Privacy Policy

1. What Types of Information Do We Collect from You?

We process two main categories of information:

1.1 Information Collected Automatically

When you use or access the Software and Services, certain information about you may be collected automatically, as follows:

• Technical information. We may collect technical information relating to your device configuration, device identifiers, and your use of the Software and Services, including the type, name, and version of the operating system, OpenUDID, and other identifiers, in order to improve your experience of the Services.
• Push notification information (applicable only to certain Android devices). To provide you with push notification functionality so that you can receive messages in a timely manner, when you agree to this Privacy Policy and use the push notification feature, the push notification service component will call Android system interfaces to automatically collect the Android ID, in order to identify the current app instance, establish and maintain the push notification channel, and deliver messages accurately to your device. The Android ID is used only to the extent necessary to implement push notifications, and is not used for any purpose unrelated to push notifications.
• Usage information. We may collect information relating to your use of your device and of the Software and Services, including when, how, and how often you use the Software and Services, in order to improve our Services.
• Payment data. We may collect information relating to your subscription orders, such as the products purchased, the subscription time, the order status, and the time of payment. We do not collect detailed information such as payment accounts or payment credentials, and we are not responsible for processing or storing such payment information. Related payment information is processed and stored by the third-party payment service providers you actually select, including Apple, and, on Android devices only, Alipay and WeChat Pay. Before submitting personal payment information, we recommend that you read and understand the privacy policies of the relevant third-party companies.

1.2 Information You Provide to Us or Authorise Us to Process

1.2.1 User information

Your nickname, email address, avatar, and the account information you create with us.

When you register for ideaShell with a mobile phone number, you need to provide the mobile phone number you intend to use and an ideaShell nickname, and we will verify whether your identity is valid by sending an SMS verification code. Your mobile phone number will serve as your ideaShell account. When logging in, you need to provide your ideaShell account information, or enter the SMS verification code or email we send to verify your identity. If you do not provide such information, or the information you provide cannot verify your identity, you will be unable to log in and use ideaShell through the corresponding method, and we will not collect the personal information described above.

This App supports WeChat login. When you actively choose WeChat login, the WeChat Open Platform SDK we integrate may process your WeChat nickname, avatar, and OpenID, in order to complete WeChat authorised login and related security verification. You may also use other login methods provided by this App; if you do not use WeChat login, we will not process the WeChat information described above by reason of the WeChat login feature.

This App also supports login with Apple ID. When you actively choose this login method, we will process the user identifier provided by Apple, as well as the name and email address you authorise us to receive (if applicable), in order to complete account registration, login, and related security verification; if you do not use this login method, we will not process the information described above by reason of this feature.

1.2.2 Communication information

If you contact us, we collect your name, contact information, and the content of the messages you send.

1.2.3 Storage access permission

To ensure that you can save photos, videos, or cached information to your device, or upload images from your device to the Software, you may voluntarily grant us permission to access your device storage.

1.2.4 Clipboard permission

For notes you have recorded, or content obtained during a conversation, if you need to share or transfer the content, you may copy it by tapping the copy button at the lower right of the interface; in this process we will write to your clipboard.

1.2.5 Recording permission

So that you can use voice to record notes, or use voice for conversation, you may voluntarily grant us permission to access your device microphone.

1.2.6 Software installation list / installed app list

When you use WeChat login on an Android device, the WeChat Open Platform SDK we integrate may, by calling system capabilities, read or query the software installation list / installed app list information on your device, in order to determine whether the WeChat client is installed, invoke the WeChat authorised login flow, complete login authorisation, and perform related security verification. This information is used only for the WeChat login-related purposes described above, and we will not use it for any purpose other than WeChat login; if you do not use WeChat login, or the information cannot be obtained due to system restrictions, you may still register or log in through other methods such as a mobile phone number or email address, but you may be unable to use the WeChat login feature normally.

1.2.7 Information security

To provide a seamless note-syncing experience so that you can view your notes on any device, your data is stored in the cloud and on your devices. We understand that note data is highly private, so we apply industry-leading security measures to protect your data. Your note data is encrypted to a high standard both in transit and at rest, to ensure that unauthorised persons cannot access it.

2. Information We Do Not Share

2.1 Information security. We process your notes only when you actively use features that include artificial intelligence capabilities. Except for the necessary processing described in Sections 3.3 and 6, we do not use your information for training purposes, and your notes remain private within your account.

2.2 Note information. All of your notes, including text, voice, links, and files, may in principle be viewed or listened to only by you; except for content that is necessary to complete the corresponding features when you actively use the artificial intelligence or speech recognition features described in Sections 3.3 and 6.

3. Information We Share

We do not share any personal information collected from you, except in the following circumstances:

3.1 If we are required by law to disclose your information, we may share your information as necessary with law enforcement agencies, other competent authorities, or relevant third parties, for example to detect, prevent, or otherwise address fraud, security, or technical issues, to respond to claims, to comply with legal process, a subpoena, or a government request, or to protect the rights, property, or personal safety of our users, partners, or the public.

