1. Scope of app and operators
This policy applies to the Tdx Teleprompter Android app, the official website teleprompter.yiroot.com, and account services expressly made available through the app or website in the future. If a third party independently processes information through its own products or services, that party's privacy rules apply.
- Operator
- 沈阳天顶星网络科技有限公司
- Unified social credit code
- 91210124088957535L
- Contact email
- tdxkefu@foxmail.com
"Personal information" in this policy refers to various information related to an identified or identifiable natural person that is recorded electronically or by other means, excluding anonymized information. For content in the device that is only controlled by you and cannot be accessed by us, we will still explain how to handle it in this policy to help you understand product behavior.
2. How we process information
We follow the principles of legality, legitimacy, necessity and good faith and only process information needed to implement functions for clear and reasonable purposes. The basic teleprompter service does not require registering an account or providing unnecessary personal information.
| scene | Involving information | Processing methods and purposes | Whether to automatically upload |
|---|---|---|---|
| Manuscripts and Prompts | Document title, text, grouping, hotwords, annotations, reading position, display and playback settings | Saved in the app private directory for editing, searching, prompting and restoring progress | no |
| Image document import | The image content, file name, file type, file size, pixel size and orientation information you actively select, as well as device-side OCR recognition text | Only the 1 to 10 pictures you selected are read through the Android system photo selector for format and security checks, order adjustments, thumbnails, device-side OCR and import preview; the original pictures are not saved as document attachments for a long time, and the recognized text after you confirm is saved according to the document rules. | no |
| AI follows | Microphone audio, recognize text, text matching and scrolling state, session configuration | Speech recognition, follow-up positioning and local diagnostics on the device | no |
| Feedback | Problem description, image of your choice, general log, and AI session evidence of your choice | Generate a diagnostic package on the device, and you decide whether to send it and to whom through the system sharing panel. | No, you can share it on your own initiative |
| Startup and version safety | App version number, release channel, as well as IP address, request time, response status and basic information about device network requests usually generated by the server | Only after you agree to the current privacy policy, each app process will be cold-started to check for normal updates, mandatory security updates, and necessary business maintenance status; after the first failure, it will only be automatically checked again when the network is restored from unavailable to available. | Transmitted during cold start check after consent; does not contain scripts, recordings or advertising logos |
| Official website visit | IP address, access time, request address, response status, browser or device basic information | Necessary access and security logs are generated by the server to provide web pages, troubleshoot problems and prevent attacks. | Transmitted when visiting the website |
| Optional account services | Third-party platform subject, avatar and nickname, mobile phone number, login time and result, complete source IP, app version, device manufacturer model and system version, installation identifier, in-app derived value of Android ID, session and member status verified by the server | Only used for authentication, session, membership rights, account security, dispute handling and legal cooperation review when you agree to the current policy and actively log in, bind or manage the device. | Transmitted when actively used by you after consent |
We mainly process information based on legal bases such as necessary to perform the service agreement with you, obtain your consent, and perform legal obligations. For information processed based on consent, you may withdraw your consent as described in this policy; withdrawal will not affect the effectiveness of the processing activities before the withdrawal.
3. Local content and AI Follow follow-up
3.1 Local documents and settings
Documents, groups, hotwords, annotations, display settings, prompt parameters, and reading positions are saved in the app's private storage space. The app turns off Android system cloud backup and device migration backup, and will not automatically synchronize these data to the cloud through system backup. Deleting a single document, clearing app data, or uninstalling the app will affect the corresponding local content. Please keep necessary copies before operating.
3.2 Import pictures and documents
The app does not request system permission to read the entire photo album or media library. Only when you select "Image document" on the document editing page and actively select an image through the Android system photo picker, the system will grant the app limited read permissions to the selected image. The app reads up to 10 of your selected images at a time to check file type, size, pixel dimensions and orientation, generate local thumbnails, adjust order, and recognize text on the device using the Chinese OCR model provided with the APK.
The original images are only read during the import process and will not be uploaded to our server or saved as document attachments for a long time. Only after you confirm the import on the preview page, the recognized text will be saved according to local document rules. You can cancel the system selector, skip images, or abandon the import.
3.3 Local speech recognition
AI Follow requires an account; you need to be online when logging in and starting the free trial. After entering the follow-up reading, the app calls the microphone to collect the sound of the current conversation, and uses the device's built-in Sherpa-ONNX model to complete speech recognition, text matching and scrolling control. The current session does not require an ongoing Internet connection, nor does it require documents or microphone audio to be sent to our servers.
