仓记 TradeNoteBack to help center

Privacy terms

Data handling boundaries, permissions and backup responsibilities.

Scope

TradeNote is provided by FIFTH Studio for trading records and reflection. These terms describe version 0.13.0 together with the Privacy policy. Updated and effective: 2026-10-23.

Your imports and sharing

The app processes CSVs, images and review inputs you select, plus your follow preferences. It does not require exchange passwords, order keys or wallet seed phrases. Use only content you are entitled to use and check account or order information before sharing. Browsing examples and recognizing a draft do not book a trade.

Records and recognition

OCR runs on device; verify its results before saving. Missing costs are not zero. TradeNote does not place orders, recommend coins or promise returns. Reference prices are not evidence of your exchange fills and do not replace original records.

Local storage and backups

Trades, reviews, inbox items and original images remain on device without automatic upload or cross-device sync. Your operating system may handle app data according to your system backup settings. Exported JSON backups include originals without additional encryption. You choose their destination and any recipient in the system share sheet.

Optional network features

Enabling markets requests quotes, historical candles and connection configuration. Source directories and online help also use the network. Services receive necessary request and connection information as detailed in the Privacy policy. Manual API backup in development/debug builds using the test environment requires separate confirmation; production has no automatic cloud sync.

Permissions and choices

System pickers provide only the photos or files you select; the app does not scan your whole library. Revoke permissions in system settings, disable markets in app settings, or delete local records in Data management. Clearing cache does not delete the ledger. Back up before uninstalling.

Updates and contact

Changes to data purposes or features will be reflected in the documents. Reading this page does not replace system permissions or individual action confirmations. Contact FIFTH Studio about privacy at zfjobslib@vip.qq.com. Do not send passwords, keys or a complete sensitive ledger.

Optional online assistance

Organization, accounting and reconciliation run on this device by default. Turning online assistance on does not give ongoing permission: preview and approve each transmission. The development online tasks produce weekly-report and text-table mapping candidates and never adopts a claim or changes a trade automatically.

For weekly reports, the gateway receives selected exact metrics and fixed summaries with randomized evidence references. Original CSV files, screenshots, account aliases, exchange order IDs, paths and private notes are excluded. The send preview identifies the supplier, model and operator-reviewed policy. Only explicitly accepted claims become a new local report version.

Gateway content is held in memory for at most one hour. Minimal task-status and quota metadata is retained for thirty days. Supplier processing follows the displayed policy; zero retention is not promised. Cancellation of already sent work is best effort; failed work may consume a reservation. Generation requests are not automatically resubmitted. Full accounts and automatic cloud sync remain unavailable.

Mapping tasks separately share approved headers, fixed type profiles and sample counts, never raw cells. Up to the first 200 rows are profiled locally. Common sensitive columns start excluded; automatic masking cannot cover every personal detail, so review each request. Model proposals never import trades automatically.

Screenshot AI and per-image approval

After importing images, choose Recognize screenshot in the review inbox. Preview the actual compressed image and explicitly approve each transmission to DeepSeek. Remove unnecessary account details first. Disabling online assistance prevents transmission; on-device OCR remains independent.

Each task sends one compressed PNG, at most 1600 pixels on its longest edge and 1.5 MiB. The gateway writes no image files or content logs; results remain in memory for at most five minutes and task/quota metadata for thirty days. Supplier processing and retention follow the policy shown before sending; zero retention is not promised. Cancellation is best effort and failed work may consume quota. Backgrounding or leaving does not automatically resend.

Up to twenty candidates are extracted per image. Selected candidates become separate local inbox drafts, never automatic ledger entries. Raw displayed P&L and opening/closing fees remain evidence; manually verify accounting semantics, timezone and missing fields. Re-recognition never overwrites existing manual edits.

Anonymous installation and activity statistics

On first connection and foreground use, TradeNote sends a random installation ID, a SHA-256 digest of an app-scoped device identifier, model, OS version, app version, language and network type to its own service. It does not send IMEI, MAC, serial number, location, Wi-Fi name, contacts, trades, screenshots or notes. These identifiers are not sent to market or AI providers. Connection IP is used for transport and rate limiting; the installation database does not store raw IP addresses.

The installation ID lives in non-backed-up app storage and normally changes on reinstall. Ledger backup, cache clearing and clearing trading records do not move or reset it. The device digest may change with OS, signing, user or vendor-app changes; neither ID is a cross-device account or an authentication credential.

Statistics use Asia/Shanghai calendar dates. Daily activity counts distinct foreground installations; background heartbeats stop. A new installation is counted at its first successful registration, so old-version and never-online installs cannot be reconstructed. Daily deduplication records are kept for 400 days; first/last activity and minimal metadata are retained for long-term installation statistics and future customization. Only authenticated administrators can view this list. No ledger data is collected.