Privacy Policy
Shenzhen City Entropy Ark Technology Co., Ltd. ("we", "us") operates the ShangYi app and acts as the controller of your personal information. This policy explains what we collect, how we use and store it, who we share it with, and what rights you have. Please read it before using the app, and pay particular attention to Section 4 on data location and cross-border transfer.
1. Information We Collect
Account information: the email address you provide at registration; the user identifier Apple returns when you use Sign in with Apple (you may choose not to share your real email with us); when you sign in with or link WeChat, the account identifiers (OpenID/UnionID), nickname, and avatar WeChat returns with your authorization; when you use Sign in with Google, the account identifier and email Google returns. If you choose to link a phone number, we also collect that number.
Device information: the model, firmware version, battery level, and storage status of your bound ring, used to display device status and send reminders; and the ring's serial number (SN) and Bluetooth MAC address, uploaded to our servers when you connect the ring, used to bind the ring to your account, confirm ownership, and prevent it from being bound by someone else.
Recordings and transcripts: the audio files you actively sync from the ring to your phone, and the transcribed text generated from them.
Diagnostic logs: runtime and Bluetooth connection logs recorded locally by the app for troubleshooting. These logs stay on your device unless you actively export and send them to us.
Phone device and network information: after you accept this policy, in order to complete phone-number verification, WeChat sign-in, and payments and to keep your account and transactions secure, the MobTech SMSSDK, WeChat Open SDK, and Alipay SDK listed in Section 5 collect, when the corresponding feature is triggered, your phone's device identifiers (such as Android ID and OAID), device MAC address, and network state (IP address, network type, carrier, Wi-Fi status and parameters), and read the list of installed apps to determine whether WeChat or Alipay is installed and to identify high-risk devices. See Section 5 for each SDK's scope and purposes.
2. How We Use This Information
We use this information solely to create and manage your account, connect and manage your ring, sync and play back recordings, generate AI transcription results, and provide technical support when you request it.
We do not use your personal information for advertising or profiling, and we do not sell it to any third party.
3. How Recordings and Transcripts Are Handled
Recordings are first stored in the ring's built-in storage. Audio is transferred to your phone over Bluetooth only when you actively start a sync.
When you request AI transcription, the corresponding audio file is uploaded to our servers and cloud storage, and submitted to an AI speech model for transcription.
Cloud backup is off by default. Recordings are backed up to the cloud only if you turn on automatic backup under Me → Cloud Storage, or manually choose to upload a specific recording.
Share links: only when you create a share link from a transcript's results page are that recording's transcript and AI summary made available through the link. Anyone with the link can view them without signing in, but cannot get the audio. Links expire automatically after 7 days, and you can stop sharing at any time; links you created also stop working if you delete your account. Before a link is created, the transcript and summary are submitted to Alibaba Cloud's content moderation service for a compliance review, and content that does not pass cannot be shared.
Home screen widget: if you add the "To-dos" widget to your home screen, the app stores the title of your most recent recording that has to-dos, together with those to-dos, locally on your phone for the widget to display; this data is not uploaded. The widget is visible to anyone who can see your screen. If you turn on "Hide preview on lock screen" under Me → Sync & Transcription, the widget does not show to-do content while your phone is locked. After you sign out, the widget no longer shows to-dos; removing the widget stops the display.
4. Data Location & Cross-Border Transfer
Our servers, cloud storage, and AI transcription service are all located in the People's Republic of China. Recordings and transcripts are stored in Alibaba Cloud Object Storage Service (OSS) in the China (Shenzhen) region; AI transcription is performed by speech models on the Alibaba Cloud Model Studio (DashScope) platform.
This means that if you use ShangYi outside mainland China, your account information, recordings, and transcripts will be transferred to mainland China and stored and processed there, where they may be subject to Chinese law and the jurisdiction of competent authorities.
By using AI transcription and cloud storage you acknowledge and consent to this cross-border transfer. If you do not accept it, you can simply not use these two features — recordings can still remain on the ring and on your phone — or delete your account at any time.
5. Third-Party Services
Alibaba Cloud (Alibaba Cloud Computing Ltd.): provides our object storage, AI speech transcription, content moderation, and email delivery (DirectMail), and therefore has access to the audio files and transcripts you upload (including the transcripts and summaries submitted for review when you create a share link), as well as the email address that receives your sign-up and password-reset verification codes.
Apple: when you use Sign in with Apple, Apple returns a user identifier to us; whether your real email address is shared is your choice at authorization time.
