Effective date: October 20, 2026

This Privacy Policy explains how Quan Cheng (“we”) handles information when you use the Idealist mobile app and related email-link and policy pages (together, the “Service”). Idealist is currently provided without commercial or advertising purposes.

1. Information we handle

Account information

When you create an account or sign in, we process your email address and authentication credentials through Supabase Auth. Supabase manages the account password for authentication; we do not use it for advertising. Your Idealist profile may include your display name, username/handle, optional headline, and avatar.

Content you provide

We store the titles, descriptions, links, categories, and images you submit as original ideas, discoveries, or research, including drafts. If you send a suggestion or contact support, we process the message and the account details needed to respond.

• Drafts: draft posts and their media are restricted to the account that owns them.
• Published content: published posts and the public profile fields listed above are visible to other Idealist users. Published post images are delivered through time-limited signed links (currently one hour); anyone who obtains an unexpired link may be able to view that image. People may also save, screenshot, or share content they can see.
• Avatars: profile avatars are stored in a public image bucket because they are displayed on public profiles.

Interactions and guest use

We process favorites, likes or other reactions, firewood interactions, and post-view counts to operate the corresponding features. If you interact without signing in, the app creates a random, persistent viewer identifier on your device and uses it to associate guest interactions; it is not an advertising ID.

Reports, blocking, and moderation

When you report a post or author, we process the selected reason, the reported post or account identifier, and the report’s review status so the administrator can investigate. Report counts may help prioritize the manual review queue; reports do not automatically hide content. If you block an author, we store that blocking relationship to filter their content from your feeds and favorites. We also store system notices shown in the app, such as warnings, content-removal notices, or publishing restrictions, and whether you have read them.

Automated content screening

Before an Original or Discovery post is published, its title, text, and attached images are screened using OpenAI’s Moderation API. OpenAI returns moderation categories and scores. Content flagged for review stays private and is not published unless the administrator approves it. We store the screening outcome and category signals in a restricted moderation record. Research posts added by the administrator are not part of this user-submission screening flow.

Device and local app data

The app stores session information, language preference, recent sign-in email addresses, and a viewer identifier on your device. Images may also be cached locally to display them more smoothly. The sign-in screen currently offers “Remember Password” and has it selected by default. When enabled, remembered credentials and session values use iOS secure storage when available; if secure storage is unavailable, the app falls back to files in its private app storage. That fallback is not equivalent to Keychain protection. You can turn off “Remember Password,” and should do so on a shared or untrusted device.

The app does not request precise location or access contacts. When you choose a photo or use the camera, the selected image is used for the profile or post you are editing.

Technical and service data

Our infrastructure providers may receive IP address, request time, app/operating-system and runtime details, error or security logs, and other technical information needed to deliver, secure, and troubleshoot the Service. When the app checks for over-the-air updates, Expo says it may receive the device operating system and randomized update tokens; its services may also process network and diagnostic data under its own policy. Idealist does not use in-app advertising or a third-party analytics SDK.

Optional usage analytics

If you choose to allow usage analytics, Idealist collects basic events associated with your account, including completed sign-up and sign-in, draft saves, post submissions, firewood reactions, favorites, shares, and predefined categories of key app errors. We use these events to understand feature usage and diagnose service issues. Each event includes your account ID, the event type, the time recorded by our server, and, where relevant, a broad post type or fixed error category. Events do not include post IDs, post text, email addresses, post or source links, access tokens, raw error messages, or stack traces. The events are stored by Supabase, our database hosting provider, for up to 90 days and are then deleted by a daily automated cleanup. Deleting your account also deletes the events associated with it. Analytics is optional; declining or turning it off does not affect app features. You can change your choice at any time in Settings.

2. How we use information

• Create and secure accounts; verify email addresses; sign users in; and send requested password-reset or account emails.
• Store drafts, publish content, display profiles and feeds, and provide favorites, reactions, firewood, and view counts.
• Screen submitted Original and Discovery content for safety, prioritize reports for manual review, and administer warnings, content decisions, or publishing restrictions.
• Respond to user questions and suggestions, maintain the Service, investigate abuse or security issues, and fix errors.
• If you opt in, understand feature usage and diagnose service issues using the limited usage analytics described above.
• Meet legal obligations and protect the rights, safety, and security of users and the Service.

We do not sell personal information, use it for targeted advertising, or use it to build advertising profiles. Idealist currently does not provide AI generation, voice recording/transcription, investment, recharge, or payment features; we therefore do not collect voice recordings or payment-card details through those roadmap concepts.

