ChinaPass is an offline survival toolkit for foreign visitors to China, provided by diyun ("we", "us"). This policy explains what the app stores, what the few optional network features send, and what we never do. If you have questions, contact [email protected].
The short version
- No account, no sign-up. The app carries no advertising, analytics or crash-reporting code.
- Core content (checklists, guides, phrasebook, city booking cards) ships inside the app and in downloadable content packs — plain data files, no personal data.
- Your notes, favorites and settings stay on your device. Uninstalling the app removes them.
- Camera, microphone and photo access are requested only when you translate. Raw photos and app-captured audio are not uploaded. System speech recognition may use its provider’s own cloud service under that provider’s privacy policy.
- If you configure Remote API, recognized text from a photo or conversation and text you type are sent to the endpoint you configure. Web page translation also sends selected page text and a random app identifier to our translation service. Details below.
What the app stores on your device
- Downloaded content packs (guides, phrase lexicon, city cards) and their cache
- Your preferences: app language, theme, checklist progress, saved phrases
- A random 16-character identifier generated on first use of web page translation, used only as a rate-limit key (see below)
There is no account system. Uninstalling the app or clearing app data removes all of the above.
Network features
| Feature | What is sent | Where it goes |
|---|---|---|
| Content pack updates (optional, automatic check) | Standard HTTPS GET requests for version files only | Our Cloudflare Pages hosts: chinapass.app, with the legacy mirrors china-pass.diyunc.cc and chinapass-content.pages.dev |
| App update check | Standard HTTPS GET for an update manifest | Same hosts |
| Photo / typed translation with Remote API (optional; you configure a key) | Text recognized from a photo, text you type, or recognized speech. The app does not upload the raw photo or raw audio. | The HTTPS endpoint and model provider you configure in Settings. The provider processes the text under its own terms. |
| Web page translation (optional; you pick a page and trigger it) | The selected paragraphs of the page you asked to translate, the target language, and the random rate-limit identifier described above. No URLs, no browsing history, no account identifiers. | Our translation proxy at chinapass.app/ai/ (legacy china-pass.diyunc.cc/ai/), which forwards the text to the DeepSeek API for translation. Translations are cached on our server keyed by a hash of (language + text) for 30 days — the cache key contains no URL. The proxy enforces a limit of 20 pages per identifier per day. |
Without Remote API, photo OCR is performed on-device and speech uses your phone's system speech recognition. Those system providers may use their own cloud components under their privacy policies. With Remote API enabled, only recognized/typed text is sent — never the raw photo or app-captured audio.
Permissions
- Camera — capture menus and signs for text recognition. The app does not upload or save the raw photo; if Remote API is enabled, recognized text can be sent to your configured endpoint after you confirm translation.
- Microphone — tap-to-talk conversation translation. A single recognition attempt is time-bounded and the app does not upload raw audio; the phone's system speech provider may use its own cloud service.
- Photos — only photos you explicitly pick are read for on-device recognition; raw photo bytes are not sent by the app.
- Network — used for the optional features listed above.
What we never do
- We do not sell your data, and we run no advertising, analytics, or crash-reporting SDKs in the app.
- We do not require or collect your name, email, phone number or payment details.
- We do not store URLs. Optional page-translation text is processed as described above and cached for up to 30 days; the random app identifier is used for rate limiting and can be deleted by contacting support.
This website
This site is served as static pages by Cloudflare. We use no cookies, no advertising trackers and no cross-site tracking. Aggregate, cookie-less page-view counts may be collected by our hosting provider; they contain no personal identifiers and cannot be used to follow you across sites.
Web analytics
We count page views on this website with Cloudflare Web Analytics. It is cookie-less: it sets no cookies, does no cross-site tracking and does not fingerprint your browser, and the counts it keeps contain no personal identifiers. It measures this website only — the app itself sends it nothing.
Children
ChinaPass is a general-audience travel tool and is not directed at children under 13.
Changes
If this policy changes, we will update the effective date above and publish the new version at https://chinapass.app/privacy/.
Contact
For privacy questions, contact: [email protected]