3.4 Local diagnostic records
To help you reproduce the reading problem, the app can save evidence of up to three recent AI sessions in a private directory, with a total limit of 300 MB, which may include complete documents, hotwords, recognized text and tags, algorithm events, session configurations, and microphone audio. Once the number or space limit is reached, old sessions are automatically cleaned up. General diagnostic logs are retained for a maximum of 14 days and do not exceed a total size of 30 MB. The above information is only retained on the device by default.
4. Feedback and diagnosis sharing
"Feedback" is currently the only diagnostic sharing portal for users in the app. You can fill in a problem description, select up to 3 images, and choose whether to include an available AI session. The app won't send feedback for you in the background.
- The selected image will be scaled and re-encoded in the app's private directory, and metadata such as original EXIF will not be retained; unfinished image drafts will be retained for up to 24 hours.
- Diagnostic packages may contain problem descriptions, images, basic device and app information, general logs, and full transcripts, hotwords, recognized text, algorithm events, and microphone audio from the sessions you choose.
- The generated share cache will be retained for up to 24 hours. You can cancel before opening the system sharing panel or not select a session that contains audio.
- The diagnostic package will only leave the device after you choose to receive the app or contact in the system sharing panel and confirm sending. How the recipient subsequently handles the information is governed by its privacy rules.
If you send us a diagnostic package, we will only use it to process feedback, locate faults, improve the product, and ensure security, and limit who has access to the information. After the problem is resolved, we will delete or anonymize the relevant information when it is no longer needed or when the retention period required by law expires.
Contributions and recordings may contain your or others’ name, voice, contact information, business information and other information. Please select only what is necessary to resolve the issue, and make sure you have the authority to provide the information to the recipient.
5. System permissions
The app will apply for or guide you to open permission when you use the corresponding function. Denying permissions required for non-basic functions will not affect functions such as document editing that do not rely on this permission.
| authority or ability | Purpose of use | Impact of rejection or closure |
|---|---|---|
| microphone | Collect the current voice for local AI Follow and corresponding local diagnosis | You cannot use AI to read along, but you can still use Auto Scroll and manuscript editing. |
| Android system photo selector (non-whole library album permissions) | It is up to you to actively select picture manuscripts or feedback pictures; the app can only read the pictures you select, and will not obtain permission to read the entire album or media library. | After deselecting, this image import or feedback image attachment will not continue and will not affect other functions. |
| Android system file picker | You actively select the TXT, Markdown or DOCX documents you want to import; the app only reads the files you select and does not scan irrelevant directories. | After deselecting, the document import will not continue and other functions will not be affected. |
| Display on top of other apps | Let the Floating Prompt window appear above the camera or other apps | You cannot use Floating Prompts, but you can still use full-screen prompts. |
| Accessibility services | Foreground microphone link required to carry floating AI prompts | Unable to use floating AI to follow reading; the app is configured not to read the contents of the window or simulate clicks |
| notify | Display the running status and stop entry of the Floating Prompt or microphone foreground service | The running status may not be clearly displayed on some systems. The specific impact depends on the Android version. |
| network access | After obtaining the consent of the current privacy policy, check the version security, and access the official website, help content, and the account you actively use, AI Follow free experience, membership and payment services; Alipay SDK will read the network and Wi-Fi connection status to complete checkout communication and risk control | If you do not agree, the above-mentioned online services will not be initialized; after turning off the network, you will not be able to log in, enable AI follow-up free trial, place orders, pay, or obtain the latest version of the policy. Local writing, editing and basic Auto Scroll can still be used |
The foreground service is a system operating mechanism required by Android to continuously display the floating window or use the microphone. It does not mean that the app will continue to record when you do not activate the relevant functions. You can stop prompting, turn off permissions, or manage app permissions in system settings at any time.
6. Optional accounts and trading services
Account, AI Follow free experience, membership, redemption code and Alipay payment are online services and are only enabled when you agree to the current privacy policy and actively log in or operate the corresponding functions. You can still use local document editing and basic constant-speed word prompting when you are not logged in; AI Follow requires an account, and free trial rules are subject to the App page display. After entering follow-up reading, speech recognition, text matching and scrolling are still completed locally on the device.
