Privacy policy

Accounts, cloud saving and usage data

You can practise as a guest. Guest data and recordings remain on this device and may be included in your device backup. Registration uses Apple, Google or a one-time email code. Holding Point receives your verified account identifier and email, and a name if provided. We do not receive your Apple or Google password.

Your optional registration profile is stored in our Cloudflare account database. You can skip your name, preparation stage, goals, timeframe, age band and gender. These fields do not change your AI score. Edit them or delete your account in Settings > Your account.

Cloud saving is a separate choice. When enabled, completed aptitude results and completed AI reports, including their answer text, are saved to your account on Cloudflare and can be restored when you sign in on another device. Existing scores are preserved; syncing or reopening does not run AI again. Recordings, unfinished answers and scripts are not uploaded. Other progress remains on the device unless included in a device backup.

Cloud reports and results remain until you delete them or your account. Deleting a synced result is applied to the cloud when a connection is available; offline copies on another device update on its next sync. Turning cloud saving off stops new transfers but does not delete copies already saved. Account deletion removes the active account data, signs out its sessions, and removes that account’s practice history, recordings and drafts from this device. Provider recovery backups may retain deleted records for up to 30 days. Separate AI processing and temporary report-cache retention are described below.

Optional usage analytics is off by default. If enabled, we collect bounded feature, completion and error events to improve the app. Analytics excludes answer text, scripts, transcripts, recordings and search text. Events are retained for about 30 days and removed by daily cleanup. Turning analytics off stops collection and deletes the associated stored usage events. Marketing email is a separate optional choice; it is not required for practice or payment.

The account service retains sessions, provider authorisations and connection information such as IP address and device/browser information for login and abuse prevention. Sessions expire after 30 days without renewal. Our private admin overview shows aggregate counts, not interview answers or recordings. Cloudflare operates internationally; we do not promise that all account processing occurs in Hong Kong.

Deleting the app does not delete cloud account data or cancel an Apple subscription. Use Delete account for the account, and Apple subscription settings to manage billing. Existing purchases can still be restored. Contact support for access, correction or deletion assistance.

Cloud storage currently allows up to 32 MiB of content and 10,000 report/result identities per account. Deleted identities remain in that count to prevent older device copies from restoring deleted items; deleting content does not reset this identity limit. If a limit is reached, the app keeps the local copy and shows that cloud saving has paused. Cloud account storage is separate from the temporary AI recovery cache described below.

Recording and transcription

Microphone access is requested for recording. You may refuse. Formal interview answers require microphone access and AI permission. In build 38 and later, framework practice lets you follow an outline, draft a script, record and replay locally without AI permission or AI analysis. It still requires microphone access to record. Builds 33–37 required AI permission for interview recording practice. Tests, Technical Test, Stages and saved recordings and reports remain available without AI. Earlier builds may offer timer-only practice. Recordings stay on your device and are not uploaded by the app. Optional transcription uses on-device speech recognition without a cloud-recognition fallback. Temporary audio segments are created for recognition and cleanup is attempted afterwards; interruption can leave temporary files. Speech recognition can be wrong. Manual feedback asks you to check the text. With permission for automatic interview reports, a transcript marked complete is sent automatically; an incomplete transcript waits for you to check and confirm it. Build 32 also permits recording with automatic reports off.

Optional AI drafts and interview reports

Availability: AI depends on the app version and service configuration. Builds with AI disabled keep local practice available. Where available, eligible single questions offer two successful score-only interview reports per install; detailed reports, Mock analysis and manual AI drafting or feedback require eligible store-verified access. This policy does not confirm public App Store availability or enable a service.

AI is optional and restricted to people aged 18 or over. In build 33 and later, a first-launch choice explains automatic interview analysis, its provider and data use. Accepting enables automatic reports for formal answers and optional manual drafting and feedback; this choice is managed in Settings. Formal interview answers require this permission. Framework practice in build 38 and later remains local: its script and recording are not sent for AI analysis and it does not use the AI allowance. Other practice and saved reports remain available without AI. Build 32 uses a separate report opt-in before practice. Manual drafting and feedback send only when you tap Generate. Once enabled, complete recognised answer text is sent after recording without another Generate tap; incomplete transcripts wait for you to check them. Permission is remembered on this device and can be withdrawn. Earlier manual permission alone never enables automatic reports; a valid existing automatic-report permission is retained. A change of provider or data use requires fresh agreement.

