← 返回官网
中文

PunchCal Privacy Policy

Effective Date: 2025-11-15

Hangzhou Yunjie Future Technology Co., Ltd. (“we”, “us”, or “service provider”) takes the protection of your personal data very seriously and respects your privacy. We will only collect and process your personal data within the scope stated in this privacy policy (“this Policy”) in strict accordance with applicable laws and regulations while you are using PunchCal (“this App”).

Read and fully understand this Policy before providing your personal data for us, and note that this Policy only Applies to this App. Other products or services shall be subject to their respective privacy policies.

The right to privacy and related obligations may vary depending on the local data protection laws. For this reason, we include the supplementary terms for certain jurisdictions in this Policy.

1. Who We Are

We, Hangzhou Yunjie Future Technology Co., Ltd. , are a company registered in Hangzhou, Zhejiang, China. As the data controller who decides how to process the data, we own the full rights over this App and handle all affairs related to it.

2. Types of Personal Data We Collect from You

You may need to provide your personal data when using this App. We will explain what information is needed and why we need it when requesting it from you. Note that while you are free to reject the personal data request, you may have no access to some services or features of this App. For example, we may request the following information:

During your use of this App, it may collect information from you. Some of it is anonymized, and some is associated with the information that you have already provided.

If such information is associated with your account or can be used to identify any person, we consider such information as personal data. The following information is collected when you use this App:

3. How We Use Your Personal Data

This section lists the types of personal data that we collect from you and why we need it. For users in the UK and European Economic Area (“Relevant Jurisdictions”), this section specifies the legal basis for processing your data.

(1) Registration and Login
You can register an account for this product and log in to use the services provided. To help you complete registration and login, we need to collect and use the following personal data:
Registration: Your email account and password. You may also choose to register using your Google account or Apple ID, which requires you to provide your Google account and password or Apple ID and password.
Login: Account (email, Google account, or Apple account) and account password.
Lawful Basis for Processing Personal Data: performance of our contract with you and otherwise provide you with our services.
If you do not consent to us processing the aforementioned personal data, we will be unable to provide you with the services of this product.

(2) Measuring Fist Width
We require you to provide your fist width to estimate food portions.
Information collected: fist width.
You may choose to measure your fist width by taking a photo using the device's built-in measuring app. If you use the measuring app, it will require access to your device's camera permission. You may also choose not to use the measuring app and directly enter your fist width; this does not affect your use of this App's functions.
Lawful Basis for Processing Personal Data: performance of our contract with you and otherwise provide you with our services and your consent (for accessing to your device's camera permission when you choose to use built-in measuring app).

(3) Completing Your Basic Information
We require you to provide your height, weight, age, and gender to create a dietary plan.
Information collected: height, weight, age, and gender.
Lawful Basis for Processing Personal Data: performance of our contract with you and otherwise provide you with our services.

(4) Completing Personal Exercise Habits
We require you to provide your daily step count, weekly exercise frequency, and calories burned per workout to create a dietary plan.
Information collected: daily step count, weekly exercise frequency, and calories burned per workout.
Lawful Basis for Processing Personal Data: performance of our contract with you and otherwise provide you with our services.

(5) Recording Daily Diet
We require you to take photos to collect information about your daily meals and snacks. When taking photos, you need to include your fist in the picture with the food.
Information collected: Fist width and dietary information.
Permissions required: camera permission or photo library permission.
Lawful Basis for Processing Personal Data: your consent.
If you do not consent to us processing the aforementioned personal data, we will be unable to provide you with this specific function, but this will not affect your use of other functions.

(6) Nutrition Heatmap
We require to use your recorded daily diet to generate a nutrition heatmap. You can export the nutrition heatmap.
Permissions required: storage permission is required to export the nutrition heatmap.
Lawful Basis for Processing Personal Data: your consent.
If you do not consent to us processing the aforementioned personal data, we will be unable to provide you with this extended function, but this will not affect your use of other basic functions.

(7) Membership Subscription
If you choose to subscribe to membership, we collect your Apple ID and subscription period.
Lawful Basis for Processing Personal Data: your consent.
If you do not consent to us processing the aforementioned personal data, we will be unable to provide you with this extended function, but this will not affect your use of other basic functions.

