1. Operator and service region
The device-permission and local-record details below describe Android. iOS and HarmonyOS can also keep permitted capture coordinates in local records; upload forms do not separately send coordinates or manifests, but original media may retain its own location metadata. The WeChat mini program does not call location APIs. Saving a system-album copy defaults to on in iOS and off in HarmonyOS and WeChat, subject to each app’s settings. iOS background recording uses system audio capabilities and Live Activities, rather than Android persistent notifications. Personal calendars and reminders on these clients do not read or write the system calendar.
The operator and data controller is Beijing Jingwei Ziyi Technology Co., Ltd., registration number 91110106MA003EM95R. Contact hi@aiworkdeck.com. Service infrastructure is located in mainland China.
The app supports a choice of China or International service. Beijing Jingwei Ziyi Technology Co., Ltd. operates China service; Zhen Shan Mei Grace Legacy Limited operates International service. Their accounts and storage are separate. This page describes China service; consult the other region’s notice if you select that region.
2. Data and purposes
| Feature | Data and processing | Purpose |
|---|---|---|
| Account and sign-in | Email or, where offered, phone number; password or verification code; account identifiers, session credentials and necessary profile data. Registration and password reset use the selected region’s website. | Authenticate you, maintain your session, recover your account and associate your projects. |
| Photo, video and audio capture | The photos, videos and recordings you choose to capture, with file name, media type, capture time, project and device identifiers. Files are stored in the app and uploaded to the relay when filed to a selected project. | Deliver field material to your chosen project and show transfer status. |
| Android local capture records | SHA-256 file fingerprint, capture time, device model and OS version, and permitted location coordinates and accuracy, stored locally on the phone. | Show capture provenance and file integrity. The current Android upload flow does not send this local location record. |
| Projects and files | Project names and identifiers, file names, directory information, sizes, transfer requests and file contents you request; files covered by enabled cloud backup can be accessed from the cloud. | List your projects, request files from your computer and preview or download authorised files. |
| Device and service operation | An app-generated random device identifier, request time, IP address, request path and status. The identifier is not an IMEI or advertising ID. | Distinguish devices, prevent duplicate transfers, secure the service and diagnose faults. |
| Usage and support | Storage or transfer usage, account balance and necessary billing records; feedback and contact details you choose to provide. | Show usage, account for services used and handle support or deletion requests. |
Authentication and transfers are needed to provide the service you request. Optional processing such as location depends on your choice and device permission. Declining location does not prevent capture or transfer. A feature may be unavailable if you decline data necessary for it. Only capture and upload material you are authorised to handle.
3. Android permissions and background activity
- Camera: photos and videos you initiate. Microphone: recordings and video sound you initiate.
- Location: a permitted precise or approximate location at capture time for your local record. You can revoke permission in system settings.
- Notifications and foreground services: transfer progress and continuation of a recording you started when you switch apps or lock the screen. Recording has a persistent notification and a stop action.
- Photo library: saving captures to Photos is on by default and can be turned off in Settings. When enabled, capture creates a library copy; exporting also creates a copy. The app does not scan your existing photo library.
- The app does not read contacts, SMS, call logs, system calendars or IMEI and contains no advertising or third-party behavioural analytics SDK.
4. Recipients and international transfers
Files and account requests use HTTPS to reach the region you select. China service uses servers and object storage in mainland China. Alibaba Cloud provides hosting and file storage. Where used, SMS and email providers deliver verification or account messages you request, processing only the data needed for those services.
Delivery is to a desktop associated with your account or authorised project. We do not publish your captures, sell personal data or use these mobile captures for advertising or model training. Capture and project-file access do not themselves send content to AI model providers.
If you select a service region outside your location, your account requests and uploaded files are transferred there. The two regions are separate data stores. Applicable transfer requirements and any required separate consent still apply. Legally required disclosures, dispute handling and business transfers are limited to necessary information.
5. Retention and deletion
| Data | Retention and deletion |
|---|---|
| Files on your devices | You control these copies. Account deletion does not remotely erase them. Delete files or clear app storage yourself, or uninstall after saving anything you need. Copies in Photos or export folders must be removed separately. |
| Relay files | The relay copy is removed after the desktop acknowledges receipt. Uncollected items become eligible for scheduled cleanup after 30 days. Object storage has a 35-day lifecycle as a fallback for failed cleanup. |
| Persistent cloud backups | Stored only when the relevant backup function is enabled. These do not expire under the relay rule. Deleting backups, withdrawing backup permission or deleting the account queues cleanup; failed storage deletion is retried. |
| Account and mobile-service records | Retained while needed for your account. Account deletion clears the mobile account, sessions, device and project associations, transfer requests and relay contents, and processes the linked website account. Persistent backup cleanup can be asynchronous. |
| Required retained records | Records necessary for security, disputes, tax or accounting are retained for the applicable period and then deleted or anonymised; they are not used to continue everyday account services. The region’s general Privacy Policy gives account and transaction retention details. |
If refundable balances, unsettled matters or a service failure prevent deletion, the app explains the reason. Contact us through the account-deletion resource below to resolve it; continuing to use the app is not a condition for requesting deletion.
6. Your choices and rights
You may request access, correction, a copy, deletion, withdrawal of consent or restriction of processing, and portability or a complaint where applicable. Contact hi@aiworkdeck.com; we normally respond within fifteen working days. We verify account ownership without asking for your password or login verification code.
In the app, open Settings and choose Delete account. If you no longer have the app, cannot sign in or want to request deletion of particular cloud data, use the Account and data deletion link on this page. Deleting an account ends related account services; save material you need first.
7. Security, children and changes
Login sessions use Keychain on iOS, AssetStoreKit on HarmonyOS and WeChat local storage in the mini program. These different mechanisms should not all be understood as system-encrypted storage.
Network traffic uses HTTPS, and production access is limited to necessary personnel. No system is completely secure; we handle and notify personal-data incidents as applicable law requires.
The app is intended for adult professionals and is not offered to people under 18. Contact us if a child’s information was provided in error. We explain material policy changes and obtain new consent where required.
8. Optional AI features and content reports
Only after you enable capture organization or automatic naming do image thumbnails, sampled video frames, up to the first 30 seconds of audio and necessary text pass through the configured Alibaba Cloud Bailian route to relevant image, audio or auxiliary model services. They generate filenames, tags and filing fields; audio transcripts may feed further organization. Results are stored with the filing. When disabled, ordinary capture and transfer follow the process above.
The assistant requires an active subscription, cloud-backup authorization and separate consent. Questions, necessary conversation history, authorized project summaries and necessary source text pass through our cloud to Alibaba Cloud Bailian and the inference provider to generate answers. Necessary search queries may reach Qichacha or PKULaw.
Summaries, questions, answers and source references are stored in your cloud account. Disabling the assistant deletes summaries and assistant conversations, not original files. Starting a new conversation does not delete old records. You can also request deletion through this page’s account and data deletion channel.
Content reports contain text you choose to submit and necessary account, platform, conversation and handling records. They support investigation and, where automated triage is enabled, may be processed by configured AI services. This reporting entry does not automatically attach full chats, project files or runtime logs.