1. Operator and service region
Los detalles de permisos y registros locales siguientes se refieren a Android. iOS y HarmonyOS también pueden guardar localmente coordenadas de captura autorizadas; los formularios no envían coordenadas ni manifiestos por separado, pero los medios originales pueden conservar metadatos de ubicación. El miniprograma de WeChat no llama a las API de ubicación. La copia en el álbum del sistema está activada por defecto en iOS y desactivada en HarmonyOS y WeChat, según los ajustes de cada aplicación. La grabación en segundo plano de iOS usa audio del sistema y actividades en directo, no notificaciones persistentes de Android. Los calendarios personales y recordatorios de estos clientes no leen ni modifican el calendario del sistema.
The operator and data controller is Zhen Shan Mei Grace Legacy Limited, registration number 79530779. Contact hi@workdeck.ai. Service infrastructure is located in Singapore.
The app supports a choice of China or International service. Beijing Jingwei Ziyi Technology Co., Ltd. operates China service; Zhen Shan Mei Grace Legacy Limited operates International service. Their accounts and storage are separate. This page describes International service; consult the other region’s notice if you select that region.
2. Data and purposes
| Feature | Data and processing | Purpose |
|---|---|---|
| Account and sign-in | Email or, where offered, phone number; password or verification code; account identifiers, session credentials and necessary profile data. Registration and password reset use the selected region’s website. | Authenticate you, maintain your session, recover your account and associate your projects. |
| Photo, video and audio capture | The photos, videos and recordings you choose to capture, with file name, media type, capture time, project and device identifiers. Files are stored in the app and uploaded to the relay when filed to a selected project. | Deliver field material to your chosen project and show transfer status. |
| Registros locales de Android | SHA-256 file fingerprint, capture time, device model and OS version, and permitted location coordinates and accuracy, stored locally on the phone. | Show capture provenance and file integrity. The current Android upload flow does not send this local location record. |
| Projects and files | Project names and identifiers, file names, directory information, sizes, transfer requests and file contents you request; files covered by enabled cloud backup can be accessed from the cloud. | List your projects, request files from your computer and preview or download authorised files. |
| Device and service operation | An app-generated random device identifier, request time, IP address, request path and status. The identifier is not an IMEI or advertising ID. | Distinguish devices, prevent duplicate transfers, secure the service and diagnose faults. |
| Usage and support | Storage or transfer usage, account balance and necessary billing records; feedback and contact details you choose to provide. | Show usage, account for services used and handle support or deletion requests. |
Authentication and transfers are needed to provide the service you request. Optional processing such as location depends on your choice and device permission. Declining location does not prevent capture or transfer. A feature may be unavailable if you decline data necessary for it. Only capture and upload material you are authorised to handle.
3. Permisos de Android y actividad en segundo plano
- Camera: photos and videos you initiate. Microphone: recordings and video sound you initiate.
- Location: a permitted precise or approximate location at capture time for your local record. You can revoke permission in system settings.
- Notifications and foreground services: transfer progress and continuation of a recording you started when you switch apps or lock the screen. Recording has a persistent notification and a stop action.
- Photo library: saving captures to Photos is on by default and can be turned off in Settings. When enabled, capture creates a library copy; exporting also creates a copy. The app does not scan your existing photo library.
- The app does not read contacts, SMS, call logs, system calendars or IMEI and contains no advertising or third-party behavioural analytics SDK.
4. Recipients and international transfers
Files and account requests use HTTPS to reach the region you select. International service is operated from Hong Kong, with servers and object storage in Singapore. Alibaba Cloud provides hosting and file storage. Where used, SMS and email providers deliver verification or account messages you request, processing only the data needed for those services.
Delivery is to a desktop associated with your account or authorised project. We do not publish your captures, sell personal data or use these mobile captures for advertising or model training. Capture and project-file access do not themselves send content to AI model providers.
