Privacy Policy

Private by design, specific in practice

This Privacy Policy describes information handling in Jexim · RouteProof, an on-device venue mapping and route-planning studio. It covers maps, route rules, field observations, optional Route Coin purchases and local exports. The app has no in-app registration, login, public community, advertising or behavioral analytics feature.

Jexim does not upload your venue content to an app-operated server or use it for remote model training. Planning and media processing take place on your device. Apple’s purchase services and any destination or file provider you choose can handle information separately as described below. This policy does not cover their independent practices.

What is handled

Venue and guide content. Venue titles, descriptions, floor definitions, reference photos, points, passage geometry, directions, measurements, costs, route constraints, required and optional stops, scenarios, version review choices, guide notes and export history are retained in local project records.

Field observations. Images, video clips, audio recordings, titles, notes, creation times, media duration, local asset identifiers and optional links to a venue point are stored in the venue’s field journal. Media can contain a person’s likeness, voice or other personal details depending on what you choose to capture. Jexim does not perform face recognition, identity verification, speech transcription or location extraction as a feature. Original video files may retain metadata already embedded by their source. Sharing an original can disclose that information; Jexim does not promise metadata removal.

Wallet and optional results. The local wallet stores a randomly generated installation token, balance, purchase intentions, verified transaction identifiers, product identifiers, delivered coin quantities and saved printable results with their creation time, venue identifier and revision. A field handoff brief can contain your observation titles and notes. Its original media is not embedded in that brief.

Preferences and working files. Appearance, measurement defaults, editing and guide preferences, current project selection, temporary import copies, preview images and generated export files support operation. The operating system may separately collect diagnostics under your device settings. Jexim includes no analytics SDK that sends usage events to an app-operated service.

Support correspondence. If you email Jexim, the message, address and information you choose to include are disclosed through your email provider to the receiving mailbox. No email is sent automatically. Avoid sending unnecessary personal or confidential venue information.

Why the app uses it

Content is used to render your map, solve the routes you request, compare alternatives, compose guides and keep your editable work available. Field media is used to preserve a landmark, a spoken observation or a walkthrough for later review in the same venue context. Posters and reduced reference images support local display without repeatedly decoding large media.

Wallet information is used to associate a purchase with this installation, verify and deliver coins once, reconcile unfinished orders, disclose an available balance and save the optional result you explicitly purchase. Delivery identifiers remain necessary to prevent duplicate credit. Preferences and temporary files make the selected interface, import, preview and export actions work.

The app does not use your content for advertising, cross-company tracking, data brokerage or public profiling. It does not sell or share personal information for cross-context behavioral advertising. No advertising identifier or App Tracking Transparency request is used because the app has no tracking feature.

Access starts with your action

Photos selection. The system picker provides only the images or videos you choose. The app does not request general access to browse your entire library. A chosen item is copied into app-owned storage; deleting that copy does not delete the original from Photos.

Camera. Access is requested when you choose Photograph venue. The system camera lets you capture, retake or cancel a photo. The confirmed photo is prepared locally for your review before it is attached to the journal. No camera access is requested at launch.

Microphone. Access is requested when you start recording a voice observation. The recorder provides visible timing, stop, audition, re-record, keep and discard actions. Recordings are not transcribed or uploaded. Backgrounding, audio interruptions or an unavailable input can stop the session; review the audio before saving.

Files and sharing. A system file picker grants access to the chosen media or project file. Jexim copies the material it needs and does not retain a file-provider temporary URL as a permanent source. A cloud file provider may download your chosen file under its own service terms. The app uses the system share sheet for local export and does not silently publish files.

You may decline camera or microphone access, cancel a picker or change access in iOS Settings. Map planning and file or Photos alternatives remain available as appropriate. The app does not request contacts, location, speech recognition or tracking authorization.

Where information lives

Editable projects, the journal and the wallet live in the app’s local storage. Journal media is organized by venue and stable observation identifiers. A selected file is copied and validated in a staging area before a completed observation is committed. Invalid or cancelled operations do not become saved observations. Imported images may be reduced for local display; videos retain an owned original copy.

Apple or a system backup service may include app data in a device backup according to your settings. The app does not offer its own cloud synchronization, account-based media access or cross-device wallet restoration. We do not promise that a device backup exists, that it contains all files or that lost local data can be recovered.

Your device’s operating-system protections and access controls apply. Atomic local writes reduce inconsistent saves but do not guarantee protection against loss, device compromise or every interruption. Use a device passcode and appropriate backups for important plans. The app does not promise a separate password-encrypted vault or end-to-end cloud encryption.

