1. Operator and service region
Os detalhes seguintes sobre permissões e registos locais referem-se ao Android. iOS e HarmonyOS também podem guardar coordenadas autorizadas localmente; os formulários não enviam coordenadas nem manifestos separadamente, mas os originais podem manter metadados de localização. O miniprograma WeChat não chama APIs de localização. A cópia no álbum do sistema está ativada por predefinição no iOS e desativada no HarmonyOS e WeChat, conforme as definições de cada aplicação. A gravação em segundo plano no iOS usa áudio do sistema e atividades em direto, não notificações persistentes Android. Os calendários pessoais e lembretes destes clientes não leem nem alteram o calendário do sistema.
The operator and data controller is Zhen Shan Mei Grace Legacy Limited, registration number 79530779. Contact hi@workdeck.ai. Service infrastructure is located in Singapore.
The app supports a choice of China or International service. Beijing Jingwei Ziyi Technology Co., Ltd. operates China service; Zhen Shan Mei Grace Legacy Limited operates International service. Their accounts and storage are separate. This page describes International service; consult the other region’s notice if you select that region.
2. Data and purposes
| Feature | Data and processing | Purpose |
|---|---|---|
| Account and sign-in | Email or, where offered, phone number; password or verification code; account identifiers, session credentials and necessary profile data. Registration and password reset use the selected region’s website. | Authenticate you, maintain your session, recover your account and associate your projects. |
| Photo, video and audio capture | The photos, videos and recordings you choose to capture, with file name, media type, capture time, project and device identifiers. Files are stored in the app and uploaded to the relay when filed to a selected project. | Deliver field material to your chosen project and show transfer status. |
| Registos locais Android | SHA-256 file fingerprint, capture time, device model and OS version, and permitted location coordinates and accuracy, stored locally on the phone. | Show capture provenance and file integrity. The current Android upload flow does not send this local location record. |
| Projects and files | Project names and identifiers, file names, directory information, sizes, transfer requests and file contents you request; files covered by enabled cloud backup can be accessed from the cloud. | List your projects, request files from your computer and preview or download authorised files. |
| Device and service operation | An app-generated random device identifier, request time, IP address, request path and status. The identifier is not an IMEI or advertising ID. | Distinguish devices, prevent duplicate transfers, secure the service and diagnose faults. |
| Usage and support | Storage or transfer usage, account balance and necessary billing records; feedback and contact details you choose to provide. | Show usage, account for services used and handle support or deletion requests. |
Authentication and transfers are needed to provide the service you request. Optional processing such as location depends on your choice and device permission. Declining location does not prevent capture or transfer. A feature may be unavailable if you decline data necessary for it. Only capture and upload material you are authorised to handle.
3. Permissões Android e atividade em segundo plano
- Camera: photos and videos you initiate. Microphone: recordings and video sound you initiate.
- Location: a permitted precise or approximate location at capture time for your local record. You can revoke permission in system settings.
- Notifications and foreground services: transfer progress and continuation of a recording you started when you switch apps or lock the screen. Recording has a persistent notification and a stop action.
- Photo library: saving captures to Photos is on by default and can be turned off in Settings. When enabled, capture creates a library copy; exporting also creates a copy. The app does not scan your existing photo library.
- The app does not read contacts, SMS, call logs, system calendars or IMEI and contains no advertising or third-party behavioural analytics SDK.
4. Recipients and international transfers
Files and account requests use HTTPS to reach the region you select. International service is operated from Hong Kong, with servers and object storage in Singapore. Alibaba Cloud provides hosting and file storage. Where used, SMS and email providers deliver verification or account messages you request, processing only the data needed for those services.
Delivery is to a desktop associated with your account or authorised project. We do not publish your captures, sell personal data or use these mobile captures for advertising or model training. Capture and project-file access do not themselves send content to AI model providers.
