English
TCMBOK is an educational Traditional Chinese Medicine app. This policy describes account information, optional AI conversations, data kept on your device, course progress and learning achievements.
Information and purposes
- Clerk: email, account identifiers and sign-in activity support authentication and your profile. Names and selected profile photos are optional. Choosing an avatar uploads the selected image to Clerk; whole-library, camera, microphone and location permission are not required for this feature.
- RevenueCat and the purchasing store: purchase records, receipts, subscription status and their association with your TCMBOK account support subscription verification. The purchasing store handles payment cards; TCMBOK does not receive payment card details.
- DeepSeek: only after separate explicit permission, your question and current conversation history, including AI replies, are sent through our API to DeepSeek for educational answers. Entries may contain sensitive health information. Please do not enter names, contact details or personal health information.
The app does not actively read health records, location or contacts. This does not exclude sensitive information that you type into AI.
Community content and moderation
Community questions and answers are stored with the submission, edit and review status. Approved posts and the chosen public display name are visible to all community users; email and Clerk account identifiers are not shown. Substantive edits are reviewed before publication, and the previous approved version remains visible while an edit is pending. Reporter identity is available only to moderators, not the reported author; block preferences are also stored. When an account is closed, its posts, reports and block links are removed. If an approved question has other approved replies, the original text and author identity are replaced with a generic deletion notice so those replies can remain. A minimal moderation record may remain without the account identifier.
Clerk’s published data-processing commitments
Clerk publishes Standard Terms, a Data Processing Addendum (DPA) and a Privacy Policy. The DPA distinguishes customer data processed on a customer’s behalf from “Account Information” processed by Clerk as an independent controller under its Privacy Policy. The operator must confirm how the applicable agreements and data categories map to TCMBOK’s authentication arrangement.
DPA section 7 and Schedule 2 describe security measures, including encryption in transit and at rest for covered customer personal data. These are Clerk’s published commitments, not an independent audit of TCMBOK or a promise that every app data store is encrypted.
DPA section 9 provides for deletion of covered customer personal data within 90 days after the Clerk service agreement terminates or expires, including reasonable efforts to procure deletion of copies held by subprocessors. That trigger is not a learner closing their TCMBOK account. These documents do not establish a specific deletion deadline for an individual TCMBOK account or verify its log and backup deletion timelines; please contact TCMBOK support for account-data requests and applicable limitations.
RevenueCat’s published processing and retention terms
RevenueCat publishes Terms of Use, a Privacy Policy and a Data Processing Addendum (DPA). Its policy describes end-user device/OS information, last-seen times, Apple receipts and optional user identifiers or metadata. TCMBOK links subscription status to your account; the operator must confirm the submitted SDK’s exact technical fields and enabled optional attributes.
RevenueCat states that end-user information is processed on the app operator’s behalf under the applicable agreement and DPA; its general controller privacy policy is not the governing policy for that processing. The general policy’s six-year retention statement is not a blanket retention period for every TCMBOK learner’s subscription record.
The policy describes TLS protection and storage of customer data in AWS data centers in the United States; the DPA describes additional security measures. These are provider-published statements, not independent verification of TCMBOK’s deployment or all local storage. The DPA’s service-end return/deletion provisions remain subject to backup and archival practices and do not establish a fixed deletion deadline for an individual TCMBOK account. Contact TCMBOK support for account-data requests; deleting a RevenueCat customer record does not cancel Apple renewal or erase Apple’s own purchase records.
AI sharing permission and provider processing
DeepSeek’s processing and retention are subject to its Privacy Policy. We do not promise that the provider does not retain content or use it for training. Applicable API-account terms and retention periods require operator confirmation.
DeepSeek’s Terms of Use (updated 27 March 2026), section 4.3, permit limited use of inputs and outputs to develop or improve its services or underlying technologies, subject to the encryption and de-identification safeguards described there. That section describes an “Improve the model for everyone” opt-out; we have not verified its availability or status for TCMBOK’s API account. The terms include APIs, but conflicting service-specific terms take precedence. We therefore do not claim a verified training exclusion for TCMBOK conversations.
