Jiyi Privacy Policy

This is the English translation of the Chinese original; the Chinese text is the authoritative version.

1. Who we are and what this policy covers

Jiyi is a local personal record-keeping tool organized by date and searched by tag. It provides records, tags, search, to-dos, anniversaries, local notifications and personal settings. This policy explains how the current version of Jiyi handles information on your device, and what part device backups, system notifications and permissions play.

The current version requires no account and provides no cloud synchronization or collaboration. The app and the third-party components audited for this build do not implement a feature that sends your records to a server operated by the developer; neither the Android nor the HarmonyOS release declares network permission. "Local first" here is not a promise that data can never leave the device: operating-system backup and device-migration features may handle app data under the platform's own rules, as described in section 5.

2. What we process on your device, and why

The information below is created by you or actively selected by you, and is stored in the app's private directory on your device to provide the corresponding feature. We do not receive a server-side copy of it through the app.

Record text is free-form input. Please decide for yourself whether to write identity numbers, passwords, account credentials, health information or other highly sensitive content into it. Apart from the local processing needed to provide the record feature, the app does not send that text to us.

3. What we do not do

The audited baseline build contains no advertising, advertising identifier, analytics, event tracking, crash reporting, third-party sign-in, payment SDK, cloud sync or server push SDK. The code and components reviewed for this build showed no implementation that sends user data to a developer-operated server.

We do not sell your records, we do not provide them to advertisers, and we do not build cross-app tracking profiles through Jiyi. The app itself does not operate a cloud account or database that stores your records.

4. Permissions and photo selection

4.1 Android

• Notifications (POST_NOTIFICATIONS): the app requests notification permission under the system's rules when you enable the daily reminder or set a reminder for a to-do. If you decline, records, tags and to-dos remain usable, but notifications may not appear.
• Exact alarms (SCHEDULE_EXACT_ALARM): on Android 12 and later, enabling reminders may take you to system settings to grant this access. Without it the app falls back to inexact scheduling, so reminders may be delivered late.
• Re-registering reminders after reboot (RECEIVE_BOOT_COMPLETED): used to restore scheduled local reminders after a device restart; it shows no runtime permission prompt.
• Vibration (VIBRATE): used to vibrate when a notification fires; it shows no runtime prompt.
• The current release APK declares no INTERNET permission, and no camera, location, contacts, SMS/call-log, Bluetooth or advertising-ID permissions.

4.2 HarmonyOS

• Notifications: when you first enable reminders, the app requests or guides you to enable system notifications. With notifications off, reminders will not arrive normally, though records remain usable.
• Reminder publishing (ohos.permission.PUBLISH_AGENT_REMINDER): used to hand local reminders to the system ReminderAgent. The current build manifest shows no network, camera, location or contacts permissions.

4.3 Selecting an avatar

When you choose an avatar, the app calls the operating system's photo/gallery picker and you select one image. The app does not call the camera and does not need to browse the whole photo library. The selected image is copied into app-private storage and resized inside the app to limit storage use; the original photo in your gallery is not modified.

5. Data storage, system backups and migration

5.1 Local storage

The app stores records, tags, settings and avatar copies in the app's private space on your device. The system sandbox restricts direct access by other ordinary apps, but this is not the same as the app providing an encrypted vault or an app lock (the current version has no app lock). Device unlocking, system encryption and backup settings are determined by the operating system and your device settings.

5.2 Android system backup

The current Android release does not explicitly disable Auto Backup and provides no dedicated backup-exclusion rules. When Android's backup conditions are met and your device settings allow backup, the system may back up app-private files and some SharedPreferences to your own Google account backup storage, and may restore them later or during device migration. This can include the records JSON, avatars, recovery files and the local reminder plug-in cache; that cache may contain the titles and bodies of scheduled reminders. The exact scope depends on the Android version, device vendor, account and backup settings.

Such backups are managed by the operating system and your account. We have no interface to access those copies and cannot view or delete them from inside Jiyi. Deleting a record in Jiyi, or uninstalling the app, does not guarantee that an older copy already held by the system backup is deleted; restoring a backup later may bring the old data back. Please manage these copies through your device and account backup settings.

5.3 HarmonyOS system backup and device migration

The current build does not explicitly configure an app-level backup extension. Whether system backup or phone cloning migrates app data may depend on the HarmonyOS version, the device implementation and user settings. The app does not receive a copy of those backups. This behavior should continue to be verified on real devices and target release versions, so we do not promise that backup and migration behave identically on every device.

5.4 Deletion and recovery files

You can delete individual records or manage tags inside the app. The app also uses temporary files and a previous-state backup file to reduce the risk of corruption during a write, so content you just deleted or changed may briefly remain in a local recovery file until a later write overwrites it or app data is cleared. The app does not yet support manual export or import of backups.

6. Local notifications and lock-screen display

When you set a to-do or anniversary reminder, or enable the daily reminder, the app passes the information needed to trigger the notification — title, body and time — to the local operating system notification/reminder service. Android, HarmonyOS or iOS (where applicable in the future) schedules and displays reminders according to the platform. Whether reminder content appears on the lock screen depends on your device's notification and privacy settings. The current version does not use a remote push service.

7. Information sharing, service providers and international transfers

We do not operate a server that collects, stores or analyzes Jiyi user records, and the audited build shows no implementation that sends user records to us or to a third-party business server. The app does not sell or share records with advertisers.

The exceptions are the operating-system backup or device-migration features enabled by your device or account, and local reminders handed to the system notification/reminder service. Those system services run under the relevant platform provider's settings and terms; we cannot access system backup copies. The operating system may process data within your own account or during device migration, and that is not a cloud-sync service provided by Jiyi.

8. Retention and deletion

App data generally remains on your device until you delete it in the app, until related files are overwritten by the system or the app, or until you clear app data or uninstall the app. Recovery files may be overwritten by later writes or when app data is cleared. Copies inside platform backups follow that platform's retention and deletion mechanisms, and the app cannot delete them directly.

Because the current version has no account and no server-side copy of your data, we cannot remotely retrieve, export or delete records stored on your device. You can edit or delete records directly in the app. The current version has no standalone export/import feature, so before switching devices please understand how your device's system backup or migration behaves.

9. Security measures and advice for users

We use app-private directories, atomic writes and a local recovery file to reduce accidental access and corruption in ordinary situations. This version does not add a user-set password, an app lock or app-layer end-to-end encryption. Keep your device passcode safe, be careful on shared devices, and consider whether private records should be included in system backups.

10. Children and other people's information

The app does not ask for your age and has no account system for identifying a user's age. Parents and guardians should guide minors in using devices and record-keeping tools as appropriate. The record feature accepts free-form text; do not record, copy or share another person's personal information — especially sensitive personal information — without a lawful basis or proper authorization.

11. Changes to this policy

When the app's features, permissions, components, storage or data flows change, we will reassess and update this policy and the corresponding store disclosures. A new policy will be provided with the applicable app version, and the public policy page will show its version and date. For material changes we will take appropriate notice measures under applicable law and platform rules.

12. Contact us

If you have questions about this policy, permissions or privacy, please contact:

• Data controller: [[OPERATOR_LEGAL_NAME]]
• Privacy contact email: [[PRIVACY_CONTACT_EMAIL]]
• WeChat: qiyilab
• Policy page: this page

Please do not email unnecessary sensitive materials such as identity documents, passwords or payment credentials. Since we hold no server-side copy of your records, this email address cannot read local data on your device.