1. Overview of Data Handling & Zero-PII Standard
BaoDao Alert, developed by Cymbidium Holdings LLC and Cymbidium Labs LLC (Registered Office: 30 N Gould St, Ste N, Sheridan, WY 82801), is engineered under a strict Zero-PII architecture. We never collect, transmit, or store personal identifying information—such as legal names, passport numbers, national IDs, birth dates, or appointment modification tokens—on central cloud servers. All credentials and optional booking profiles are held exclusively in hardware-encrypted storage on your device.
2. How to Delete Your Data
In full compliance with Apple App Store Guideline 5.1.1(v) and Google Play Account & Data Deletion policies, users can immediately and irreversibly delete stored data using either of the following methods:
Method A: In-App Instant Self-Service Deletion (Recommended)
Open BaoDao Alert on your iOS or Android device, navigate to Settings, and choose from three dedicated self-service deletion options:
- 1. "Delete Everything & Reset App" (Complete Device Wipe): Under the Data Privacy & Deletion section, tap "Delete Everything & Reset App". This immediately and irreversibly purges ALL stored credentials from your device's hardware enclave (Apple Keychain / Android KeyStore)—including active appointment confirmation codes, applicant booking profile (name, birthday, phone, email, address), custom target preferences, and cached passes—and resets the application to factory initial state.
- 2. "Disconnect & Remove Appointment": Under the Data Privacy & Deletion section, tap "Disconnect & Remove Appointment". This permanently purges your active consular modify token and confirmation codes from hardware secure storage, stopping all tracking while keeping your optional applicant profile saved for future bookings.
- 3. "Delete Booking Profile": Under the Booking Profile section, tap "Clear" (or inside the edit screen tap "Delete Booking Profile"). This permanently erases all applicant details (name, date of birth, phone, email, and address) from device hardware secure storage.
Method B: Manual Cloud Token Deletion Request
If you have uninstalled the app and want to ensure that your device's anonymous push notification registration token is purged from our dispatch servers:
- Email our compliance department at: privacy@baodaoalert.com or developer@cymbidiumlabs.com.
- Subject line:
Data Deletion Request - BaoDao Alert. - Provide your Anonymous Device GUID (found in the app settings, if known) or simply request purging of uninstalled notification tokens.
- All associated push tokens and routing logs will be permanently deleted within 24–48 hours.
3. Data Types Deleted vs. Retained
| Data Type | Status Upon Deletion | Retention Period |
|---|---|---|
| Appointment Modify Tokens & Codes | Immediately wiped from hardware Keychain / KeyStore | 0 days (Permanent erasure) |
| Applicant Booking Profile (Name, Birthday, Contact, Address) | Immediately wiped from hardware Keychain / KeyStore | 0 days (Never stored on servers) |
| Push Notification Registration Tokens (FCM) | Permanently purged from dispatch servers | Max 24–48 hours |
| User Names, Passports, Personal PII on Servers | Never collected or stored on servers | 0 days (Zero retention) |
| Financial & Payment Details | Processed by Apple StoreKit & Google Play Billing (0 card data stored). Anonymous transaction IDs in anti-replay audit logs are permanently purged or disassociated upon request. | We retain 0 payment data |