Privacy policy

Holding Point · Draft, not yet in effect

The Holding Point app has no accounts, no analytics, no advertising and no tracking. It keeps what you enter on your phone, and your phone's own backup may include it, with one exception that you choose: when you ask for AI feedback on an answer, the app sends that answer's text and a few details to our server so that feedback can be written (see AI feedback). Apart from that, we receive personal data only from Google Play purchase records, from reviews you choose to post on the App Store or Google Play, and from emails you choose to send us.

Who is responsible

Holding Point is published by Chung Chit Ho ("we", "the developer"). For privacy questions, email holdingpointhk@gmail.com.

What the app saves on your phone

The app saves the following on your phone. Apart from what AI feedback sends when you ask for it (see AI feedback), the app does not send any of it to the developer or to anyone else, and it leaves your phone only if you share it yourself (see Links, email and ratings).

• Your stage, the dates you enter (applied, deadlines, assessment dates, waiting period) and the results you mark, such as invited, unsuccessful or offer, for this and any past application.
• Checklist ticks, bookmarks, and your answers to "Am I eligible?", with any English test scores you enter.
• Your written answers, stories, re-applicant log notes and the reasons you write in flight-planning cases.
• Your practice history: each answer you practise (date, mode and length), self-review ticks, ratings and notes, mock interviews, drill results and targets, flight-planning case scores and decisions, quiz scores, the quiz items waiting in Review, and two weekly snapshots of Your practice profile on Today.
• Voice recordings of your practice answers.
• Your settings and small marks, such as "I've applied before".
• For AI feedback: your consent, a random install number and, for each of your last 200 AI feedback answers, the question, the date and the answer's five values from 1 to 5, such as Structure and Delivery (not your answer or the feedback text).

Questions, guides and quizzes are built into the app, and it works offline; AI feedback needs an internet connection.

Your phone's own backup (iCloud, a Google backup or a computer backup) may include this data and your recordings. That backup belongs to you and is handled by Apple, Google or your phone maker. The developer cannot see it.

Microphone

The microphone is used only when you start a practice session that records your answer, or when you press Speak to say an answer for AI feedback. The app shows a short note first, then asks for permission. You can say no: you can still answer aloud with the timer only, and nothing is recorded; for AI feedback you can type your answer instead. You can turn microphone access off at any time in your phone's settings for Holding Point. Recordings you already made stay on your phone until you delete them.

Recordings are saved on your phone, and the app never uploads or analyses them. When you speak an answer for AI feedback, your phone's speech recogniser turns it into text. The app does not record your voice for this or send it to our server. Of what you say, the app sends only the text you have checked, and only when you ask for feedback.

AI feedback

AI feedback is part of the Full Version and is optional: the rest of the app works without it. It is for people aged 18 and over, who confirm their age before they first use it. Before your first answer is sent, the app asks for your consent and names the service that writes the feedback. Nothing is sent until you allow it.

Who is responsible. Chung Chit Ho is the data user for AI feedback. For requests to access or correct your data, email holdingpointhk@gmail.com.

What is sent. Only when you ask for feedback on one answer, the app sends:

• the text of that answer, after you have checked it (it may contain personal data you speak or type);
• which question it answers;
• how long you spoke (0 for a typed answer);
• a random install number made by the app;
• the proof of purchase that Apple or Google gives the app for the Full Version. It includes the purchase's transaction or order number and details of that purchase, such as the product, the purchase date, the store's country and, for Apple purchases, normally the price and currency; it does not include your name, email address or payment card details.

Not sent: your voice or any recording, your name or email address, or anything else saved in the app. Cloudflare and our AI provider also see the request's IP address and time.

If you use Report a problem with this feedback, the app sends that feedback, the reason you choose, which question it was for and the install number.

Why. To write practice feedback on that answer; to check with Apple or Google that the Full Version was bought; to limit how many answers can be sent a day (20 a day for each purchase, shared by the phones that use the same Apple Account or Google Account); and to look into problems you report. We do not use it to train AI, for advertising or for profiling, and we do not sell it.

