Littoral Privacy Policy

Last updated: November 3, 2026
Effective: November 3, 2026

Littoral (the "App") is independently developed and operated by Littoral Studio ("we" or "us"). This policy explains what information we process, why we process it, how we protect it, and your rights.

*Note: If there is any inconsistency between the English version and the Chinese version, the Chinese version shall prevail.*

Summary

• No Sign-Up Required: Littoral requires no registration and never asks for your phone number, email address, or name.
• Local & iCloud Storage: Your flights and visited places are stored exclusively on your device and in your personal iCloud account. We cannot access them.
• On-Demand Online Features: Data is sent to our servers only when you actively use Screenshot Recognition, AI Autofill (including route lookups by flight number), purchase Credits or Littoral Pro, or send feedback (collectively, "Online Features").
• Full Control: Online Features are enabled only after you agree to this policy. If you decline or withdraw consent later, you can still use all local features, including flight logging, maps, and statistics.
• No Ads or Tracking: The App contains no ads, integrates no third-party analytics or advertising SDKs, and never tracks you across apps.

1. Data on Your Device and in iCloud

Flights, visits, your Home City, badge progress, and settings are stored locally on your device and synced across your devices via Apple's iCloud (using a private CloudKit database). This data resides in your personal iCloud account, is governed by Apple's privacy policy, and cannot be accessed by us.

You can export or back up your data anytime under Settings → Data, or erase all local records via Settings → Data → Clear All Data (if iCloud Sync is enabled, records will also be removed from all devices signed in to the same Apple Account). Deleting the App and removing Littoral's data in your system iCloud settings will permanently erase everything.

2. Information Processed by Our Servers

2.1 Anonymous Account ID

After you agree to this policy and enable Online Features, the App generates a random anonymous ID and stores it in your iCloud Keychain. We use it solely to track your Credits balance, AI Autofill quota, and Littoral Pro status. It contains no personally identifiable information and is not linked to your Apple Account.

2.2 Abuse Prevention & Device Verification

To prevent abuse (such as repeatedly claiming new-user bonus Credits), the App uses Apple's official App Attest and DeviceCheck services to verify that requests originate from a genuine copy of the App and to record basic eligibility states. This process does not collect any hardware identifiers from your device.

2.3 Screenshot Recognition

When you scan a screenshot, the App compresses the image on your device and sends it securely to our servers, which forward it to an AI model provided by DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.) to extract flight details.

• Immediate Deletion: Screenshots are processed solely in real time to read flight info and are deleted from our servers immediately after extraction.
• Short-Term Deduplication Cache: To avoid charging Credits twice when scanning the exact same image within a short period (typically 24 hours), we temporarily cache the image hash and extraction result before deleting them automatically. A hash cannot be reversed back into the original image.
• Usage Records: We retain basic usage logs (image hash, timestamp, number of flights detected, and Credits deducted) for billing and troubleshooting, without storing the extracted flight details.
• Camera Barcode Scanning: When scanning a physical boarding pass with your camera, the barcode is decoded entirely on your device and never uploaded.

2.4 AI Autofill

The App sends the flight number, date, and known flight fields to our servers to look up route information via DeepSeek's web search in two scenarios:

• When a scanned screenshot is missing departure or arrival airports and you confirm the lookup (Pro users may enable automatic Autofill in Settings);
• When you manually enter a flight number and date to look up a route.

Route lookup results for a given flight number are cached temporarily on our servers without being linked to any account. We log basic request metadata (timestamp, count, success status, and quota usage) to manage free limits and prevent abuse, without retaining the specific flight numbers or itineraries tied to your account.

2.5 Purchases

All payments are processed directly by Apple via the App Store. We never receive your name, Apple Account, or payment details. When you purchase Credits or Littoral Pro, the App sends the Apple-signed transaction receipt to our servers. We store the transaction ID, product ID, timestamp, and order status linked to your anonymous ID to deliver your purchases, restore entitlements, and handle refunds.

2.6 Feedback

When you submit feedback, we receive your message, optional contact details, and basic diagnostic info (App version, OS version, and device model) linked to your anonymous ID so we can troubleshoot Credits or recognition issues.

2.7 Server Logs

To maintain service stability, troubleshoot errors, and prevent abuse, our servers automatically record basic access logs (timestamp, API endpoint, response status, IP address, and associated anonymous ID/Credits changes). Logs are retained only for a short period and never contain screenshot images or personal flight itineraries.

3. Device Permissions

The App requests system permissions only when you actively use the corresponding feature:

• Camera: Used to scan boarding pass barcodes; requested only when you tap to take a photo.
• Location (While Using): Used to detect your current city for setting your Home City, or to determine your country for suggesting common cities. Location is read locally at coarse accuracy and is never uploaded to our servers. Without location permission, the App estimates your country locally using your device's time zone and region settings.
• Photos (Add Only): Used to save generated share cards to your photo library; requested only when you save an image. *(Note: Screenshot selection uses the system photo picker, meaning the App only accesses the specific images you select, not your entire library.)*

You can revoke these permissions at any time in your device's system Settings without affecting other features.

4. Third-Party Services

To provide AI extraction and route lookup features, we transmit necessary request data via encrypted API calls to:

• DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.): Processes compressed screenshots and flight number/date queries to extract flight details and look up routes. Requests sent to DeepSeek do not include your anonymous account ID.

Except as described above, standard Apple platform services (such as In-App Purchases and iCloud), or when required by law, we never sell, share, or provide your information to any third party.

5. Data Storage and Security

• Server Location: Our servers and AI service providers are located in the People's Republic of China. If you use Online Features from outside China, your request data will be transferred to and processed in China as necessary to provide the service. If you prefer not to transfer data internationally, you can keep Online Features turned off and use the App's local features.
• Security: All network traffic is encrypted via HTTPS, and server databases are protected with strict access controls and encryption.
• Retention: Caches and server logs are purged automatically after short retention periods. Account-linked Credits and transaction records are deleted upon your request or if the service is discontinued (unless longer retention is required by applicable tax or commercial laws).

6. Your Rights

• Access & Export: View your Credits balance and usage history under Settings → Screenshot Recognition → Credits, and export your local flights and places anytime under Settings → Data.
• Deletion: Request deletion of all server data linked to your anonymous account via Settings → About → Send Feedback (because accounts are anonymous, submitting the request from within the App allows us to locate your data; please note that deleting server data will permanently forfeit any remaining Credits or Pro status).
• Withdrawing Consent: Turn off Online Features anytime under Settings → About → Online Features. Once disabled, the App stops sending any data to our servers.

7. Children's Privacy

The App is not directed to children under 14 (or the applicable minimum age in your jurisdiction). If you are a minor, please use the App only with the consent and guidance of a parent or guardian.

8. Changes to This Policy

When we update this policy, we will revise the date at the top of this page. For material changes (such as collecting new types of data or adding third-party providers), the App will prompt you to review and consent again before using Online Features.

9. Contact Us

If you have any questions or requests regarding this policy, please reach out to us (we typically respond within 15 business days):

• In the App (Recommended): Settings → About → Send Feedback
• Email: support@littoral.sipt.top