Privacy policy

Provider and version

Provider: FIFTH Studio. Product: TradeNote 0.13.0. Updated and effective: 2026-10-23. Privacy contact: zfjobslib@vip.qq.com. This policy describes implemented features; planned accounts and cloud sync are not presented as available.

Data on your device

The local ledger holds sources, pairs, sides, times, profit and costs, reviews, rules, plans, actions, inbox items and original images. Language, theme, follows and connection preferences are also stored locally. Accounting and statistics run on device. The app does not automatically upload these trades, notes or screenshots. There are currently no production accounts, automatic cloud sync, advertisements or separate journal behavioral analytics SDKs.

Network requests

Source catalogs and icons, market configuration, spot/futures quotes, historical candles, online help and connection checks use the network. Market requests include symbols, periods and chart time windows, not journal profit, review text or screenshots. Servers or network services receive IP addresses, request times, necessary paths and request metadata; logs follow the respective service deployment policies. Local-first does not mean every feature is offline. Disabling markets stops their foreground subscriptions.

Photos, files and permissions

System photo/file pickers provide CSV or PNG/JPEG content you select. The app does not scan your entire library, contacts, location or clipboard in the background. Android uses bundled ML Kit text recognition and iOS uses system Vision. Recognition runs on device and does not automatically upload images. System sharing, file pickers and WebView follow your operating system settings.

Android recognition diagnostics

Android text recognition uses Google ML Kit (com.google.mlkit:text-recognition-chinese:16.0.1). Google documents diagnostic and usage information such as device model/OS, app package/version, per-installation identifiers, latency, image format/resolution, event types and error codes. This is distinct from uploading your screenshot or recognized journal contents. The app has no separate advertising or journal behavior-tracking SDK. Read Google’s ML Kit Android data disclosure and privacy information: https://developers.google.com/ml-kit/android-data-disclosure and https://policies.google.com/privacy . iOS recognition uses Apple’s on-device Vision framework.

Backups, sharing and test APIs

You initiate backup exports and sample sharing. A backup contains trades, notes and original images without additional encryption. Recipient apps or external storage follow the third-party services you choose. Production does not automatically upload the ledger. Development/debug builds in the test environment offer a separately confirmed manual API backup that sends the chosen ledger snapshot to its test service, unlike a normal local export. Switching environments alone does not upload data.

Cache and retention

Market cache holds quotes and candles. Local cache directories hold temporary OCR copies, export staging files and regenerable images. Clearing requires bottom-sheet confirmation and keeps files in use, persistent ledgers, originals, inbox items, follows and preferences. Cache may be recreated. Local records remain until you delete them or the system removes app data; external backups and shared copies are outside app cleanup.

Access, corrections and deletion

View and edit records in trade details or reviews; export or restore backups; delete samples or all records in Data management. System settings manage photo/file permissions and system backups. Deleting all data requires explicit confirmation. Clearing cache does not remove trades. Back up before uninstalling or replacing a device; records stored only on device cannot currently be recovered remotely.

Security and changes

Data relies on the device sandbox and operating system security. The local ledger and exported backups do not have additional end-to-end encryption. Use a device lock and protect backups. Future accounts, sync, analytics or other processing purposes will be reflected here with appropriate feature-level choices. Contact the address above with privacy questions and remove sensitive details first.

Optional online assistance

Organization, accounting and reconciliation run on this device by default. Turning online assistance on does not give ongoing permission: preview and approve each transmission. The development online tasks produce weekly-report and text-table mapping candidates and never adopts a claim or changes a trade automatically.

For weekly reports, the gateway receives selected exact metrics and fixed summaries with randomized evidence references. Original CSV files, screenshots, account aliases, exchange order IDs, paths and private notes are excluded. The send preview identifies the supplier, model and operator-reviewed policy. Only explicitly accepted claims become a new local report version.

Gateway content is held in memory for at most one hour. Minimal task-status and quota metadata is retained for thirty days. Supplier processing follows the displayed policy; zero retention is not promised. Cancellation of already sent work is best effort; failed work may consume a reservation. Generation requests are not automatically resubmitted. Full accounts and automatic cloud sync remain unavailable.

Mapping tasks separately share approved headers, fixed type profiles and sample counts, never raw cells. Up to the first 200 rows are profiled locally. Common sensitive columns start excluded; automatic masking cannot cover every personal detail, so review each request. Model proposals never import trades automatically.

Automatic screenshot recognition (development build)

Edit or redact images in the preview. Confirming opens Images to review. If intelligent assistance is effectively enabled and available, edited compressed screenshots are sent automatically to DeepSeek for recognition. Disabled or unavailable assistance creates no AI task; on-device recognition remains. Cancelling the preview sends nothing.

Results appear as separate records on the same page. Tap a record to select its source and review direction, time and fees; only explicit saving books it. The standalone Screenshot AI page and button are removed. Manual edits are preserved. Leaving or backgrounding cancels unfinished recognition without automatically resending.

Anonymous installation and activity statistics

On first connection and foreground use, TradeNote sends a random installation ID, a SHA-256 digest of an app-scoped device identifier, model, OS version, app version, language and network type to its own service. It does not send IMEI, MAC, serial number, location, Wi-Fi name, contacts, trades, screenshots or notes. These identifiers are not sent to market or AI providers. Connection IP is used for transport and rate limiting; the installation database does not store raw IP addresses.

The installation ID lives in non-backed-up app storage and normally changes on reinstall. Ledger backup, cache clearing and clearing trading records do not move or reset it. The device digest may change with OS, signing, user or vendor-app changes; neither ID is a cross-device account or an authentication credential.

Statistics use Asia/Shanghai calendar dates. Daily activity counts distinct foreground installations; background heartbeats stop. A new installation is counted at its first successful registration, so old-version and never-online installs cannot be reconstructed. Daily deduplication records are kept for 400 days; first/last activity and minimal metadata are retained for long-term installation statistics and future customization. Only authenticated administrators can view this list. No ledger data is collected.