Updated on: May 29, 2026
Published on: May 28, 2026
Effective on: May 28, 2026
This Privacy Policy applies only to the application products and/or services provided by ZhiLing Notes (the "Product" or "Service"). Before using this Product, please carefully read this Policy to understand how we process your personal information. Important matters concerning sensitive personal information, data sharing with third-party AI services, and your personal information rights are highlighted in bold. We do not provide this Service to minors. Please confirm that you are at least 18 years old when using this Service. If you are under 18 years old, please do not register for or use this Service, or provide any personal information to us. If we discover that you are a minor, we will stop providing services and delete relevant information.
Special Notice:
Your agreement to this Policy only means that you understand the functions provided by this Product and the necessary personal information required for such functions. It does not mean that you have agreed to our collection of non-essential personal information. Collection of non-essential personal information will be subject to your separate authorization during use.
For sensitive personal information, we will separately obtain your consent before collection, such as through pop-ups.
Device permissions are not enabled by default. When important or sensitive device permissions are involved, we will request your separate consent through pop-ups or similar methods when you use the relevant business function. After permissions are enabled, you may turn them off at any time on the Product permission settings page or in device system permission settings. Refusing permission for one business function will not affect the normal use of other unrelated functions.
When you actively use AI organization, summaries, tags, structured templates, review note generation, or similar functions, we may send the note text, speech transcription text, note title, template information, language options, and organization requirements that you choose to process to a third-party AI service provider. Before using the relevant function, we will explain the data types, recipient, and processing purpose and obtain your consent. If you do not agree, we will not send the relevant content to the third-party AI service provider, and you will not be able to use the corresponding AI function.
We will not actively send original recording audio to third-party AI service providers for AI text organization. Recording audio may be uploaded to our servers or object storage services when you actively upload it for transcription, synchronization, or backup, for speech transcription, storage, synchronization, and download.
This Policy will help you understand the following:
1. Definitions and Interpretation
2. How We Collect and Use Your Personal Information
3. How We Entrust Processing, Share, Transfer, and Publicly Disclose Your Personal Information
4. How We Protect Your Personal Information
5. How We Store Your Personal Information
6. How You Exercise Your Rights to Manage Personal Information
7. How We Protect Minors' Personal Information
8. How Your Personal Information Is Transferred Globally
9. How We Update This Policy
10. How to Contact Us
11. Miscellaneous
ZhiLing Notes product and/or service means the ZhiLing Notes App and related services provided or operated by us.
ZhiLing Notes means the operator of ZhiLing Notes. Contact address: Room 10, 10th Floor, Building 3, No. 1 Mengdu Street, Jianye District, Nanjing. If you would like to know more about us or the platform, you may contact us through the methods provided in Section 10 of this Policy.
User means a user who registers, logs in, uses this software, and enables, browses, or uploads data to ZhiLing Notes services. In this Policy, users are mostly referred to as "you".
Affiliates means any party that directly or indirectly controls, is controlled by, or is under common control with us. "Control" means the right to direct the management policies of a party through voting rights, contract, or other means.
Account means the user account you use to register, log in, and use this Product. You should properly keep your account and password and are responsible for actions under your account.
Personal information means all kinds of information recorded electronically or otherwise that relates to identified or identifiable natural persons, excluding anonymized information. For clarity, personal information includes sensitive personal information.
Sensitive personal information means personal information that, once leaked or illegally used, may easily cause harm to personal dignity or personal or property safety, including biometric identification, religious belief, specific identity, medical health, financial accounts, location tracking, and personal information of minors under 14 years old.
Processing of personal information includes collection, storage, use, processing, transmission, provision, disclosure, deletion, and similar activities.
Personal information processor means an organization or individual that independently determines the purpose and method of personal information processing.
Personal information subject means a natural person identified by or associated with personal information.
Automated decision-making means activities that automatically analyze or assess personal behavior, habits, interests, or economic, health, credit, or other status through computer programs and make decisions.
De-identification means processing personal information so that a specific natural person cannot be identified without additional information.
Anonymization means processing personal information so that a specific natural person cannot be identified and the process cannot be reversed.
Device means equipment that can be used to access this Product, such as a desktop computer, laptop, tablet, or smartphone.
Unique device identifier means a string programmed into a device by the device manufacturer, such as a dedicated ID or UUID, that can uniquely identify the device.
IP address means an Internet Protocol address assigned to each device connected to the internet. These numbers are usually assigned by geographic region and may be used to identify the location of a device when connected to the internet.
SSL means Secure Socket Layer, a security protocol implemented over TCP/IP. SSL supports various networks and provides basic security services through public key and symmetric key technologies to achieve information confidentiality.
