Privacy Policy

1. Local-first use

Without signing in, information about your houses, rooms, storage locations, items, barcodes, photos, and locally generated image features remains on your device. You can use local item-management features without providing an email address or enabling cloud sync.

Accounts, cloud sync, sharing, memberships, and network updates are optional. We receive information for those features only when you choose and use them.

2. Information we process

Camera access is used only when you take a photo or scan a barcode. Photo and file access is used only when you select, save, import, or export content. Network access is used for optional sign-in, sync, sharing, membership, version, model-update, transaction, and support features.

If you enable biometric unlock for a protected room or storage location, your device's operating system performs the face or fingerprint check. Fonala uses the success or failure result only for that unlock attempt and does not retain or upload it. We do not receive your face or fingerprint template. The protected-space preference may be included with room or location data if you enable cloud sync, but the PIN and its local verifier are not uploaded as part of that sync.

Fonala does not currently include an advertising SDK, cross-app tracking, targeted advertising, or behavioral profiling. We do not sell personal information or share it for cross-context behavioral advertising. We do not use item photos to train a general-purpose artificial-intelligence model.

3. Sources and purposes

We receive information directly from you and your device, from house members who collaborate with you, and from an app store or payment provider confirming a transaction. We use it to provide features you request, secure and maintain the service, communicate about transactions or important changes, comply with law, and establish or defend legal claims.

4. Service providers and other disclosures

We disclose only the information needed for a defined service:

• Alibaba Cloud, U.S. East (Virginia), region us-east-1: hosts the United States API at fonalaapi-global.jbnst.com and the database, object storage, and related infrastructure used by enabled cloud features.
• Email delivery: when email registration or verification is enabled, the configured delivery service processes the destination email address, verification message, delivery status, and necessary anti-abuse logs.
• Apple App Store or Google Play: if an in-app purchase is offered through either store, that store processes account and payment details under its own privacy notice; we receive the transaction evidence needed to verify and support the purchase.
• Operating-system services: camera, photo picker, file picker, and share interfaces act only when you initiate the related feature.

We may also disclose information when legally required, to protect rights and security, or as part of a business transaction with appropriate notice and safeguards. We do not disclose personal information to unrelated data brokers.

5. United States privacy rights

Depending on where you live and whether a state privacy law applies to us, you may have rights to know or access personal information, obtain a portable copy, correct inaccuracies, delete information, opt out of sale, sharing, targeted advertising, or certain profiling, limit certain uses of sensitive information, and appeal a denied request. You also have the right not to be discriminated against for exercising a privacy right.

Because we do not currently sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising, there is no such processing to opt out of. If we later engage in covered processing, we will provide required notice and controls, including honoring legally required browser or device opt-out preference signals.

You may export local content in the app, revoke permissions in device settings, or email huangliang@jbnst.com for access, correction, deletion, portability, limitation, or appeal. For the current United States release, use this email address or in-app support to request account deletion. We may verify your identity and will respond within the period required by applicable law. An authorized agent may submit a request where state law allows; we may request proof of authority and identity.

6. Retention and security

We keep personal information only as long as reasonably necessary for the stated purpose. Verification-code records are short-lived except for limited abuse-prevention evidence. Ordinary cloud content is deleted after the applicable house or account deletion process. Transaction, consent, security, and audit records may be retained where reasonably necessary or legally required, with access restricted, and then deleted or de-identified when the retention period ends.

Safeguards include HTTPS, account and house authorization, separate local account data, secure mobile credential storage, password hashing, least-privilege access, backups, and audit logging where implemented. No system is perfectly secure. We will investigate and provide legally required notices after a qualifying incident.

7. Data location and international transfers

Cloud data for the United States release is hosted in the United States through Alibaba Cloud U.S. East (Virginia), region us-east-1, using a service configuration separate from the China mainland release. If a future operational change would transfer personal information to another country, we will update this Policy, provide any notice and choices required by applicable law, and use appropriate contractual, organizational, and technical safeguards before the change applies.

8. Children

Fonala is not directed to children under 13, and we do not knowingly collect online personal information from a child under 13. If we learn that we have done so without legally valid parental consent, we will stop processing and delete it. A parent or guardian may contact us using the details below.

9. Changes to this Policy

We will keep this Policy available in the app and online. If we materially change the categories, purposes, recipients, transfer paths, or available rights, we will provide prominent notice and request new consent where required before the change applies. The version and dates at the top of this page will be updated.

10. Contact us

We aim to acknowledge verified privacy requests promptly and respond within the time required by applicable law. You may also contact the attorney general or privacy regulator in your state.