Privacy Policy

Last updated and effective: October 15, 2026

Shilu (时录) is operated by Zheng Yitao and Feng Yang (郑义滔 and 冯洋, referred to as "we" or "us"). This policy explains how we handle data when providing our iPhone and Apple Watch apps and related cloud services, and how you can manage your information. Contact: ytzheng81@gmail.com.

1. Local recordings, transcription, and people's voices

When you start a recording or import audio, Shilu stores audio, transcripts, speaker identifiers, names you enter, and voice-matching information on your device for playback, search, organization, and matching people to voices. Voice matching may be inaccurate and must not be used for identity authentication. Watch recordings are synchronized to your paired iPhone through Apple's device connectivity mechanisms. Inform participants and obtain their consent before recording.

This data is not automatically sent to Shilu servers simply because you use local recording or transcription. Exporting or sharing data yourself, device backups, and system synchronization you enable are separate processes that depend on your actions and Apple's settings. Deleting your account does not automatically delete local recordings, transcripts, or people's profiles on your device.

2. Accounts and cloud AI

Basic recording and local features do not require you to sign in. When you use Sign in with Apple, we process the app-scoped account identifier Apple provides and any name or email address you choose to share (which may be an Apple private relay address). We store necessary account settings, sign-in tokens, and entitlement information to provide account services and security checks. We do not receive your Apple Account password.

After you consent to cloud AI processing, Shilu sends relevant transcript text, speaking times, speaker names, your questions, and necessary context as required by the feature to generate conversation highlights, to-dos, daily summaries, or answers. Automatic generation enabled by a subscription uses the processing scope you have already agreed to. Our servers process and store account-linked generation tasks, results, questions and answers, feedback, and quota/token usage records to display results, continue conversations, meter usage, prevent duplicate accounting, and troubleshoot failures. Original audio and voiceprints are not uploaded with these requests.

The AI service recipient is the official DeepSeek API, provided by Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co., Ltd. (杭州深度求索人工智能基础技术研究有限公司) and its related service entities. We forward the text or summaries needed to fulfill your request to this service; see the DeepSeek Privacy Policy for its data handling practices. The provider's policy does not replace our responsibilities to you. This policy does not promise that the provider retains no data, deletes data immediately, or excludes data from training; processing is also subject to the API service terms applicable to us. You can still use basic local features if you do not agree to cloud processing.

3. Apple Health data

You may optionally connect Apple Health and grant permission for each data type in system settings. Within the scope you authorize, we read heart rate, resting heart rate, sleep, workouts, environmental sound levels, daily mood, heart rate variability (SDNN), steps, active energy, stand time, and respiratory rate. These are used to display your status, compare it with personal records, distinguish exercise-related heart rate increases, and indicate recording conditions. We request write access only when you actively record your daily mood; all other listed types are read-only. We do not read electrocardiograms (ECG) or blood oxygen data.

By default, health queries and displays are processed on your device. If you separately enable "Include body signals in AI summaries," relevant summaries or conclusions, such as elevated heart rate, sleep duration, or mood, may be sent with summary requests to Shilu servers and DeepSeek. Your entire health database is not sent. Raw health records and summaries should be distinguished. Turning off this option stops future transmission of the corresponding summaries but does not automatically withdraw cloud results already generated. You can delete your account or contact support regarding stored data.

You can revoke authorization in system Health permissions or decline individual data types without affecting basic recording. Shilu is for everyday observation, not medical diagnosis or treatment. We do not use health data for advertising, marketing, or advertising tracking.

4. Purchases and subscriptions

Apple processes payments; we do not receive your bank card number. The app submits Apple-signed transactions and necessary account association identifiers to our servers. We store necessary product, transaction identifier, status, entitlement, and quota records to verify and restore purchases, handle renewals and refunds, and prevent duplicate crediting. Deleting your Shilu account does not automatically cancel Apple auto-renewing subscriptions. Manage them separately in Apple subscription settings.

5. Data storage, retention, and deletion

• Storage location: Shilu servers and backups are located in mainland China. If you use cloud services from another country or region, relevant text, account information, and summaries will be transferred to mainland China for processing. DeepSeek's processing is also subject to its service policies.
• Accounts and cloud results: These are retained while your account is active and as needed to provide the relevant features. Use "Delete Account" on the app's account page to delete your account and associated data, including cloud AI results and sign-in tokens. Necessary Apple transaction records are retained but unlinked from the original account for purchase verification, prevention of duplicate accounting, and legally required financial or dispute handling. They are deleted or anonymized when no longer needed.
• Logs: Server logs used for operations, security, and troubleshooting are retained for three months and then cleared. Logs and backups are not subject to a promise to "immediately delete every copy."
• Backups: The database is backed up daily with rotation. Relevant backup copies are cleared within seven days after account deletion. Backups are used only for recovery and security; deletion requests already made must continue to be honored after a restoration.
• Local data: You manage this in the app and system settings. Deleting your account does not delete local recordings or transcripts. Copies you share or export are managed separately by the recipient or the service you choose.

Information that must be retained by law will be kept only within the legally necessary scope and period, with its use restricted. If we cease operations, we will notify you and handle remaining personal information in accordance with applicable requirements.

6. Your choices and rights

You can choose not to sign in, enable cloud AI, or connect Health. You can revoke system permissions, turn off body signals in AI, manage local data, and use the in-app account deletion option. You can also contact us by email to request access, correction, deletion, withdrawal of consent, or other applicable data rights. Please specify the scope of your request. After verifying the identity information necessary for the request, we will respond as required by applicable law or explain why we cannot fulfill it. We will not ask for your Apple password. Withdrawing consent does not affect processing lawfully completed before the withdrawal.

7. Security, minors, and updates

We use measures such as encrypted transmission and access controls to protect data, but no system can guarantee absolute security. Keep your devices secure and do not upload other people's conversations or sensitive information without authorization. This service is not specifically directed at children. Minors should use it with a guardian's guidance and obtain a guardian's consent where required by applicable law. Contact support if you discover that a minor's information has not been handled as required.

When this policy changes, we will update the date on this page and notify you of important changes through the app or another appropriate method. If the purpose or scope of processing changes materially and consent is legally required, we will ask for consent separately.

Help & Support · Apple Standard Terms of Use