If you select a service region outside your location, your account requests and uploaded files are transferred there. The two regions are separate data stores. Applicable transfer requirements and any required separate consent still apply. Legally required disclosures, dispute handling and business transfers are limited to necessary information.
5. Retention and deletion
| Data | Retention and deletion |
|---|---|
| Files on your devices | You control these copies. Account deletion does not remotely erase them. Delete files or clear app storage yourself, or uninstall after saving anything you need. Copies in Photos or export folders must be removed separately. |
| Relay files | The relay copy is removed after the desktop acknowledges receipt. Uncollected items become eligible for scheduled cleanup after 30 days. Object storage has a 35-day lifecycle as a fallback for failed cleanup. |
| Persistent cloud backups | Stored only when the relevant backup function is enabled. These do not expire under the relay rule. Deleting backups, withdrawing backup permission or deleting the account queues cleanup; failed storage deletion is retried. |
| Account and mobile-service records | Retained while needed for your account. Account deletion clears the mobile account, sessions, device and project associations, transfer requests and relay contents, and processes the linked website account. Persistent backup cleanup can be asynchronous. |
| Required retained records | Records necessary for security, disputes, tax or accounting are retained for the applicable period and then deleted or anonymised; they are not used to continue everyday account services. The region’s general Privacy Policy gives account and transaction retention details. |
If refundable balances, unsettled matters or a service failure prevent deletion, the app explains the reason. Contact us through the account-deletion resource below to resolve it; continuing to use the app is not a condition for requesting deletion.
6. Your choices and rights
You may request access, correction, a copy, deletion, withdrawal of consent or restriction of processing, and portability or a complaint where applicable. Contact hi@workdeck.ai; we normally respond within one month. We verify account ownership without asking for your password or login verification code.
In the app, open Settings and choose Delete account. If you no longer have the app, cannot sign in or want to request deletion of particular cloud data, use the Account and data deletion link on this page. Deleting an account ends related account services; save material you need first.
7. Security, children and changes
As sessões usam Keychain no iOS, AssetStoreKit no HarmonyOS e armazenamento local WeChat no miniprograma. Estes mecanismos distintos não equivalem todos a armazenamento cifrado pelo sistema.
O tráfego usa HTTPS e o acesso à produção limita-se ao pessoal necessário. Nenhum sistema é totalmente seguro; tratamos e notificamos incidentes com dados pessoais conforme a legislação aplicável.
The app is intended for adult professionals and is not offered to people under 18. Contact us if a child’s information was provided in error. We explain material policy changes and obtain new consent where required.
8. Recursos opcionais de IA e denúncias de conteúdo
Somente ao ativar a organização de capturas ou a nomeação automática, miniaturas, quadros selecionados de vídeo, até os primeiros 30 segundos de áudio e o texto necessário passam pela rota configurada de OpenRouter aos modelos pertinentes. Eles geram nomes, etiquetas e campos de arquivo; a transcrição pode auxiliar a organização posterior. Os resultados são guardados com o arquivo. Sem ativação, captura e transferência seguem o processo descrito acima.
O assistente exige assinatura ativa, autorização de backup na nuvem e consentimento separado. Perguntas, histórico necessário, resumos de projetos autorizados e textos originais necessários passam pela nossa nuvem para OpenRouter e o provedor de inferência. Consultas de pesquisa necessárias podem ser enviadas ao Qichacha ou PKULaw.
Resumos, perguntas, respostas e referências ficam na sua conta na nuvem. Desativar o assistente apaga seus resumos e conversas, não os arquivos originais. Iniciar outra conversa não apaga registros anteriores. Você também pode solicitar exclusão pelo canal de contas e dados desta página.
As denúncias contêm o texto que você escolhe enviar e os registros necessários de conta, plataforma, conversa e tratamento. Apoiam a apuração e, quando a triagem automática está ativa, podem ser processadas por serviços de IA configurados. Este canal não anexa automaticamente conversas completas, arquivos de projetos ou logs de execução.