Who receives it. Our server runs on Cloudflare (Cloudflare, Inc.). It passes the request to our AI provider, which writes the feedback, and it may ask Apple or Google to confirm the purchase. Cloudflare and our AI provider act on our instructions under their own terms (Cloudflare's terms and Data Processing Addendum; our AI provider's service terms). We use them only under terms that, as we have checked, give your data the same or equal protection as this policy. Your data may be processed and stored outside Hong Kong: Cloudflare may run our server and keep its counts and reports in another country, and our AI provider stores requests and replies in its Singapore region, outside Hong Kong, and may process them in other countries or regions where it, its affiliates or its sub-contractors have facilities.

How long. Our server keeps no answer text and no feedback. Apart from overall totals that do not identify anyone, such as the month's spending, it keeps only:

• the current day's counts of answers and reports, with the purchase's transaction or order number and the install number they belong to, so that the phones sharing one purchase share its 20 answers a day. These are deleted after the day ends (Hong Kong time).
• any Report a problem with this feedback you send (the feedback, your reason and which question it was for; the feedback may quote your answer), for 30 days, then deleted.

Our AI provider does not use the text to train its models. It keeps requests and replies for up to 30 days (longer only where the law requires it or where it is reasonably necessary to keep its service secure), and keeps content that its automated safety filter flags for up to 2 years. On your phone, the app keeps only the question, the date and the answer's five values (1 to 5, such as Structure and Delivery) for each of your last 200 AI feedback answers, until you reset the app. It uses them to show your previous try as a dashed line and, with your other practice, to draw Your practice profile on Today. It does not keep the answer you sent or the feedback text.

Security. Answers are sent encrypted (HTTPS). The key for our AI provider's service is kept on our server, never in the app.

Your choices. Turn AI feedback off in Settings > AI feedback. This withdraws your consent, and the app asks again before anything else is sent. Once text has been sent, we cannot make our AI provider delete it sooner than its own handling allows. To get a copy of a report we hold, email us with the date and the question it was about, so that we can find it; we act on your request within 40 days.

Please do not include ID card numbers, health details or other people's names in an answer you send.

About the feedback. It is written by AI as a practice character, not by a person. It can be wrong. It is practice feedback on one answer, not an assessment and not a prediction of any result.

Read aloud

Read aloud and the spoken questions use your phone's English text-to-speech voice. They read only the app's own text, such as questions and sample answers, never what you write. The app itself does not send the text anywhere. On Android, some voices work online: your phone's text-to-speech service then sends the text being read to its provider, whose privacy policy applies.

Crash reports from Apple and Google

If you allow it in your phone's settings (Share With App Developers on iPhone, usage and diagnostics on Android), Apple or Google send the developer crash reports and usage statistics about the app. These come from Apple or Google, not from code in the app, and do not include what you have saved in the app. You can turn this off in your phone's settings.

Calendar

If you tap Add to Calendar, the app opens your phone's own calendar editor with the date you chose. You decide whether to save it. The app does not read your calendar.

Links, email and ratings

• Links to sources open the website in a browser window on your phone. That website's own privacy policy applies.
• Contact support and Report a problem with this page open a new email in your own mail app, addressed to holdingpointhk@gmail.com, with the app name and version in the subject; Report a problem with this page also adds the page you were on. Nothing is sent unless you write and send it yourself.
• Share my notes (in My stories) and Share my notes as text (in Settings) give your stories, answer drafts and re-applicant log to your phone's share sheet as text. You choose where the text goes.
• After some practice the app may ask Apple or Google to show their rating prompt, at most once per app version. Rate Holding Point in Settings opens the app's store page. Any rating or review you give goes to Apple or Google under their own privacy policies, and the app never sees it. A written review is public: the developer can read it and reply, and sees the name it is posted under, plus the store country (App Store) or your phone model, system version, language and app version (Google Play).

If you email support

Emailing us is your choice. The app works the same if you never do; we just cannot reply to you.

When you email us, we receive the name and email address your mail app sends, what you write (including the app name, version and page in the subject, and any phone details you add) and anything you attach. We use it only to reply to you and to look into the problem or request you send. If you ask for a refund, we also keep your email with our business records (see Purchases).

Your emails are stored by our email service provider, which keeps them for us. We do not sell them or pass them to anyone else, unless the law requires it.

We keep each email for 12 months after our last reply, then delete it, except refund emails (see Purchases).

