ZENA StopGuard 隐私政策

Created on 10 August 2026

Privacy Policy

1. Overview

ZENA Stop Guard (hereafter "this app") is a private commute companion built around your destination, designed for long-distance commutes to help you avoid missing your stop while distracted by your phone.

The core design principle of this app is that all user data is processed on-device. Nothing is uploaded to any server, no data is linked to your identity, and no tracking of any kind occurs.

This privacy policy describes how the app uses and processes data on your device, and the control you have over that data. The app does not require account registration and does not depend on network services for any core functionality.

Product Positioning and Limitations

This app serves as an auxiliary reminder tool during long commutes and cannot guarantee to trigger an alert under all system and environmental conditions. The app clearly informs you how location signal and system permissions affect alert effectiveness, so you can make a reasoned judgment. This app is better suited for fixed-route daily commutes, such as regular round-trips between home and work.

Important usage tip: When using a commute route for the first time, please visit the target location in person to save the actual position. Using a search-generated virtual location is not recommended, as it may compromise alert accuracy. Please do not rely solely on this app.


2. Data This App Does Not Collect

To avoid ambiguity, the following data is not collected, not stored, and not uploaded by this app:

  • Your name, email, government ID numbers, or other personally identifiable information
  • Device identifiers (IDFA, IDFV)
  • Contacts, photos, or media files
  • Browsing history or search records (map search keywords are retained locally only — see below)
  • Financial information or payment records
  • Usage analytics or crash diagnostic data
  • Health data
  • Advertising identifiers or attribution data

This app does not integrate any third-party analytics SDK, advertising SDK, or tracking SDK.


3. Data Used On-Device

3.1 Location Information

This app uses Apple's CoreLocation framework to obtain device location, used to calculate the distance between you and your destination and to trigger an alert when you approach the destination.

When In Use location: When you open the app and select a location on the map, view your current location, or start a mission, the app uses the When In Use location permission. Location accuracy is approximately ten-meter level (kCLLocationAccuracyNearestTenMeters).

Background location: When you actively start a Mission, the app continuously monitors location changes in the background to trigger an arrival alert as you approach the destination. Background location is active only during an ongoing mission and stops immediately when the mission ends or is cancelled.

Location data storage:

  • During an active mission, location data exists only in app memory for real-time distance calculation. Raw GPS samples are not persisted.
  • The app saves a "last known location" locally (only latitude and longitude, accuracy approximately hundred-meter level) for initial map positioning. This data is updated at most every 10 seconds.
  • After a mission ends, location data in memory is released with the process. No location traces are retained.

Location data is not uploaded: All location data is processed on-device only. It is not sent to any server and is not shared with any third party.

3.2 Mission Information

The mission configurations you create are saved locally on your device, including:

  • Mission name (your custom input)
  • Destination coordinates and display name
  • Alert distance (100-2000 meters, adjustable)
  • Location update interval (minimum 10 seconds)
  • Checkpoints (up to 3, including name and coordinates)
  • Notes (optional)
  • Alert sound selection
  • Vibration toggle
  • Creation and update timestamps

Mission configurations do not contain raw GPS traces and are not uploaded to any server.

3.3 Journal Entries

When a mission is completed or cancelled, the app generates a local trip summary record containing:

  • Mission name
  • Destination name
  • Start time and end time
  • Mission status (completed / cancelled)
  • Alert distance
  • Reliability summary (text description of location accuracy, permission status, etc.)

Trip summaries do not contain raw GPS traces, do not contain location coordinates, and are not uploaded to any server.

3.4 Favorite Places

You can save frequently used locations as favorites, including:

  • Place name
  • Latitude and longitude
  • Creation time
  • Role tag (Home / Work / Errand point, optional)

Favorite places are saved on-device only and are not uploaded to any server.

3.5 Map Search History

When you use the search feature on the map page, search keywords are saved locally on your device, retaining at most the 20 most recent entries. Search keywords do not contain location coordinates and are not uploaded to any server. You can delete individual search history entries within the app.

3.6 User Preferences

The app saves your preferences locally, including:

  • Default alert distance
  • Journal retention period (30 days / 90 days / 365 days / no retention)
  • Language preference (follow system / English / Simplified Chinese)
  • Foreground mode preference
  • Display name (optional)
  • Emergency contact name and phone (optional, stored locally only, the app does not initiate calls)
  • Monitoring start delay in seconds

Preferences do not contain device identifiers and are not uploaded to any server.