When information leaves the app

Apple purchases. When you buy coins, Apple handles its purchase account, payment details and transaction processing. The app submits the selected product and installation association token and receives transaction information needed for verification and delivery. It does not receive your full card number or Apple account password. Apple’s privacy policy and purchase terms apply to its processing.

Your chosen destinations. Export, Share and email can send content to a destination you select. A map backup contains editable project data and embedded reference images; field media is separate. A saved cue-card or handoff file may include route or observation text. Inspect the file and the selected recipient before sharing.

Support. If you contact the supplied address, email providers and the recipient handle that correspondence. Information voluntarily provided for support can be used to understand and respond to your request. Do not include confidential content when a description of the problem is enough.

The app itself does not send venue content to a Jexim server or to advertising, analytics or social providers. Copies managed by Apple, a cloud file provider, an email service or a share recipient may be processed in other countries under their own arrangements. Jexim does not determine or promise the location of those independent copies.

Keep, remove, recover

Venues remain on the device until you delete them or the installation data is removed. References embedded in another project or a duplicate remain in that independent copy. Export history is part of project metadata; generated local export files can be cleared in Settings. Copies saved elsewhere remain under the destination’s control.

Removed field observations move to Recently removed within the same venue. They are retained there until you restore them or explicitly delete them permanently; they are not automatically erased after a fixed number of days. Replacing media moves the previous observation to that recovery area. Deleting the venue removes its journal, including removed observations. Staging files from interrupted preparations are temporary and can be cleaned after they become stale.

The wallet retains balance, delivery records and saved paid results so it can prevent duplicate credit and reopen purchased results. Deleting a venue does not remove a paid result’s stored snapshot. Removing the app’s installation data removes the local wallet and those results and can make remaining consumable coins unrecoverable. Apple retains its independent transaction records under its policies.

Device backups, original Photos assets, source files and shared copies are not deleted by removing a local app record. Manage those copies using the relevant service or device controls. Correspondence sent to support is separate from app storage and may need to be retained while answering the request or meeting an applicable legal obligation; no fixed universal support-retention period is promised.

Your choices and privacy requests

You can inspect and edit venue information in the app, export an editable .jexim project, share field media, change permissions in Settings, remove or recover observations, delete venues and clear generated exports. Purchased printable results can be reopened and shared from Studio extras. No login or identity document is needed for these local controls.

Depending on the law that applies, you may have rights to know about or access personal information, obtain a copy, correct inaccuracies, request deletion, withdraw consent, object to certain processing or complain to a privacy authority. Exceptions and identity checks can apply. We do not deny an applicable right merely because you ask to exercise it.

California rights may include access, correction, deletion, non-discrimination and opt-out rights where the CCPA applies. This policy does not assert that every statutory business threshold is met. The app does not sell personal information or share it for cross-context behavioral advertising. There is no advertising use to disable in the app.

Where Canada’s PIPEDA, Singapore’s PDPA or Australia’s Privacy Act applies, relevant access, correction, consent, complaint and other protections remain available subject to their conditions. These references do not represent a certification or a promise that every jurisdiction’s law applies to every use.

For a request concerning information provided to Jexim outside your device, contact jexim.routeproof@163.com with the nature of the request. We may ask for proportionate information to identify the relevant correspondence and verify the request. Do not send government identity documents unless specifically necessary. Because local venue files are not uploaded to Jexim, support cannot remotely read, correct or erase your device’s private project content; use the app and device controls for that data.

You can also contact the relevant privacy regulator. This does not require you to give up another legal remedy. If support cannot address a concern immediately, the reason and available next step should be explained through the correspondence.

Respect people in the frame

Jexim is a venue-planning tool, not a social service directed at children. It does not knowingly ask children to submit personal profiles or use behavioral advertising. A parent or guardian should supervise use where needed and control purchases and permissions through available device controls.

Before photographing or recording other people, obtain any permission required in your circumstances. Limit what is recorded, avoid sensitive personal details, and consider whether a written note would accomplish the same planning task. If personal information was voluntarily sent to support concerning a child, contact Jexim to request appropriate handling.

A clear record of change

Changes to the app’s information handling may require an updated policy. The effective date identifies this version. Material changes will be communicated through an appropriate notice where required. A policy update does not by itself grant a new device permission or authorize an unrelated use of your content.

Questions about this policy or privacy requests can be sent to jexim.routeproof@163.com. The Terms of Use describe planning limits, optional coins and responsibility for shared files. Keep a copy of these documents if you need a record of the conditions that accompanied a particular version.