(8) Uploading/Changing Nickname and Profile Picture
Permissions required: If you upload/change your profile picture, photo library permission is required.
Lawful Basis for Processing Personal Data: your consent.
If you do not consent to us processing the aforementioned personal data, we will be unable to provide you with this function, but this will not affect your use of other functions.

(9) Providing Feedback or Suggestions to us
We require you to provide an email address to send us feedback or suggestions.
Information collected: Email address.
Lawful Basis for Processing Personal Data: your consent.
If you do not consent to us processing the aforementioned personal data, we will be unable to provide you with this extended function, but this will not affect your use of other basic functions.

4. Cookies and Similar Technologies

We use cookies and similar technologies, such as web beacons, log files, scripts, and ETags (collectively “Cookies”), to improve your user experience. A cookie is a small data file that is stored on your device so we can provide specific features and functions for you.

(1) Cookies
To ensure normal functioning of the website, improve the user experience, and recommend contents that may interest you, we will store cookies, Flash cookies, or other local storage that usually contain identifiers, site names, and some numbers and characters provided by your browsers (collectively “Cookies”) on your computer or mobile device. With these Cookies, our website is able to store data about your preferences or the products and/or services. If your mobile device or browser allows, you can set to what extent you accept Cookies or block Cookies, but you may be unable to use our products and/or services safely under certain circumstances and need to change the user settings every time you use this App.

(2) Similar technologies
In addition to Cookies, we may also use other similar technologies on our website such as web beacons, pixel tags, and ETags. For example, when you receive an email from us, it may contain a click-through URL that links to our website. If you click the link, we will track your visit to help us learn about your preferences for product and services and improve our customer service. A web beacon is a transparent graphic image embedded in a website or an email. We use pixel tags in emails to find out whether an email has been opened. You can unsubscribe from our mailing list at any time if you do not want to be tracked in this manner.
An entity tag (ETag) is an HTTP header transferred between Internet browsers and Internet servers and can be used as a substitute of Cookies. ETags help lower server load, improve service efficiency, and reduce resource and energy consumption. Besides, we can use ETags to record your identity so we can better understand and improve our products and services. Most browsers allow clearing the browser cache, which can be done in the browser settings. Note that disabling ETags may prevent you from having the optimal experience in your use of the products and/or services.

5. How We Protect and Retain Your Personal Data

According to the purchase contract that we have entered into with you, your personal data may be processed on servers out of your place of residence. However, personal data that we collect and generate for our operations will be stored in [China] in accordance with the applicable laws and regulations. Regardless of our server locations, we will take appropriate steps to protect your rights and interests according to this Policy.

In principle, we retain the personal data we collect from you when we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with website legal, tax, or accounting requirements). When we have no ongoing legitimate business need to process your personal data, we will either delete or anonymize your personal data. If this is not possible, we will use pseudonymization and/or store the data securely, and isolate it from any further processing until deletion or pseudonymization is possible.

We will implement administrative and technical measures, such as access control, encryption, and staff training, to strengthen data security and protect your personal data against destruction, damage, loss, and unauthorized access, use, disclosure, and alteration, or any other illegal processing. While no one can guarantee absolute security, in the event of a personal data security incident, we will inform you of the following information according to laws and regulations: basic information and possible impact of the incident, actions that we have taken or will take, and suggestions for defending against and mitigating the risks. We will make every effort to promptly inform you via phone calls, emails, and push notifications, or post a notice on our official website under special circumstances.

Contact us immediately if you realize or have reasons to believe that your personal data is lost, stolen, abused, or otherwise compromised, or if there is a breach or suspected breach of personal data security.

6. How We Disclose Personal Data

We will disclose your personal data with the following third parties under the following circumstances only when necessary.

