Transparency report · Q1 2026 · last refresh 2026-05-09
Numbers we publish, because we should.
Every quarter we update this page with the metrics that test our promises. Same numbers we look at internally. Same numbers our auditors look at. Same numbers you should be able to look at.
0
Marketing popups shipped
In-app, since v1.0. The day this becomes nonzero, this page goes amber.
0
Data egress events
For users who never opted in to cloud AI / Sentry / sync. Verified by static analysis on every release.
5
Third-party SDKs
RevenueCat, Mobile Ads, Sentry (opt-in), Apple Sign-in, Google Sign-in. Cap is 5.
63%
Average negative space
Across the 80 production screens. Below 60% on any screen blocks the release.
Q1 2026 changelog
Things we shipped, things we held back.
2026-04-30
Shipped · v1.4.0
Cloud AI made opt-in (was off-by-default · clarified copy)
Settings copy now reads "純 on-device · 雲端 AI 關閉" by default. The toggle to opt in shows the exact 4 fields sent to Gemini before you flip it. No data was retroactively sent.
2026-04-12
Shipped · v1.3.2
Subscription cancel deep-link fixed on Android 14
A regression introduced in v1.3.1 caused the Manage Subscription button on Android 14 to open the in-app sheet instead of Play Store Subscriptions. P06 was briefly violated for 9 days. Fix shipped, audit log updated.
2026-03-28
Held back
Streak badges (proposed, declined)
A feature spike for "log 7 days in a row → badge" was proposed and declined internally. Badges create a guilt mechanic for missed days, which is the opposite of quiet. We instead shipped the empty-state copy "今天先休息也好" for skipped logging days.
2026-03-15
Shipped · v1.3.0
Trial transparency (P07) tightened
Three locks made mandatory at the design-system level. Bold first-charge date, persistent countdown, one-tap cancel. Old paywall removed entirely. Conversion rate dropped 11%, and that is fine.
Law enforcement requests · 2024–Q1 2026
We received zero requests.
If we ever do, we will publish a per-quarter table here with the requesting jurisdiction, what was asked, and what we handed over (which can only ever be: subscription UUID and status, because that is all we have).
No NSL, no gag order, no subpoena. The warrant canary below is updated quarterly.
Warrant canary · last refresh 2026-05-09
As of the date of this signed statement, QiFlux / QiFlux has not received any National Security Letter, secret subpoena, or gag order from any jurisdiction. — Yves signed: 2026-05-09T14:32+08 PGP fingerprint: 0x8B92 4C1A 7F88 3D6E …
Things we don't measure (and why)
DAU. Streak length. Time-in-app.
Standard SaaS dashboards make products that demand attention. We are trying to make a quiet one. So our internal dashboard tracks a different question: did the app close in under 30 seconds? If yes, that's a good day. If users stayed for 4 minutes, we ask why.
We do not have, and will not build, an "engagement loop." We do not run growth experiments on cycle data. We do not A/B-test the AI answers. We do not measure how many people read this page.
If that means we grow slower, that is the correct outcome.