Privacy policy

Holding Point is published by Chung Chit Ho. Contact holdingpointhk@gmail.com for privacy, access, correction or deletion requests. The app has no app account, advertising or tracking SDK. Optional AI and store verification require a connection; they are described separately from local practice.

On your device

Stage dates, checklists, bookmarks, notes, drafts, self-reviews, practice results, recordings, saved feedback, language choices and purchase status are kept in app storage. Your device backup may include them. The developer cannot browse your device backup. Updating preserves app data; reinstalling alone does not restore it.

Portable report backups (build 34 and later)

Report backup in Settings lets you export and restore completed AI reports and answer text. The file does not include recordings, unfinished answers, AI permission or subscription access. You choose where to save or share this unencrypted file. Holding Point does not upload it. Restoring adds missing reports without replacing existing reports or settings. A restored free preview includes only the details present in that backup. No server recovery tokens, purchase proof or installation identifiers are included. Backup files are not automatically updated; export again after new reports. Removing a report in the app does not remove copies you previously exported.

Recording and transcription

Microphone access is requested for recording. You may refuse. Formal interview answers require microphone access and AI permission. In build 38 and later, framework practice lets you follow an outline, draft a script, record and replay locally without AI permission or AI analysis. It still requires microphone access to record. Builds 33–37 required AI permission for interview recording practice. Tests, Technical Test, Stages and saved recordings and reports remain available without AI. Earlier builds may offer timer-only practice. Recordings stay on your device and are not uploaded by the app. Optional transcription uses on-device speech recognition without a cloud-recognition fallback. Temporary audio segments are created for recognition and cleanup is attempted afterwards; interruption can leave temporary files. Speech recognition can be wrong. Manual feedback asks you to check the text. With permission for automatic interview reports, a transcript marked complete is sent automatically; an incomplete transcript waits for you to check and confirm it. Build 32 also permits recording with automatic reports off.

Optional AI drafts and interview reports

Availability: AI depends on the app version and service configuration. Builds with AI disabled keep local practice available. Where available, eligible single questions offer two successful score-only interview reports per install; detailed reports, Mock analysis and manual AI drafting or feedback require eligible store-verified access. This policy does not confirm public App Store availability or enable a service.

AI is optional and restricted to people aged 18 or over. In build 33 and later, a first-launch choice explains automatic interview analysis, its provider and data use. Accepting enables automatic reports for formal answers and optional manual drafting and feedback; this choice is managed in Settings. Formal interview answers require this permission. Framework practice in build 38 and later remains local: its script and recording are not sent for AI analysis and it does not use the AI allowance. Other practice and saved reports remain available without AI. Build 32 uses a separate report opt-in before practice. Manual drafting and feedback send only when you tap Generate. Once enabled, complete recognised answer text is sent after recording without another Generate tap; incomplete transcripts wait for you to check them. Permission is remembered on this device and can be withdrawn. Earlier manual permission alone never enables automatic reports; a valid existing automatic-report permission is retained. A change of provider or data use requires fresh agreement.

The app sends the answer or drafting notes, question identifier, provider identifier, answer duration, random install and request identifiers, and purchase proof for paid access to our Cloudflare server. Automatic report requests also include a random report token used for encrypted recovery. Personal information in your answer is transmitted too; do not include identity numbers, health information, other people's names or confidential details. Voice recordings are not uploaded.

Our server checks paid access with Apple. Apple receives the transaction identifier, not your answer. The question and submitted answer or notes go to Alibaba Cloud Model Studio; purchase proof and report recovery tokens are not included in the AI prompt. Requests use a Singapore endpoint, which does not establish that all processing remains in Singapore. Processing may occur outside Hong Kong. Cloudflare receives connection metadata such as IP address and request time. A hashed request source limits trial abuse; your IP address is not included in the AI prompt.

