Privacy Policy
Basic records are stored on your device. AI organization is your choice; iCloud sync is off by default and can continue automatically after you enable it.
Service provider and contact
DINKI and this website are provided by 成都菠萝无限网络技术有限公司. For questions about your personal information, corrections, deletion, withdrawal of consent or complaints, contact metrocpp@outlook.com. We will verify the necessary information and handle your request in accordance with applicable law. Please do not send passwords, verification codes or unnecessary information about other people by email.
Records on your device
The names, relationships, birthdays, preferences, notes, important dates and remarks you enter, together with the photos you select and characters and videos you save, are stored on your device. We do not read your contacts or scan your entire photo library. Basic records do not require sign-in or AI; without a network connection, you can still save your original words and view existing records. iCloud sync is off by default when you first use the app. Signing in does not, by itself, mean that you consent to enabling sync. After signing in to DINKI, you can review the account data to be synced in “iCloud Sync & Backup” and choose to enable it. Once enabled, changes can sync automatically when the current device’s network, system and account conditions allow. Sync can resume when you return to a library for which sync was previously enabled. Turning sync off does not delete data already saved in the cloud. Apple device backups and iCloud Photos are controlled separately in your system settings. When sync is enabled, the current DINKI account’s personal details, relationships, notes, important dates and saved photos, characters and videos are encrypted and stored in the Apple CloudKit private database for your current iCloud account. Data is kept separate by DINKI account, iCloud identity and service environment, and is not automatically merged into another DINKI account. Yaya chat history, sign-in sessions and creation tasks in progress are not included in synced data or exported backups. Membership, Sunlight and purchase records are managed separately on the server; restoring a file does not increase or roll back those records. You can also choose to export an encrypted .dinkibackup file and use the system interface to select where to save or share it. If you save it to iCloud Drive or another service, that location is managed by the service you choose. Before restoration, the file is verified and differences are shown for you to confirm the merge. Exporting and restoring files requires signing in to the original DINKI account and verifying its data key, which may require an internet connection. iCloud data and backup files are encrypted with an account key. The DINKI service keeps a protected, encrypted copy of that key to support restoration for a verified account, so this is not end-to-end encryption. A backup file should not be treated as an independent copy that can always be restored without the original account.
Sign in with Apple
When you choose to sign in with Apple, Apple handles your authentication. The DINKI service receives the authorization code, identity token and anti-replay information needed to establish your account and sign-in session. We store a hash of the Apple user identifier, a DINKI account identifier, account status, creation time and session verification information. We do not receive your Apple password or Face ID data. Sign-in tokens are stored securely in the device Keychain. Server sessions are valid for up to 30 days; you must sign in again after expiry or revocation. Signing out revokes the current session without deleting people or records stored on your device.
AI organization and third-party processing
“Use AI to organize” is unchecked by default and is a membership feature. After you give explicit consent before sending, the text of the current note is sent through the DINKI service to Alibaba Cloud Model Studio to generate an editable title and description. Other notes, photos and audio recordings are not sent for this purpose. Your original text is retained, and you review the organized result before saving it. “Ask Yaya” requires sign-in. After you give explicit consent before sending, your current question, up to 12 recent successful chat exchanges, necessary details about the current person, and some of their notes and important dates are sent through the DINKI service to Alibaba Cloud Model Studio. The server also provides your current membership status and Sunlight balance for product assistance. Records about other people, photos and audio recordings are not sent, and answers are not automatically saved as notes. Text submitted for organization is not written to DINKI’s business database; chat history is stored on your device. To allow retries after a connection loss without counting them twice, Yaya’s response is temporarily stored encrypted on the server for 1 hour and can be retrieved only by the same account. It becomes unreadable after expiry and is automatically cleaned up. The question text is not separately stored for this purpose. Deduplication identifiers and usage counts are stored separately to manage a total of 10 free trial chats per account and membership access. Failed requests do not use a trial chat; member chats do not consume free trial chats or Sunlight. Character and motion creation is explained before sending and requires explicit consent. The photo, description or existing character you select is sent through DINKI’s cloud service to Alibaba Cloud Model Studio and models accessed through Pixnova for visual analysis, prompt processing, image generation or video generation. Inputs and results are stored in private cloud storage isolated by account, and a cloud worker processes transparent backgrounds. Other content in your photo library is not automatically uploaded. Third parties may retain security logs and necessary processing records under their policies. We do not promise that third parties retain nothing or make no use of data for service operations. Submit only necessary information and avoid unrelated sensitive information. Data may be processed outside China; processing locations and storage settings depend on the services actually connected, and we do not promise a fixed location within China. You may decline and continue using local records, your original words or built-in characters. We will seek consent again for a new processing scope or significant changes.
