Jiyi Note Privacy Policy

Updated: October 20, 2026 (default account text history and local audio storage)

Effective date: October 7, 2026

Operating entity: Shenzhen Yunxunfei Technology Co., Ltd.

This policy applies to the Jiyi Note Android and iOS apps, WeChat Mini Program, web version, and related services provided by Shenzhen Yunxunfei Technology Co., Ltd. (hereinafter "we"). We provide recording, audio import, speech transcription, note organization, note Q&A, and document export features, and all platforms use the same server account. Speech transcription, AI organization, and Q&A require an internet connection for processing. After logging into an account, transcribed text, summaries, and record directories are automatically saved to the server by default, and the same account can view synced history across devices without separately enabling cloud sync. Original audio remains on the recording phone or recording card, and private chats are still based on local device data. Logging into the web version requires reading and checking a service agreement that includes this privacy policy. For specific storage scope and duration, see below.

Please read this policy before using the relevant features. Audio, transcriptions, and notes may contain personal information of you or others; before recording, importing, or uploading others' information, please ensure that the necessary authorization has been obtained in accordance with the law. Do not submit sensitive content unrelated to the features used, such as ID documents, bank cards, or health information. For sensitive personal information or processing that requires separate consent under the law, we should separately fulfill notification and consent requirements in accordance with applicable laws; this policy does not replace these requirements.

1. Information We Process and Its Purposes

Recording and audio import. When you start recording on your phone, the app uses the microphone to capture audio and saves the recording and corresponding record information such as name, start time, and duration on the device. You can also select audio through the system file picker or system share. The app only processes files you select or that are opened by the app, and does not need to read your contacts, text messages, or location.

Speech transcription. When using cloud transcription, the app sends the audio you submit, file name, language settings, speaker differentiation, and filler word processing parameters to our business server, and processes them through speech recognition services. The relevant service providers need to obtain the audio content to complete recognition. The recording itself may contain voices or conversation content that can identify individuals; the current function is not intended for voiceprint identity authentication.

AI note organization and Q&A. To generate summaries, key points, to-dos, and mind maps, the server processes the transcribed text and calls large model services. When using note Q&A, the app sends your question, the name, time, summary, transcription, key points, to-dos, and related recent conversation of the selected note. Even if the note is stored on your phone, when you select a note for Q&A, the related content is also transmitted to the cloud for processing.

Server account and settings. During registration, login, and account management, we process your username, nickname, password verification information, account ID, session, and the version and time of the privacy policy agreed to at registration. Passwords are transmitted over HTTPS, and the server persistently stores only a random salt and scrypt-derived value, not the plaintext password. The server issues a random token for login sessions and stores only its hash; sessions are valid for a maximum of 30 days, and changing the password, recovering the password, logging out, or revoking a session can invalidate the corresponding token early. The client stores only the login session and basic account information; Android uses Android Keystore encryption, iOS uses the system keychain to store the login session, and the mini program uses WeChat's isolated local storage. Newly registered accounts may choose to verify a mobile phone number by SMS or an email address by email, and completing either one is sufficient for registration; login uses only the account and password, and the mobile phone number, email address, and verification code are not used as additional login methods. Historical accounts can bind or change the mobile phone number or email address in account management after verifying the current password. We store the bound contact information for registration verification, password recovery, and account security, and do not use it for marketing. Password recovery requires verification of any one bound contact method, and after reset the original login session becomes invalid. Email verification codes are sent through Alibaba Cloud Email Push, and SMS messages are sent through Alibaba Cloud SMS Service; verification codes are valid for 5 minutes, the server stores only the verification value of the code with a process key, and sending limit records are retained for a maximum of 24 hours. We do not call WeChat login to obtain OpenID.

History and chat management. The client stores notes, categories, recording references, and chat records separately on the device by server account ID, and does not automatically attribute old data from a logged-out state to a new account. After switching accounts, local records of other accounts are not displayed. Cloud temporary transcription tasks and audio are associated with the account and are used only for processing and short-term retrieval of results; the server verifies access permissions. Temporary transcription tasks and account text history are stored separately; account text history is described in the next paragraph.