3.2 If we undergo a business change such as a merger, acquisition, change of control, reorganisation, or a sale of all or part of our assets, your information may be transferred as part of the relevant transaction.

3.3 When you actively use features that include artificial intelligence capabilities, we may share with our AI technology partners the user content necessary to provide those features.

3.4 We may also share personal information with our subsidiaries, affiliates, and parent company, provided that their use of such information complies with applicable data protection laws and this Privacy Policy.

4. How Do We Use Your Information?

4.1 We mainly use your information to provide and improve the Services, specifically as follows:

• To operate and update the Software and Services, and to provide you with existing and new features;
• To provide push notification functionality so that you can receive messages in a timely manner, and to ensure that messages can be delivered accurately and promptly to your device;
• To improve and personalise the Software and Services;
• To maintain, test, monitor, and improve the quality and operation of the Software;
• To provide you with support and handle complaints or feedback;
• To handle disputes relating to your use of the Software and Services;
• To comply with applicable laws and regulations, legal process, or binding government requests.

4.2 If we need to process your information for a new purpose, we will update this Privacy Policy accordingly and explain the relevant changes to you.

5. Description of Self-Start or Associated Start

This App supports Android home-screen widget functionality. To ensure that you can quickly start recording notes or adding text notes through the home-screen widget, and that widget content continues to refresh normally, this App needs to listen for and receive widget-related broadcasts or messages sent by the system (including but not limited to android.appwidget.action.APPWIDGET_UPDATE).

When you add, refresh, tap, or use this App’s home-screen widget, or when the system updates the home-screen widget, even if this App is closed or running in the background, the system may wake the App’s widget-related services or pages in order to complete necessary operations such as widget data updates and responding to recording/text-note entry points; without this capability, the widget may be unable to refresh in a timely manner, or unable to respond to your actions to create recording notes or text notes through the widget. This process may be identified by the system as a self-start or associated start.

The self-start or associated start described above is used only to implement display, refresh, and note-recording entry-point response for the home-screen widget, and will not be used for purposes unrelated to widget functionality; when recording is initiated through the widget, it still requires you to actively tap to trigger it, and use of the recording permission is premised on your having granted microphone permission. If you do not add or use this App’s home-screen widget, such widget-related wake-ups generally will not be triggered.

6. Third-Party SDK and AI Model Services

When you use the products or features we provide, we may integrate third-party SDKs, cloud services, or AI model services to implement functions such as statistical analysis, crash diagnostics, WeChat login, payment, speech-to-text, and AI content processing. We follow the principles of lawfulness, legitimacy, necessity, and minimisation, processing related information only to the extent necessary to implement the specific feature, and we take security measures such as encrypted transmission and access controls to protect the security of your information.

Third-party SDK providers may collect related personal information about you. The collection and processing of information by such providers is governed by their own privacy terms. We recommend that you review their privacy terms before using third-party SDK-type services. If you discover that such an SDK or other similar application poses a risk, we recommend that you immediately terminate the relevant operation and contact us promptly. We will inspect the third-party SDKs we integrate and publicly describe the latest status of integrated SDKs; please refer to the official privacy policies of the third-party SDKs for specifics.

For speech recognition and AI processing features, we process the audio, text, and related task data that you submit or authorise us to process only when you actively use the relevant features. Related data will be transmitted, encrypted, through API interfaces to the corresponding service provider, used solely to complete functions such as speech-to-text, AI content understanding, text generation, content summarisation, and information extraction, and the processing results will be returned to you.

Except where otherwise provided by laws and regulations, where necessary to safeguard the security of the Services or to diagnose faults, or where we have separately obtained your explicit consent, we will not actively authorise third-party service providers to use your audio files, transcribed text, input content, or output content to train, retrain, or improve their foundation models, nor for any other purpose unrelated to providing this feature.

6.1 Firebase SDK

• SDK name: Firebase SDK
• Provider: Firebase, Inc / Google LLC
• Purpose: used for statistical analysis, crash information collection, and analysis of system performance and anomalies, to help us improve the product experience and the stability of the Services
• Information collected: language, region, device identifiers, device information, system information, operating system, system version, network information, network type, IP address, device model, device manufacturer, and the statistics necessary during use of the product
• Collection method: collected by the SDK
• Privacy policy: https://firebase.google.com/support/privacy

6.2 WeChat Open Platform SDK

• SDK name: WeChat Open Platform
• Provider: Tencent Technology (Shenzhen) Company Limited
• Purpose: used to help users log in to their accounts with WeChat, including invoking the WeChat authorised login flow, completing login authorisation, and related security verification; on certain devices it may also be used to determine whether the WeChat client is installed; on Android devices it is also used to implement WeChat Pay
• Information collected: WeChat personal information (nickname, avatar), OpenID; the rules for processing the software installation list / installed app list are set out in Section 1.2.6
• Collection method: when you actively choose WeChat login, authorised login is completed through the WeChat Open Platform SDK
• SDK-related agreements: https://open.weixin.qq.com/cgi-bin/frame?t=news/protocol_developer_tmpl

6.3 Alipay SDK

• SDK name: Alipay
• Provider: Alipay (China) Network Technology Co., Ltd.
• Purpose: used to enable purchases of our Services using Alipay on Android devices
• Information collected: commonly used personal device information, network information status
• SDK official website: https://open.alipay.com
• SDK privacy policy: https://opendocs.alipay.com/open/54/01g6qm

The following Sections 6.4 and 6.5 apply only to versions for Apple devices such as iPhone, iPad, and Mac.

