1. Records saved on your device
The app stores topic identifiers, self-assessment states and marking times, together with the content version, last reading position, scope, filters, search terms and topics visited in the current review. Search terms may remain with your saved reading position.
These records support progress summaries, weak-topic filters and continuing revision. The current record model has no name, phone-number or account fields.
2. Content, connections and sharing
Learning content and diagrams are bundled with the app. The current learning flow does not upload study records to developer servers. There is no online content download, account, cloud sync or in-app import/export.
The current implementation has no AI, question bank, ads, payments, third-party analytics SDK or third-party crash-upload SDK. It has no feature for sharing study records with advertising or analytics services.
3. Device permissions
The current iOS implementation does not request camera, microphone, photo-library, location, contacts, tracking or notification authorization. New permissions or data processing would need updated information in the relevant version.
4. Retention, clearing and system backups
Study records stay in the app sandbox. There is currently no automatic expiry rule, delete-all-records feature or one-tap reset.
Clearing a mark changes one topic to unmarked and records the time. It does not delete all study records or the reading position.
The project does not exclude these files from operating-system backups, so a device backup may contain copies. System backups follow device settings and system services; they are not app-provided cloud sync. Uninstalling, offloading and restoring backups depend on the device. Uninstalling cannot be promised to remove every copy.
5. Save failures and record protection
The app writes local records atomically and updates the visible state only after a successful write. A save failure shows the Simplified Chinese message meaning not yet saved, with retry and discard options. Discarding cancels only the unsaved operation.
A read failure does not automatically delete or reset the original file. Keep the current state when an error occurs; reinstalling or clearing data may make local records unrecoverable.
6. Website visits and email
App records and website visits are handled separately. To serve pages, diagnose faults and protect the site, the server logs request IP, time, path and query, status, transferred bytes, referring page, browser information, request identifiers and timing. The site has no accounts, contact forms, cookies, ads or third-party analytics scripts. Rotation is checked daily and retains the current file and up to 400 rotated archives. Empty files may skip rotation, so the period covered varies with traffic. Website logs do not read local app study records.
If you email support@bonnwl.com, we receive your contact details and the content you send only to answer and follow up on enquiries and related rights requests. We retain it for the shortest time needed for those purposes. Use the same address to request access, correction or deletion. If legal retention is required, we explain the basis and scope. Send only app/system versions, the time and visible messages, with private screenshot details covered. Do not send a student's name, school/class, precise address or full study-record file.
7. Young learners and guardians
The app is intended for junior-high learners. Read this information and use the app with guardian guidance. The current app does not ask for a real name, date of birth, school or guardian contact details.
Users under 14 should use the app with guardian guidance and have a guardian contact support. Routine enquiries need no child's identity documents or study records. Where a guardian's request needs verification, we check only information necessary for that request; ID photos are not routine feedback materials. Guardians can request access, correction or deletion of a child's information they supplied. We stop using and review deletion of information beyond what is needed.
8. Questions and correction requests
Contact support@bonnwl.com about this notice, support information you sent or website visit data. Requests will be checked for the relevant processing activity. There is no app-account closure or server-side study-record deletion feature.
The developer currently holds no copy of the app's local study records and cannot remotely read, change or delete them. Sending an email does not erase data on your device.
9. Version and effective date
This policy is effective October 17, 2026. Changes to data purposes, permissions, third-party services or server capabilities will be reflected here, with further notice or consent where required. App data handling follows the actual version, before and after release.