As a personal information processor, we follow the principles of legality, legitimacy, necessity, and good faith when collecting and using your personal information for the purposes described below.
ZhiLing Notes is a utility app. To provide account registration and login, Bluetooth recording device addition, transcription, summaries, and related services, you only need to provide the basic necessary personal information corresponding to the relevant function, except where laws, regulations, or normative documents have special requirements. If you refuse to provide the relevant information, we will not be able to provide the corresponding function.
Please note: if you provide personal information that does not belong to you, please ensure that you have obtained consent from the relevant subject.
Details of full App functions and required personal information processing are as follows:
When you use the App, we collect your network type, IP address, operating system type, app process name, operating system version, and device resolution to identify whether you are a real natural-person user, assess account risk, perform identity verification, detect and prevent security incidents, and take necessary recording, analysis, and handling measures in accordance with law. This information is necessary for this function. If you do not agree, you will not be able to use the App normally.
To protect the security of your personal space, you need to register and log in to a ZhiLing Notes account before using services available after registration and login, including speech-to-text, device connection, synchronization, and AI organization. During registration and login, you need to provide your account and password so that we can verify your identity. This information is necessary for this function. If you do not provide it, you will not be able to complete registration or login.
To provide the device-adding function, we collect the device's serial number (SN), MAC address, Wi-Fi SSID, and specific sensor list (Bluetooth) to pair and connect this Product with the device. This information is necessary for adding devices. After pairing and connection are completed, data will be transmitted through Bluetooth only when you actively enable recording and file transfer. This part is non-essential information for the device-adding function.
When adding devices, we need to invoke your Bluetooth permission and location access permission (only on Android versions below Android 13). If you refuse to enable these permissions, you will not be able to add devices.
When you use transcription and summary functions, we collect the audio or video files that you actively select and upload from your device, or voice/audio files recorded by your Bluetooth recording device and synchronized to this Product. We also collect the text information after transcription and analysis to understand your needs and provide real-time processing feedback, so that we can provide record viewing services. This information is necessary for transcription and summaries. If you cannot provide it, you will not be able to use those functions.
During use, you may choose to insert photos or album images. We will collect your image information. This information is non-essential. If you do not provide it, your use of transcription, summaries, and other Product functions will not be affected.
You may choose to import audio files or export audio, transcription results, and summaries. To enable file import and export, we collect SD card directory information. This information is necessary for file transfer. If you refuse to provide it, file import and export operations in transcription and summaries may be affected.
If you choose to upload local audio for transcription and summaries, we need to invoke your storage read permission to obtain your audio or video content. This is necessary system permission for local upload. If you refuse, you will not be able to transcribe or summarize by uploading files.
If you choose to import images, media, or audio files from the album or local files, we need to invoke your album read permission or file access permission to obtain the content you actively select. If you refuse, you will not be able to import related content from the album or files, but manual note input will not be affected.
After transcription and summaries are completed, we may invoke notification permission to send you notifications. This is necessary for notifications. If you refuse, you will not be able to receive notification messages. We follow the principle of minimizing notification frequency and only send messages in scenarios related to displaying transcription and summary progress.
When you actively use AI organization, summaries, tags, structured templates, review note generation, or similar functions, we may send the note text, speech transcription text, note title, template information, language options, and organization requirements that you choose to process to a third-party AI service provider. We will explain the data transmission and obtain your consent before use. If you do not agree, we will not send the relevant content to the third-party AI service provider, and you will not be able to use the corresponding AI function.
During use, you may choose transcription language, industry preferences, and custom vocabulary to help remember your preferences and improve the accuracy and relevance of transcription and analysis results. We collect your transcription language selection, industry preference selection, and custom vocabulary. This information is non-essential. If you do not provide it, your use of transcription, summaries, and other Product functions will not be affected.
When you actively copy and paste text in this Product for content input, we need to invoke the system clipboard permission. We do not read or upload your clipboard information to our servers in this process. If you refuse this permission, you will not be able to quickly copy and paste text, but you can still manually enter text and normally log in to and use this Product.
In accordance with laws and regulations, to protect your account security and provide better services, we collect and use the following information generated during your use of this Product:
When you use the App, we may receive and record relevant device information based on the permissions during software installation and use, including silent or background operation, for access statistics, troubleshooting, account and usage security, and normal operation of network connection, in-app sharing, and push functions. This includes device serial number, mobile hardware model, operating system version, screen parameters, ZhiLing Notes App installation and running status, service provider network ID, network connection type and status, application list, and unique device identifiers (IMEI, Android ID, OAID, GAID, IDFA, IDFV, push service identifier OpenID). This information is necessary for security protection, notifications, and troubleshooting. If you refuse collection, we will not be able to perform security monitoring and push notifications for this Product, and account security may be affected in certain situations.
