Overcomer
Privacy Policy
隐私协议
Part I — English
1. Introduction
This Privacy Policy explains how Overcomer (the "App") collects, uses, stores, and protects your personal information. We process your data on the principles of lawfulness, fairness, and necessity, and comply with applicable data protection laws, including the UK GDPR.
2. Information We Collect
(a) Account information: phone number or email address (for registration and login verification), display name, avatar, and bio; (b) Public or shared social content you choose to publish; (c) Usage data: language preference and basic app usage records; (d) Device information: a per-install identifier, device label, and public encryption keys needed to secure and deliver messages. Private-chat text, media keys, and recoverable previews are end-to-end encrypted before leaving your device; our servers receive only encrypted envelopes and encrypted chat-media bytes.
3. How We Use Information
We use collected information to provide chat and social features, verify your identity, keep the service secure, handle reports and content violations, improve the product experience, and fulfil legal obligations. We will not use your personal information for purposes not stated in this policy.
4. Sharing of Information
We do not sell your personal information to third parties. We may share information only: (a) with technical service providers necessary to deliver the service (such as SMS/email verification code delivery), limited to what is necessary; (b) when required by law or competent authorities; or (c) with your explicit consent.
5. Storage and Protection
Private chats are end-to-end encrypted. Decrypted history is kept in an encrypted local store, and device private keys stay in the device's secure storage. For each active device, our server holds only device-addressed encrypted envelopes for delivery and deletes them after acknowledgment or no later than 7 days; encrypted chat media is deleted as soon as delivery retention no longer requires it. Notifications contain only a generic new-message notice, not message text.
6. Optional Chat Statistics
Chat statistics are off by default, including for older app versions, and start only after your separate, explicit opt-in in Settings. For consenting users, we count only successful encrypted sends and range-based distinct sender counts. Encrypted control payloads are included because we cannot identify their type. We do not store message content, keys, ciphertext, recipients, or conversations for analytics. Pseudonymous daily sender marks and a separate deduplication digest are retained for no more than 180 days; anonymous aggregate send totals are retained. Withdrawal is available in the same setting, stops collection, and removes sender-day records associated with you, but does not undo already anonymous aggregate totals. Standalone deduplication hashes may remain for up to 180 days solely for idempotency. Deduplication data is not chat history, and mailbox retention remains no more than 7 days. This account-level choice is synced with the server.
6a. Optional App Usage Statistics
App usage statistics are a separate, default-off choice in Settings > Privacy permissions. Chat-statistics consent does not enable this choice. Declining does not affect use of the App. Only signed-in users who separately consent and use a supporting app version are covered, and collection also requires the server's rollout switch to be enabled. Foreground signals, including browsing without chatting, provide distinct account counts over UTC date ranges. A heartbeat is sent about every 30 seconds while foregrounded; a temporary online lease expires after 90 seconds without renewal. The App tries to end the lease when backgrounded. Online counts are estimates from client-reported foreground signals, not server-verified human activity. Background synchronisation, push delivery, the admin dashboard, and the official website do not count. We retain only necessary pseudonymous account-day marks for at most 180 days and temporary session leases, not chat content, recipients, conversations, page-view trails, IP addresses, or location for these metrics. Temporary account-linkable ordering metadata rejects delayed signals and is retained for at most 7 days plus 60 seconds, bounded by the request token lifetime; it does not extend online status. You can withdraw in the same setting; withdrawal stops collection and deletes your linkable activity marks, online leases, and ordering metadata. Account deletion also removes them. Your separate chat-statistics choice is unchanged. Older clients and periods before collection are not backfilled.
7. Contacts and Invitations
Access to your phone contacts is optional and only ever happens when you explicitly trigger it. Contact names and other details stay on your device and are never uploaded to our servers. When you choose to find friends, only normalised phone numbers are temporarily processed within an authenticated, limited matching request to check for existing users; these numbers are used solely for that match and are not retained afterwards. When you invite someone, the App simply opens your device's system SMS composer with a prefilled message, and you decide whether to send it — Overcomer never sends SMS messages silently or on your behalf.
8. Your Rights
You have the right to access, correct, export, or delete your personal information. You can manage your profile in Settings or request account deletion. Deletion starts a 30-day cooldown, after which your personally identifiable information is permanently erased. You may separately give or withdraw consent for optional analytics. For a data request, email contact@consumerwill001.com.
9. Data Retention
We retain your information only as long as necessary for the purposes described in this policy. Thirty days after account deletion, personally identifiable information is irreversibly purged; records that must be kept for legal compliance (such as audit logs) are retained in minimised form.
10. Children
The App is intended for users aged 13 and over and does not offer services directed at children. If we learn that we have inadvertently collected personal information from a child under 13, we will delete it promptly.
11. Updates and Contact
This policy may be updated from time to time, and material changes will be communicated prominently in the App. If you have any questions or requests regarding this policy or the handling of your personal information, please contact us at contact@consumerwill001.com.
