XD AI Notes follows a “local-first” principle. All of your notes and analysis data is stored only on your device, and we do not collect or upload your personal data to any server. Please read this Privacy Policy carefully before using the app. If you do not agree with any part of this policy, please do not use the app.
The app follows the principle of minimal necessity and does not collect any personally identifiable information. Specifically:
Information we do not collect:
Content you create: Note text, topic information, tags, topic notebook categories, and similar data you create in the app are stored only on your device (via Apple’s SwiftData framework). We cannot access, view, or obtain this data.
API Key storage: API Keys you configure for third-party AI providers are encrypted and stored on your device via Apple’s system-level Keychain Services. The developer cannot read or obtain your API Key in any way.
The app does not operate any backend servers or cloud storage services. All of your data is stored on your device and is not uploaded to any server we control.
| Data type | Location | Storage |
|---|---|---|
| Notes, topics, tags, and other business data | Local device | Apple SwiftData (SQLite database) |
| Problem images captured or selected | Local device | App sandbox file system, Documents/TopicImages/ |
| Third-party AI API Keys | Local device | iOS Keychain Services (system-level encryption) |
| App settings (such as display mode) | Local device | UserDefaults |
Retention: Your data remains on your device only while you use the app. When you uninstall the app, all locally stored data (including the SwiftData database, image files, and the API Key in the Keychain) is removed automatically by iOS. We have no way to retain or recover this data.
Local use: All content you create in the app (notes, topics, images, etc.) is used only for local display, editing, and management on your device. We do not use your data for any commercial purpose, profiling, or automated decision-making.
Data transmission in AI analysis: When you use the AI image analysis feature, the following data transmission occurs:
Handling by third-party AI providers: Different AI providers (such as OpenAI, Anthropic, or Volcano Engine) have different privacy policies and data practices. Your data at a provider is governed by that provider’s privacy policy. We recommend reviewing the privacy policy of the provider you configure before use. We are not responsible for the privacy practices of third-party AI providers.
Cross-border transmission: Because you can configure AI providers deployed in different countries or regions (for example, OpenAI servers in the United States, Volcano Engine servers in China), your problem images may be transmitted to servers abroad. Whether cross-border transmission occurs depends entirely on the provider you choose. Please choose a provider that suits your needs and compliance requirements.
Third-party open-source components: The app uses the following open-source components, all licensed under the MIT license:
These components are pure UI rendering libraries and do not collect, store, or transmit any of your data. They run only on your device to render Markdown text and LaTeX formulas as visual content.
Data sharing: We do not sell, rent, trade, or otherwise share any of your data with third parties. We do not use your data for advertising, profiling, or any form of monetization.
Legal exceptions: We will disclose information in accordance with the law only when explicitly required by laws or regulations. Note that because we do not hold your data, such obligations are technically limited in practice.
The app requests only the following system permissions, and only when you actively use the related feature:
The app does not request the following permissions: microphone, location, contacts, calendar, reminders, Bluetooth, health data, motion & fitness, Face ID/Touch ID, or others.
Under the Personal Information Protection Law, you have the rights below. Because the app does not collect personally identifiable information and all data is stored locally on your device, you exercise these rights as follows:
Access and copy: You can view and edit your notes, topics, and other content in the app at any time. All of your data is on your device and under your full control.
Correction: You can modify your notes, topics, tags, and other content at any time using the app’s editing features.
Deletion: You can delete your data in the following ways:
Withdrawing consent: You can withdraw your consent to this Privacy Policy at any time by uninstalling the app. After uninstalling, all local data is deleted.
Account deletion: The app has no account system, so there is no account to delete. Uninstalling the app is equivalent to ending use.
Responding to requests: If you have any questions about exercising the rights above, please contact us using the details in Section 9. We will respond within the period required by laws and regulations.
We reserve the right to update this Privacy Policy from time to time. When the policy changes, we will inform you through one of the following:
If you do not agree with the updated policy, you should stop using the app. The update and effective dates of this policy are shown at the top. We recommend reviewing this Privacy Policy periodically for the latest information.
If you have any questions, comments, or suggestions about this Privacy Policy, or wish to exercise any of your rights under the Personal Information Protection Law, please contact us:
Email: devyjn@qq.com
We will respond to your feedback as soon as possible and handle your request within the period required by laws and regulations.