Please note that certain third-party SDKs may process some device information within the scope necessary to provide services. You can learn more from the third-party service list in Section 3 of this Policy.
When you use the App, we automatically collect detailed usage information and store it as network log information, including ZhiLing Notes App version number, input field type, entered text type, search query content, network status, manufacturer, mobile phone model, access date and time, and device crash records, so that we can collect usage statistics, troubleshoot issues, protect service stability and network security, and improve and optimize product interaction experience through data statistics.
This Product does not obtain your personal information from third parties.
This Product does not indirectly collect your personal information.
According to relevant laws and regulations, processing your personal information may not require your consent in certain circumstances, including where it is necessary to conclude or perform a contract to which you are a party, perform statutory duties or obligations, respond to public health emergencies, protect life, health, and property safety in emergencies, conduct news reporting or public supervision for public interest within a reasonable scope, process personal information that you have disclosed yourself or that has otherwise been lawfully disclosed within a reasonable scope, or other circumstances provided by laws and administrative regulations.
We may technically process your personal information in specific circumstances so that individual users cannot be precisely identified, and may perform anonymized or de-identified statistical analysis to improve product functions and service capabilities.
The Personal Information Collection List explains the types of personal information we collect, corresponding business functions or scenarios, and purposes of use. The Third-Party Information Sharing List explains the third-party services or SDKs we integrate, developer information, purposes, information scope, and privacy policy links. The App Permission Request List explains permission types, corresponding business functions, invocation timing, and the possible impact of refusing authorization.
To provide more complete and higher-quality products and services, we may entrust third parties, including companies, organizations, and individuals, to process some of your personal information. We will sign strict data processing agreements with third parties entrusted to process your personal information, specifying the purpose, period, method, type of personal information, protection measures, and rights and obligations of both parties. We will supervise their processing activities and require them to process personal information only according to our requirements, this Policy, and other confidentiality and security measures, and not beyond the agreed purposes or methods. If you refuse the collection of personal information necessary for third parties to provide services, you may be unable to use the services provided by those third parties through this Product.
Current entrusted processing partners include:
Tencent Cloud Object Storage COS (provider: Tencent Cloud Computing (Beijing) Co., Ltd.): used for uploading, storing, downloading, and synchronizing user content such as audio files and images. It may process audio files, images, file paths, upload and download logs, access addresses, and similar information that you actively upload or synchronize. Privacy policy: https://cloud.tencent.com/document/product/301/11470
Dengta SDK Android (provider: Shenzhen Tencent Computer Systems Co., Ltd.): used to report SDK performance data, application operation statistics, crash analysis, and service stability information. It may process network status, IP address, system attributes, mobile phone model, SDK or API version, platform, timestamp, application identifier, application version, terminal manufacturer, terminal device operating system version, local language, time zone, network log information, service usage frequency, crash data, and usage information, which may include optional information such as SSID (Wi-Fi name), IDFV (iOS only), and mobile phone model. SDK privacy policy: https://privacy.qq.com/document/preview/a19a8cf4f2354306b137a7db39d32024
Doubao (Volcengine Ark) (provider: Beijing Volcano Engine Technology Co., Ltd.): used for AI text organization, summaries, structured content, tags, or review note generation. Only after you actively use the corresponding AI function and give consent will we send the note text, speech transcription text, title, template information, language options, and organization requirements that you choose to process. Service agreement and privacy policy: https://www.volcengine.com/docs/82379/1104498
We will require the above third-party service providers to process relevant data according to security and privacy protection standards no lower than those described in this Policy, and to process relevant personal information only to implement object storage, audio upload and download, AI text organization, and related functions.
We will not share your personal information with any company, organization, or individual outside us except in the following circumstances: with your separate consent; where required by laws, regulations, legal procedures, litigation, or mandatory government requirements; where necessary to protect the life, property, or other significant lawful rights and interests of you or others; where necessary for contract performance or service provision; or sharing with authorized partners only for the purposes stated in this Policy.
We share personal information only for lawful, legitimate, necessary, specific, and clear purposes, and only share personal information necessary for service provision. Our partners have no right to use shared personal information for any other purpose.
We will not transfer your personal information to any company, organization, or individual, except where we obtain your explicit consent, or where transfer is involved in a merger, division, dissolution, bankruptcy, asset transfer, or similar transaction. In such cases, we will require the new holder of your personal information to continue to be bound by this Policy; otherwise, we will require it to obtain your authorization and consent again.