To get a copy of the personal data we hold about you (from your emails or from Google Play purchase records), or to have it corrected, email Chung Chit Ho at holdingpointhk@gmail.com. You can also ask us to delete it. We will, except for records the law requires us to keep (see Purchases). We will act on your request within 40 days.

Deleting your data

In the app, open Settings (the gear button on Today). The Delete data section has two rows:

• Delete all recordings removes every saved recording. Your attempts stay in My practice, without the audio.
• Reset all data removes everything the app has saved, recordings, your AI feedback consent and its kept values included, and starts the app from setup again.

Both ask you to confirm first. To remove one answer and its recording, open it in My practice and use Delete this answer (Delete these answers for a session of several answers) at the bottom of its Self-review screen.

A report you sent with Report a problem with this feedback is kept on our server for 30 days, then deleted automatically. Your Full Version purchase is held by Apple or Google, not in the app's data, so deleting data does not remove it.

Uninstalling the app also deletes its data from your phone. A backup made earlier may still hold a copy, and reinstalling the app may bring it back. To remove that copy, delete or replace the backup in your iCloud, Google or computer backup settings.

Keeping data safe

The app keeps its data in its own private storage on your phone, which other apps cannot open. Use a screen lock to protect it further. We keep support emails in an email account protected by a strong password and two-step sign-in, and only Chung Chit Ho reads them.

Children

Holding Point is meant for people aged 16 and over, and AI feedback for people aged 18 and over, who confirm their age before they first use it. The app is not directed at children under 13.

Purchases

Holding Point is free to download. A one-time in-app purchase, Holding Point Full Version, unlocks the rest of the app; there is no subscription. You buy it through Apple or Google, under their own terms and privacy policies, and the developer never receives your payment card details. The app checks with Apple or Google on your phone whether the Full Version has been bought. Restore purchases (in Settings and on the Full Version screen) asks Apple or Google again, for example on a new phone, and sends nothing to us. When you use AI feedback, the app also sends the proof of purchase to our server (see AI feedback).

Apple's sales reports give the developer sales totals only. For each Google Play purchase, Google's sales reports give the developer an order number, the phone model and the buyer's country, and in some cases the buyer's city, region and postcode. The developer uses them only for accounts, tax and refunds. We keep these records, and any refund emails, for 7 years after the purchase or refund, as Hong Kong tax law requires for business records, then delete them. We do not sell them or pass them to anyone else, unless the law requires it.

Changes to this policy

If anything this page describes changes, we will update this page and its effective date before the change takes effect.

Contact

Chung Chit Ho · holdingpointhk@gmail.com · Support page

English

私隱政策

Holding Point · 草稿，尚未生效

Holding Point app 沒有帳戶、數據分析、廣告或追蹤。你輸入的內容會儲存在你的手機上，手機本身的備份可能包括這些內容；唯一的例外由你選擇：當你要求為某個答案提供 AI 回饋時，本 app 會把該答案的文字和少量相關資料傳送到我們的伺服器，以便取得回饋（見「AI 回饋」）。除此之外，我們只會從 Google Play 的購買紀錄、你選擇在 App Store 或 Google Play 發表的評論，以及你選擇寄給我們的電郵，收到個人資料。

誰負責

Holding Point 由 Chung Chit Ho（下稱「我們」或「開發者」）發佈。如有私隱查詢，請電郵至 holdingpointhk@gmail.com。

本 app 儲存在手機上的資料

本 app 會把以下資料儲存在你的手機上。除了 AI 回饋在你要求時傳送的內容（見「AI 回饋」）外，本 app 不會把這些資料傳送給開發者或其他任何人，這些資料亦只會在你自己分享時才離開手機（見「連結、電郵和評分」）。

• 你的申請階段、你輸入的日期（申請日期、截止日期、評核日期、等候期），以及你標記的結果（例如獲邀、不成功或收到聘書），包括本次及以往的申請。
• 清單上的剔號、書籤，以及你在「Am I eligible?」（資格自我檢查）的回答和你輸入的任何英語考試成績。
• 你寫的答案、經歷故事、Re-applicant log 的筆記，以及你在飛行計劃案例中寫的理由。
• 你的練習紀錄：每次作答（日期、模式和時長）、自我檢討中的剔號、評分和筆記、模擬面試、能力測試練習的成績和目標、飛行計劃案例的得分和決定、測驗分數、在 Review 中等候重溫的測驗題目，以及 Today 上「Your practice profile」的兩個每週紀錄。
• 練習答案的錄音。
• 你的設定和一些小標記，例如「I've applied before」。
• AI 回饋方面：你的同意、一個隨機安裝編號，以及最近 200 次 AI 回饋各自的題目、日期和該答案五個 1 至 5 的數值，例如 Structure 和 Delivery（不包括你的答案或回饋文字）。