- Third-party sign-in: We process the sign-in channel, verified platform identity, authorization status, and necessary account-binding records through official WeChat or QQ interfaces. We do not obtain your third-party account password. The platform identity is encrypted with a versioned key.
- Phone-number sign-in and binding: We process phone numbers, SMS verification-code delivery and verification records, and masked display information for sign-in, account recovery, security verification, and identity binding. Phone numbers are encrypted with a versioned key, and SMS verification codes are not retained as long-term credentials.
- Devices and Sessions:Processes the installation ID generated by one-way digest of the Android ID, or the randomly generated installation ID, as well as the device name consisting of the device manufacturer and model, registration time, last active time, login session and security status, used to limit the number of devices, identify the current device and protect the account.
- Membership, Redemption and Orders:Process products, order numbers, amounts, currencies, order status, payment channel transaction identifiers, payment time, member rights and exchange records. We will not obtain your bank card password or payment password from the payment channel.
- Alipay checkout:Only after you select Alipay and confirm the payment, the app calls the Alipay SDK. We provide the order string generated by the server to the SDK; the SDK may process network and Wi-Fi status, basic device and app information, Alipay client availability status and payment synchronization results, which are used to arouse the cashier, complete risk control and return payment results. The final payment status is verified by our server to Alipay.
- User login and audit:Process login time, results, actual login method, complete source IP, offline guessed region and network type, app version, device manufacturer model, system version, failure reason and necessary audit records for account security, dispute handling, attack prevention, repeated rights collection and fulfillment of legal obligations. Passwords, SMS verification codes, OAuth authorization codes, or third-party access tokens will not be saved in user logs.
Cancellation apps will enter a 7-day cooling-off period during which you can withdraw your app. After the cooling-off period, the account subject will be deleted or irreversibly anonymized according to product rules, and the remaining membership rights will become invalid; local manuscripts will not be automatically deleted due to account cancellation. In order to handle account security incidents and disputes, verified mobile phone numbers, WeChat and QQ login entities, and user login logs will be retained for a maximum of 190 days from the effective time of cancellation, and will be deleted upon expiration; deletion of corresponding evidence will only be suspended during a valid legal preservation period with a clear number, basis, reason, and expiration time. Order, tax, anti-double collection and other records that must be retained according to law are processed according to their respective limited purposes and periods.
8. Invitation rewards, commissions and manual transfers
When you actively use the invitation reward function, we will process the invitation code, the internal identification of the inviter's and invitee's accounts, the binding time, the rule version, the reward issuance record, the first official member purchase result, the commission ratio and amount, settlement and refund correction records. Scanning the invitation poster will only open the official website download address; the invitation relationship will only be established when the invited user actively fills in the invitation code after logging in and the server verifies it successfully.
In order to prevent repeated collection, self-invitation, batch registration or payment identity abuse, we will use the installation ID, the anti-abuse summary of the bound third-party account and the payment identity summary verified by the payment channel for consistency verification. These summaries are saved using measures such as irreversible HMAC with independent keys. The client and customer service pages will not display the original third-party identification, original payment identity or specific risk control rules. Abnormal relationships, commissions or withdrawals can be restricted and entered for manual verification.
Before applying for manual commission transfer, you need to bind your WeChat account and mobile phone number, and submit your name that is consistent with your WeChat real name. Names are encrypted and stored, and mobile phone numbers are protected by independent encryption measures; customer service only views information within the scope required to perform real-name verification and register manual WeChat transfers, and the administrator is also the financial officer to review the amount, transfer voucher and statement. The backend uses named accounts, minimum permissions and operation auditing, and does not use shared administrator passwords. The SMS verification code is only used to confirm this withdrawal. Please do not provide the verification code to anyone.
The commission usually waits 30 days from the first successful purchase of the official membership by the invited friend; a full refund will offset the corresponding commission according to the event rules. The actual processing and arrival time of manual transfers depend on data verification, risk inspection, customer service processing, WeChat and other channels, and automatic or immediate arrival is not promised.
9. Preservation, security and cross-border
9.1 Storage location and period
- Local documents and settings are saved on your device, usually until you actively delete them, clear app data, or uninstall the app.
- Local AI session evidence, general logs, feedback image drafts, and shared caches are automatically cleared according to the quantity, capacity, or time listed in Parts 3 and 4 of this policy.