You may decline permission or withdraw it in the AI page or Profile to stop subsequent sends without deleting your account. Core learning remains available. Withdrawal cannot recall content already transmitted or automatically erase your local chat history.
Local data, widgets and notifications
Notes, saved items, article read history, chat history and sharing choices are stored locally per account and may be included in OS backups. Guided-course enrollments, explicitly completed units (including completion time and the study time zone), path-completion badges and claimed e-certificates are stored in the account database for cross-device access. Claiming a certificate stores the display name you enter and confirm, its number, issue time and course snapshot. Certificates remain account-scoped and have no public verification page; simply opening an article does not complete a course unit. These account learning records are removed during successful account closure, subject to the database recovery and backup limitations below. The widget’s local App Group stores account scope, language, Daily Tips, note/saved counts and a latest-note title/body preview. That preview may appear on the Home Screen.
Daily-tip notifications and separately opted-in solar-term reminders are scheduled on your device and can be disabled independently in settings. The solar-term reminder may show its free public summary, not subscription-only course content. TCMBOK is for learning only, not medical advice, diagnosis or treatment.
Security and operational records
Remote services use HTTPS. Ordinary local storage is not promised encrypted. For service operation and troubleshooting, API application logs record the HTTP method, request path without query values, status and response time. Limited authentication diagnostics use reviewed fixed error categories and header-presence or token-shape flags, not header values or provider error bodies. These app-level records do not include account or device IDs, client IP, raw authentication tokens or AI questions/history. Replit documents 30-day retention for deployment logs; access and retention for separate infrastructure or provider logs have not been verified. Source code alone does not establish every provider’s at-rest encryption, retention, training or backup policy.
Retention and closing your account
Support email is handled through Apple iCloud Mail. Apple’s deletion guidance describes deleted email remaining in Trash for 30 days before permanent removal, with some Mail app settings allowing earlier deletion. This period starts after an email is deleted, not when it is received or when your TCMBOK account is closed. It is separate from our support-correspondence process below and does not erase separately exported copies.
We will review resolved support cases monthly and move routine correspondence in Inbox, Sent and Archive to Trash within 12 months of resolution. Records will be kept longer only where needed for a legal obligation or dispute, and only for as long as necessary for that purpose. This is an operator-managed process, not an automatic TCMBOK account-deletion feature. Apple’s post-deletion Trash period applies afterward.
Replit’s monitoring documentation states that deployment logs are retained for 30 days. This is the documented deployment-log period, not a verified retention or erasure guarantee for every infrastructure, access, security or provider log. Any separate copies and their retention still require confirmation.
Our production database has a seven-day point-in-time recovery history configured, with scheduled database backups not enabled. Changes to data held in that database may remain recoverable within this window. This setting applies only to database recovery history: it does not set the retention period for live records, hosting logs, support emails, third-party services or device backups, and it does not mean that local notes or chat history are uploaded to this database.
Account services hold account data while your account exists; local data remains until removed or cleared. Guided-course enrollment, explicit unit-completion, path-badge and claimed-certificate records are held in the account database and are removed during successful account closure. Profile → Close account removes your Clerk account/profile and RevenueCat customer record, then clears the current device’s account data. Account deletion is processed during successful closure; this does not mean that all personal data is instantly erased everywhere.
Closing an account does not cancel store renewal, erase other devices or OS backups, recall DeepSeek content, or automatically erase support emails. Manage store billing separately through Apple subscriptions. Provider, backup and legally required retention periods and deletion limitations must be confirmed by the operator; no universal 30-day erasure guarantee is made.
Your rights and contact
For access, correction or deletion requests and applicable limitations, contact support@balancewithtcm.com. Support correspondence itself may contain personal information and is subject to the support-email process above; the request-handling timeline still requires operator confirmation. If you are in the European Economic Area or United Kingdom, you may also complain to your local data protection authority.
Children and policy changes
TCMBOK is not directed at children under 16. If you believe a child has provided personal data, contact support for removal and applicable provider-retention limitations.
Material policy changes will be identified with an updated policy date and an email or in-app notice. AI sharing continues to require separate explicit permission; reading this policy or continuing to use the app does not grant that permission.