If you select a service region outside your location, your account requests and uploaded files are transferred there. The two regions are separate data stores. Applicable transfer requirements and any required separate consent still apply. Legally required disclosures, dispute handling and business transfers are limited to necessary information.
5. Retention and deletion
| Data | Retention and deletion |
|---|---|
| Files on your devices | You control these copies. Account deletion does not remotely erase them. Delete files or clear app storage yourself, or uninstall after saving anything you need. Copies in Photos or export folders must be removed separately. |
| Relay files | The relay copy is removed after the desktop acknowledges receipt. Uncollected items become eligible for scheduled cleanup after 30 days. Object storage has a 35-day lifecycle as a fallback for failed cleanup. |
| Persistent cloud backups | Stored only when the relevant backup function is enabled. These do not expire under the relay rule. Deleting backups, withdrawing backup permission or deleting the account queues cleanup; failed storage deletion is retried. |
| Account and mobile-service records | Retained while needed for your account. Account deletion clears the mobile account, sessions, device and project associations, transfer requests and relay contents, and processes the linked website account. Persistent backup cleanup can be asynchronous. |
| Required retained records | Records necessary for security, disputes, tax or accounting are retained for the applicable period and then deleted or anonymised; they are not used to continue everyday account services. The region’s general Privacy Policy gives account and transaction retention details. |
If refundable balances, unsettled matters or a service failure prevent deletion, the app explains the reason. Contact us through the account-deletion resource below to resolve it; continuing to use the app is not a condition for requesting deletion.
6. Your choices and rights
You may request access, correction, a copy, deletion, withdrawal of consent or restriction of processing, and portability or a complaint where applicable. Contact hi@workdeck.ai; we normally respond within one month. We verify account ownership without asking for your password or login verification code.
In the app, open Settings and choose Delete account. If you no longer have the app, cannot sign in or want to request deletion of particular cloud data, use the Account and data deletion link on this page. Deleting an account ends related account services; save material you need first.
7. Security, children and changes
Las sesiones usan Keychain en iOS, AssetStoreKit en HarmonyOS y almacenamiento local de WeChat en el miniprograma. No todos estos mecanismos distintos equivalen a almacenamiento cifrado por el sistema.
El tráfico utiliza HTTPS y el acceso a producción se limita al personal necesario. Ningún sistema es totalmente seguro; tratamos y notificamos los incidentes de datos personales según la legislación aplicable.
The app is intended for adult professionals and is not offered to people under 18. Contact us if a child’s information was provided in error. We explain material policy changes and obtain new consent where required.
8. Funciones opcionales de IA y denuncias de contenido
Solo al activar la organización de capturas o los nombres automáticos, las miniaturas, fotogramas seleccionados, hasta los primeros 30 segundos de audio y el texto necesario pasan por la ruta configurada de OpenRouter a los modelos pertinentes. Generan nombres, etiquetas y campos de archivo; la transcripción puede alimentar la organización posterior. Los resultados se guardan con el archivo. Sin activar la opción, la captura y transferencia siguen el proceso anterior.
El asistente requiere una suscripción activa, autorización de copia en la nube y consentimiento separado. Las preguntas, el historial necesario, los resúmenes de proyectos autorizados y los textos fuente necesarios pasan por nuestra nube a OpenRouter y al proveedor de inferencia. Las búsquedas necesarias pueden enviarse a Qichacha o PKULaw.
Los resúmenes, preguntas, respuestas y referencias se guardan en tu cuenta en la nube. Desactivar el asistente elimina sus resúmenes y conversaciones, no los archivos originales. Iniciar otra conversación no borra las anteriores. También puedes solicitar la eliminación mediante el canal de cuentas y datos de esta página.
Las denuncias incluyen el texto que decides enviar y los registros necesarios de cuenta, plataforma, conversación y gestión. Sirven para investigar y, si está activada la clasificación automática, pueden procesarse mediante servicios de IA configurados. Esta opción no adjunta automáticamente chats completos, archivos de proyecto ni registros de ejecución.