Effective date: October 21, 2026 · Member App privacy policy

iCook Social
App Privacy Policy

Member edition · English and Simplified Chinese

Service operator: Xu Zhang. Privacy contact: xu@icook.cloud.

iCook Social is an iPhone and iPad member workspace connected to the existing service at social.icook.cloud. It helps members browse approved content, create attributed shares, learn from training courses, record customers and review settlement records.

Information used by the App

• Account information: your name, email address, member identifier, team identifier and membership status are used to authenticate you and determine which records you may access.
• Customer information: names, phone numbers, WeChat identifiers and notes that you enter are sent to the existing service. Customer attribution and duplicate checks follow the service's team permissions.
• Sharing activity: the content and channel you choose, your attributed share link, publication link and publication time, and the service's recorded click and inquiry totals.
• Learning activity: course completion marks associated with your member account.
• Settlement records displayed: amounts, payment status and associated customer records are read from records entered by platform staff. The member App does not submit amounts, create settlement records, collect payment card details, process payments or offer withdrawals.
• Search and service-security information: content search terms are sent to the existing service to return results. The existing service keeps technical request logs, including request outcomes and execution timings; logged request URLs can include search terms and contact details used in customer lookups. It also stores IP-based sign-in counters to prevent abuse. These records support service operation, troubleshooting and security; the sign-in rate-limit window is not a deletion period for the stored counter.

How information moves

When you sign in, the App sends your email and password directly to the existing iCook Social login service over HTTPS. The password is not sent through the new mobile API adapter and is not saved by the App. The service-issued session is checked by the mobile API before it is saved in the device's Keychain.

The mobile API adapter forwards allowed requests to the existing service using your own session. It does not grant administrator access, accept a client-supplied customer owner, or maintain a second customer database. Cloudflare hosts the API delivery infrastructure. Network providers process connection information to deliver requests. The existing source service also retains operational request logs and sign-in security counters. These are separate from the mobile adapter, which does not maintain a second customer database.

Information on your device

The App stores its language preference locally and stores the session in a device-only Keychain item accessible while the device is unlocked. Downloaded media is temporary. The App clears its media cache when you sign out and when it starts a new process. Signing out removes the local session; it does not claim to revoke every session on other devices.

Permissions and third-party sharing

The implemented member App does not request access to your contacts, location, camera or microphone, and does not request broad photo-library access. If you choose to save a picture or video, the App requests add-only permission to save that selected media to your photo library. When you choose an app or destination in the system share sheet, the selected content is passed to that destination at your direction. The destination's own privacy terms apply to what it receives.

The App does not include advertising SDKs or use your information for cross-app advertising tracking.

Access, correction and deletion

For changes to membership, customer attribution or settlement records, contact your team administrator. For privacy or deletion requests, email xu@icook.cloud with enough information to identify your member account and the records concerned. Do not send your password. Requests concerning other people’s customer records require appropriate authority. The App currently supports existing member accounts and does not create new accounts.

Retention and deletion

Member, customer, sharing, training, search, operational-security and settlement information is retained only for as long as needed to provide the member service and meet applicable recordkeeping requirements. Account deactivation does not by itself mean that all associated service records have been deleted.

Xu Zhang handles privacy and deletion requests sent to xu@icook.cloud, verifies the requester’s identity and authority over the records, acknowledges receipt within 7 days, and completes deletion of data eligible for deletion with a response within 30 days. If settlement records or backups cannot be deleted within that period, the response explains what remains, the reason, and the expected retention period. Retained data is restricted to the purpose requiring retention.

Deletion requests are handled manually. The App does not provide an automated in-app account-deletion feature.

Contact

Questions about the App or this policy: xu@icook.cloud. This policy covers the member App and its mobile API; the separate social-media publishing Hub has its own policy.