- Countly linkable installation records and minimal unique-count markers are retained for up to 180 days; page and event aggregates are retained for up to 24 months. Withdrawal stops collection immediately and requests anonymous deletion, retried for up to 30 days. Anonymous aggregates that can no longer be linked to a person are not retroactively deducted.
- Official website access and network security logs are kept in accordance with applicable legal requirements and security requirements; if the law requires retention of network operation logs, the corresponding minimum period shall be implemented.
- Account information is retained during the period required for the account to exist and provide services; the account subject is deleted or anonymized after the cancellation takes effect. Verified mobile phone numbers, WeChat and QQ login subjects and independent user login logs will be retained for a maximum of 190 days for limited security audit purposes and will be deleted upon expiration; except for valid legal preservation with a clear period.
- Invitation relationships, lifelong anti-receipt summary, orders, commissions, refunds, withdrawals and back-end audit records shall be kept within the period required to provide services, handle disputes, prevent repeated receipts, and fulfill legal obligations such as transactions, taxation, and network security; after the account is canceled, the necessary facts will be retained with irreversible account identification, and will be deleted or further anonymized after the expiration of the period.
9.2 Security measures
We take risk-appropriate measures, including app private storage, disabling system cloud backup, transmission encryption, account credentials protected by Android Keystore, mobile phone number field encryption, access control, log desensitization, permission minimization, and security auditing. Nonetheless, no system can guarantee absolute security; when leakage, tampering or loss of personal information occurs or may occur, we will take remediation, reporting and notification measures in accordance with the law.
9.3 Cross-border provision
The information currently processed by us through our official website and optional account services is stored in China, and we do not actively provide personal information overseas. If we do need to provide it overseas in the future, we will fulfill the applicable notification, separate consent and safety assessment obligations before implementation.
10. Your rights
Within the scope of applicable laws, you have the right to know, decide, restrict or refuse processing, and may request to access, copy, correct, supplement, delete personal information, withdraw consent, request explanation of processing rules or cancel your account.
- Manage local content: You can edit or delete scripts and related settings in the app. You can also clear app data or uninstall the app through system settings. These actions may not be reversible.
- Manage permissions: You can turn off microphone, notification, display-over-other-apps, or accessibility permission in Android system settings. Features that depend on a disabled permission will stop working.
- Withdraw privacy consent: You can withdraw consent under My > Privacy and Personal Information > Privacy Consent Management. Account, membership, update checks, and related online tasks will stop. Local scripts and settings remain, and the account is not automatically signed out.
- Control diagnostic sharing: You can deselect an AI session, cancel before sharing, or clear the corresponding cache and local data in the app.
- Account rights: After enabling account services, you can manage linked identities and devices, sign out, or request account deletion from Account and Security.
- Contact us: Email tdxkefu@foxmail.com to submit a request. To protect your account and information, we may need to verify your identity.
We will process the request promptly after verifying your identity and generally respond within 15 working days. If the law stipulates that refusal or no response is required, we will explain the reasons. If you have any objection to the processing results, you can contact us again, or complain or report to the competent regulatory authorities.
11. Protection of minors
This service is not a product specifically targeted at minors under the age of 14. Minors should use the Services after their parents or other guardians have read and agreed to this Policy, and avoid providing unnecessary personal information in manuscripts, images, or diagnostic packages.
Basic offline functions will not require minors to register an account. When minors use accounts or transaction functions that require uploading personal information, they should be guided by their guardians and obtain the consent required by applicable laws; if valid consent cannot be obtained, they should not use the corresponding online functions. When guardians discover that we may improperly handle minors' information, they can contact us through the email address listed in this policy.
12. Policy updates
We may update this policy due to changes in functionality, processing purposes, types of information, third-party services, or legal requirements. The updated policy will be made public on this page and will indicate the new publication date and effective date.
If the change will have a significant impact on your personal information rights, we will notify you through in-app prompts, pop-up windows or other prominent means, and obtain new consent when required by law. Without your explicit consent, we will not reduce your legal rights on the grounds of policy updates.
13. Contact us
If you have questions, comments or complaints about this policy, the processing of personal information or rights requests, please contact us by:
- Personal information processor
- 沈阳天顶星网络科技有限公司
- tdxkefu@foxmail.com
- Email subject suggestions
- Tdx Teleprompter Privacy Request