題目、指南和測驗已內置於本 app，離線亦可使用；AI 回饋則需要連接互聯網。

手機本身的備份（iCloud、Google 備份或電腦備份）可能包括這些資料和你的錄音。該備份屬於你，由 Apple、Google 或手機製造商處理。開發者無法查看該備份。

麥克風

只有當你開始會錄下答案的練習，或按下「Speak」為 AI 回饋說出答案時，本 app 才會使用麥克風。本 app 會先顯示一段簡短說明，然後才請求權限。你可以拒絕：拒絕後你仍可只用計時器口頭作答，不會錄下任何內容；AI 回饋則可改為輸入答案。你可隨時在手機設定內關閉 Holding Point 的麥克風權限。已錄好的錄音會留在手機上，直至你刪除。

錄音儲存在你的手機上，本 app 不會上載或分析錄音。當你為 AI 回饋說出答案時，手機的語音辨識功能會把語音轉為文字。本 app 不會為此錄下你的聲音，亦不會把聲音傳送到我們的伺服器。你說的話，本 app 只會在你要求回饋時，傳送經你檢查的文字。

AI 回饋

AI 回饋屬於完整版（Full Version）的功能，而且由你選擇是否使用：不使用 AI 回饋，本 app 其餘部分亦照常運作。AI 回饋只供 18 歲或以上人士使用，首次使用前須自行確認年齡。在傳送你的第一個答案前，本 app 會請你同意，並列明撰寫回饋的服務；你同意之前，不會傳送任何內容。

誰負責。Chung Chit Ho 是 AI 回饋的資料使用者。如要查閱或改正資料，請電郵至 holdingpointhk@gmail.com。

傳送甚麼。只有當你要求為某一個答案提供回饋時，本 app 才會傳送：

• 該答案經你檢查後的文字（可能包括你說出或輸入的個人資料）；
• 該答案回答的是哪一條題目；
• 你說出答案所用的時間（輸入的答案記為 0）；
• 本 app 產生的隨機安裝編號；
• Apple 或 Google 就完整版給予本 app 的購買證明，其中包括該次購買的交易編號或訂單編號，以及購買項目、購買日期、商店所屬國家或地區等購買資料（Apple 的購買證明通常亦包括價錢和貨幣），但不包括你的姓名、電郵地址或付款卡資料。

不會傳送：你的聲音或任何錄音、你的姓名或電郵地址，以及本 app 儲存的任何其他內容。Cloudflare 和我們的 AI 服務供應商亦會看到該次請求的 IP 地址和時間。

如你使用 Report a problem with this feedback，本 app 會傳送該回饋、你選擇的原因、該回饋所屬的題目和安裝編號。

用途。為該答案撰寫練習回饋；向 Apple 或 Google 核實已購買完整版；限制每日可傳送的答案數目（每項購買每日 20 個，由使用同一個 Apple 帳户或 Google 帳戶的手機共用）；以及跟進你報告的問題。我們不會把這些資料用於訓練 AI、廣告或建立個人檔案，亦不會出售。

誰會收到。我們的伺服器設於 Cloudflare（Cloudflare, Inc.），會把請求轉交我們的 AI 服務供應商撰寫回饋，亦可能請 Apple 或 Google 核實購買。Cloudflare 和我們的 AI 服務供應商均按我們的指示，並根據各自的條款（Cloudflare 的條款和 Data Processing Addendum、我們的 AI 服務供應商的服務條款）處理資料。我們只在已確認能給予你的資料與本政策相同或相等保護的條款下使用它們。你的資料可能在香港以外的地方處理和儲存：Cloudflare 可能在其他國家或地區運行我們的伺服器並存放其計數和報告；我們的 AI 服務供應商則把請求和回覆儲存在其新加坡區域（香港以外），並可能在其本身、其聯屬公司或分判商設有設施的其他國家或地區處理。