第二部分 — 中文
1. 引言
本《隐私协议》说明 Overcomer（以下简称“本应用”）如何收集、使用、存储和保护您的个人信息。我们遵循合法、正当、必要的原则处理您的数据，并遵守适用的数据保护法律（包括 UK GDPR）。
2. 我们收集的信息
（a）账号信息：手机号或邮箱（用于注册和登录验证）、用户名、头像、个人简介；（b）您选择发布的公开或共享社交内容；（c）使用数据：语言偏好、基本的应用使用记录；（d）设备信息：用于安全投递消息的每次安装标识、设备名称和公开加密密钥。私聊正文、媒体密钥和可还原预览会在离开设备前完成端到端加密；服务器仅接收加密信封和已加密的聊天媒体字节。
3. 信息的使用
我们将收集的信息用于：提供聊天与社交功能、验证您的身份、维护服务安全、处理举报与违规内容、改进产品体验，以及履行法律义务。我们不会将您的个人信息用于本协议未载明的其他用途。
4. 信息的共享
我们不会向第三方出售您的个人信息。仅在以下情形下可能共享：（a）为提供服务所必需的技术服务商（如短信/邮件验证码发送服务），且仅限必要范围；（b）依据法律法规或主管机关的强制性要求；（c）获得您的明确同意。
5. 信息的存储与保护
私聊采用端到端加密。解密后的历史保存在本机加密存储中，设备私钥只保存在设备安全存储。服务器为每台有效设备仅保存待投递的设备寻址密文信封，在确认投递后删除，最迟不超过 7 天；加密聊天媒体在投递保留不再需要后尽快删除。后台通知只显示不含正文的通用“收到新消息”提示。
6. 可选聊天统计
聊天统计默认关闭（包括旧版应用），只有您在“设置”中单独明确选择加入后才会开始。对于已同意的用户，我们仅统计成功发送的加密消息次数和一定范围内的不重复发送者数量。由于无法识别类型，加密控制载荷也会计入。分析不会存储消息内容、密钥、密文、收件人或会话。假名化的每日发送者标记与独立去重摘要最长保留 180 天；匿名汇总发送量会保留。您可在同一设置中撤回同意；撤回会停止收集并删除与您关联的发送者每日记录，但无法撤销已形成的匿名汇总总数。独立去重哈希可仅为幂等目的继续保留最长 180 天。去重数据不是聊天历史，加密邮箱投递仍最长不超过 7 天。此选择按账号与服务器同步。
6a. 可选 App 使用统计
App 使用统计是“设置 > 隐私权限”中独立、默认关闭的选项，不继承聊天统计授权。拒绝不影响 App 使用。统计仅覆盖单独同意且使用支持此功能版本的登录用户，还需服务端放量开关开启才会采集。前台使用信号（包括只浏览、不聊天）用于按 UTC 日期区间统计不重复账号数。前台约每 30 秒发送一次心跳，临时在线租约在停止续租 90 秒后失效；退后台时尽力立即结束租约。在线人数只是客户端前台信号估计，不是服务端可验证的真实操作人数。后台同步、推送送达、管理后台及官网访问不计入。仅保留必要的假名化账号日标记（最多 180 天）和临时会话租约，不为这些指标记录聊天正文、收件人、会话、页面浏览轨迹、IP 或位置。为拒绝迟到信号，临时可关联账号的顺序元数据最多保留 7 天加 60 秒，并受请求令牌有效期限制，不延长在线状态。您可在同一设置中撤回：停止采集并删除与您关联的活跃记录、在线租约和顺序元数据；注销账号也会删除这些数据。原聊天统计选择不变。旧版客户端和采集前历史不会补造。
7. 通讯录与邀请
对手机通讯录的访问是可选的，且仅在您主动触发时才会进行。联系人姓名及其他详情始终保留在您的设备上，绝不会上传至我们的服务器。当您选择查找好友时，仅有规范化后的电话号码会在一次经过身份验证的受限匹配请求中被临时处理，用于检索是否为现有用户；这些号码仅用于本次匹配，之后不会被保留。当您邀请他人时，本应用仅会打开您设备的系统短信编辑器并预填一条消息，是否发送由您自行决定——Overcomer 绝不会在您不知情的情况下或代替您静默发送短信。
8. 您的权利
您有权访问、更正、导出或删除您的个人信息。您可以在“设置”中管理个人资料，或申请注销账号。注销后进入 30 天冷静期，期满后您的个人身份信息将被永久删除。您可就可选分析统计单独作出或撤回同意。数据请求请发送至 contact@consumerwill001.com。
9. 数据保留
我们仅在实现本协议所述目的所必需的期限内保留您的信息。账号注销 30 天后，个人身份信息将被不可逆地清除；为满足法律要求而必须保留的记录（如合规审计日志）将以最小化方式保存。
10. 未成年人保护
本应用面向 13 周岁及以上用户，不面向儿童提供服务。若我们发现误收集了未满 13 周岁儿童的个人信息，将尽快删除。
11. 协议更新与联系方式
本协议可能不时更新，重大变更将在应用内以显著方式通知您。如您对本协议或个人信息处理有任何疑问或请求，请发送邮件至 contact@consumerwill001.com 与我们联系。