Legal & privacy
Privacy Policy
This policy explains how Loyal Orange handles personal information across mobile, web, and desktop. Guest content stays on your device; data reaches our servers only after you sign in and enable cloud sync.
1. Information we process
We may process your email, password hash, account and session identifiers, plus photos, quotes, reminders, and settings you create. Security records may include login time and result, IP address, approximate region, device name, and browser information.
2. Purposes and service providers
We use data for authentication, sync, image storage, reminders, support, transaction verification, and security. We do not sell personal data, serve behavioral ads, or track you across apps. Object-storage providers, payment providers, and IP-location services process only what is needed to provide their services.
3. Retention and security
Passwords are stored only as secure hashes, traffic uses HTTPS, and cloud images use short-lived signed URLs. Security audits are normally kept for no more than 180 days. Account deletion removes sessions, synced content, and cloud media; legally required transaction records and rolling backups may remain under restricted access for the required period.
4. Your choices
You can access, correct, or permanently delete your account in the app, or contact support@skstudio.cn. Deleting a Loyal Orange account does not cancel subscriptions managed by an app store or another provider.
5. Children and changes
Loyal Orange is not intended for children under 13. Users below the local age of independent consent should use it with a guardian’s permission. Material policy changes will be posted here.
6. Local storage and cookies
The web client uses IndexedDB, with local storage as a fallback, to keep guest content and local settings on your device. These storage technologies support the core local-first experience. We do not use advertising cookies or cross-app tracking.
7. Service providers and transfers
When cloud features are enabled, photos may be sent to Tencent Cloud COS through short-lived signed upload URLs. Login security may use an IP-location provider when configured, and payment providers may process purchase data when a paid channel is enabled. These providers may process only the data needed for their service and must protect it consistently with this policy.