Privacy Policy

1. Scope

This policy applies to the Jita website (gitjt.com), Jita mobile clients (iOS, Android, HarmonyOS, and others), and features we provide through them.

Third-party sites, store pages, checkout flows, and model vendors you configure are governed by their own policies. Read them before you leave Jita.

2. What we collect

Account and identity: mobile number, email, nickname, avatar, timezone and language; identifiers returned after you authorize third-party sign-in (WeChat, Apple, carrier one-tap, Alipay, etc.).

Device and logs: device identifiers (including keys used for push and security), OS and app version, network type, operation and crash logs, API access records (time, path, status) for security, debugging, and statistics.

Chat and content: text you send, photos and attachments, AI outputs and edits, thread titles and timestamps; todos, in-app messages, feedback and attachments.

Toolbox notes: ledger entries you create in Tools (title, type, platform/identifier, notes, expiry, check-in cycle, etc.) and attached images.

Reminders and contacts: important-date and expiry reminder settings; emergency-contact emails and verification status; summary alerts to verified contacts when a check-in or “still here” cycle you set becomes overdue (not emergency dispatch).

Profile and preferences: lifestyle preference tags (with confidence) derived from chat when you grant a scene; explicit profile items you keep via confirmation cards; whether “use my profile in chat” is on (you can turn it off or delete explicit items).

Quota and assets: Token quota, points, check-in and task records, coupon and cash-wallet status (not full bank card numbers; real-name data for withdrawal is handled as required by law and payment channels).

Push: after you enable system notifications and register, we store APNs or vendor push tokens needed to deliver service and inbox alerts.

Website visits: on gitjt.com we may log IP, path, time, and device/browser parsed from User-Agent for site statistics, kept 90 days.

Sensitive data: we do not ask for biometrics, precise location tracks, or bank passwords. If you mention health or finance in chat, product rules limit use (e.g. health hints become lifestyle preferences without storing diagnosis or medication text unless you explicitly confirm).

3. How we use it

Provide and maintain the service: sign-in, chat and context, cloud sync, todos and toolbox (including personal ledger notes, expiry reminders, periodic check-ins, and summary alerts to emergency contacts), retouch/generation, plugins, models and quota.

Security and compliance: authentication, abuse prevention, debugging, legal obligations, complaints and disputes. Ledger notes are non-custodial personal records—not fund custody, estate execution, or emergency services.

Personalization (with consent): after you turn on a scene in the consent centre, profile data may be used for chat understanding, feed/shopping picks, and benefits; turning a scene off stops that use.

Notifications: verification codes, service changes, inbox and operational messages you are entitled to know; you can disable system notifications or unregister push.

Improvement: de-identified or aggregated analytics. We do not sell personal information or provide off-platform ad audience packs built from your profile.

4. Legal bases and consent

We process data where necessary to perform our contract with you, comply with law, with your consent, or on another lawful basis that does not override your rights.

Recommendations, benefits, and using chat to refine profile require in-app scene consent; “use my profile in chat” is on by default and can be turned off in Settings.

Checking the Terms and Privacy Policy at sign-in means you agree to processing necessary to provide the service; separate toggles or confirmation cards apply to specific scenes.

5. AI and generated content

To reply, understand images, retouch, or generate images we send necessary chat text and media to the platform model, or to a vendor you configure under Custom models that Jita is authorized to call (currently Alibaba DashScope / Qwen); that vendor’s terms and privacy policy apply. We do not forward your content to unauthorized arbitrary endpoints.

Generated content may be wrong; see the AI usage notice. We add visible marks and file metadata on generated or substantially edited images, and prefix copied assistant text with “[AI generated]” / “【AI 生成】”.

6. Sharing and processors

We do not sell personal information. We share or delegate processing only: with your clear consent; to infrastructure partners for payments, withdrawal, SMS/email OTP, push, cloud storage, safety, and model inference under confidentiality and security duties; when required by law or valid legal process; or in a merger, acquisition, or insolvency as permitted by law.

Shopping and affiliate links leave Jita; the third party handles checkout and its own data.