The app sends the answer or drafting notes, question identifier, provider identifier, answer duration, random install and request identifiers, and purchase proof for paid access to our Cloudflare server. Automatic report requests also include a random report token used for encrypted recovery. Personal information in your answer is transmitted too; do not include identity numbers, health information, other people's names or confidential details. Voice recordings are not uploaded.

Our server checks paid access with Apple. Apple receives the transaction identifier, not your answer. The question and submitted answer or notes go to Alibaba Cloud Model Studio; purchase proof and report recovery tokens are not included in the AI prompt. Requests use a Singapore endpoint, which does not establish that all processing remains in Singapore. Processing may occur outside Hong Kong. Cloudflare receives connection metadata such as IP address and request time. A hashed request source limits trial abuse; your IP address is not included in the AI prompt.

Alibaba Cloud states that customer data is not used for model training. Its default inference retention is no longer than 30 days, subject to legal and service-security exceptions; safety-flagged content can remain for up to two years. We have not verified Zero Data Retention for this account. See the provider's retention policy, privacy notice and cross-border product terms.

Server records and limits

Manual drafting notes and ordinary manual feedback replies are not stored by our application server. The interview report cache is described below. It stores hashed purchase identifiers, verified subscription dates and expiry, daily and monthly successful usage, pending reservations and hashed request identifiers to prevent duplicate charging across devices. Raw purchase identifiers are used transiently for store verification; raw request identifiers are not stored. Quota, subscription grant and hashed request records expire after 63 days and are removed during later usage checks. Purchase verification cache records not checked for 31 days are removed during later purchase updates. Provider cost records linked to a hashed purchase are kept for the current and previous Hong Kong calendar month; older costs are folded into anonymous monthly totals. If requests stop, cleanup is not scheduled automatically. Anonymous aggregate spending totals have no automatic expiry.

Interview reports are cached encrypted, including feedback, quoted answer excerpts and the restructured answer. The answer can therefore be present within the report. Only the score preview is returned without eligible paid access; an upgrade can retrieve the saved details without a new generation. Recovery is available for 30 days from report creation. Expired encrypted content is cleared during later interview report or usage operations; there is no scheduled purge if requests stop. The cache stores hashed install, request, token and request-body identifiers, state and timestamps; successful trial counts have no automatic expiry so cache expiry does not reset the trial. Source rate-limit counters are cleared on later operations after their UTC day. The service uses a client-held random token for report encryption and recovery, not a new account password. Losing it can make the report unrecoverable.

If you choose Report a problem, the report includes the question, reason and feedback, which can contain quoted answer excerpts. These reports expire after 30 days and are removed during subsequent report or usage operations. Do not submit unnecessary personal details. Application request logging is disabled. Service providers may retain their own operational or security records.

The 1-, 3- and 6-month subscriptions each include the same 60 successful AI uses per subscription month. Drafts, manual feedback and interview reports share the allowance across devices. Each successful report counts once per answer, including its restructured answer; a Mock can use several. Reopening a cached report or unlocking its saved details does not generate or charge another use. The allowance is shared with a maximum of 20 successful uses per Hong Kong day. The monthly period follows the original verified subscription start timestamp, using UTC monthly anniversaries and the last day in shorter months; the app displays reset times in Hong Kong time. The 3- and 6-month plans do not receive their entire billing period's uses at once. Unused uses do not roll over. Pending requests reserve a use; failed requests release it. A request that finishes successfully can count even if the device disconnects before receiving it. Global service and spending limits can temporarily stop requests. There is no unlimited AI entitlement. AI is optional practice guidance, can be wrong and does not assess pronunciation from text.

Your choices and deletion

Turn Interview AI off in Settings to stop new formal interview answers and future AI analysis. In build 38 and later, local framework practice, including drafting, recording and replay, remains available. Builds 33–37 stop new interview recording practice when AI is off. Tests, Technical Test, Stages and saved recordings and reports remain available. In build 32, automatic reports can be turned off separately in Interview to review transcripts first, or Enable AI can be turned off in Settings or an AI tool. Turning AI off stops future AI requests and cancels a pending client request without deleting your local notes, drafts, recordings or practice progress. You can also cancel while waiting. Turning AI off or cancelling cannot take back text already transmitted. Your local recording remains separate. Settings lets you delete recordings or reset local practice; individual attempts can also be deleted. Deleting local attempts or resetting app data removes their local report tokens and cached results; it does not delete the server report cache and may prevent recovery. Deleting app data does not cancel an Apple subscription or delete provider records, problem reports or support emails. Contact us about server-held records and use the provider's procedures for its records.

