HuiLife Privacy Policy
1. Operator and Scope
Margarita Market Inc. operates HuiLife. Contact: dailinqi888@gmail.com. This Policy describes how personal information is handled in the HuiLife app and its flyer-sharing pages. This version is effective October 26, 2026. You can review it on registration or sign-in screens, under “My,” and on the public policy pages.
2. Registration and Account Information
Registration involves a U.S. telephone number, secure password-verification information, account identifier, role, and creation time for registration, sign-in, account administration, and security. The server stores a salted password hash rather than a plaintext password. Session tokens use the device’s system secure storage. SMS verification uses Twilio Verify: the telephone number and verification request are provided to that service for SMS delivery and code checking. The platform receives sending or verification status and keeps necessary challenge records such as the number, purpose, provider request identifier, expiry, attempt count, and whether the challenge has been used. It does not store plaintext verification codes in its business database. New registration also records the Terms and Privacy Policy versions, document digests, selected reading language, and server-recorded acceptance time. Do not give passwords or verification codes to customer support or other users.
3. Information You Submit or Save
When you use the relevant features, the platform processes your listings, product price reports, images, contact details, store or merchant applications, reports, customer feedback, and in-app messages. It also stores account favorites, shopping lists, shopping carts, points, and benefit records. Information you choose to publish may be displayed to other users. Check text and images before submission to avoid unnecessary sensitive information or third-party information you have no right to disclose. In-app messages and complaints are stored in the cloud. Authorized personnel may process them as necessary to provide services, address security concerns, or resolve issues.
4. System Location and IP-Based Region Lookup
After you grant iPhone system location permission, the app uses device location to calculate store distances and rank flyers. It may use Apple geocoding services to look up place names. The current implementation does not upload your precise location to the HuiLife business server or use it for continuous background tracking. Apple or third-party map services still handle requests under their own policies. You can revoke location permission in system settings and select a region manually. The shop page also sends a network request to IPWHOIS.io (ipwho.is), which estimates country, state, and city from the request’s IP address. That service receives the network IP. HuiLife does not attach your account, search terms, or shopping cart to the request. The app does not save the raw IP obtained for this lookup. The third party may handle network access records under its own policy.
5. Browsing Preferences and Recommendations
The registration screen explicitly discloses cloud browsing-preference sync and personalized recommendation suggestions. After you actively agree to the displayed disclosure, Terms, and Privacy Policy and complete registration, both settings are enabled for the new account to analyze browsing preferences and generate suggestions. Guest use and incomplete registration do not start these records. Existing accounts keep their previous settings; sign-in and this update do not automatically enable them. When sync is enabled, the platform records content categories, view counts, and foreground time, capped at 10 minutes per event, and removes events older than 90 days during use. Role and age range are voluntary and are not inferred when omitted. These browsing events do not contain search text, chat contents, contact details, or precise location; this does not mean that chats, contact details, or other business information you submit are not stored. You may turn either setting off anytime in Data and Recommendation Preferences without affecting normal browsing. Turning browsing sync off stops new records and requests deletion of cloud browsing history, with retry after reconnection if offline. Turning off personalized suggestions alone does not turn off browsing sync. Personalized suggestions are disabled when you declare that you are under 18, and these settings do not automatically place advertisements. Registration receipts retain the accepted versions, document digests, selected language, and server-recorded acceptance time for verification.
6. Device Permissions, Saving, and Sharing
The app uses relevant system capabilities when you select photos or save a flyer. When needed, saving a flyer requests permission to add images to the photo library; this does not give the app permission to read the entire library. Images you choose to upload are sent to the cloud as part of a submission or listing. Once you share through WeChat or another app, that service and recipients may process the shared content. A public flyer-sharing QR code contains the flyer identifier, not the sender’s telephone number or account identifier. Scanning the QR and requesting images still create network access records.
7. Network, Security, and Service Providers
Network requests required to provide the service expose a network IP and ordinary connection information to servers or providers. The platform uses Render application and database services to store business information, Cloudflare R2 to distribute flyers, and the existing headquarters product-catalog service for reference product information. Twilio Verify handles identity-verification SMS. Apple, IPWHOIS.io, WeChat, and map services you choose to open may also process the corresponding requests. Sign-in and abuse-prevention limits use security digests derived from IP addresses, telephone numbers, or other quota scopes; this does not record your activity in other apps. The current implementation does not include a cross-app advertising-tracking SDK. Underlying access logs are handled by the relevant cloud services for operation, security, and under their service terms. Third parties apply their own privacy policies within their services.
8. Sharing and Public Disclosure
Information needed for hosting, storage, image delivery, identity verification, security, and customer support is processed by the relevant service providers. Information you publish or share is displayed to others according to your choices. The platform may also process or provide necessary information to meet applicable legal obligations, respond to valid legal process, or protect legitimate rights. Agreement to this Policy does not authorize unrelated marketing uses. If new advertising relationships, data uses, or processing activities requiring a separate choice are introduced, the platform will provide the relevant disclosures and required choices.
9. Retention, Deletion, and Account Closure
While your account is active, business information is retained as needed for the relevant services. Optional browsing events older than 90 days are removed during use. An SMS verification challenge is valid for 10 minutes. Temporary verification records more than 24 hours past expiry and expired rate-limit records are cleared during subsequent SMS-send requests; without a subsequent request they may remain until the next cleanup. Provider logs are separate from the platform’s temporary records. You can edit available content, withdraw listings, clear browsing history, or delete your account. Deletion revokes sessions, removes preferences, favorites, shopping carts, messages, merchant applications, customer-support records, and price submissions, and withdraws the account’s listings while clearing their telephone numbers and photos. Necessary account markers, points ledgers, review records, and agreement-acceptance records may remain for accounting, security, legal obligations, or disputes, and are deleted or anonymized when no longer needed. Recovery backups and underlying access logs are kept according to recovery, security, or legal retention needs and are not guaranteed to disappear immediately when you select deletion. Contact us for information relevant to your request or to request deletion.
10. Choices and Requests
You may browse open content without registering, decline or revoke optional location and photo-saving permissions, turn off browsing analytics, sign out, or delete your account. Depending on applicable law where you live, you may have rights to access, correct, delete, obtain a copy of, or make other requests about your information. Submit requests through in-app feedback or dailinqi888@gmail.com and identify the account and request. Do not provide your password. Reasonable identity verification may be requested to prevent impersonation. Requests should be handled under the applicable rules.
11. Children and Minors
HuiLife is not directed to children under 13, who should not register or submit personal information. If you believe a child has submitted information without appropriate permission, contact the platform for review and handling. Users under 18 should use the service with parental or guardian guidance. The age range in browsing preferences is voluntary self-reporting, not age or parental-identity verification.
12. Security, Regional Processing, and Updates
The platform uses security measures appropriate to the nature and risks of the information, but no system can promise absolute security. The platform will investigate and address personal-information security incidents and provide notices as required by applicable rules. Information may be processed by business systems in the United States and by providers in regions where their services operate. Data-protection rules may differ by region, and the platform will handle information under applicable requirements. Material changes in use or policy will be communicated appropriately, with renewed consent when needed. Contact Margarita Market Inc. at dailinqi888@gmail.com with privacy questions.