  1. Third parties that provide support for the services, including partners for large language model API, analytics and tracking, user registration and login, etc., and cloud service providers that process the information specified in this Policy on their servers to provide services and support-related communications. All companies providing services to us are prohibited from retaining, using, or disclosing your personal data for any purpose other than providing the services to us.
  2. Share with our affiliates who provide services and process your personal data around the world. All our affiliates must use your personal data in accordance with this Policy.
  3. Share with supervisory, judicial, and law enforcement authorities and other third parties to ensure safety, security, and law compliance. The law may require us to disclose your data to authorities under certain circumstances, for example, in order to comply with legal obligations or process, execute our terms, handle problems related to safety or fraud, or protect our users. According to the terms of valid legal process, such as subpoenas, court orders, or warrants, such disclosure may occur with or without your consent or awareness. Terms of legal process normally forbid us to notify you of any such disclosure. When the government agencies do not provide subpoenas, court orders, or warrants needed, in order to respond to their requirements for data disclosure, we may ask for your consent. We may also disclose your personal data for the following purposes: protecting the rights, properties, or safety of ours, our users', third parties' or the public's according to legal requirements or consent (exchanging information with other companies and organizations to prevent fraud and reduce credit risks).
  4. Share with third parties who acquire all or the majority of our business. We may disclose your data to a third party under the following circumstances:
    • In case of the sale, transfer, acquisition, merger, or restructuring of any part of our business, the merger with or acquisition of any other business, or form a joint venture with any other business, we may disclose your data to buyers, the new owners, or other third parties involved in our business changes; or
    • In case of the sale or transfer of any of our assets, we may sell your data as part of the assets and transfer the data to any potential buyers, the new owners, or other third parties involved in such sales or transfer.
  5. Share with third-party SDK providers. To ensure that you can use all the features and services of this App, we will embed SDKs or similar applications from authorized partners as listed below:
    Application Name Third Party Name Data Collected Purpose Data Processing Privacy Policy of Third Party
    RevenueCat Managing Services for User Subscriptions RevenueCat, Inc. User subscription information (purchase status, subscription ID, product ID, transaction receipts, etc.) Managing user subscriptions, verifying purchase status, providing paid features Purchase data is sent to RevenueCat servers via SDK or API for verification and storage; does not include sensitive user identity information https://www.revenuecat.com/privacy/
    We will carry out strict security monitoring of our authorized partners' APIs and SDKs which have access to your personal data. We will establish strict agreements on data protection measures with our authorized partners to ensure that they will collect and process your personal data in accordance with the agreements and regulations of this Policy.

7. International Transfers of Your Personal Data

To facilitate the operation and maintenance of this App, our authorized service providers may access your personal data remotely in countries or regions (including China, United States) other than where you live. The data protection laws in these countries or regions may differ from the laws applicable to your country or region of habitual residence.

When we transfer your personal data outside of your country of residence, we do so in accordance with applicable law and take appropriate steps to ensure your information is protected. However, please note that while outside of the jurisdiction in which you reside, your personal data will be subject to applicable local laws, which might permit foreign governments, courts, law enforcement, or regulatory agencies to access your information in certain circumstances.

By using the services and/or sharing your personal data with this App, you are informed that your personal data may be transferred to countries outside of your country of residence.

8. Your Rights

This section explains the specific legal rights of users in certain jurisdictions and applies to users in relevant jurisdictions. If you are not located in the relevant jurisdictions, refer to the section “Supplementary Terms for Certain Jurisdictions” to learn what rights you have and how to exercise your rights.

You have the right to access your personal data in our possession and be informed of how we use the data and who we share the data with.

Right to Data Portability
You have the right to receive a copy of your personal data we process, including any personal data we process with your consent or in accordance with the contracts between you and us, such as customer support contracts. Refer to the section “How We Use Your Personal Data” for details. You have the right to receive such personal data in a structured, commonly used, and machine-readable format. Except certain special circumstances, you also have the right to require us to transfer such personal data to another party, and we will provide further information for you at your request.
If you need us to transfer such personal data to a third party, ensure that you provide us with the detailed information of the third party in your request. Note that we can only transfer the data to the third party where this is technically feasible. We may be unable to provide you with such personal data if this action impairs the rights of others, for example, if providing your personal data in our possession for you will disclose the information of other people, our business secrets, or intellectual property.

Right to Rectification
You can log in to this App and update your account information anytime. If you believe that your personal data in our possession is inaccurate or incomplete and shall be rectified, you have the right to request correction or supplementation. You can update and supplement personal data such as your nickname, profile picture, nutrition goals, and fist width through the “My” section within this App.

