Last updated: 18 October 2026
SuiYin (the “App”) is a personal bookkeeping tool developed and operated by Liang Jialiang (“we”). Given the importance of personal information, we take protective measures in accordance with the Personal Information Protection Law of the People's Republic of China, the Cybersecurity Law of the People's Republic of China and other applicable laws and regulations. This policy explains how we handle your information and the rights you enjoy.
One-sentence commitment: the App is a purely local bookkeeping tool. We operate no servers, and do not collect or upload any of your bookkeeping data. Everything you enter is kept on your own device.
The App requires no registration, no sign-in, and creates no account of any kind;
We do not collect your name, phone number, email address, identity document number, contacts, messages, location, clipboard content, list of installed applications, device identifiers (such as IMEI (International Mobile Equipment Identity) / OAID (Open Anonymous Device Identifier)), or any other personal information;
All data you enter — records, accounts, categories, tags, budgets, debts and plans — is stored in a local database on your device.
“Refresh exchange rates from the internet” is the only feature of the App that uses the network. Exchange-rate data is fetched in two ways:
Automatic: the first time you open the App each day, it checks whether a rate ledger already exists for that day. If not (i.e. rates have not yet been fetched today), it requests the latest rates from the rate service and writes them into a daily local ledger — this is so that the “Rate history” feature has per-day data. If rates were already fetched that day, no further request is made;
Manual: you can also tap “Refresh exchange rates from the internet” on the “Currency & rates” page to refresh immediately.
Request content: currency codes only (for example base=CNY). It contains none of your bookkeeping data, account information or identity information;
Recipient: the third-party public rate service api.frankfurter.dev (data sourced from the public data of the European Central Bank);
That third party may record the requesting IP address and access time for its own operation and abuse prevention; that part is governed by that third party's own privacy policy and is beyond our control;
In all cases, our network requests contain no personal information about you.
We will not use the above information for advertising delivery, user profiling, big-data analysis, or any purpose unrelated to bookkeeping.
When you voluntarily sign in with your Huawei ID, we obtain the following information through Huawei Account Kit:
(1) Huawei ID unique identifier (unionID): used to recognise you as the signed-in user within the App; it is necessary to implement sign-in;
(2) Your Huawei ID nickname and profile picture: used only for display on the “Me” page. You may sign out at any time, and on sign-out we immediately delete the locally cached profile-picture file.
We do not obtain your phone number, contacts, location, calendar or any other information.
The above information is stored only on your device (Preferences and a local cache file); we never upload it to any server. If you submit feedback within the App and actively tick “include account identifier”, we will also submit that identifier, solely for acknowledgement and de-duplication. This is entirely triggered by you; you can submit feedback just as well without it.
You may also never use the sign-in feature at all — every bookkeeping feature of the App works fully when signed out, and your data is unaffected either way.
The App requests only 3 system permissions, all at the system_grant level — they take effect on installation and are never requested via pop-up during use:
· Network access (ohos.permission.INTERNET): used only when you refresh exchange rates from the internet, to access the third-party public rate API;
· Agent reminder (ohos.permission.PUBLISH_AGENT_REMINDER): sends a local reminder notification before a scheduled task you have set comes due;
· Gesture detection (ohos.permission.DETECT_GESTURE): recognises your grip posture to automatically adjust the position of the floating button, avoiding occlusion and mis-taps.
The App does not request sensitive permissions such as camera, microphone, location, contacts, messages, calendar, phone, app list, or storage read/write.
Other system capabilities (no permission application involved):
Choosing an image: when you set a custom icon for an account or category, you pick an image through the system gallery picker. We can only obtain the single image you actively selected; we cannot access your gallery and do not read any other photos;
Clipboard: we only write to the clipboard when you tap “Copy environment info”. The App never reads clipboard contents;
System backup and restore: the App supports the backup capability provided by the system. If you enable cloud backup in system settings, your app data is uploaded by the system to your Huawei Account cloud space. That feature is provided by the system and protected by your account; we cannot access it;
Local export: backup files are exported by you to the App's sandbox directory. Whether to share, and with whom, is entirely your decision.
Storage location: all data is stored only locally on your device and is never transmitted to any server of ours (we have none);
Storage encryption: at-rest encryption is enabled for the local database; the encryption key is managed by the HarmonyOS system keystore (HUKS) and cannot be exported by the App itself;
Export encryption: backup files are passphrase-encrypted (PBKDF2-SHA256 key derivation and AES-256-GCM). The passphrase is never written to disk, never cached and cannot be recovered — please remember it carefully;
Retention: how long data is kept is entirely up to you. When you delete data within the App or uninstall the App, the related data is deleted and we retain no copies.
No sharing: we do not provide any of your information to third parties (including affiliates and partners);
No transfer: we do not transfer your information for any reason;
No public disclosure: we do not publicly disclose your information;
No third-party SDK (Software Development Kit): the App integrates no third-party advertising, analytics, push, mapping or payment SDK;
Sole exception: only where laws and regulations explicitly require, or where a judicial or administrative authority requests under statutory procedure. As noted, however, we do not hold your bookkeeping data and therefore are objectively unable to provide it.
Under the Personal Information Protection Law of the People's Republic of China, you have the rights to know, decide, access, copy, correct, delete and withdraw consent with respect to your personal information. Since the App collects no personal information, you can exercise these rights directly within the App:
Access, correct, delete: view, edit or delete any record directly in the App. To delete everything at once, uninstall the App — uninstalling clears all data the App holds on your device, and we retain no copies;
Copy, transfer: use “Export backup” to export an encrypted file, then keep it yourself or migrate it to a new device;
Withdraw consent: simply uninstall the App;
Enquiries and complaints: if you have any questions, comments or suggestions about this policy, contact us as described in Section 7.
The App is a general-purpose bookkeeping tool, is not designed for children under the age of 14, and does not knowingly collect children's personal information (it collects no personal information at all). If you are a minor, please read this policy and use the App accompanied by your guardian.
We may update this policy from time to time. After an update, we will notify you through an in-App notice or release notes, and update the “Last updated” date on this page at the same time. If the change is material (for example, if we began collecting personal information), we will seek your consent again.
Developer: Liang Jialiang
Email: liangandy@petalmail.com
WeChat: LiangAndy26
We will reply within 15 working days of receiving your feedback.
If you are dissatisfied with our reply — in particular where the handling of personal information has harmed your legitimate rights and interests — you may also bring a lawsuit before a people's court of competent jurisdiction, or complain to / report to the cyberspace administration, the industry and information technology authority, or the market supervision authority.