confidence values and user-confirmed structured holdings may be sent to the Server for matching, review and import.
• Purchases: product, channel, order or purchase-token verification result, subscription status, effective and expiry dates, and auto-renewal status. We do not receive your full card or payment-account credentials.
• Device and diagnostics: a random per-install ID rather than a hardware ID, app/device/OS version, language, time zone, request ID, IP and network metadata, latency, error and runtime diagnostics.
• App usage: dates and hours of authenticated business-API access, major feature categories mapped from those APIs, app version and release channel, plus controlled screenshot-import funnel results. We do not send periodic activity heartbeats or calculate foreground duration. These facts exclude holdings, amounts, search terms, OCR content and free text.
• Preferences: language, appearance, base currency, sorting, reminders and privacy-display choices.

We do not currently collect brokerage trading authority, exchange API secrets, private keys, seed phrases, contacts, precise location, SMS content, microphone audio, health data or advertising IDs.

2. Why we process data

We use data to provide account authentication, the asset ledger, valuation, public market data, events, imports, membership and reminders; verify purchases; protect accounts and prevent abuse; diagnose failures and improve reliability; and comply with law or protect legal rights.

3. Sharing and service providers

We do not sell personal data or share your ledger for advertising profiles. We use only the minimum information required by service providers, including Alibaba Cloud for SMS and cloud infrastructure, Google Identity for optional sign-in, Google Play Billing for subscriptions, Google ML Kit for on-device OCR, and public market/content providers for search, prices, FX, fund NAVs, events, logos or analyst facts. Public-data providers do not receive your personal holdings or amounts.

Google states that the ML Kit Android SDK may collect device/app information, per-install identifiers, performance metrics, events and error information for diagnostics and usage analytics, transmitted over HTTPS.

4. Security and retention

Production traffic uses HTTPS. We apply token-based sessions, access control, least privilege, configuration isolation, log redaction and secure device storage. No system can guarantee absolute security.

Account-linked identity, ledger, preferences and membership projections are normally retained until account deletion or until no longer needed. Linked screenshot-funnel events are retained for up to 7 days, hourly activity and major-feature facts for up to 31 days, and daily visit facts or aggregates without user identifiers for up to 13 months. We do not send periodic activity heartbeats or calculate foreground duration. SMS codes and tokens expire on short configured schedules. Operational logs and backups follow restricted security and rotation practices. After deletion, we retain only an anonymous deletion receipt without a user ID, phone number, provider subject or asset data. Public market facts are not account-linked personal data.

5. Your choices and deletion rights

You may access or edit most holdings and preferences in the app. To permanently delete your account, use Me → Settings → Account management → Delete account, or visit https://api.valtick.cn/account-deletion without installing the app.

Account deletion does not cancel auto-renewing subscriptions. Cancel them through Google Play, Apple or the applicable purchase channel first. For access, correction, copy, restriction or other privacy requests not yet available as self-service, email liubojiajia@gmail.com. We may verify your identity before acting.

6. Children, international processing and changes

The service is not directed to children under 18, and we do not knowingly collect their personal data. The global service may process data outside your country; we use access controls, encryption in transit and applicable legal or contractual safeguards. We will update the effective date and provide reasonable notice when material practices change.

7. Contact

Developer / Play Console name: ValTick
Chinese brand: 持序
Privacy email: liubojiajia@gmail.com