Privacy Policy

Scope and contact

This policy applies to the mainland China edition of 易迅记账 V1 for personal and family bookkeeping, operated by Shanghai Yu An Shan Shi Technology Co., Ltd. under the public brand VCEAU · 屿岸山石.

To access, correct, copy, export, or delete data, withdraw consent, or report a privacy concern, email support@vceau.co. We verify account ownership before acting on account data.

First launch and consent

Cloud account, sync, and other online initialization start only after you choose “Agree & Continue” and the device saves and verifies that choice. If you decline, the app does not start cloud initialization or automatic network requests.

Privacy/Terms consent is separate from third-party AI consent. Material policy changes receive a new version and, when required, a new consent request.

Data we process

• Account and sign-in data: phone number, email, 易迅记账 user ID, sessions, and Apple, Google, or WeChat identifiers if you choose those sign-in methods. WeChat sign-in may also store the OpenID, nickname, and avatar returned with your authorization; the WeChat access token is not written to the account database. Password sign-in uses protected verification data; plaintext passwords are not stored.
• Ledger and family data: transactions, amounts, categories, dates, budgets, goals, settings, sync metadata, and family member identifiers, roles, and permissions. Financial records may be sensitive personal information.
• Purchase and membership data: account-linked membership product, storefront or provider, purchase time, validity period, status, and store-verified order or transaction identifiers. Payment providers process full payment credentials independently.
• Content you submit: audio and transcripts for voice features, receipt images, text and calculation questions, plus results you confirm and save.
• Device, diagnostic, and security data: platform/app version, request and rate-limit results, security logs, and anonymous crash diagnostics without account, device, or installation identifiers.

Purposes and permissions

• Authenticate, recover and delete accounts; provide bookkeeping, family sharing, sync, recovery, and export.
• With separate consent, provide transcription, receipt recognition, text parsing, and AI calculations; prevent abuse and diagnose reliability.
• Microphone, camera, and photo access are requested only when you start a related feature. You can revoke them in system settings, but that feature will stop working.

Family sharing, providers, and transfers

A family owner manages members and shared ledgers. Authorized members can view or add shared entries. Do not enter another person’s information unless you are allowed to share it.

We may use Alibaba Cloud compute, database, object storage, SMS, or email services. Current mainland China AI processors are Alibaba Cloud DashScope and ByteDance Volcano Engine. Apple, Google, or WeChat independently processes the information needed for the selected sign-in method; WeChat sign-in uses the WeChat Open SDK and Open Platform services.

易迅记账 does not intentionally route mainland China ledgers or AI requests to international model services. Before any future cross-border transfer that requires notice or separate consent, we will identify the recipient, purpose, data categories, and rights channel and obtain consent as required.

Retention and security

• Account and cloud ledger data remains while the account is active, until deletion. Confirmed transcripts, recognition results, or entries follow the same rule.
• 易迅记账 does not retain raw audio or receipt-image request bodies after a request completes. Anonymous crash logs are retained 30 days; private authorized-debug source maps are retained 90 days.
• After deletion, online data is removed and backup remnants expire within 30 days. Verification challenges, expired sessions, and security logs are cleaned on limited implementation-defined schedules.
• Trusted IP addresses are used briefly in server memory for rate limiting. Anonymous diagnostics may use a keyed-HMAC source bucket that rotates every ten minutes and cannot reconstruct the IP.

Your rights and children

You may view and correct ledgers, copy or export data, withdraw Privacy/Terms or AI consent separately, and request access, correction, or deletion. Withdrawing Privacy/Terms consent pauses account and cloud features until you consent again.

Delete in “Settings Center → Account → Delete Account & Data,” or use the deletion page/email if you cannot sign in.

易迅记账 does not offer standalone accounts to children under 14. A guardian may contact us to remove information submitted improperly.

One-time trial eligibility and abuse prevention

To provide and enforce one seven-day trial per verified identity, 易迅记账 uses a keyed HMAC on the server to derive pseudonymous fingerprints from verified phone, email, or third-party sign-in identifiers. The trial-eligibility record contains neither the raw identifier nor the deleted user ID.

After account deletion, the trial-eligibility fingerprint remains for the lifetime of the one-time trial program solely to determine eligibility, prevent repeated-registration abuse, and protect the service. It is not used for advertising or cross-service tracking. Retired key versions may be retained during key rotation to recognize an existing claim.