3. When information is shared

We share information only as needed to run the Service, at your direction (for example, when you publish content), or as required by law:

• Supabase provides authentication, database, storage, and server functions, including storage of optional usage-analytics events when you consent.
• Resend delivers transactional account emails, such as confirmation and password-reset messages. It receives the recipient email address and the information needed to deliver the requested email.
• OpenAI processes the title, text, and images of Original and Discovery submissions through its Moderation API for safety screening. OpenAI says API data is not used to train or improve its models unless the customer opts in; its abuse-monitoring logs may retain API inputs, outputs, and related metadata for up to 30 days, unless a longer period is required by law or reasonably necessary to protect its services or others. See OpenAI API data controls.
• Expo / EAS delivers app updates and related technical services.
• GitHub Pages hosts the privacy and email-callback pages. When you open an email link, the browser may contact GitHub Pages and Supabase with link parameters needed to complete the callback. The static pages are not intended to run advertising or analytics; GitHub may process ordinary web-request information under its own policies.
• Apple provides the iOS operating system and App Store distribution and may process information under Apple’s own policies.

These providers process information under their own terms and privacy notices. They may use infrastructure in countries other than yours. Provider notices: Supabase, Resend, OpenAI, Expo, GitHub, and Apple.

4. Public content and security

Think carefully before publishing personal information. Other users may copy or redistribute public content. Draft post media is private and is not served through permanent public links. Published post media is stored in a private bucket and served using signed, time-limited links. No internet service can guarantee absolute security, and a person who receives a signed link can use it until it expires.

5. Retention and deletion

We keep information while needed to provide the Service, maintain an account and its content, address security issues, or meet legal obligations. Optional usage-analytics events are deleted after 90 days by a daily automated cleanup. You may delete eligible posts in the app. You can request account deletion from the Delete Account control on the Personal Information page in the app, or contact bill-labs@outlook.com from the account email address. Account deletion removes the account, drafts, published posts, related media, and associated usage-analytics events, subject to information we must retain for legal, security, dispute-resolution, or backup purposes. We may ask you to verify ownership. Copies already downloaded or screenshotted by other users, or retained in service-provider backups, may not be immediately removable.

6. Your choices and privacy rights

You can edit profile details, choose whether to publish content, remove eligible posts, disable “Remember Password,” and allow or turn off usage analytics in Settings. Depending on where you live, you may have rights to request access, correction, deletion, restriction, or a copy of your personal information, or to object to certain processing. Contact us below; we may verify your identity and will respond as required by applicable law.

7. Children

Idealist is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can review and remove it where appropriate.

8. International processing

Our providers may process or store information in countries where they or their infrastructure operate, which may have data-protection laws different from those in your country. Where required, we rely on appropriate safeguards for international transfers.

9. Changes and contact

We may update this policy as the app changes or as required by law. We will revise the effective date and provide a notice where appropriate. Questions, rights requests, and deletion requests can be sent to bill-labs@outlook.com.

Operator: Quan Cheng
Contact: bill-labs@outlook.com

Historical access notice

Before October 1, 2026, a database permission could allow email addresses stored in profile records to be retrieved through the public profile API. On October 1, 2026, we removed public and ordinary authenticated access to that profile email field; email addresses are no longer returned by the profile API. We have not determined whether anyone accessed or retained profile email data before the permission was changed. If you have questions, contact us at bill-labs@outlook.com.

Previously public post-image links

On October 1, 2026, we changed post-image storage so drafts are private and published images require expiring signed links. Existing public links are now denied by the storage access policy. We cannot recall copies downloaded or shared before that change, and copies retained in third-party caches may remain available until those caches expire.

生效日期：2026 年 10 月 20 日

本隐私政策说明 Quan Cheng（“我们”）在你使用 Idealist 移动应用及相关邮件链接页面和隐私政策页面（统称“服务”）时如何处理信息。目前提供 Idealist 并非出于商业或广告目的。

1. 我们处理的信息

账号信息

创建账号或登录时，我们通过 Supabase Auth 处理你的邮箱地址和身份验证凭证。Supabase 管理用于身份验证的账号密码；我们不会将其用于广告。Idealist 个人资料可能包括昵称、用户名/账号名、可选的个人简介和头像。