4. Data Storage and Security

4.1 Storage Method

All data is stored as JSON files in the device's Application Support Directory, protected by the iOS sandbox. Other apps cannot access this data.

4.2 Data Encryption

Data is stored in the iOS device's protected file system, safeguarded by device-level encryption. The app itself does not apply additional encryption to the data.

4.3 Network Transmission

This app does not perform any network data transmission. All functionality is completed on-device without requiring a network connection.


5. Data Retention and Deletion

5.1 Journal Retention Period

OptionDescription
30 daysJournal entries are automatically deleted after 30 days
90 days (default)Journal entries are automatically deleted after 90 days
365 daysJournal entries are automatically deleted after 365 days
No retentionTrip summaries are deleted immediately upon mission completion

You can change the retention period at any time in app settings. After changing, records exceeding the new retention period will be automatically cleared on the next app launch.

5.2 Manual Deletion

  • Delete mission configuration: You can delete any mission configuration.
  • Delete favorite place: You can delete any favorite place.
  • Delete search history: You can delete individual or all map search history entries.

5.3 Uninstalling the App

Uninstalling this app will delete all local data along with the app. This data cannot be recovered.


6. Permissions

6.1 Location Permissions

PermissionPurposeWhen Requested
When In Use locationMap point selection, displaying current locationFirst entry to home screen
Always locationBackground location monitoring during active missionWhen user actively starts a mission

If you deny location permissions:

  • The map can still display and search
  • You cannot use your current location for point selection
  • You cannot use the arrival alert feature
  • You can re-authorize in Settings > Privacy > Location Services

6.2 Notification Permission

PermissionPurposeWhen Requested
NotificationsArrival alerts, checkpoint alertsAfter user starts a mission

If you deny notification permissions:

  • Arrival alerts cannot be displayed as notifications
  • The app can still alert through audio and vibration when in the foreground
  • You can re-authorize in Settings > Notifications

6.3 Background Capabilities

Background modePurpose
locationContinuous location monitoring during active mission
audioArrival alert audio playback in the background

Background capabilities are active only during an ongoing mission and stop immediately when the mission ends.

6.4 Permission Revocation

You can revoke granted permissions at any time in iOS Settings. After revocation, the relevant features will be unavailable, and the app will display the reason and a restore entry on the reliability screen.


7. Third-Party Services

This app does not use any third-party analytics services, advertising services, tracking services, or cloud services.

The app's Podfile includes only the LookinServer dependency, which is a development debugging tool used only in the development environment and is not included in the production app build.

This app uses the following Apple native frameworks, whose data processing is governed by Apple's privacy policy:

FrameworkPurpose
CoreLocationObtaining device location
MapKitMap display, place search
AVFoundationArrival alert audio playback
UserNotificationsLocal arrival notifications
CoreDataData persistence (currently using JSON file storage)
CoreHapticsArrival haptic vibration feedback
AudioToolboxSystem sound services

8. Children's Privacy

This app is not directed at children under 13 and does not knowingly collect personal information from children. The app is rated 4+ on the App Store. All data is processed on-device and does not involve the collection or transmission of children's personal information.


9. Your Rights

9.1 Data Control

Since all data is stored on your device, you have full control over your data:

  • Right to access: You can view all mission configurations, journal entries, favorite places, and preferences within the app.
  • Right to delete: You can delete mission configurations, favorite places, and search history, or uninstall the app to completely delete all data.
  • Retention period control: You can set the journal retention period yourself, and expired records will be automatically purged.

9.2 Permission Control

You can grant or revoke location, notification, and other permissions at any time in iOS Settings.

9.3 No Account Required

This app does not require account registration. No personal information is needed to use all features.


10. Privacy Policy Updates

The app's features and data usage may change with version updates. If updates involve material changes to data usage practices, we will update this privacy policy and adjust the effective date.

Since this app does not depend on network services, privacy policy updates will not be automatically pushed to your device. You can view the current privacy policy link in the app's "About" page, or visit https://legiflare.com/terms/44263543-4 for the latest version.


11. Applicable Law

This privacy policy complies with applicable privacy laws and regulations. It also conforms to Apple App Store privacy guidelines and iOS privacy standards.


12. Contact Us

If you have any questions, suggestions, or complaints about this privacy policy, you can contact us at:

We will respond to your feedback as soon as possible.