Alibaba Cloud states that customer data is not used for model training. Its default inference retention is no longer than 30 days, subject to legal and service-security exceptions; safety-flagged content can remain for up to two years. We have not verified Zero Data Retention for this account. See the provider's retention policy, privacy notice and cross-border product terms.

Server records and limits

Manual drafting notes and ordinary manual feedback replies are not stored by our application server. The interview report cache is described below. It stores hashed purchase identifiers, verified subscription dates and expiry, daily and monthly successful usage, pending reservations and hashed request identifiers to prevent duplicate charging across devices. Raw purchase identifiers are used transiently for store verification; raw request identifiers are not stored. Quota, subscription grant and hashed request records expire after 63 days and are removed during later usage checks. Purchase verification cache records not checked for 31 days are removed during later purchase updates. Provider cost records linked to a hashed purchase are kept for the current and previous Hong Kong calendar month; older costs are folded into anonymous monthly totals. If requests stop, cleanup is not scheduled automatically. Anonymous aggregate spending totals have no automatic expiry.

Interview reports are cached encrypted, including feedback, quoted answer excerpts and the restructured answer. The answer can therefore be present within the report. Only the score preview is returned without eligible paid access; an upgrade can retrieve the saved details without a new generation. Recovery is available for 30 days from report creation. Expired encrypted content is cleared during later interview report or usage operations; there is no scheduled purge if requests stop. The cache stores hashed install, request, token and request-body identifiers, state and timestamps; successful trial counts have no automatic expiry so cache expiry does not reset the trial. Source rate-limit counters are cleared on later operations after their UTC day. The service uses a client-held random token for report encryption and recovery, not a new account password. Losing it can make the report unrecoverable.

If you choose Report a problem, the report includes the question, reason and feedback, which can contain quoted answer excerpts. These reports expire after 30 days and are removed during subsequent report or usage operations. Do not submit unnecessary personal details. Application request logging is disabled. Service providers may retain their own operational or security records.

The 1-, 3- and 6-month subscriptions each include the same 60 successful AI uses per subscription month. Drafts, manual feedback and interview reports share the allowance across devices. Each successful report counts once per answer, including its restructured answer; a Mock can use several. Reopening a cached report or unlocking its saved details does not generate or charge another use. The allowance is shared with a maximum of 20 successful uses per Hong Kong day. The monthly period follows the original verified subscription start timestamp, using UTC monthly anniversaries and the last day in shorter months; the app displays reset times in Hong Kong time. The 3- and 6-month plans do not receive their entire billing period's uses at once. Unused uses do not roll over. Pending requests reserve a use; failed requests release it. A request that finishes successfully can count even if the device disconnects before receiving it. Global service and spending limits can temporarily stop requests. There is no unlimited AI entitlement. AI is optional practice guidance, can be wrong and does not assess pronunciation from text.

Your choices and deletion

Turn Interview AI off in Settings to stop new formal interview answers and future AI analysis. In build 38 and later, local framework practice, including drafting, recording and replay, remains available. Builds 33–37 stop new interview recording practice when AI is off. Tests, Technical Test, Stages and saved recordings and reports remain available. In build 32, automatic reports can be turned off separately in Interview to review transcripts first, or Enable AI can be turned off in Settings or an AI tool. Turning AI off stops future AI requests and cancels a pending client request without deleting your local notes, drafts, recordings or practice progress. You can also cancel while waiting. Turning AI off or cancelling cannot take back text already transmitted. Your local recording remains separate. Settings lets you delete recordings or reset local practice; individual attempts can also be deleted. Deleting local attempts or resetting app data removes their local report tokens and cached results; it does not delete the server report cache and may prevent recovery. Deleting app data does not cancel an Apple subscription or delete provider records, problem reports or support emails. Contact us about server-held records and use the provider's procedures for its records.

