Back to home

Privacy Policy

Updated and effective: August 5, 2026

Hemiaoji is local-first and data-minimising. The current version has no advertising, cross-app tracking, third-party behavioural analytics or crash-reporting SDK.

1. We process

Account details; provider user identifiers and authorised profile details when you choose WeChat, Google on Android, or Apple on iOS sign-in; device and security information; and tasks, subjects, checklists, comments, receipts, attachments, photos and feedback you choose to create.

2. Permissions

Camera and photo access is used only when you take or select an attachment. System notifications are enabled by default; supported platforms request permission after the first sign-in for tasks, updates, device authorisation, sync status and account security. You may decline or disable them at any time.

3. Local-first and sync

Learning data is stored locally first. When multi-device sync is enabled, content is encrypted on device before upload; the cloud relay does not hold the space key used to decrypt learning content.

4. AI processing

Local models keep content on device. Cloud AI receives only the minimum context needed for a request you initiate. Learning data is not used for advertising profiles or negative labels about minors.

5. Sharing and processors

We do not sell personal information. Cloud, object storage and model providers may process data on our behalf. User-initiated sign-in uses WeChat OpenSDK, Google Identity on Android, or the system AuthenticationServices framework on iOS. Google Play Billing and Apple IAP process purchases on their respective store builds, including the product, order, signed transaction, account binding, amount, currency and subscription state needed to complete the transaction. Payment accounts and credentials are handled directly by the payment platform and are not stored by Hemiaoji. Google Play purchase tokens and Apple signed transactions are sent only to Hemiaoji's server for verification and entitlement delivery. Third-party passwords, app secrets and payment keys are not embedded in the client. System notifications are enabled by default and may be disabled at any time. Jiguang Push processes necessary delivery data on supported mainland-China Android devices. Required notices and consent apply to cross-border processing.

6. Retention and rights

Necessary data is retained while your account exists. You can access, correct, export or delete your account in the app. Associated data is deleted or anonymized after closure, except limited security records required by law.

7. Children

Student accounts for minors should be created and managed by a parent or guardian. Separate guardian consent and child-specific protections apply where required.

Contact

Privacy, deletion, child-data or terms questions: [email protected]

禾苗记Hemiaoji

A collaborative memory system for education. Local-first and permission-controlled, so every step of growth is recorded — steadily.

Product
FeaturesTask planningSubjects & interestsAI task planningPrivacy PolicyBlogPricingDownload
Support
FAQContactTerms of Service
Company
About usLocal-firstPermission controlNo labels
© 2026 Hemiaoji
Local-first · your data, your control