This policy explains how Zhicun (the “App”) handles your information. The core principle: your records stay on your device by default. Content is sent temporarily only when you actively use a cloud AI feature, and it is not retained afterwards.
1. Data stored on your device
Records you create, images, audio recordings, web snapshots, and summaries, tags and index data generated on the device are stored in the App’s private storage.
The App does not provide cloud sync, cloud backup, or cross-device restore.
Uninstalling the App or clearing its data permanently deletes this local data.
Android system backup and device-to-device transfer are disabled for the App.
Image text recognition (OCR) runs on your device; images are not uploaded for OCR.
2. Account and sign-in
Local records, editing and keyword search work without signing in. Cloud AI generation, semantic search and membership require sign-in. You may use an anonymous account, or sign in with an email or Google account.
We receive your email address via Google Firebase Authentication only if you choose email or Google sign-in.
The account is used to identify your cloud usage and membership entitlements; it is not used for advertising or profiling.
Email addresses are held by Firebase; our own database does not store emails.
3. Cloud AI processing
When you trigger summarization, tagging, semantic search or transcription, only the text or audio needed for that task is sent over HTTPS to our gateway and processed by AI service providers. The result is returned to your device:
Content is used solely to complete that request and is not retained on our servers afterwards.
We record request metadata only: account identifier, request counts, task type, language, content size in bytes, request status and latency.
We do not record your record count, record titles or bodies, or raw search queries.
Server logs do not contain access tokens or raw account identifiers.
AI service providers may process data in the countries or regions where their infrastructure is located; they are required to use it only for the processing purpose, and they do not retain the content after processing.
4. Cloud metadata and retention
Account identifier, usage counters, request status: retained for 365 days.
Security events (e.g., anti-abuse blocks): retained for 180 days.
Idempotency keys (to prevent duplicate charges): retained for 48 hours.
Membership entitlement status: retained while your account exists, and deleted when you delete your account.
5. What we do not collect
No advertising or third-party analytics SDKs; no advertising identifiers.
No crash-reporting SDK; the App does not actively upload crash logs or diagnostics.
No contacts, SMS, call logs, precise location, or clipboard content.
We do not sell or rent your personal information.
6. Subscriptions and payments
Subscriptions are processed by Google Play Billing. We never see or store your payment method, billing address, or store account email.
We store only the purchase token and entitlement status, to verify membership and handle refunds.
Refunds and cancellations are handled by Google Play. Deleting your account in the App does not cancel a subscription; please cancel it in Google Play first.
7. Data deletion
Cloud account: delete it in the App via Settings → Account → Delete account. This removes the cloud account, usage records and entitlement records; account identifiers in security events are replaced with an irreversible hash.
Local data: uninstall the App or clear its data in system settings. We cannot access or delete this data remotely.
You may also contact us at the email below for assistance.
8. Children
The App is not directed to children under 13, and we do not knowingly collect personal information from children.
9. Changes
Updates to this policy will be posted on this page with a new “Last updated” date. Material changes will be announced in the App.