Subscriptions and restoration

The iPhone app is free to download with 1-, 3- and 6-month auto-renewing Full Version subscriptions. The selected price and billing period appear before purchase. Apple handles payment; we do not receive card details. The app saves product, expiry and proof for access and restoration; optional AI sends proof for server verification as described above. Cancellation keeps access through the paid period. Manage renewal in Apple subscription settings. Legitimate earlier non-consumable ownership remains restorable. Android recurring purchases are not part of this first iPhone release.

Other services

Earlier versions with note sharing open the system share sheet with the selected text only when you choose to share. You choose the recipient or service; that service handles the text under its own policy. Note sharing is not available in build 38 and later.

Source links open external websites under their privacy policies. Calendar actions open the system editor; you decide whether to save, and the app does not read your calendar. Read-aloud uses the device speech service; some Android voices can use their provider's online service. If enabled in device settings, Apple or Google can provide developer diagnostics. Public store reviews are handled by those stores.

Support email

Emailing support sends the sender details, text and attachments you choose to include to our email provider. We use them to respond and investigate. Existing support records are retained for 12 months after the last reply, with refund/business records handled separately under applicable retention obligations. Do not send passwords, payment details or identity documents. Contact us to request access, correction or deletion.

Children, security and changes

The app is intended for ages 16 and over; AI is restricted to 18 and over. Transmissions use HTTPS and provider credentials remain on the server. Changes to this policy will be published before taking effect. This policy describes data handling, not confirmation of App Store release or production purchase availability.

私隱政策

Holding Point 由 Chung Chit Ho 發布。如要查閱、更正或刪除個人資料，請聯絡 holdingpointhk@gmail.com。本 app 沒有 app 帳戶、廣告或追蹤 SDK。以下分開說明本機練習、選用 AI 及購買驗證。

裝置內的資料

階段日期、清單、收藏、筆記、草稿、自我檢討、練習結果、錄音、已儲存回饋、語言及購買狀態存於 app 儲存空間。裝置備份可能包括這些資料，開發者無法瀏覽你的備份。更新會保留資料；單靠重新安裝不會還原資料。

可攜式報告備份（第 34 版及之後版本）

設定中的報告備份可匯出及還原已完成 AI 報告和答案文字。檔案不包括錄音、未完成答案、AI 同意、訂閱權限、伺服器還原密鑰、購買證明或安裝識別碼。由你選擇保存或分享這份未加密檔案的位置，Holding Point 不會自行上傳。還原只加入未有的報告，不會取代現有報告或設定。免費預覽備份只包含當時可見的詳情。備份不會自動更新；完成新報告後需要再次匯出。刪除 App 內的報告，不會刪除你之前匯出的副本。

錄音與轉錄

錄音前會要求麥克風權限，你可以拒絕。正式面試作答需要麥克風及 AI 許可。第 38 版及之後版本的框架練習可讓你跟隨大綱、撰寫講稿、錄音及重播；內容保留在本機，毋須 AI 許可或 AI 分析，但錄音仍須麥克風權限。第 33 至 37 版的面試錄音練習需要 AI 許可。不使用 AI 仍可使用測驗、技術測驗、甄選階段，以及已保存錄音及報告。較早版本可能提供純計時練習。錄音保留在裝置，不會由 app 上傳。選用轉錄只使用裝置內語音辨識，沒有雲端辨識後備。處理時會建立臨時音訊片段並嘗試清除，中斷可能遺留臨時檔案。轉錄可能出錯。手動回饋會要求你核對文字；同意自動面試報告後，標記完整的逐字稿會自動傳送，不完整逐字稿會等待你核對並確認。第 32 版亦可在關閉自動報告時錄音。

選用 AI 草稿及面試報告

提供範圍：AI 視乎 app 版本及服務設定而定；關閉 AI 的版本仍可本機練習。如服務可用，合資格單題每次安裝可獲兩份成功的評分預覽報告；詳細報告、Mock 分析及手動 AI 草稿／回饋須有符合資格並經商店驗證的權限。本政策不表示 app 已公開上架，亦不會啟用服務。