Account text history and local audio. After logging in, the titles, categories, times, verbatim transcripts, minutes, action items, mind maps, speakers, markers, language versions, original drafts, and text revisions of existing and new records are automatically uploaded and persisted, and untranscribed recordings synchronize directory information. Local file paths and private chats are not included in this scope. Text modifications can be synchronized between the phone and the web version under the same account; simultaneous modifications retain conflicting versions for verification. Recording card sources are associated by a digest of the file identifier, and device local paths are not uploaded. Original audio remains on the recording phone or recording card and is no longer uploaded, downloaded, or played across devices through account history; local audio selected on the web plays only in the current browser. When the device is offline, text upload waits for network connectivity, and background synchronization is subject to system scheduling and network conditions. See Account history and storage.

Document export and sharing. When generating Word or PowerPoint documents, the server processes the note results you select and generates files. Downloaded documents can be sent by you through the system sharing function to an app or recipient of your choice. Information after sharing is processed by the corresponding recipient according to its rules; please carefully choose the recipient scope.

Network operation and version updates. The app will access business and update interfaces, and the server may receive information necessary for network connections, such as IP address, request time, request path, client type, and response status, to complete network services, operation and maintenance, and troubleshooting. The current app business and update domain is api.yunxunfei.cn, and the official website and download domain is jiyi.yunxunfei.cn. Checking for updates will obtain version and download information; after clicking download, the browser handles the download and installation interaction.

Contact and feedback. When you contact us through the phone number or email listed in this policy, we will process the contact information, problem description, and necessary supporting materials you actively provide, in order to reply to and verify your request. Please do not send account passwords or complete unrelated recording materials.

Membership and payment orders. When you actively purchase, renew, or upgrade a membership, the account service stores the plan, validity period, order number, payment channel, amount, currency, payment status, transaction reference, and entitlement verification status, in order to complete payment, grant entitlements, and verify refunds. Credit card orders also store the exchange rate used for this quote and the original RMB amount. A one-time purchase does not auto-renew, and purchasing a membership does not change the account's default text storage policy. The current iOS version only displays account entitlements and does not provide a purchase entry point within the app.

Mobile verification code. When you actively request a verification code for registration, mobile phone number binding, or password recovery, we will provide the mobile phone number and verification code content to Alibaba Cloud SMS service to send the verification text message. The app does not read mobile phone text messages; you enter the verification code yourself. The server does not store plaintext verification codes, only temporarily stores the HMAC verification value of the verification code; the verification code is valid for 5 minutes and becomes invalid after one use. The mobile phone number, source IP, and time of the sending request are used to limit sending frequency and costs; sending limits use records from the past 24 hours, and records outside the time range are cleaned up during subsequent sends. When the verification code is used for password recovery, after a successful reset, the original password and all login sessions become invalid.

Account recovery. You can reset your password using a verification code sent to the mobile phone number or email address bound to the account, and recovery codes are no longer provided. After a successful reset, all old sessions become invalid, so please log in using the account and the new password. Historical accounts without bound contact information can bind it in account management after logging in; if you cannot log in and have not bound contact information, you may apply for verification and handling through the contact methods listed in this policy.

II. System Permissions

Microphone permission: Used for recording that you actively start. You may deny it or withdraw the permission in system settings; after denial, the phone recording feature cannot be used, and other features that do not depend on the microphone do not have to stop because this permission was denied.

Notification permission: Used to display the status of recording, upload, or processing tasks. Notification display behavior is also affected by the Android system version and foreground service rules; you can manage it in system settings.

Foreground service, network, wake lock, and vibration related permissions: Used for recording and processing task operation, network requests, and related operation prompts. Some of these are ordinary system permissions or foreground service types, and not every one will pop up a separate authorization window. You can stop tasks or manage the app's background operation through system settings.

When importing audio through the system file picker, file access is triggered by your active selection. The current main Android app does not request contacts, SMS, or location permissions. iOS does not read contacts, SMS, or device location; when you actively take a photo for note Q&A, camera permission is requested and only the attachment you selected is processed. When iOS connects to a recording card, Bluetooth permission is requested, and when connecting to the recording card hotspot to download audio, local network permission is requested, for discovering, controlling the device, and transferring audio, and not for tracking location. The recording card's device identifier and connection status are used for device connection and file management. iOS microphone, camera, Bluetooth, and local network permissions can be managed in system settings. If new permissions are added or their purposes change in the future, we will provide supplementary explanations and obtain authorization as required.