We will publicly disclose your personal information only after obtaining your separate consent, or where disclosure is required by laws, regulations, legal procedures, litigation, or mandatory government authority requirements. If we determine that you have violated laws, regulations, or Product rules, or to protect the personal or property safety of users, the public, us, or our employees, we may disclose relevant personal information in accordance with laws and regulations, including relevant violations and measures taken by the Product.
We attach great importance to user privacy and personal information protection and take reasonable measures to protect personal information. Except as provided by laws, regulations, or this Policy, we will use various security technologies and procedures to establish sound management systems to protect your personal information from unauthorized access, use, or disclosure. Without user permission, we will not publicly disclose user personal information to third parties, and we will use professional encrypted storage and transmission methods to protect personal information security.
Without disclosing individual user privacy, we may conduct technical analysis on the entire user database and use anonymized user data generated after analysis and organization for business purposes.
We have adopted security protection measures consistent with industry standards, including reasonable systems and security technologies to prevent unauthorized access, use, modification, damage, or loss. For example, our network services use encryption technologies such as HTTPS, TLS, and SSL; we use encryption, anonymization, de-identification, and isolation mechanisms to protect personal information; we establish data classification and grading systems, data security management rules, and data security development rules; we restrict access to personal information to personnel who need to know it and require confidentiality obligations; and we conduct security and privacy training and maintain personal information security incident response plans.
Internet environments are not absolutely secure. Email, instant messaging, and communication with other users may not be encrypted. We strongly recommend that you do not send personal information through such methods. Please use strong passwords to help protect your account security.
We retain your personal information only for the shortest period necessary to achieve the purposes described in this Policy, unless laws and regulations require or permit a longer retention period. After the retention period expires, or after the processing purpose is achieved, or after you cancel your account, we will delete or anonymize your personal information in accordance with applicable laws and regulations.
Your personal information collected and generated during operation in mainland China will be stored in mainland China. If cross-border transfer becomes necessary due to business needs, we will comply with applicable laws and regulations and obtain your consent or fulfill other legal procedures as required.
We protect your rights to access, copy, correct, delete, withdraw consent, cancel your account, and obtain explanations regarding your personal information in accordance with applicable laws and regulations.
You may access and manage some personal information through in-app functions. You may cancel your account from the Me page in the App by tapping Cancel Account and following the instructions. After verifying your identity and confirming that there are no unfinished matters, we will complete cancellation within 15 working days. After successful cancellation, we will delete or anonymize your personal information in accordance with applicable laws and regulations.
You may change or withdraw your authorization for certain device permissions in the App or device system settings. Please note that withdrawing consent or disabling permissions may prevent us from continuing to provide the corresponding functions, but it will not affect personal information processing carried out based on your previous authorization.
If you cannot exercise your rights through the App, you may contact us through the contact information in Section 10. To protect account security, we may require identity verification before responding to your request. We will respond within a reasonable period in accordance with applicable laws and regulations.
We do not provide this Product to minors. Please confirm that you are at least 18 years old when using this Product. If you are under 18 years old, please do not register, log in, use this Product, or provide any personal information to us. If we discover that we have collected personal information from a minor, we will stop providing services and delete relevant information as soon as possible in accordance with law.
If you are a user outside mainland China, we specially remind you that your personal information will be transferred to servers in mainland China for processing. We will take all reasonable measures to protect the security of your personal information.
We may update this Policy from time to time based on changes in products, services, laws and regulations, or regulatory requirements. After this Policy is updated, we will remind you to read the latest version through App updates, app marketplace release notes, in-app pop-ups, or other appropriate methods. If you object to the modified or updated content, you may choose to stop using this Product or cancel your ZhiLing Notes account. Please note that activities before account cancellation or service termination remain subject to this Policy.
If you have any questions, comments, suggestions, complaints, or reports regarding this Policy or personal information protection, you may contact us through the following methods:
Customer service email: mmn240124@163.com
Customer service phone: 025-52230191
Contact address: Room 10, 10th Floor, Building 3, No. 1 Mengdu Street, Jianye District, Nanjing
To protect your rights and account security, we may need you to submit identity proof, valid contact information, a written request, and relevant evidence. We will process your request after verifying your identity. In general, we will reply within a reasonable period.
You may also view this Policy in the ZhiLing Notes App by going to Me > About > Privacy Policy.
The formation, performance, interpretation, and dispute resolution of this Policy are governed by the laws of mainland China, excluding the Hong Kong Special Administrative Region, the Macao Special Administrative Region, and Taiwan, and excluding conflict of law rules. If any dispute arises from this Policy or its performance, both parties should try to resolve it through friendly consultation. If consultation fails, either party may bring a lawsuit before the competent people's court where we are located.
If any term of this Policy is wholly or partially invalid or unenforceable for any reason, the remaining terms remain valid and binding.