Lvji — Privacy Policy
Lvji is a daily exercise contract. Finish today’s goal before the entertainment apps you chose are available again. There is no account. Exercise video stays on this device. One optional feature can send a meal thumbnail off the device, and only after you agree in the app. This notice applies in the European Economic Area and the United Kingdom as well as elsewhere.
1. Controller
The controller is the publisher of Lvji:
- Wuhai Youjie Inc.
- 深圳市无何有界科技有限责任公司
Privacy and support: weigan.huang@gmail.com. This page does not list a street address. For the EU representative, see section 11.
2. Categories of data
- Camera (exercise) — Live frames for jump rope, and with Lvji Pro for push-ups, hula hoop, sit-ups, squats, and plank, on iPhone, iPad, and Android. Frames stay in memory. They are not saved to Photos and not uploaded.
- Steps — Today’s step count for a walking goal (iOS Motion & Fitness; Android activity recognition). The count stays on the device.
- Contract — Your goals, deadline, counts, and the apps you chose to lock, stored in the app’s private storage.
- Meal photos (optional) — Diet check-in photos are saved in the app’s private storage on this device. They are not uploaded unless you opt in. Cloud calorie estimate is off by default. If you turn it on and confirm the in-app consent, the app may upload a downsized JPEG thumbnail and the meal label (breakfast, lunch, dinner, or snack) to our Cloudflare Worker. The Worker forwards the thumbnail to a vision model and returns a rough calorie number and an optional short food name. The default model is Alibaba Cloud Model Studio / DashScope Qwen-VL (
qwen-vl-plus). If that Worker is configured with a different OpenAI-compatible vision endpoint, that provider receives the thumbnail instead. The Worker does not store the image. The number is a reference only (“about N kcal”), not nutrition or medical advice. It never unlocks or blocks apps. You can turn the estimate off, or hide calorie numbers, in diet settings. Turning it off stops new uploads. There is no offline food recognition. - iCloud backup (iPhone and iPad) — When you are signed in to iCloud, leaving the app or tapping Back up in Settings copies your contract, goal and diet progress, activity history, reminders, language, and lock-screen message and photo into a private iCloud container on your Apple account. Apple stores that copy. Wuhai Youjie Inc. cannot read it. The Screen Time selection of which apps to lock stays on the device and is not part of the backup. Deleting the app does not delete the iCloud copy. If iCloud is unavailable, use Settings → Local backup to export or import a file.
- Screen Time (iPhone and iPad) — After you allow it, Apple shields the apps you pick until today’s contract is done. You confirm with Face ID or your passcode. Lvji does not read messages or other apps’ content. Face data and the passcode stay with the operating system; Lvji only learns whether confirmation succeeded.
- Photos (lock screen) — A lock-screen image you choose is read from your library and kept on this device. It is not sent to us. If you use iCloud backup, that image is included in your private iCloud copy.
- Location — Lvji does not use location to count exercise and does not upload location. The camera component’s system purpose string says it may read location to tag a photo or video. Lvji does not turn that on.
- Android, only after you agree in the app — Accessibility reads the foreground app’s package name so a chosen app can be sent home while it is locked. In system settings that service is labeled 运动解锁. Usage access may read recent foreground events on the device. The app picker reads a launchable app’s name, package name, and icon locally. None of this is uploaded, and message text and passwords are not read.
- Subscription status — Apple or Google tell the app, on the device, whether Lvji Pro is active. We do not receive your card number.
- Support email — If you write to us, we receive the address you use and the message you send.
3. Lawful basis (EEA and UK)
Where the GDPR or UK GDPR applies:
- Contract (Art. 6(1)(b)) — On-device processing needed to provide the daily contract you set: goals, counts, steps, and the unlock rules you configured.
- Consent (Art. 6(1)(a), and Art. 9(2)(a) where a meal photo or calorie estimate is health-related) — Optional cloud calorie estimate. The control is off until you agree in the app. You can withdraw that consent by turning it off. Withdrawal does not unlock or block apps, and it does not undo counting that never left the device. Android Accessibility and usage access also start only after the in-app explanation and your system grant.
- Legitimate interests (Art. 6(1)(f)) — Replying to email you send us, and rejecting malformed calorie-estimate requests (size and format checks). We do not use this basis to upload exercise video, or to make calorie estimate a condition of using Lvji. You can object; see section 10.
- Legal obligation (Art. 6(1)(c)) — Only if a law requires us to keep or disclose a specific record. We do not operate an account that creates a standing server profile.
Apple (App Store, StoreKit, Screen Time, iCloud, Face ID or passcode) and Google (Play Billing and Android system services) set their own purposes for payment, system shielding, and your iCloud copy. They are separate controllers for those services.
4. What we do not do
- No account, and no sale of personal data.
- No third-party analytics or advertising SDK in the app source.
- No microphone permission in the release app.
- No upload of exercise camera video, pose data, location, or app lists to us or to an analytics service.
- No upload of meal photos unless you opt in to calorie estimate. Calories are never an unlock gate.
- Lvji Pro is not offered through Family Sharing.