AI 為選用功能，限 18 歲或以上使用。第 33 版在首次啟動說明自動面試分析、供應商及資料用途。接受後會啟用正式作答的自動報告，以及可選的手動草稿及回饋，之後在設定管理。正式面試作答需要此許可。第 38 版及之後版本的框架練習保留在本機，不會把講稿或錄音傳送作 AI 分析，亦不使用 AI 額度。其他練習及已保存報告不受影響。第 32 版在練習前另行徵求自動報告同意。手動草稿及回饋仍須按生成才傳送。啟用後，錄音完成的完整逐字稿會自動傳送，毋須再次按生成；不完整文字會先等你核對。許可在此裝置保存，可隨時撤回。原有手動許可不會自動開啟自動報告；已有且仍有效的自動報告許可會保留。如供應商或資料用途改變，會再次徵求同意。

App 會把答案或草稿筆記、題目及供應商識別碼、作答時長、隨機安裝及請求識別碼，以及付費功能的購買證明，交予 Cloudflare 伺服器。自動報告請求亦包含供加密還原使用的隨機報告密鑰。答案內的個人資料亦會傳送；請勿加入身份證號碼、健康資料、他人姓名或機密資料。錄音不會上傳。

伺服器向 Apple 核對付費權限，Apple 只收到交易編號，不會收到答案。題目與答案或筆記交予阿里雲 Model Studio；購買證明及報告還原密鑰不會加入 AI 提示。請求使用新加坡端點，但不表示所有處理均在新加坡，資料可能在香港以外處理。Cloudflare 接收 IP 位址及時間等連線資料；雜湊請求來源用於限制濫用試用，IP 不會加入 AI 提示。

阿里雲表示不會用客戶資料訓練模型。推論請求及回覆一般最多保留 30 日，但有法律及服務安全例外；安全篩查標記內容可能最多保留兩年。我們未核實此帳戶已啟用零保留設定。請參閱英文部分連結的保留政策、私隱通知及跨境服務條款。

伺服器紀錄與額度

本應用伺服器不儲存手動草稿筆記及一般手動回饋。面試報告暫存如下所述。它會儲存購買編號的雜湊值、已驗證的訂閱日期及到期日、每日及每月成功用量、處理中的暫留額度，以及防止跨裝置重複扣額度的請求識別碼雜湊值。原始購買編號只在向商店驗證時暫時使用，不儲存原始請求識別碼。額度、訂閱資格及請求雜湊紀錄在 63 日後到期，並在之後的用量檢查清除。31 日未查核的購買驗證快取在之後的購買更新清除。與購買雜湊值相關的供應商成本紀錄保留本月及上一個香港曆月，其後合併至不記名的每月總成本。如請求停止，沒有定時清理程序。不記名總成本沒有自動到期設定。

面試報告會加密暫存，包括回饋、引用片段及重整答案，因此報告可能包含你原本的答案。沒有合資格付費權限時只回傳評分預覽；升級後可取回已存詳情，毋須重新生成。還原期為報告建立起 30 日；到期加密內容在之後的面試報告或用量操作清除，如請求停止則沒有定時清除。暫存亦保存安裝、請求、密鑰及請求內容的雜湊識別碼、狀態與時間；成功試用計數沒有自動到期，以免報告到期重設試用。來源限流計數在 UTC 日期過後的後續操作清除。報告加密及還原使用裝置持有的隨機密鑰，並非新帳戶密碼；遺失密鑰可能無法還原。

如你自行提交問題報告，內容包括題目、原因及回饋，可能包含引用的答案片段。報告在 30 日後到期，並在之後的報告或用量操作清除。請勿提交不必要個人資料。應用請求日誌已關閉，但服務供應商可能保留自身的運作及安全紀錄。

