zhiyu privacy policy

Applies to zhiyu 0.1.1. Updated 16 October 2026. Operator: Martell. Privacy contact: k34ubll5@gmail.com.

Communication between devices

No service account is required. After pairing, messages, photos, files and transfer information such as names, sizes and checksums go to your chosen device. Servers and third-party nodes do not relay this content.

Discovery and device identity

Discovery and authentication may exchange temporary identifiers, service identifiers, addresses, ports, device names, types, OS and model information, app identities and public keys. Trusted relationships and authenticated endpoints are stored locally for reconnection. Network participants can observe source IP addresses; this is not anonymous communication.

Permissions and file selection

Local-network and Bluetooth permissions support discovery and connections. You select files and photos with system pickers; local staging copies may be created for drafts and transfers. The app does not read system contacts, and selecting photos does not grant access to the entire library. Opening an APK on Android is user initiated and handed to the system installer.

Local records and deletion

Identity, trust, conversations and transfer records stay on your device. Received file contents are outside conversation-database encryption. Hiding a conversation does not delete it. Deleting a device revokes trust and keeps a read-only archive, without deleting peer or separately saved copies. Uninstalling does not guarantee removal of keychain entries, backups or external files. Complete backup restoration and migration are not available yet.

Diagnostics and voluntary feedback

Runtime status and errors are recorded locally. Copying or exporting diagnostics is your action; chats, files and diagnostics are not automatically uploaded. Feedback opens your email app without automatically sending mail. Do not submit passwords, private keys or private conversations.

Support email

We and Gmail process the email address, content and attachments you voluntarily send only for support, safety feedback and handling requests, not advertising or sale. Support correspondence is retained for at most 12 months after closure, except legal requirements or unresolved disputes. Email us to request access, correction or deletion of information we actually hold.

Website and external services

The website provides product information, downloads and help, without hosting chats or transferred files, setting cookies or loading third-party analytics. Language choices are stored locally; explicit language paths take precedence. Access logs contain IP, time, host, paths without query parameters, status, response size, duration, referring host, browser information and test markers, but not authentication headers, cookies or request bodies. Logs rotate daily with 14 historical files retained; security evidence is kept until an investigation ends.

External links and policy updates

External services such as GitHub and Gmail have their own privacy rules. Hosting and email processing may occur outside your region. The app is not specifically directed to children. Policy changes update this page and its date; email us with privacy questions.