5. Lvji Pro
Lvji Pro is an optional monthly subscription sold by the Apple App Store or Google Play. The store product id is reppy_pro_monthly; the name shown in the app and the store is Lvji Pro (律己 Pro). In the United States the price is US $2.99 per month with a 7-day free trial. Other storefronts show the local price and any trial before you subscribe. Jump rope, walking, and app lock work without a subscription. Apple or Google handle payment, renewal, cancellation, and refunds. Lvji does not receive your card number. Subscription status is checked on the device with StoreKit or Play Billing. The license terms are Apple’s Licensed Application End User License Agreement.
6. Permissions
- Camera — Counting the sports above, and optional meal photos. Exercise video is not uploaded. A meal thumbnail is uploaded only after calorie-estimate consent.
- Motion & Fitness / activity recognition — Walking goals.
- Face ID or passcode (iPhone and iPad) — Confirming Screen Time authorization. Biometric data is not received by Lvji.
- Screen Time (iPhone and iPad) — Shielding apps you choose until today’s contract is done.
- Photos — A lock-screen image, or a meal check-in, that you choose. Meal photos stay on the device unless you opt in to calorie estimate.
- Location — Not used for counting and not uploaded. See section 2.
- Accessibility and usage access (Android) — Optional app lock, explained before the system settings screen opens.
The release app does not request the microphone.
7. Processors
If you turn on cloud calorie estimate, these providers process the thumbnail on our instructions:
- Cloudflare, Inc. — Runs the Worker that receives the downsized JPEG and the meal label, calls the vision API, and returns the number. The Worker does not write the image to KV, R2, or a database. Operational logs may include the meal slot, an outcome code, the upload size, and the returned kcal. They do not include the picture. We do not set how long Cloudflare keeps those logs.
- Alibaba Cloud Model Studio (DashScope), Qwen-VL — Default vision model (
qwen-vl-plus) via the OpenAI-compatible DashScope endpoint. It receives the thumbnail and meal slot in order to return a rough calorie total and an optional short food name. We do not control how long Alibaba keeps that request. If the Worker is pointed at another OpenAI-compatible vision API, that provider processes the thumbnail instead of DashScope.
We do not sell the thumbnail. Apple and Google are not our processors for payments, Screen Time, or iCloud; see section 3.
8. International transfers
The default vision API is Alibaba Cloud DashScope. A calorie request may be processed in mainland China. Cloudflare may process the Worker request outside the EEA or the UK. If you are in the EEA or the UK, turning calorie estimate on transfers that thumbnail outside your region. The feature stays off until you consent. This page does not claim that an adequacy decision covers that path, and we do not attach a separate transfer addendum. Leave the feature off if you do not want the transfer.
9. Retention and deletion
- What Lvji stores on the device stays there until you change it, delete the entry, clear the app’s storage, or uninstall. Uninstalling removes the on-device copy.
- An iCloud backup remains in your iCloud until you replace it or turn off iCloud for Lvji in the system Settings app.
- The calorie Worker does not keep the thumbnail after it answers.
- We do not control retention of a request already sent to Alibaba Cloud (or another configured vision provider), or of Cloudflare’s operational logs.
- Support email is kept only as long as needed to answer you. We do not run a separate customer archive.
10. Your rights
If the GDPR or UK GDPR applies, you can ask the controller to:
- Access personal data we hold about you.
- Erase that data.
- Port a copy of personal data we hold (data portability).
- Object to processing based on legitimate interests.
- Withdraw consent for cloud calorie estimate, and turn off system permissions you granted.
- Rectify inaccurate data we actually hold.
- Complain to a supervisory authority: the authority in your EEA country, or the UK Information Commissioner’s Office if UK GDPR applies.
Email weigan.huang@gmail.com. Most Lvji data never reaches us. Access, correction, export, and deletion of the contract, meals, and photos are done on the device: delete an entry, use local backup export, clear storage, or uninstall. We do not have a server account to export. We cannot delete a copy Apple holds in your iCloud, or a request a vision provider already received. Turning calorie estimate off stops further uploads. Refusing or withdrawing that consent does not lock or unlock apps.
11. EU representative (Article 27)
Not appointed — TBD. Wuhai Youjie Inc. / 深圳市无何有界科技有限责任公司 has not designated an Article 27 representative in the European Union. No representative name or address is listed, because none has been appointed. The same is true of a United Kingdom representative: none is appointed (TBD). Until an appointment is made, contact the controller at weigan.huang@gmail.com.
12. Children
Lvji is a self-management tool for a general audience. It is not directed at children under 13, and it is not directed at children where EEA member-state rules set a higher age. It is not a service for monitoring someone else’s device. Do not use cloud calorie estimate on a child’s meal photos.
13. Changes
We may update this page; the effective date will change accordingly. The canonical URL is https://lvji.longtou.online/privacy.
14. Contact
Controller: Wuhai Youjie Inc. / 深圳市无何有界科技有限责任公司
Email: weigan.huang@gmail.com
Support page: https://lvji.longtou.online/support