Privacy Policy
Last updated: June 18, 2026
Haikou Meilan District Qipin Network Technology (hereinafter "we") values your personal information and digital asset security. TimeWill is used to record letters, digital asset clues, trusted contacts, and heartbeat entrustment rules. We process data following the principles of minimum necessity, encryption first, and user control.
1. Information We Collect
- Account Information: Email address, phone number, nickname, and avatar, used for login, identification, and notifications.
- Letter Information: Title, recipient, delivery time, trigger method, ciphertext or plaintext of the body (depending on your encryption settings).
- Vault Information: Title, category, notes, privacy level, and encrypted content.
- Trusted Contacts: Name, email, phone number, relationship, and confirmation status.
- Heartbeat Settings: Check interval, grace period, last check-in time, and trigger stage status.
- Memorial Page and Messages: Display name, farewell message, public status, visitor messages, and review status.
- Operation Logs: IP, time, error logs, and payment callback status, used for security audit and troubleshooting.
2. How We Use Information
- Provide account login, letter storage, vault, heartbeat detection, and contact confirmation features.
- Send notifications to designated contacts or recipients when your set conditions are met.
- Generate digital estate guides and legal PDFs.
- Process payments, membership status, and backend operations.
- Troubleshoot errors, prevent abuse, and improve service stability.
3. Encryption and Sensitive Information Protection
Vault content is encrypted and stored using AES-256-GCM. Letters can optionally be password-encrypted or end-to-end encrypted. The backend does not display vault plaintext, private keys, mnemonic phrases, or capsule body text by default. Legal PDFs only export asset names, categories, contacts, and delivery rules, not password plaintext.
4. Information Sharing
We do not sell your personal information. We only share necessary information in the following situations:
- After your set heartbeat trigger rules are met, necessary content is sent to trusted contacts or recipients.
- Third-party services such as payment, email, SMS, and storage are necessary to complete the service.
- Laws, regulations, regulatory requirements, or judicial authorities legally require it.
5. Data Deletion and Withdrawal
You can delete drafts, undelivered capsules, vault entries, contacts, and memorial page message settings. You can export all personal data or request account deletion at any time on the dashboard settings page. After account deletion, data will be permanently removed after a 30-day buffer period, except for records required by law.
6. Third-Party Services
This service uses third-party infrastructure: Supabase (database/storage/auth), Resend (email), Alipay/WeChat Pay/PayPal (payments), Yunpian (SMS). We only transmit the minimum data necessary. Cross-border data transfer: if you pay via PayPal, your email/IP/transaction amount will be sent to PayPal (Singapore/Luxembourg); if you receive our emails via Resend, your recipient email and message body will be sent to Resend (USA). By using this service you consent to these cross-border transfers, strictly limited to what is necessary for the respective service.
7. Minors
This service is intended for users with full civil capacity. Minors should obtain guardian consent before using this service.
8. Contact Us
For privacy-related questions, please contact: qipin0307@gmail.com