7. Third-party SDKs (Android and similar)

To provide sign-in, payments, and push, Android and similar clients may integrate the SDKs below. SDK names and developers follow China’s national SDK registry (https://sdk.caict.ac.cn/official/#/home). Privacy-policy links prefer each vendor’s currently reachable official docs (if a registry link is broken or misroutes, we use the vendor’s live official page). Each SDK’s own policy governs what it collects; we use them only as needed for the stated features.

(1) SDK name: APP支付客户端SDK; developer: 支付宝(杭州)信息技术有限公司; purpose: Alipay sign-in, payment, and payout; may collect: device identifiers and model, network status, IP address, Alipay-authorized identifiers and payment-necessary order data; privacy policy: https://opendocs.alipay.com/common/02kiq3

(2) SDK name: 微信OpenSDK Android; developer: 深圳市腾讯计算机系统有限公司; purpose: WeChat sign-in, sharing, and related authorization; may collect: device identifiers and model, network status, WeChat OpenID/UnionID you authorize; privacy policy: https://support.weixin.qq.com/cgi-bin/mmsupportacctnodeweb-bin/pages/RYiYJkLOrQwu0nb8

(3) SDK name: 号码认证-android; developer: 阿里巴巴云计算（北京）有限公司; purpose: carrier one-tap phone sign-in and number verification; may collect: phone number via carrier gateway, device and network data, IP address; privacy policy: https://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud202112211045_86198.html?spm=a2c4g.11186623.0.0.727039eb0HflH4

(4) SDK name: 联通认证SDK; developer: 联通在线信息科技有限公司; purpose: China Unicom one-tap authentication (pulled in with number-auth); may collect: phone number, device and network data; privacy policy: https://msv6.wosms.cn/html/oauth/protocol2.html

(5) SDK name: vivo推送SDK; developer: 维沃移动通信有限公司; purpose: deliver system/push notifications on vivo devices; may collect: device identifiers, push regId, app package/version, network status; privacy policy: https://dev.vivo.com.cn/documentCenter/doc/878

(6) SDK name: 性能加速库; developer: 华为软件技术有限公司; purpose: performance/graphics support required by Huawei push and related HMS components; may collect: device/OS version, basic app info, performance and runtime logs needed for stable push/components; privacy policy: https://developer.huawei.com/consumer/cn/doc/development/graphics-Guides/sdk-data-security-0000001050700772

See each developer’s policy for fuller detail. Denying related permissions or uninstalling the app stops those SDK features. We will update this section when the national registry or vendor official disclosures change.

8. Location and retention

Business data is stored primarily in mainland China. If we ever need to transfer data abroad we will follow applicable assessment, notice, and consent rules.

Server timestamps are UTC; the client shows times in your timezone.

We keep data only as long as needed: chat and profile while you use the account; after deletion we delete or anonymize except where law requires retention; website logs 90 days; backup copies expire on backup rotation.

9. Security

We use encryption in transit, access control, least privilege, encrypted storage for secrets such as API keys, and organizational measures to reduce unauthorized access, disclosure, alteration, or loss.

No method over the internet is perfectly secure; keep your account and verification codes private.

10. Your rights

You can view and edit nickname and avatar; view and delete explicit profile items; turn off scene consent or “use my profile in chat”.

You can request account deletion under Settings → Security; mainland China default cooling-off is 7 days; delays may apply as described in the Terms.

You can revoke push permission or clear local cache (cloud account data remains unless you delete the account).

Contact us under this policy if you believe processing is unlawful; you may also complain to a competent regulator.

11. Minors

Jita is intended primarily for users aged 18 or older. Minors should use the service with a guardian who has read this policy.

If we learn we collected a minor’s data without guardian consent we will delete or anonymize it promptly.

12. Cookies (website)

gitjt.com may use cookies or local storage for language, session, or analytics; browser controls may limit some features.

13. Updates

We may update this policy and publish the version and effective date on the site or in the app. Material changes will be highlighted reasonably; continued use means acceptance where permitted. We will re-obtain consent when required by law.

14. Contact

Controller: Wuhan Jita Information Technology Co., Ltd. Email: support@gitjt.com.

Website ICP filing: 鄂ICP备2026051283号-1. Public security filing: 鄂公网安备42011102006587号.

In-app Settings → Feedback for questions about deletion, profile, or consent.