一、三及六個月訂閱均每個訂閱月份提供相同的 60 次成功 AI 用量。草稿及回饋由所有裝置共用額度，每個香港曆日最多成功使用 20 次。每月週期以已驗證的原始訂閱開始時間為準，按 UTC 的每月對應日期重設，較短月份以最後一日計算；app 以香港時間顯示重設時間。三及六個月方案不會一次發放整個付款週期的額度。未用額度不會累積。處理中的請求會暫留一次額度，失敗後釋放；若伺服器已成功生成，即使裝置在收到結果前斷線，仍可能計算用量。整體服務及成本上限可能暫時停止請求，不屬無限 AI。AI 只供練習參考，可能出錯，不能單憑文字評核發音。

選擇、刪除及取消

可在設定關閉面試 AI，停止新的正式面試作答及之後的 AI 分析。第 38 版及之後版本的本機框架練習仍可使用，包括撰寫講稿、錄音及重播。第 33 至 37 版在關閉 AI 後會停止新的面試錄音練習。測驗、技術測驗、甄選階段，以及已保存錄音及報告仍可使用。第 32 版可在 Interview 分開關閉自動報告，先核對逐字稿，或在設定及 AI 工具內關閉「啟用 AI」。關閉 AI 會停止之後的 AI 請求並取消仍在等待的用戶端請求，不會刪除本機筆記、草稿、錄音或練習進度。等待時亦可取消。關閉 AI 或取消都不能收回已傳送資料。錄音保持獨立。設定可刪除錄音或重設本機資料，也可刪除個別作答。刪除個別作答或重設本機資料會刪除相應的本機報告密鑰及結果，不會刪除伺服器報告暫存，並可能無法還原。刪除 app 資料不會取消 Apple 訂閱，亦不會刪除供應商紀錄、問題報告或支援電郵。伺服器資料請聯絡我們，供應商資料依其程序處理。

每份成功面試報告按答案計一次 AI 用量，已包括重整答案；一次 Mock 可用多次，與草稿及手動回饋共用原有每月 60 次、每日最多 20 次的付費額度。重開已存報告或解鎖已存詳情不會重新生成或再次扣額。免費體驗最多兩份成功的合資格單題評分預覽，以安裝識別碼計算；不是每人的身份核實限額，另有來源、整體及成本限制。

訂閱與還原購買

iPhone app 免費下載，完整版提供一、三及六個月自動續訂，購買前顯示所選總價及週期。Apple 處理付款，我們不會收到付款卡資料。App 保留產品、到期日及憑證供使用和還原；選用 AI 會如上傳送購買證明作驗證。取消後可用至已付費期間結束，可在 Apple 訂閱設定管理續訂。合法早期一次購買仍可還原。Android 續訂不屬本次 iPhone 首發範圍。

其他服務與支援

較早而設有筆記分享的版本，只在你自行選擇分享時，把所選文字交予系統分享面板，由你決定收件人或服務，對方按其政策處理。第 38 版及之後版本不提供筆記分享。

來源連結由外部網站依其政策處理。日曆操作只開啟系統編輯器，由你決定儲存，app 不讀取日曆。朗讀使用裝置語音服務，部分 Android 聲音可能使用其供應商的網上服務。裝置允許時，Apple 或 Google 可提供開發者診斷資料；公開商店評論由商店處理。

支援電郵會把你選擇提供的寄件人資料、文字及附件交予電郵供應商，用於回覆及調查。現行支援紀錄在最後回覆後保留 12 個月，退款或業務紀錄則按適用保留責任另行處理。請勿傳送密碼、付款資料或身分文件。如要查閱、更正或刪除，請聯絡我們。

年齡、安全與更新

本 app 對象為 16 歲或以上，AI 限 18 歲或以上。資料透過 HTTPS 傳送，供應商密鑰只保留在伺服器。本政策更改會在生效前發布。本政策說明資料處理方式，不表示 app 已公開上架或正式購買驗證已啟用。