1. Scope and Operator
This policy applies to the BiuBill iPhone and Apple Watch apps. The personal information handler is Hangzhou Tutu Intelligent Technology Co., Ltd. (杭州途图智能科技有限公司), whose registered address is Room 420, No. 798 Shenhua Road, Sandun Town, Xihu District, Hangzhou, Zhejiang, China.
BiuBill prioritizes local processing, clear purposes, and use of only the information necessary. It does not create BiuBill user accounts or collect phone numbers or SMS verification codes. Apple services are governed by Apple’s own policies.
2. Information Processed Locally
First launch, Pro trial, paywall, purchase results, restoration, and product ID, type, localized price, currency, and feature source are retained on device for up to 90 days. Event details are only stored locally or exported by you, without receipts, Apple Account identifiers, or ledger content. Diagnostic and error-report uploads are disabled in this release mode.
The nickname, avatar, transaction amounts and categories, dates, notes, assets, budgets, currency preferences, search criteria, speech transcripts, recognized image text, and app settings you create are stored on the current device. They are used for local entry, search, statistics, reports, trend insights, and import and export.
Face ID and device passcode verification are handled solely by the operating system. BiuBill does not receive your biometric templates or device passcode.
3. Optional System and Online Services
The product website and online help open on soroute.cn in your browser only when you choose their links. When you open Updates & Announcements or tap Retry, the app requests public content from our website without a request body or any transactions, amounts, notes, audio, transcripts, images, account identifiers, or diagnostic data. Announcement requests do not persist cached content or use cookies or saved login credentials. The website receives the IP address, access time, request path, and client request information needed to serve pages and announcements, protect the service, and investigate failures. Necessary server access logs support service operation and troubleshooting and are managed under the site’s operational log rotation and cleanup policies. The app does not preload content or check for updates in the background. Diagnostic and error-report uploads are disabled in this release mode; using the website or announcements does not enable them.
Microphone and speech recognition permissions are requested only when you choose voice entry or grant access from the app’s settings, and recognition is required to run on the device. If on-device recognition is unavailable for the selected language, you are prompted to use manual entry.
Camera access is requested only when you choose to scan a bill with the camera or grant access from the app’s settings. Captured bill images are processed on this device and are not saved to your photo library. Photos uses the system photo picker to access only the avatar, bill images, or investment screenshots you select, without requesting access to your entire photo library.
Vision recognizes bill images and investment screenshots on this device. BiuBill does not save the original images. Confirmed bill text and structured results, investment account information, and asset amounts are stored locally.
StoreKit and the App Store handle Pro products and transaction status. BiuBill does not receive full bank card details. To distinguish local Pro trials by the current Apple Account and device, the app reads the app download transaction identifier provided by AppTransaction and stores it in the device’s Keychain and local storage. This identifier never leaves the device and is not used for advertising or behavioral tracking. Apple Watch works only with the iPhone paired through the system. You enter and save exchange rates locally. You can revoke system permissions in the Settings app.
The core ledger, amounts, categories, and notes stay on this device and are not automatically uploaded when online features are enabled. Only when occasional online services are enabled, a valid HTTPS service address is configured, and you have accepted the current privacy policy does iPhone automatically send the diagnostics and feature errors described in Section 4 over an encrypted connection. The operator’s service forwards them to uf@soroute.cn. Nothing is sent when the service is disabled, a valid address is not configured, or you have not accepted the current policy. Core transaction entry and search remain available without a network connection.
4. Local Diagnostics, Personalization, and Feedback
Local diagnostics verify features, investigate issues, and improve error messages by aggregating daily feature counts, duration ranges, and correction flags. They contain no transaction details and are kept for up to 90 days. Up to 120 voice categorization preferences are learned and used only on this device and are not sent with diagnostics or error reports.
Online reports include only the report format version, a random identifier generated for each report, report type and time, app version and build, operating system version, reporting period, and either diagnostic feature event counts or predefined feature and error categories. The random report identifier is not a stable device identifier. Reports exclude transactions, amounts, notes, search text, audio, transcripts, images, accounts, voice categorization preferences, and stable device identifiers. They are not used for advertising or cross-app tracking.
Diagnostics summarize feature counts from the previous complete UTC day, with at most one send attempt per day when data is available; the full local history is not sent. The same error for the same feature is reported at most once per day, with a total of five feature error reports per day. Failed sends are not retried automatically or queued for later delivery. The operator receives these reports at uf@soroute.cn solely to alert the development team to errors, investigate feature failures, and inform feature improvements and future app updates. Contact this address with requests to access or delete reports.
When you contact customer support, you choose the content and attachments of your email. Please do not include transaction, account, or payment information unrelated to the issue.
5. Local Storage and Data Transfer
Local information is generally retained until you modify or clear it, uninstall the app, or the system clears it. Deleted transactions move to an on-device list for up to 7 days after deletion, with at most 100 records retained. Settings > Undo Delete lets you restore or permanently delete them earlier. Expired records and the oldest records over the limit are automatically removed. Device transfer uses CSV export and import; the deleted list is not included in CSV exports.
BiuBill does not sell personal information or integrate advertising or user behavior analytics platforms.
6. Your Rights, Security, and Minors
You can edit your local profile, import, export, or delete transactions, and revoke permissions in the Settings app. View the sending conditions and data scope for diagnostics and feature errors in Data & Security > Occasional Online Services. Nothing is sent when the service is disabled or unconfigured. Contact uf@soroute.cn for inquiries or to exercise personal information rights relating to online reports.
We protect information through measures including device access controls, file protection, minimum necessary permissions, and local processing. Please secure your device, exported files, and Apple Account. If a security incident occurs, we will take remedial, notification, and reporting measures as required by law.
Users under 18 should use the app under a guardian’s guidance and handle transactions, diagnostic reports, and feedback attachments with care.
7. Policy Updates and Contact
When this policy is updated because of changes to features, services, or legal requirements, we will show the effective date. For material changes to processing purposes, information types, or user rights, we will provide a prominent notice within the app and obtain any renewed consent required.
Privacy inquiries and customer support: cs@soroute.cn
Complaints and personal information appeals: uf@soroute.cn
Personal information handler: Hangzhou Tutu Intelligent Technology Co., Ltd. (杭州途图智能科技有限公司)
Address: Room 420, No. 798 Shenhua Road, Sandun Town, Xihu District, Hangzhou, Zhejiang, China