MobTech SMSSDK (Shanghai Zhangzhitao Information Technology Co., Ltd., MobTech): initialized and used only when you link a phone number and need to receive an SMS verification code. We provide your phone number to them; the SDK collects system information (device model, manufacturer, OS version, screen resolution), device identifiers (such as OAID), network state (IP address, carrier, Wi-Fi information and MAC address, cell tower information, SSID/BSSID), and the list of installed apps, to generate a de-identified device identifier, optimize network routing, identify high-risk devices, and prevent SMS abuse. Privacy policy: https://policy.zztfly.com/sdk/sms/privacy
WeChat Open SDK (Shenzhen Tencent Computer Systems Co., Ltd.): initialized after you accept this policy and invoked only when you sign in with WeChat, link WeChat, or choose WeChat Pay. On Android the SDK reads installed-app information to verify that WeChat is installed; when you sign in with WeChat it returns your WeChat account identifiers (OpenID/UnionID), nickname, and avatar to us with your authorization; on iOS it uses the clipboard to exchange data with the WeChat app and collects your device model. Personal information processing rules: https://support.weixin.qq.com/cgi-bin/mmsupportacctnodeweb-bin/pages/RYiYJkLOrQwu0nb8
Google: invoked only when you use Sign in with Google; Google returns your account identifier and email address to us.
WeChat Pay (payment service provided by Tenpay Payment Technology Co., Ltd.): launched through the WeChat Open SDK only when you buy a minute pack and choose WeChat Pay on Android. The SDK transmits the order identifier for the payment to WeChat and returns the payment result, and reads installed-app information to verify that WeChat is installed; your payment account and transaction data are handled by Tenpay under its privacy policy: https://www.tenpay.com/v3/helpcenter/low/privacy.shtml
Alipay SDK (Alipay App Client SDK, Alipay (Hangzhou) Digital Service Technology Co., Ltd.): invoked only when you buy a minute pack and choose Alipay on Android, to initiate the payment and return its result. The SDK reads installed-app information to determine whether Alipay is installed, and collects device identifiers (Android ID, OAID), basic device information (device model and brand, operating system, system settings and properties, screen density, sensor list), and network information (IP address, network type, carrier, Wi-Fi status and parameters, MAC address) to protect account and funds security, fulfil anti-money-laundering and similar legal obligations, and optimize network routing. Privacy statement: https://opendocs.alipay.com/common/02kiq3
6. Permissions
Bluetooth: used to discover and connect the ring and sync recordings; required for the app's core functionality.
Local network: used to discover and connect to device services on the same network.
Notifications: used to alert you when ring storage is nearly full, battery is low, or a sync or transcription completes.
Network connection and WLAN state: used to access the network and determine connection and Wi-Fi status, so that the payment and SMS verification SDKs above can optimize network routing and identify high-risk devices (this involves reading Wi-Fi parameters and the MAC address).
Location (Android 11 and below only): on these system versions, scanning for Bluetooth devices requires the location permission. We use it solely to discover nearby rings, and never obtain or upload your geographic location. It is no longer requested on Android 12 and above.
Start on boot (Android only): used to restore the background connection to your ring after the phone restarts so recording sync can continue. It is not used for anything else.
Keep awake (Android only): used to briefly keep the processor running while the home screen widget refreshes its content in the background (used by the system task scheduler, WorkManager) so the refresh can complete. It is not used for anything else.
You may revoke any of these permissions in system settings at any time; the corresponding features will then be unavailable. This app does not request microphone or camera access — recording is performed by the ring hardware, not your phone's microphone.
7. Data Retention & Deletion
Account information is retained for as long as your account exists. Recordings you delete first go to the recycle bin and are kept for 30 days, during which they can be restored; after 30 days they are permanently deleted.
After you delete your account, we will delete or anonymize the personal information associated with it as required by applicable law, except for records we are legally required to retain.
8. Your Rights
You have the right to access, correct, and delete your recordings and transcripts, and you may delete your account at any time under Me → Account & Security.
If the law where you live (such as the EU General Data Protection Regulation or California privacy law) grants you additional rights — data portability, restriction of processing, objection to processing, or withdrawal of consent — you may contact us at support@shangdiefangzhou.com and we will respond within 30 days.
9. Protection of Minors
This service is not directed to minors under 14. If you are under 14, please read this policy together with your guardian and use the service only with their consent; guardians may contact us at any time to access, correct or delete that minor's personal information. We do not knowingly collect personal information from minors under 14, and will delete it promptly if discovered. We do not send marketing content to minors.
10. Information Security
We protect your information using access control, authentication, and encryption in transit. Please understand that no measure can guarantee absolute security on the internet.
In the event of a personal data breach or similar security incident, we will inform you of the incident and the steps we have taken, as required by law.
11. Policy Changes & Contact
We may update this policy from time to time. If there are significant changes, we will prompt you prominently in the app; the latest version is always available in the app.
For any questions, comments, or complaints about this policy, email us at support@shangdiefangzhou.com.