保留多久。我們的伺服器不會保留答案文字或回饋。除了不能識別任何人的整體總數（例如當月開支）外，它只會保留：

• 當日的答案和報告數目，連同所屬購買的交易編號或訂單編號和安裝編號，讓共用同一項購買的手機共用每日 20 個答案。這些資料會在當日（香港時間）完結後刪除。
• 你透過 Report a problem with this feedback 發出的報告（該回饋、你的原因和所屬題目；回饋可能引述你的答案），保留 30 日後刪除。

我們的 AI 服務供應商不會用這些文字訓練其模型。該供應商會把請求和回覆保留最多 30 日（法律要求或為確保其服務安全而合理需要更長時間則除外），被其自動安全過濾系統標記的內容則保留最多 2 年。在你的手機上，本 app 只會保留最近 200 次 AI 回饋各自的題目、日期和該答案五個 1 至 5 的數值（例如 Structure 和 Delivery），直至你重設本 app。這些數值用於以虛線顯示你上一次的嘗試，並與你的其他練習一起，在 Today 繪出「Your practice profile」。本 app 不會保留你傳送的答案或回饋文字。

安全。答案以加密方式（HTTPS）傳送。連接我們的 AI 服務供應商所用的金鑰存放在我們的伺服器上，從不放在本 app 內。

你的選擇。你可在設定的「AI feedback」關閉 AI 回饋，即撤回你的同意；之後本 app 會再次請你同意，才會傳送任何內容。文字一經傳送，我們無法令我們的 AI 服務供應商早於其本身的處理期限刪除。如要取得我們持有的報告副本，請電郵給我們，並註明報告的日期和所屬題目，方便我們找出該報告；我們會在 40 日內處理你的要求。

請勿在傳送的答案中寫上身份證號碼、健康資料或其他人的姓名。

關於回饋。回饋由 AI 以練習角色撰寫，並非由真人撰寫，而且可能有錯。回饋只是針對一個答案的練習，並非評核，亦不預測任何結果。

朗讀

「Read aloud」按鈕和朗讀題目的功能使用手機的英文文字轉語音聲音，只會朗讀本 app 自帶的文字（例如題目和範例答案），不會朗讀你寫的內容。本 app 本身不會把文字傳送到任何地方；但在 Android 上，部分聲音需要連網，手機的文字轉語音服務會把正在朗讀的文字傳送給其供應商，並按該供應商的私隱政策處理。

Apple 和 Google 的當機報告

如果你在手機設定中允許（iPhone 的「與 App 開發者分享」、Android 的使用情況及診斷資料），Apple 或 Google 會向開發者提供本 app 的當機報告和使用統計。這些資料來自 Apple 或 Google，並非來自本 app 內的程式，亦不包括你在本 app 內儲存的內容。你可以在手機設定中關閉。

日曆

如果你按下「Add to Calendar」，本 app 會打開手機本身的日曆編輯畫面，並填上你所選的日期。是否儲存由你決定。本 app 不會讀取你的日曆。

連結、電郵和評分

• 資料來源的連結會在手機的瀏覽器視窗內打開該網站。瀏覽該網站時，適用該網站本身的私隱政策。
• Contact support 和 Report a problem with this page 會在你自己的電郵 app 內開啟一封新電郵，收件人是 holdingpointhk@gmail.com，主旨列明 app 名稱和版本；Report a problem with this page 亦會列明你所在的頁面。除非你自己撰寫並發送，否則不會傳送任何內容。
• Share my notes（在 My stories）和 Share my notes as text（在設定）會把你的經歷故事、答案草稿和 Re-applicant log 以文字交給手機的分享選單，內容傳到哪裏由你決定。
• 練習一段時間後，本 app 可能請 Apple 或 Google 顯示評分提示，每個 app 版本最多一次；設定內的 Rate Holding Point 會打開本 app 的商店頁。你給的評分或評論會交給 Apple 或 Google，按其私隱政策處理，本 app 無法查看。文字評論會公開顯示：開發者可以閱讀和回覆，並會看到評論所用的名稱，以及商店所屬國家或地區（App Store）或你的手機型號、系統版本、語言和 app 版本（Google Play）。

