1. Operator and service region
Les détails ci-dessous sur les autorisations et les archives locales concernent Android. iOS et HarmonyOS peuvent aussi conserver localement les coordonnées de capture autorisées ; les formulaires de transfert ne transmettent séparément ni coordonnées ni manifeste, mais les médias originaux peuvent conserver leurs métadonnées de localisation. Le mini-programme WeChat n’appelle pas les API de localisation. La copie dans l’album système est activée par défaut sur iOS, désactivée sur HarmonyOS et WeChat, selon les réglages de chaque application. L’enregistrement en arrière-plan sur iOS utilise les fonctions audio du système et les activités en direct, et non les notifications persistantes Android. Les calendriers personnels et rappels de ces clients ne lisent ni ne modifient le calendrier système.
The operator and data controller is Zhen Shan Mei Grace Legacy Limited, registration number 79530779. Contact hi@workdeck.ai. Service infrastructure is located in Singapore.
The app supports a choice of China or International service. Beijing Jingwei Ziyi Technology Co., Ltd. operates China service; Zhen Shan Mei Grace Legacy Limited operates International service. Their accounts and storage are separate. This page describes International service; consult the other region’s notice if you select that region.
2. Data and purposes
| Feature | Data and processing | Purpose |
|---|---|---|
| Account and sign-in | Email or, where offered, phone number; password or verification code; account identifiers, session credentials and necessary profile data. Registration and password reset use the selected region’s website. | Authenticate you, maintain your session, recover your account and associate your projects. |
| Photo, video and audio capture | The photos, videos and recordings you choose to capture, with file name, media type, capture time, project and device identifiers. Files are stored in the app and uploaded to the relay when filed to a selected project. | Deliver field material to your chosen project and show transfer status. |
| Archives locales Android | SHA-256 file fingerprint, capture time, device model and OS version, and permitted location coordinates and accuracy, stored locally on the phone. | Show capture provenance and file integrity. The current Android upload flow does not send this local location record. |
| Projects and files | Project names and identifiers, file names, directory information, sizes, transfer requests and file contents you request; files covered by enabled cloud backup can be accessed from the cloud. | List your projects, request files from your computer and preview or download authorised files. |
| Device and service operation | An app-generated random device identifier, request time, IP address, request path and status. The identifier is not an IMEI or advertising ID. | Distinguish devices, prevent duplicate transfers, secure the service and diagnose faults. |
| Usage and support | Storage or transfer usage, account balance and necessary billing records; feedback and contact details you choose to provide. | Show usage, account for services used and handle support or deletion requests. |
Authentication and transfers are needed to provide the service you request. Optional processing such as location depends on your choice and device permission. Declining location does not prevent capture or transfer. A feature may be unavailable if you decline data necessary for it. Only capture and upload material you are authorised to handle.
3. Autorisations Android et activité en arrière-plan
- Camera: photos and videos you initiate. Microphone: recordings and video sound you initiate.
- Location: a permitted precise or approximate location at capture time for your local record. You can revoke permission in system settings.
- Notifications and foreground services: transfer progress and continuation of a recording you started when you switch apps or lock the screen. Recording has a persistent notification and a stop action.
- Photo library: saving captures to Photos is on by default and can be turned off in Settings. When enabled, capture creates a library copy; exporting also creates a copy. The app does not scan your existing photo library.
- The app does not read contacts, SMS, call logs, system calendars or IMEI and contains no advertising or third-party behavioural analytics SDK.
4. Recipients and international transfers
Files and account requests use HTTPS to reach the region you select. International service is operated from Hong Kong, with servers and object storage in Singapore. Alibaba Cloud provides hosting and file storage. Where used, SMS and email providers deliver verification or account messages you request, processing only the data needed for those services.
Delivery is to a desktop associated with your account or authorised project. We do not publish your captures, sell personal data or use these mobile captures for advertising or model training. Capture and project-file access do not themselves send content to AI model providers.