WeChat Mini Program permissions. WeChat processes Mini Program operation information according to its platform mechanisms. Mini Program recording will request recording authorization; when importing audio or adding images to note Q&A, only the files or images you actively select are processed. When sending image Q&A, the selected images will be uploaded to the server and passed to the corresponding model service for analysis. Permissions can be managed in WeChat settings.

III. Third-Party Services and Information Provision

Credit card payment: PayPal. When you choose overseas Visa / Mastercard credit card payment and submit card information, the official PayPal Android SDK provides the card number, expiration date, security code, cardholder name, and billing country/region directly to PayPal, to complete bank card payment and necessary bank verification. PayPal processes payment and risk control information according to its rules; Jiyi Note servers do not receive or store the full card number or security code, and will not store the card for this one-time payment. The backend provides PayPal with the order number, amount, currency, and receiving merchant information, receives signed payment notifications, and verifies the arrival status. See the relevant rules in the PayPal Privacy Statement.

Other payment channels. When you choose the currently available WeChat Pay or Alipay, the app can complete payment through their payment components; the backend provides order and payment collection information and verifies the payment result; the relevant payment institutions process the information you submit in their payment flow according to their own rules. The payment institution will not receive your recordings, notes, or account password due to this membership payment.

SMS verification: Alibaba Cloud SMS Service. To complete the registration verification, mobile phone number binding, or password recovery you actively request, the backend provides Alibaba Cloud with the receiving mobile phone number, verification code, SMS signature, and template information, and does not provide account passwords or recording notes. For related rules, see Alibaba Cloud Privacy Policy.

Speech recognition: ElevenLabs. The server provides ElevenLabs with the audio you actively submit, or real-time audio clips after you enable real-time text or translation, to generate transcription text, timestamps, and speaker differentiation results within the recording. For related rules, see ElevenLabs Privacy Policy. Speaker differentiation within a recording is not the same as cross-recording voiceprint identity recognition.

Text organization, Q&A, and translation: DeepSeek Open Platform. The server provides the transcription text, selected notes, questions, and recent context needed to complete the task; if you actively add attachments, the text and image content extracted from the attachments will also be processed. Used to generate summaries, key points, to-dos, mind maps, Q&A, and translations. For related rules, see DeepSeek Privacy Policy. The scope of third-party retention and processing is subject to their agreement and actual account settings. After the real-time function is enabled for the first time, collapsing the display during this recording will not stop the transcription or translation that has already been enabled; after recording stops, real-time audio sending ends.

The above AI services are invoked through the business server and do not require you to separately install the corresponding applications on your phone. The Android app uses basic components such as AndroidX, Kotlin Coroutines, and LAME audio encoding; iOS uses system capabilities such as recording, keychain, and photo picker, and supports compatible recording card connection, control, and file transfer through AiPenSDK and the PLAUD recording card SDK. The required Bluetooth, device identifiers, and audio are used only for the corresponding device functions; cloud transcription and AI processing are still invoked through the above business server. The current version does not integrate third-party SDKs for advertising delivery or personalized marketing.

We will not publicly publish your recordings, notes, or questions just because you use this application. When providing information to third parties, we should fulfill necessary notification, consent, entrustment agreements, or other legal obligations based on the specific processing relationship; except as otherwise provided by law. Third-party rule links are used to help you understand their processing methods and do not exempt us from the responsibilities we should bear.

IV. Information Storage and Deletion

Information on the device. Login sessions, notes, chat records, preferences, and in-app audio are stored on the device. You can delete records through the corresponding entry or clear app data through the system. After account cancellation, local records for that account are no longer displayed, but files that have been exported or shared outside the app will not be deleted by the server and need to be handled separately by you.