Right to Deletion
You have the right to delete your account by yourself and require us to delete your personal data that we store. You may delete your personal data by accessing the “Delete Account” option within the “Me” section of this App, or by submitting a deletion request to us through the contact details provided in this Privacy Policy.
Note that the account cannot be recovered once deleted. We may retain certain data to meet legal requirements, for security purposes, or after anonymizing it. We will inform you if we need to retain your personal data for legitimate reasons stipulated by relevant data protection laws, for example, for defense of legal claims.
Please note that after you delete information from our services, we may not immediately remove the corresponding information from our backup systems, but will delete or anonymize such information when the backup is updated. If the retention period required by laws or administrative regulations has not expired, or if it is technically difficult to delete the personal data, we will cease all processing activities except for storage and implementing necessary security safeguards.

Right to Restriction of Processing
Under certain circumstances, you have the right to require us to stop processing your personal data in our possession and only store it. Note that if we have a valid reason to process your personal data according to relevant data protection laws, for example, for defense of legal claims or protecting other people, we can process the data again. As stated above, if we agree to stop processing your personal data, we will make every effort to inform any third parties to whom the data is disclosed and require them to stop the processing.

Right to Consent Withdrawal
Some of our data processing activities may require your consent. You can withdraw your consent anytime, but it does not affect the data processing activities performed before the withdrawal or any other existing legal grounds of relevant activities.
While you are free to deny or withdraw your consent for processing of your personal data, we may be unable to provide services as expected in such cases.

Right to Object
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data if it is based on our legitimate rights and interests rather than legal obligations. Upon your objection, we will no longer process your personal data unless we have compelling and overriding grounds for the processing or the data is needed for the establishment, exercise, or defense of legal claims.
If you prefer that we do not process your personal data for marketing activities, you can send an email to hi@anyreceipt.ai to make the change.

Right to Lodge a Complaint and Take Legal Actions
If you need to complain about the way we process your personal data, do not hesitate to contact us, and we will respond to your request as soon as possible. If you believe that we have infringed relevant data protection laws, you can lodge a complaint with a data protection authority in the country or region where you live or work.
If we infringe any of your rights when processing your personal data, you also have the right to take legal actions.

Announcement
We may send announcements or other administrative notices to you when we believe it is necessary, for example, when we temporarily block access to the service for maintenance, safety, or privacy issues. You cannot opt out of receiving such service-related announcements because they are not intended for marketing.

9. How We Protect Children's Personal Data

Our products and services are primarily for adults. We will not collect the personal data of children under 16 without the consent of their parents or holders of parental responsibility. For the children's personal data that we collect with parental consent, we will only use or publicly disclose such data with the explicit consent of the parents or holders of parental responsibility and in accordance with related laws and regulations.

If we find that we have collected children's personal data without the prior consent of verifiable parents or holders of parental responsibility, we will take measures to delete the data as soon as possible.

10. How We Update This Policy

We may update this Policy from time to time. When updating this Policy, we will post the latest version at a noticeable place on this App. When making significant changes to this Policy, we will inform you in a more noticeable way such as pop-up windows.

11. How to Contact Us

If you have any suggestions or questions about this Policy or any requests and questions about your personal data, you may contact us by the following methods. In general, we will respond within 30 days.

Contact information:

12. Supplementary Terms for Certain Jurisdictions

The laws of some jurisdictions provide additional terms on service users, which are described in this section. If you are a user in one of the following jurisdictions, in addition to the above terms specified in this Policy, the terms specified under the name of your jurisdiction also apply to you. In case of any conflict, the supplementary terms under the name of your jurisdiction shall prevail.

California
This section applies to California residents covered by the California Consumer Privacy Act (CCPA).
The CCPA defines a “sale” as the disclosure of personal data for monetary or other valuable consideration. We does not sell and has not, within the last 12 months, sold personal data (including sensitive personal data). Furthermore, we have no actual knowledge that we sell or share (for purposes of cross-context behavioral advertising) personal data, including sensitive personal data, of minors under 16 years of age.

France
Your Rights
Instructions on Processing Your Personal Data After Your Death You have the right to give us general or specific instructions on the retention, deletion, and dissemination of your personal data after your death. Specific instructions only apply to the processing activities mentioned, and we must obtain your express consent before implementing these instructions.
You can modify or revoke the instructions at any time.
You can designate a person to implement your instructions. If you pass away, we will inform the person designated of your instructions and he/she has the right to require us to implement such instructions. If you have not designated a person to implement your instructions, or unless otherwise specified, if the person designated passes away, his/her successor has the right to be informed of your instructions and require us to implement such instructions. If you want to give such instructions, contact us through our email.