Service infrastructure and processing locations
DINKI uses Cloudflare Workers for sign-in, business requests and AI forwarding. Cloudflare D1 stores accounts, transactions, Sunlight ledger entries, task status, legacy backup manifests and protected, encrypted account data keys. Private Cloudflare R2 storage holds legacy server backups and media files, and a cloud worker handles media processing. Optional iCloud sync uses Apple CloudKit private cloud storage; the DINKI gateway handles account verification and issuing data keys. iCloud and legacy server backups are different storage mechanisms. The official website is hosted by Vercel. Service providers process IP addresses, request times and necessary network information under their security and operational rules. Cloudflare and Vercel use global infrastructure. Alibaba Cloud and Pixnova process data according to the models and connections actually configured, and data may be processed outside China. We make no unverified promises of fixed processing locations or zero retention by third parties. The app has no advertising tracking or PostHog. Necessary orders, membership and Sunlight accounting are handled for business purposes; this version does not collect optional usage analytics.
Usage analytics
This version has removed “Help improve DINKI,” stopped optional feature usage analytics and cleared the local queue of unsent events. Usage details received from older versions are cleaned up after 30 days under the original rules. The app does not integrate PostHog or advertising tracking. Order, membership and Sunlight ledger records are necessary for providing the service and are handled separately.
Device permissions and calendars
Photos: we receive only the photos you actively select. Microphone and speech recognition: after you tap voice input and grant permission, speech is converted on your device into editable text. DINKI does not save audio recording files. You can type instead if your device does not support this feature. Notifications: these are used for important-date reminders you enable and can be turned off in system settings. Calendar: after saving an important date, you can choose to open the system calendar editor to review and save an event. This does not give DINKI access to read your entire calendar. Once saved to the system calendar, the event is managed by the calendar account you selected and may sync according to that account’s settings. Changes or deletions in DINKI do not automatically update events already added to your calendar.
Retention, deletion and security
While your account exists, we retain account, purchase, entitlement and necessary business information to provide the corresponding features. People, notes, important dates, chats and saved images and videos are stored on your device. See “Records on your device” for the scope of optional iCloud sync and file backups. After you delete a person or an important date, retained recovery information can be restored from “Deleted records” for 30 days. You can also choose to delete it permanently sooner. After the period expires, the app clears recovery information during subsequent processing. Updating and cleaning up cloud copies requires successful sync. Cloud cleanup may remain incomplete while sync is off, the device is offline or a service is unavailable. Backups uploaded to DINKI’s servers by older versions remain stored separately by account with server-managed encryption, which is not end-to-end encryption. Changes to the current interface do not automatically delete those backups. You can delete your account under “Me — Account Management — Delete account” by authenticating with Apple again. Deletion revokes sign-in sessions and Apple authorization, deletes the account data key from DINKI’s servers, and schedules cleanup of legacy server backups and media created through models. Failed physical deletion is retried; not all objects are necessarily deleted immediately. This does not automatically delete old encrypted data in your iCloud account or backup files you have exported. Once the original key is deleted, you can no longer obtain that key through DINKI to restore this data. A newly registered account does not inherit, overwrite or clean up the old iCloud storage. Before deleting your account, address any data you still need to keep or remove. People, records, chats, photos and videos on your device are retained as a copy belonging to the original account. They are not automatically transferred to a guest or another account. Retention does not mean that a new account can directly regain access. Copies already saved or managed by other services do not automatically disappear when you delete your account. Orders, Sunlight ledger entries, task status and necessary audit metadata are handled separately according to business, security and applicable legal requirements. Data already received by third-party models is handled under their policies; we do not promise that all of it is erased immediately. Deleting your account does not cancel Apple subscriptions for you. You must cancel them in Apple’s subscription settings.
Other people and minors
DINKI is primarily intended for adults to record important things about their relationships. When you record or upload another person’s personal information, photos or experiences, you should have the necessary authorization or another lawful basis and respect their wishes. For personal information about children under 14, you should obtain a guardian’s consent and process only what is necessary. Do not publish private information about children, schools or other people in public discussion areas.
External links, purchases and updates
When you open a Xiaohongshu profile, Apple subscription management or other external links, the relevant platform handles data under its own rules. When sending feedback, provide only the information needed to identify the issue. Availability, regional prices, benefits and rules for membership and Sunlight products are shown on the purchase screen in the current version. Apple handles payment information. DINKI processes transaction identifiers, products, validity periods, refunds and account associations needed to verify purchases and restore entitlements. We do not receive complete bank card details. The update date for this policy is shown at the top of the page. We will notify you again and obtain necessary consent for new processing purposes, data categories or significant changes.