If you select a service region outside your location, your account requests and uploaded files are transferred there. The two regions are separate data stores. Applicable transfer requirements and any required separate consent still apply. Legally required disclosures, dispute handling and business transfers are limited to necessary information.
5. Retention and deletion
| Data | Retention and deletion |
|---|---|
| Files on your devices | You control these copies. Account deletion does not remotely erase them. Delete files or clear app storage yourself, or uninstall after saving anything you need. Copies in Photos or export folders must be removed separately. |
| Relay files | The relay copy is removed after the desktop acknowledges receipt. Uncollected items become eligible for scheduled cleanup after 30 days. Object storage has a 35-day lifecycle as a fallback for failed cleanup. |
| Persistent cloud backups | Stored only when the relevant backup function is enabled. These do not expire under the relay rule. Deleting backups, withdrawing backup permission or deleting the account queues cleanup; failed storage deletion is retried. |
| Account and mobile-service records | Retained while needed for your account. Account deletion clears the mobile account, sessions, device and project associations, transfer requests and relay contents, and processes the linked website account. Persistent backup cleanup can be asynchronous. |
| Required retained records | Records necessary for security, disputes, tax or accounting are retained for the applicable period and then deleted or anonymised; they are not used to continue everyday account services. The region’s general Privacy Policy gives account and transaction retention details. |
If refundable balances, unsettled matters or a service failure prevent deletion, the app explains the reason. Contact us through the account-deletion resource below to resolve it; continuing to use the app is not a condition for requesting deletion.
6. Your choices and rights
You may request access, correction, a copy, deletion, withdrawal of consent or restriction of processing, and portability or a complaint where applicable. Contact hi@workdeck.ai; we normally respond within one month. We verify account ownership without asking for your password or login verification code.
In the app, open Settings and choose Delete account. If you no longer have the app, cannot sign in or want to request deletion of particular cloud data, use the Account and data deletion link on this page. Deleting an account ends related account services; save material you need first.
7. Security, children and changes
Les sessions utilisent Keychain sur iOS, AssetStoreKit sur HarmonyOS et le stockage local WeChat dans le mini-programme. Ces mécanismes différents ne constituent pas tous un stockage chiffré par le système.
Les échanges utilisent HTTPS et l’accès à la production est limité au personnel nécessaire. Aucun système n’est totalement sûr ; nous traitons et notifions les incidents de données personnelles conformément au droit applicable.
The app is intended for adult professionals and is not offered to people under 18. Contact us if a child’s information was provided in error. We explain material policy changes and obtain new consent where required.
8. Fonctions IA facultatives et signalements
Uniquement après activation de l’organisation des captures ou du nommage automatique, les miniatures, images extraites de vidéos, 30 premières secondes d’audio au maximum et textes nécessaires passent par OpenRouter vers les modèles concernés. Ils produisent noms de fichiers, étiquettes et champs de classement ; la transcription peut alimenter le traitement. Les résultats sont conservés avec le classement. Sans activation, la capture et le transfert ordinaires suivent le processus décrit plus haut.
L’assistant exige un abonnement actif, une autorisation de sauvegarde cloud et un consentement distinct. Les questions, l’historique nécessaire, les résumés de projets autorisés et les textes sources nécessaires passent par notre cloud vers OpenRouter et le fournisseur d’inférence. Les requêtes de recherche nécessaires peuvent être transmises à Qichacha ou PKULaw.
Les résumés, questions, réponses et références sont conservés dans votre compte cloud. Désactiver l’assistant supprime ses résumés et conversations, pas les fichiers originaux. Une nouvelle conversation ne supprime pas les anciennes. Vous pouvez demander leur suppression via le canal de suppression des comptes et données de cette page.
Les signalements comprennent votre description volontaire et les informations nécessaires sur le compte, la plateforme, la conversation et le traitement. Ils servent à l’assistance et peuvent être traités par les services d’IA configurés si le tri automatique est activé. Cette entrée ne joint pas automatiquement les conversations complètes, fichiers de projet ou journaux d’exécution.