6.4 Speech Recognition Service

• Service name: Speech recognition service
• Service provider: Tencent Cloud Computing (Beijing) Co., Ltd.; Beijing Volcano Engine Technology Co., Ltd.
• Purpose: when you actively use features such as recording-to-text and speech content recognition, we convert the recording files you submit or authorise us to process into text, in order to generate transcripts, organise spoken content, and provide related product features
• Models/capabilities used: Volcano Engine Doubao speech recognition large model and recording-file recognition related capabilities; Tencent Cloud speech recognition (ASR) and recording-file recognition and speech-to-text related capabilities
• Information collected: the audio files you actively submit or authorise us to process, together with the request information necessary to complete recognition
• Collection method: after you actively trigger the relevant feature, the audio file or its access address is transmitted, encrypted, through API interfaces to the corresponding service provider for recognition processing
• Tencent Cloud speech recognition personal information protection rules: https://cloud.tencent.com/document/product/1093/73072
• Volcano Engine privacy policy: https://www.volcengine.com/docs/6256/64902

6.5 Third-Party AI Service Provider

• Service name: Third-party AI service provider
• Service provider: Beijing Volcano Engine Technology Co., Ltd.
• Purpose: to provide you with AI content understanding, text generation, content summarisation, information extraction, intelligent question answering, and related features
• Models/capabilities used: Volcano Engine large-model capabilities, called to provide the relevant AI processing services
• Information collected: the text content you actively enter, upload, or authorise us to process, together with the request information necessary to complete the AI processing
• Collection method: after you actively trigger an AI feature, the relevant text or task data is transmitted, encrypted, through API interfaces to the third-party AI service provider for processing
• Volcano Engine privacy policy: https://www.volcengine.com/docs/6256/64902

7. Cross-Border Data Transfer

7.1 We operate internationally and provide the Software to users around the world. We, and the third-party organisations that provide automated data-processing technology for the Software, may transfer related information across borders, from your country or jurisdiction to other countries or jurisdictions.

7.2 If you are located in the European Economic Area, then by using the Services you expressly consent to our transferring your data to countries or regions outside the European Economic Area. You may withdraw your consent at any time.

8. How Long Do We Retain Your Information?

We generally retain your personal information for as long as necessary to perform our contractual obligations to you and to comply with our legal obligations. If you withdraw your consent to our collection, use, or disclosure of personal information, we will stop the relevant processing, and may, at your request, delete the personal information and close the account.

However, to fulfil legal obligations such as tax, accounting, and auditing, to safeguard the security of the Services, to maintain data backups, or to prevent fraud and other malicious activity, we may still retain certain information for a necessary period.

9. How Do We Protect Your Information

We take administrative, technical, and physical security measures to protect your personal information against unauthorised access and disclosure. However, no system can be entirely secure. Although we take measures to protect your information, we cannot guarantee that your personal information will remain secure at all times.

10. Your Rights to Access, Modify, and Delete Your Information

10.1 Under applicable law, you have the right to inquire about, access, correct, or delete the personal information we collect as a result of your access to or use of the Services, or to withdraw permissions you have granted. To exercise these rights, you may contact us at hello@roundreddot.com, and we will respond to you within 15 working days after receiving your request.

10.2 If you need to delete your account, please tap, in order, “Settings” – “My Account” – “Personal Information” – “Delete Account” in the ideaShell client. After you confirm deletion of the account, we will stop providing services to you within 15 working days and, at your request, delete your personal information, except where otherwise provided by laws and regulations.

11. Children's Privacy Policy

The Services are not intended for users under 17 years of age. Users under 17 years of age should not use the Services. We do not knowingly collect personal data from users under 17 years of age. If we discover that such data has been collected, we will take all feasible measures to delete it. If you believe we may hold information of a user under 17 years of age, please contact us at hello@roundreddot.com.

12. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time. When material changes occur, we will provide more prominent notice in this Privacy Policy and in other appropriate locations. If you do not agree to the changes, you may stop using our Services; if you continue to use our Services after the changes, you are deemed to agree to the updated Privacy Policy. Please review this Privacy Policy regularly to stay informed of the latest status.

13. How to Contact Us

If you have any questions about the Services or this Privacy Policy, or if you would like to obtain a previous version of this document, please contact us at hello@roundreddot.com.

We will respond to you within 15 working days after receiving your contact.