如果你以電郵聯絡我們

是否電郵給我們由你決定。即使你從不電郵，本 app 亦照常運作，只是我們無法回覆你。

你電郵給我們時，我們會收到你的電郵 app 送出的姓名和電郵地址、你寫的內容（包括主旨內的 app 名稱、版本和頁面，以及你提供的手機資料），以及你附上的檔案。我們只會用這些資料回覆你，以及跟進你報告的問題或提出的要求。如你要求退款，我們亦會把你的電郵與業務紀錄一併保存（見「購買」）。

你的電郵由我們的電郵服務供應商代為存放。除非法律要求，我們不會出售你的電郵，亦不會轉交給任何其他人。

每封電郵會在我們最後一次回覆後保留 12 個月，之後刪除；退款電郵除外（見「購買」）。

如要取得我們持有關於你的個人資料（來自你的電郵或 Google Play 購買紀錄）的副本，或要求改正這些資料，請電郵至 holdingpointhk@gmail.com 聯絡 Chung Chit Ho。你亦可要求我們刪除這些資料；除法律要求保留的紀錄外（見「購買」），我們會照辦。我們會在 40 日內處理你的要求。

刪除你的資料

在 app 內打開設定（「Today」頁面的齒輪按鈕）。「Delete data」部分有兩項：

• Delete all recordings 會刪除所有已儲存的錄音。你的作答紀錄會保留在「My practice」，但不再附有錄音。
• Reset all data 會刪除 app 儲存的所有資料（包括錄音，以及 AI 回饋的同意和保留的數值），並讓 app 由初次設定重新開始。

兩項都會先請你確認。如要刪除單一答案及其錄音，請在「My practice」打開該答案，在 Self-review 畫面底部使用 Delete this answer（多個答案的練習則為 Delete these answers）。

你透過 Report a problem with this feedback 發出的報告，會在我們的伺服器保留 30 日，之後自動刪除。完整版的購買由 Apple 或 Google 記錄，並不屬於本 app 儲存的資料，所以刪除資料不會取消購買。

解除安裝 app 亦會把資料從你的手機刪除。較早前建立的備份可能仍有一份副本，重新安裝 app 時可能會把它還原。如要刪除該副本，請在 iCloud、Google 或電腦的備份設定中刪除或更新該備份。

資料安全

本 app 把資料存放在手機上它專用的私人儲存空間，其他 app 無法打開。設定螢幕鎖可加強保護。我們把支援電郵存放在設有高強度密碼和雙重驗證的電郵帳戶，只有 Chung Chit Ho 會閱讀。

兒童

Holding Point 的使用對象為 16 歲或以上人士，AI 回饋則只供 18 歲或以上人士使用，首次使用前須自行確認年齡。本 app 並非為 13 歲以下兒童而設。

購買

Holding Point 可免費下載。完整版（Holding Point Full Version）是一次性的 app 內購買，可解鎖 app 的其餘內容，沒有訂閱。購買透過 Apple 或 Google 進行，並按其條款和私隱政策處理；開發者不會收到你的付款卡資料。本 app 會在你的手機上向 Apple 或 Google 查詢是否已購買完整版。設定和完整版畫面內的 Restore purchases 會再次向 Apple 或 Google 查詢（例如換了新手機時），不會向我們傳送任何資料。使用 AI 回饋時，本 app 亦會把購買證明傳送到我們的伺服器（見「AI 回饋」）。

Apple 的銷售報告只向開發者提供銷售總數；Google 的銷售報告會就每次 Google Play 購買，向開發者提供訂單編號、手機型號和買家所在的國家，部分情況下亦包括買家所在的城市、地區和郵政編碼。開發者只會把這些資料用於帳目、報稅和退款。我們會按香港稅務法例對業務紀錄的要求，把這些紀錄及任何退款電郵在購買或退款後保存 7 年，之後刪除。除非法律要求，我們不會出售這些紀錄，亦不會轉交給任何其他人。

政策更改

如果本頁所述的任何內容有所改變，我們會在改變生效前更新本頁及其生效日期。

聯絡

Chung Chit Ho · holdingpointhk@gmail.com · 支援頁