你提供的内容

我们会存储你作为原创、见闻或研究内容提交的标题、描述、链接、分类和图片，也包括草稿。你提交建议或联系支持时，我们会处理消息内容以及回复所需的账号信息。

• 草稿：草稿及其媒体文件仅允许所属账号访问。
• 已发布内容：已发布帖子以及上文列出的公开个人资料字段会展示给其他 Idealist 用户。已发布帖子的图片通过限时签名链接提供（目前有效期为一小时）；获得未过期链接的人可能能够查看图片。其他人也可能保存、截图或分享其可见内容。
• 头像：个人资料头像存放于公开图片存储空间，因为头像会显示在公开个人资料中。

互动和游客使用

为提供相应功能，我们会处理收藏、点赞或其他互动、拾柴互动以及帖子浏览计数。未登录时，应用会在设备上生成一个随机且持久的访客标识，用来关联游客互动；它不是广告标识符。

举报、屏蔽和内容审核

当你举报帖子或作者时，我们会处理你选择的原因、被举报的帖子或账号标识，以及举报的审核状态，以便管理员调查处理。举报数量可能用于安排人工审核优先级；举报本身不会自动隐藏内容。你屏蔽作者后，我们会保存屏蔽关系，以便在你的信息流和收藏中屏蔽其内容。我们也会保存应用内展示的系统通知及其已读状态，例如警告、内容处理通知或发布限制通知。

自动内容筛查

原创或见闻帖子发布前，其标题、文字和所附图片会通过 OpenAI 的 Moderation API 进行安全筛查。OpenAI 会返回内容类别和分数。被标记需复核的内容会保持私有，在管理员批准前不会发布。我们会在受限的审核记录中保存筛查结果和类别信号。管理员添加的研究内容不属于此用户投稿筛查流程。

设备和应用本地数据

应用会在设备本地保存会话信息、语言偏好、最近登录使用的邮箱地址和访客标识。为减少图片闪烁，图片也可能缓存在本地。登录页目前提供“记住密码”选项，且默认选中。启用时，记住的凭据和会话信息会在可用时使用 iOS 安全存储；若安全存储不可用，应用会回退到应用私有目录中的文件。此回退方式不等同于 iOS 钥匙串保护。你可以关闭“记住密码”；在共享或不可信设备上应关闭此选项。

应用不会请求精确位置或访问通讯录。当你选择照片或使用相机时，所选图片会用于你正在编辑的个人资料或帖子。

技术和服务数据

我们的基础设施服务商可能会收到提供、保护和排查服务所需的 IP 地址、请求时间、应用/操作系统及运行环境信息、错误或安全日志等技术信息。应用检查无线更新时，Expo 表示可能会收到设备操作系统信息和随机生成的更新令牌；其服务也可能根据自己的政策处理网络和诊断数据。Idealist 不使用应用内广告或第三方分析 SDK。

可选的使用数据分析

如果你选择同意使用数据分析，Idealist 会收集与你账号关联的基础事件，包括注册和登录成功、保存草稿、提交发布、拾柴、收藏、分享，以及预定义类别的关键应用错误。我们使用这些事件了解功能使用情况并排查服务问题。每条事件包含账号 ID、事件类型、服务器记录的时间，以及必要时的大类帖子类型或固定错误类别。事件不包含帖子 ID、帖子正文、邮箱、帖子或来源链接、访问令牌、原始错误信息或堆栈。事件由我们的数据库托管服务商 Supabase 保存最多 90 天，并由每日自动清理任务删除。删除账号时，与该账号关联的事件也会删除。数据分析为可选项；拒绝或关闭不会影响 App 功能。你可以随时在“设置”中修改选择。

2. 我们如何使用信息

• 创建并保护账号、验证邮箱、登录用户，以及发送用户主动请求的密码重置或账号邮件。
• 保存草稿、发布内容、展示个人资料和信息流，并提供收藏、互动、拾柴和浏览计数功能。
• 对用户提交的原创和见闻内容进行安全筛查、为人工审核安排举报优先级，并执行警告、内容处理或发布限制。
• 回复问题和建议、维护服务、调查滥用或安全问题并修复错误。
• 如果你选择同意，则使用上文所述的有限使用数据分析了解功能使用情况并排查服务问题。
• 遵守法律义务，保护用户和服务的权利、安全与稳定。

我们不会出售个人信息、将其用于定向广告或建立广告画像。截至目前，Idealist 尚未提供 AI 生图、语音录制/转写、投资、充值或支付功能，因此不会通过这些规划概念收集语音录音或银行卡信息。

