Privacy Policy

Last updated: 1 October 2026 (Hong Kong)

Scope
Thousand & One operates Datatone's iOS/Android apps, widgets and website. This policy concerns personal data under Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486). Processing depends on platform, permissions, settings and features used. Identifiers and usage data may be personal data without a name or login account.
Service and diagnostics
The app, server and providers may process installation/device and permitted advertising identifiers, IP address/approximate region, app/OS versions, language, usage and ad interactions, crashes, performance and diagnostic/request logs. Requests include selected route, stop, flight or other feature context. We use these for service delivery, security, troubleshooting, usage/performance measurement, advertising and purchase validation. Support correspondence contains information you supply.
Location
With permission, location supports nearby transport, maps, local weather and alight reminders. Android weather requests send the selected weather station code, not raw GPS coordinates. Enabled alight reminders and relevant transport Live Activities use background location for on-device calculations, subject to OS controls. Map SDKs process the displayed location/map context. Transport fare/timetable requests send the selected route and public stop-pattern coordinates to Datatone's server; these stop coordinates are not your live device location. You can restrict location in device settings, with reduced functionality.
Local data and backup
Ordinary favourites, settings and free saved flight journeys are stored locally and may be shared with widgets. Eligible iOS settings may sync through optional iCloud backup; iOS system backups may include app data according to your device settings. Android currently disables standard Android app backup. A free flight favourite alone does not register a paid server watch. Removing favourites, disabling Live Activities, uninstalling and deleting server records are distinct.
Paid flight updates
When server-assisted paid flight updates are enabled and you use them, we process installation IDs, authentication/App Attest data, FCM/ActivityKit push tokens, OS version, language, receipts/transaction and entitlement data, selected flight occurrences and watch/dismissal status for purchase validation and updates. The server stores encrypted Apple receipts and entitlement records. This does not apply to every user. Removing a favourite and synchronizing cancellation of its flight watch withdraws that server demand. Tapping X dismisses only that Live Activity, retaining the favourite and server watch; OS notification permissions do not cancel favourites or erase records. These actions do not automatically delete installation/receipt/queued/history records.
Platform providers
Depending on platform/features, Google Analytics/Firebase Analytics measures usage; Firebase Crashlytics supports diagnostics on iOS/Android, and Firebase Performance is used on Android. Firebase Cloud Messaging and Apple APNs provide notifications. Android purchases use RevenueCat/Google Play; iOS uses StoreKit and protected flight registration uses App Attest. Purchase processors and validation services receive transaction/receipt and entitlement data, not full payment-card details from us. Google Maps and Apple map/location services process relevant map data; iCloud is governed by your Apple settings.
Advertising and website
AdMob and applicable Meta/InMobi mediation may process device/ad identifiers, IP-derived location, interactions and diagnostics for delivery, measurement and permitted personalization. The website uses Google Analytics, Google Tag Manager and Meta Pixel with cookies/similar identifiers and page/event data. Use browser controls, tracking permissions and available ad-consent settings to limit relevant processing. Refusing/withdrawing personalized ads does not disable all analytics, diagnostics or non-personalized ads. Blocking browser technologies may affect functions.
Sharing and overseas processing
Infrastructure, analytics, diagnostics, advertising, maps, purchase, notification and data providers process data for these purposes, potentially outside Hong Kong under their arrangements and applicable safeguards. Necessary disclosure may support security, support requests or legal obligations. External services have separate policies: Firebase, Google, Meta, InMobi, RevenueCat, Apple.
Retention and security
We retain data as needed for the relevant service, diagnostics, security, purchase/legal obligations and resolving requests/disputes, and review that need. Server flight installation/receipt records and diagnostic/history queues currently have no universal automatic deletion schedule. Cancelling watches does not erase all related records. Backups/providers have separate retention and deletion limits. We use appropriate access/security measures but cannot guarantee absolute security.
Your requests and controls
Email datatonehk@gmail.com for access, correction, deletion, withdrawal of consent or privacy questions. There is no general Datatone login; email alone may not locate an anonymous installation. We may require minimum reasonable verification/locating information, such as a transaction reference or safely provided diagnostics. Do not email private push/authentication tokens, full receipts or full payment-card data. We assess requests under applicable law, explain lawful retention/refusal and technical limits, and involve processors as appropriate; deletion is not instant or unconditional. Adjust location/notification/tracking permissions, applicable app settings, browsers and backups. Uninstalling does not automatically delete server/provider data. Deletion does not cancel store subscriptions; manage those separately. Continued use or re-enabling paid tracking may register new necessary data.
Changes and language
Updates are published here with a revised date; material changes receive further notice or consent where required. English prevails over Chinese in a conflict, without limiting statutory rights.