Subscriptions and restoration

The iPhone app is free to download with 1-, 3- and 6-month auto-renewing Full Version subscriptions. The selected price and billing period appear before purchase. Apple handles payment; we do not receive card details. The app saves product, expiry and proof for access and restoration; optional AI sends proof for server verification as described above. Cancellation keeps access through the paid period. Manage renewal in Apple subscription settings. Legitimate earlier non-consumable ownership remains restorable. Android recurring purchases are not part of this first iPhone release.

Other services

Earlier versions with note sharing open the system share sheet with the selected text only when you choose to share. You choose the recipient or service; that service handles the text under its own policy. Note sharing is not available in build 38 and later.

Source links open external websites under their privacy policies. Calendar actions open the system editor; you decide whether to save, and the app does not read your calendar. Read-aloud uses the device speech service; some Android voices can use their provider's online service. If enabled in device settings, Apple or Google can provide developer diagnostics. Public store reviews are handled by those stores.

Support email

Emailing support sends the sender details, text and attachments you choose to include to our email provider. We use them to respond and investigate. Existing support records are retained for 12 months after the last reply, with refund/business records handled separately under applicable retention obligations. Do not send passwords, payment details or identity documents. Contact us to request access, correction or deletion.

Children, security and changes

The app is intended for ages 16 and over; AI is restricted to 18 and over. Transmissions use HTTPS and provider credentials remain on the server. Changes to this policy will be published before taking effect. This policy describes data handling, not confirmation of App Store release or production purchase availability.

私隱政策

帳戶、雲端儲存及使用資料

你可以使用訪客模式。訪客資料及錄音留在手機，亦可能包含在裝置備份。註冊使用 Apple、Google 或電郵一次性驗證碼。Holding Point 會取得已驗證的帳戶識別碼、電郵，以及你選擇提供的姓名；不會取得 Apple 或 Google 密碼。

選填的註冊資料保存在我們的 Cloudflare 帳戶資料庫。姓名、準備階段、目標、預計時間、年齡組別及性別均可略過，亦不會影響 AI 評分。你可以在「設定 > 你的帳戶」更改資料或刪除帳戶。

雲端儲存是獨立選項。啟用後，已完成的能力測驗成績及 AI 報告（包括答案文字）會儲存到 Cloudflare 上的個人帳戶，登入另一部裝置時可還原。原有分數保持不變，同步或重開不會再次使用 AI。錄音、未完成答案及講稿不會上傳；其他進度仍留在手機，除非包含在裝置備份。

雲端報告及成績會保留至你刪除資料或帳戶。已同步結果的刪除會在有連線時套用至雲端；另一裝置的離線副本在下次同步時更新。關閉雲端儲存會停止新的傳送，但不會刪除已儲存副本。刪除帳戶會清除使用中的帳戶資料、登出相關連線，並移除此裝置上屬於該帳戶的練習紀錄、錄音及講稿；供應商的還原備份可能仍保留已刪除資料最多 30 日。獨立的 AI 處理及暫存報告保留時間在下文說明。

選用的使用分析預設關閉。啟用後，我們會收集限定範圍的功能、完成及錯誤事件，以改善 App；不包括答案文字、講稿、逐字稿、錄音及搜尋文字。事件保留約 30 日，並由每日清理程序移除。關閉使用分析會停止收集並刪除相關已存事件。推廣電郵是另一項獨立選擇，不是練習或付款的條件。

帳戶服務會保存登入連線、供應商授權，以及 IP 位址、裝置／瀏覽器等連線資料，用於登入及防止濫用。登入連線在 30 日未續期後失效。私人管理後台顯示彙總數據，不顯示面試答案或錄音。Cloudflare 在全球營運，我們不承諾所有帳戶處理都在香港進行。

刪除 App 不會刪除雲端帳戶資料或取消 Apple 訂閱。帳戶請使用「刪除帳戶」，付款續期請在 Apple 訂閱設定管理。原有購買仍可還原；如需查閱、更正或刪除協助，請聯絡支援。

每個帳戶目前的雲端上限為 32 MiB 內容及 10,000 個報告／成績識別紀錄。已刪除項目的識別紀錄仍計入數量，以防舊裝置副本還原已刪除項目；刪除內容不會重設此數量上限。達到上限時，App 會保留本機副本並顯示雲端儲存暫停。帳戶雲端資料與下述 AI 短期還原暫存分開處理。