3. 信息何时会共享

我们仅在运营服务、按你的指示（例如发布内容）或法律要求时共享信息：

• Supabase：提供身份验证、数据库、文件存储和服务端函数；你同意时，也会用于保存可选的使用数据分析事件。
• Resend：发送账号确认和密码重置等事务性邮件。它会收到收件人邮箱及发送所需的信息。
• OpenAI：通过 Moderation API 处理原创和见闻投稿的标题、文字和图片，以进行安全筛查。OpenAI 表示，除非客户主动选择加入，否则不会使用 API 数据训练或改进其模型；其滥用监测日志可能保留 API 输入、输出及相关元数据最长 30 天，但法律要求或为保护其服务及他人而合理必要的情况除外。详见 OpenAI API 数据控制说明。
• Expo / EAS：提供应用更新及相关技术服务。
• GitHub Pages：托管隐私政策和邮件回调页面。打开邮件链接时，浏览器可能会向 GitHub Pages 和 Supabase 发送完成回调所需的链接参数。静态页面不用于广告或分析；GitHub 可能依据自身政策处理普通网页请求信息。
• Apple：提供 iOS 操作系统和 App Store 分发服务，并可能依据 Apple 自身政策处理信息。

这些服务商根据各自条款和隐私声明处理信息，也可能在你所在国家/地区以外使用基础设施。服务商隐私声明：Supabase、Resend、OpenAI、Expo、GitHub 和 Apple。

4. 公开内容和安全

发布个人信息前请仔细考虑。其他用户可能复制或转发公开内容。草稿媒体为私有，不通过永久公开链接提供。已发布帖子图片存储在私有空间，并通过限时签名链接访问。任何互联网服务都无法保证绝对安全；获得签名链接的人可在链接过期前使用它。

5. 保存期限和删除

我们会在提供服务、维护账号及其内容、处理安全问题或履行法律义务所需期间保存信息。可选的使用数据分析事件会在 90 天后由每日自动清理任务删除。你可以在应用内删除符合条件的帖子。你可以在应用“个人信息”页点击“删除账号”申请删除账号，也可以使用账号邮箱联系 bill-labs@outlook.com。删除账号会删除账号、草稿、已发布帖子、相关媒体及关联的使用数据分析事件，但法律、安全、争议处理或备份保留所需的信息除外。我们可能要求验证账号归属。其他用户已下载或截图的副本、以及服务商备份中的副本，可能无法立即删除。

6. 你的选择和隐私权利

你可以编辑个人资料、决定是否发布内容、删除符合条件的帖子、关闭“记住密码”，并在“设置”中同意或关闭使用数据分析。根据你所在地区的法律，你可能有权请求访问、更正、删除或限制处理个人信息、获取副本，或反对某些处理。请通过下方邮箱联系我们；我们可能会验证身份，并依适用法律回复。

7. 儿童

Idealist 并非面向 13 岁以下儿童，我们不会故意收集其个人信息。如你认为儿童向我们提供了信息，请联系我们，以便在适当情况下核查并删除。

8. 跨境处理

我们的服务商可能在其运营或基础设施所在的国家/地区处理或存储信息，这些地区的数据保护法律可能与你所在地区不同。在法律要求时，我们会为跨境传输采用适当保障措施。

9. 政策变更和联系方式

我们可能会根据应用变化或法律要求更新本政策。更新时会修改生效日期，并在适当情况下进行提示。如有问题，或需提出权利请求、删除请求，请联系 bill-labs@outlook.com。

运营方：Quan Cheng
联系邮箱：bill-labs@outlook.com

历史访问说明

2026 年 10 月 1 日之前，数据库权限可能使个人资料记录中的邮箱地址可通过公开资料 API 获取。2026 年 10 月 1 日，我们已移除公开用户及普通登录用户对该资料邮箱字段的访问权限；资料 API 目前不会返回邮箱地址。我们尚未确认权限变更前是否有人访问或留存过资料邮箱数据。如有疑问，请联系 bill-labs@outlook.com。

此前公开的帖子图片链接

2026 年 10 月 1 日，我们调整了帖子图片存储方式：草稿图片改为私有，已发布图片需要使用会过期的签名链接。旧的公开链接现在已被存储访问策略拒绝。我们无法收回变更前已下载或分享的副本；第三方缓存中的副本可能要等缓存过期后才会消失。