Pali Helper Privacy Policy
1. Scope and contact
This policy covers the Pali Helper app for Apple platforms provided by THINKERY (七英园), its donation-card verification service, and this policy page. Other platforms, website guestbook features, and separate website payment services are outside this policy’s scope. For privacy questions or requests to access, correct, or delete information, contact help@7thinkery.com.
2. Learning data on your device
Reading positions, study plans, check-ins, notes, citations, attachments, downloaded texts and dictionaries, and display preferences are primarily stored on your device. The app has no independent user registration or login system and does not upload this learning data to our servers. System backups and content you choose to export or share are handled by the system or service you select. We do not embed third-party advertising or behavioral analytics SDKs, track you for advertising, or sell personal information.
3. Optional AI translation
Only when you initiate an AI request, your device sends the selected text, your instructions, necessary system prompts, and model identifier to your selected provider: DeepSeek, Google Gemini, or OpenAI. Your API key authenticates the request. Keys are stored in the device’s system Keychain and sent to the relevant provider when used, not to THINKERY’s servers. Requests do not pass through our own AI relay server. Providers receive request content and connection information and process and retain it under their policies. Do not submit sensitive content you do not want that provider to process. You can stop using AI and delete your keys in Me → AI Translation.
4. Apple purchases and donation cards
Apple processes purchases; we do not receive payment-card details or your Apple ID password. The app sends Apple-signed transaction proofs over HTTPS to our CloudBase service to verify payments. The service stores PH card numbers, internal transaction identifiers, product identifiers, transaction environment, purchase and signature timestamps, verification time, revocation status, and artwork storage identifiers and hashes. These support card issuance, restoration, verification, duplicate prevention, and refunds. Signed proofs are queued locally until uploaded successfully for retry purposes; our server does not retain complete proofs as long-term database fields. Tencent Cloud provides the CloudBase infrastructure in Shanghai, China. Cross-device restoration uses Apple transaction history for the same App Store account.
5. Public verification and network requests
Anyone with a complete PH card number can request its minimal verification status and associated artwork. Public responses do not expose your Apple ID, name, or full transaction identifier. Keep your card number private. When you access our pages or services, download catalogs or resources, use AI, or follow external links, the relevant servers receive necessary connection information such as IP address, request time, resource path, and response status for delivery, security, and troubleshooting. Text resources may be hosted by GitHub or providers specified in resource manifests. We do not attach your reading notes to download requests.
6. Permissions, saving, and clipboard
Saving a card to Photos requests add-only photo access, not access to your entire photo library. On Mac, you choose the file destination. After you select Save image & copy PH card number and saving succeeds, the app writes that card number to the system clipboard; it does not read clipboard history. File selection, export, and sharing process the content you choose. You may revoke photo and other permissions in system settings.
7. Sharing, safeguards, and third parties
Apple provides purchases and restoration. Tencent Cloud CloudBase provides card databases, storage, and hosting. AI providers process requests you initiate, and resource hosts process downloads. We limit sharing to what these functions require and protect data through HTTPS, system Keychain storage, and server-side database access controls. Providers acting on our behalf are required to protect data under applicable data-protection obligations. Independent third-party services are also governed by their own terms and privacy policies and may process information outside your region.
8. Retention, deletion, and your choices
Local learning data remains until you delete the relevant content or app data. System backups and Keychain entries may persist separately; manage them through the relevant settings. AI keys can be deleted in the app’s AI settings. Card records remain for as long as needed for restoration, verification, replay prevention, and refund handling; there is currently no fixed-date automatic purge. Email us to request access, correction, or deletion of server-side card records. We verify authority and process requests subject to necessary security, dispute-resolution, and legal obligations, explaining any restrictions. Deleting records may prevent restoration or verification; valid purchase proofs or later Apple notifications may trigger necessary processing again. Do not post keys, complete transaction proofs, or card numbers in public messages. Cancel subscriptions through Apple’s subscription management; deleting the app or requesting data deletion does not cancel a subscription.
9. Minors and updates
Minors should use purchases and third-party AI with a parent or guardian’s guidance. Guardians may contact the email above about privacy requests. We update this page and its effective date when functionality or processing changes, and obtain additional consent before processing that requires it.