錄音與轉錄

錄音前會要求麥克風權限，你可以拒絕。正式面試作答需要麥克風及 AI 許可。第 38 版及之後版本的框架練習可讓你跟隨大綱、撰寫講稿、錄音及重播；內容保留在本機，毋須 AI 許可或 AI 分析，但錄音仍須麥克風權限。第 33 至 37 版的面試錄音練習需要 AI 許可。不使用 AI 仍可使用測驗、技術測驗、甄選階段，以及已保存錄音及報告。較早版本可能提供純計時練習。錄音保留在裝置，不會由 app 上傳。選用轉錄只使用裝置內語音辨識，沒有雲端辨識後備。處理時會建立臨時音訊片段並嘗試清除，中斷可能遺留臨時檔案。轉錄可能出錯。手動回饋會要求你核對文字；同意自動面試報告後，標記完整的逐字稿會自動傳送，不完整逐字稿會等待你核對並確認。第 32 版亦可在關閉自動報告時錄音。

選用 AI 草稿及面試報告

提供範圍：AI 視乎 app 版本及服務設定而定；關閉 AI 的版本仍可本機練習。如服務可用，合資格單題每次安裝可獲兩份成功的評分預覽報告；詳細報告、Mock 分析及手動 AI 草稿／回饋須有符合資格並經商店驗證的權限。本政策不表示 app 已公開上架，亦不會啟用服務。

AI 為選用功能，限 18 歲或以上使用。第 33 版在首次啟動說明自動面試分析、供應商及資料用途。接受後會啟用正式作答的自動報告，以及可選的手動草稿及回饋，之後在設定管理。正式面試作答需要此許可。第 38 版及之後版本的框架練習保留在本機，不會把講稿或錄音傳送作 AI 分析，亦不使用 AI 額度。其他練習及已保存報告不受影響。第 32 版在練習前另行徵求自動報告同意。手動草稿及回饋仍須按生成才傳送。啟用後，錄音完成的完整逐字稿會自動傳送，毋須再次按生成；不完整文字會先等你核對。許可在此裝置保存，可隨時撤回。原有手動許可不會自動開啟自動報告；已有且仍有效的自動報告許可會保留。如供應商或資料用途改變，會再次徵求同意。

App 會把答案或草稿筆記、題目及供應商識別碼、作答時長、隨機安裝及請求識別碼，以及付費功能的購買證明，交予 Cloudflare 伺服器。自動報告請求亦包含供加密還原使用的隨機報告密鑰。答案內的個人資料亦會傳送；請勿加入身份證號碼、健康資料、他人姓名或機密資料。錄音不會上傳。

伺服器向 Apple 核對付費權限，Apple 只收到交易編號，不會收到答案。題目與答案或筆記交予阿里雲 Model Studio；購買證明及報告還原密鑰不會加入 AI 提示。請求使用新加坡端點，但不表示所有處理均在新加坡，資料可能在香港以外處理。Cloudflare 接收 IP 位址及時間等連線資料；雜湊請求來源用於限制濫用試用，IP 不會加入 AI 提示。

阿里雲表示不會用客戶資料訓練模型。推論請求及回覆一般最多保留 30 日，但有法律及服務安全例外；安全篩查標記內容可能最多保留兩年。我們未核實此帳戶已啟用零保留設定。請參閱英文部分連結的保留政策、私隱通知及跨境服務條款。

伺服器紀錄與額度

本應用伺服器不儲存手動草稿筆記及一般手動回饋。面試報告暫存如下所述。它會儲存購買編號的雜湊值、已驗證的訂閱日期及到期日、每日及每月成功用量、處理中的暫留額度，以及防止跨裝置重複扣額度的請求識別碼雜湊值。原始購買編號只在向商店驗證時暫時使用，不儲存原始請求識別碼。額度、訂閱資格及請求雜湊紀錄在 63 日後到期，並在之後的用量檢查清除。31 日未查核的購買驗證快取在之後的購買更新清除。與購買雜湊值相關的供應商成本紀錄保留本月及上一個香港曆月，其後合併至不記名的每月總成本。如請求停止，沒有定時清理程序。不記名總成本沒有自動到期設定。

面試報告會加密暫存，包括回饋、引用片段及重整答案，因此報告可能包含你原本的答案。沒有合資格付費權限時只回傳評分預覽；升級後可取回已存詳情，毋須重新生成。還原期為報告建立起 30 日；到期加密內容在之後的面試報告或用量操作清除，如請求停止則沒有定時清除。暫存亦保存安裝、請求、密鑰及請求內容的雜湊識別碼、狀態與時間；成功試用計數沒有自動到期，以免報告到期重設試用。來源限流計數在 UTC 日期過後的後續操作清除。報告加密及還原使用裝置持有的隨機密鑰，並非新帳戶密碼；遺失密鑰可能無法還原。