Information on the server. To complete transcription, organization, Q&A, or export that you actively initiate, the relevant content must be temporarily transmitted to the server. Account transcription and summary history are additionally persisted; private chats and exported files do not have a separate permanent cloud history database. After a transcription task ends, the audio and task results are retained for about 24 hours for the client to retrieve, and are then deleted by a cleanup task that runs every 5 minutes; unfinished recording sessions are cleaned up about 24 hours after their last activity, and necessary files are retained during tasks still in progress. Original recordings and private chats are mainly stored on the device you use; please retrieve processing results promptly and back up audio you need to keep long-term yourself. Deleting your account removes the temporary files and results for that account in the online service. The server backs up the account database and file ownership metadata daily, but does not back up recordings or note content; such database backups are retained for up to 7 days and are subject to access controls, and restoration requires checking deletion records to avoid restoring deleted information. Retention by third-party services remains subject to their own product rules.

Account history copies. Synced transcription text, summaries, directories, and revisions are persisted and are not subject to the approximately 24-hour cleanup rule for temporary transcription tasks. Logging out stops synchronization on the current device, while server history is retained; you can manage or delete records and delete your account. After account deletion, cloud copies are removed by a background cleanup task, within about 5 minutes at most; operational backups are handled as described in this section. Historical audio previously uploaded on demand has ceased external access; this policy adjustment did not perform an irreversible bulk deletion of historical files.

Account security event records (such as registration, login, password changes, and contact information changes) are retained for a maximum of 90 days, and associated records are deleted upon account cancellation. Server access logs may contain network operation information and are managed according to maintenance and applicable requirements. For data processed by third-party services, we assist with your requests based on the actual service relationship and available mechanisms; third-party storage locations and periods are subject to the corresponding agreements, and it cannot be inferred from a "domestic domain name" that all data does not leave the country.

V. Information Security

The app communicates with official business, updates, and download addresses via HTTPS. The server uses password-derived values, session token hashes, and account access control; audio read addresses sent to the speech recognition service have an expiration time and are not provided as public download addresses. We take access management and security maintenance measures, but this does not mean that all stored content is encrypted or that the service is free of risk.

Please keep the device properly and avoid sharing sensitive recordings and notes in untrusted environments. In the event of a personal information security incident, we will take remedial measures in accordance with the law and fulfill the corresponding notification and reporting obligations.

VI. Your Choices and Rights

You can view and manage notes, recordings, and chat records accessible within the client, change your nickname and password on the account page, log out of other login sessions, manage related permissions through system or WeChat settings, or stop using the corresponding cloud processing features. Withdrawing authorization does not affect processing previously carried out based on valid authorization.

You can enter your current password on the account page to request deletion of your server account. This operation takes effect simultaneously for the shared account across Android, iOS, Mini Program, and web versions; associated recordings, transcription results, and account text history copies in the online service are also cleaned up. Please separately delete files you have exported. If you cannot perform this yourself, you can contact us and we will handle it after verifying your identity.

You may submit requests to us for access, copying, correction, supplementation, deletion of personal information, withdrawal of consent, account cancellation, or explanation of processing rules. To prevent impersonation by others, we may verify identity when necessary, but will only require information proportionate to the verification purpose. We will respond promptly in accordance with the law; if a request cannot be fully satisfied, we will explain the reasons and feasible handling methods.

7. Information about Minors

This application is mainly used for office and personal records and is not specifically intended for children under the age of fourteen. Minors should read this policy under the guidance of a guardian; for personal information processing that requires guardian consent according to law, corresponding consent should be obtained before use. If a guardian discovers that a minor has submitted information without the necessary consent, they may contact us through the methods below to verify, stop the relevant processing, and delete it according to law. The current development version does not have a dedicated children's account system.

8. Contact Us

Operating entity: Shenzhen Yunxunfei Technology Co., Ltd.

Personal Information Protection Contact: Xie Yongpeng

Contact phone: 17623208464

Contact email: 1073247908@qq.com

Please indicate "Jiyi Note Personal Information Request" in the email subject and explain the issue you wish to have handled and the necessary record identifiers. For the first contact, there is no need to send a full photo of your ID card, password, private key, or other unrelated sensitive information.

IX. Policy Updates

We will update this policy based on features, data processing methods, and applicable requirements, and publish the update date. When there are major changes involving processing purposes, information types, recipients, or methods of exercising rights, we will provide notice through appropriate means; where consent must be obtained again in accordance with the law, relevant processing will be carried out only after obtaining consent.