如你自行提交問題報告，內容包括題目、原因及回饋，可能包含引用的答案片段。報告在 30 日後到期，並在之後的報告或用量操作清除。請勿提交不必要個人資料。應用請求日誌已關閉，但服務供應商可能保留自身的運作及安全紀錄。

一、三及六個月訂閱均每個訂閱月份提供相同的 60 次成功 AI 用量。草稿及回饋由所有裝置共用額度，每個香港曆日最多成功使用 20 次。每月週期以已驗證的原始訂閱開始時間為準，按 UTC 的每月對應日期重設，較短月份以最後一日計算；app 以香港時間顯示重設時間。三及六個月方案不會一次發放整個付款週期的額度。未用額度不會累積。處理中的請求會暫留一次額度，失敗後釋放；若伺服器已成功生成，即使裝置在收到結果前斷線，仍可能計算用量。整體服務及成本上限可能暫時停止請求，不屬無限 AI。AI 只供練習參考，可能出錯，不能單憑文字評核發音。

選擇、刪除及取消

可在設定關閉面試 AI，停止新的正式面試作答及之後的 AI 分析。第 38 版及之後版本的本機框架練習仍可使用，包括撰寫講稿、錄音及重播。第 33 至 37 版在關閉 AI 後會停止新的面試錄音練習。測驗、技術測驗、甄選階段，以及已保存錄音及報告仍可使用。第 32 版可在 Interview 分開關閉自動報告，先核對逐字稿，或在設定及 AI 工具內關閉「啟用 AI」。關閉 AI 會停止之後的 AI 請求並取消仍在等待的用戶端請求，不會刪除本機筆記、草稿、錄音或練習進度。等待時亦可取消。關閉 AI 或取消都不能收回已傳送資料。錄音保持獨立。設定可刪除錄音或重設本機資料，也可刪除個別作答。刪除個別作答或重設本機資料會刪除相應的本機報告密鑰及結果，不會刪除伺服器報告暫存，並可能無法還原。刪除 app 資料不會取消 Apple 訂閱，亦不會刪除供應商紀錄、問題報告或支援電郵。伺服器資料請聯絡我們，供應商資料依其程序處理。

每份成功面試報告按答案計一次 AI 用量，已包括重整答案；一次 Mock 可用多次，與草稿及手動回饋共用原有每月 60 次、每日最多 20 次的付費額度。重開已存報告或解鎖已存詳情不會重新生成或再次扣額。免費體驗最多兩份成功的合資格單題評分預覽，以安裝識別碼計算；不是每人的身份核實限額，另有來源、整體及成本限制。

訂閱與還原購買

iPhone app 免費下載，完整版提供一、三及六個月自動續訂，購買前顯示所選總價及週期。Apple 處理付款，我們不會收到付款卡資料。App 保留產品、到期日及憑證供使用和還原；選用 AI 會如上傳送購買證明作驗證。取消後可用至已付費期間結束，可在 Apple 訂閱設定管理續訂。合法早期一次購買仍可還原。Android 續訂不屬本次 iPhone 首發範圍。

其他服務與支援

較早而設有筆記分享的版本，只在你自行選擇分享時，把所選文字交予系統分享面板，由你決定收件人或服務，對方按其政策處理。第 38 版及之後版本不提供筆記分享。

來源連結由外部網站依其政策處理。日曆操作只開啟系統編輯器，由你決定儲存，app 不讀取日曆。朗讀使用裝置語音服務，部分 Android 聲音可能使用其供應商的網上服務。裝置允許時，Apple 或 Google 可提供開發者診斷資料；公開商店評論由商店處理。

支援電郵會把你選擇提供的寄件人資料、文字及附件交予電郵供應商，用於回覆及調查。現行支援紀錄在最後回覆後保留 12 個月，退款或業務紀錄則按適用保留責任另行處理。請勿傳送密碼、付款資料或身分文件。如要查閱、更正或刪除，請聯絡我們。

年齡、安全與更新

本 app 對象為 16 歲或以上，AI 限 18 歲或以上。資料透過 HTTPS 傳送，供應商密鑰只保留在伺服器。本政策更改會在生效前發布。本政策說明資料處理方式，不表示 app 已公開上架或正式購買驗證已啟用。