小径Privacy policy
Local records and AI data use
Updated: 2026-09-18 · Applies from the first public publication of this website.
Operator & contact
小径 is provided by 肖炜超.
weichao544@gmail.comInformation processed on your device
Paths, stages, tasks, dates, scheduled times and completion records support planning, the calendar and progress displays. Your nickname, introduction, planning preferences, self-assessments and optional body measurements support personalization and growth analysis. Flow notes and images you select are used for your journal.
These core records are primarily stored on your device. Body measurements may be sensitive; provide only what you need. Declining optional information does not prevent features that do not need it. The app does not automatically upload your photo library.
Optional AI services
When you use AI and confirm the relevant scope, your input, related conversation and authorized plan or profile content are sent to the selected endpoint. API keys are held in system secure storage and sent to the corresponding endpoint to authenticate requests. Recipients may also receive connection information such as your IP address. Aggregators may forward requests to downstream model providers.
Check the endpoint and its operator. Retention, training use, processing location and deletion depend on the provider and your account terms; zero retention or exclusion from training cannot be assumed. Processing may occur abroad. Disabling AI authorization limits future sending but cannot recall content already delivered. Buying the app does not authorize access to your profile.
Permissions, sharing & reminders
You choose images and files through the relevant pickers. Exporting, copying or sharing sends selected content to the app or location you choose; those copies are managed by you and the recipient.
Notification permission enables optional local reminders by time period. Notifications may appear on the lock screen. Manage photo and notification permissions in system settings. Declining an optional permission does not prevent features that do not require it.
Storage, security & deletion
The local database is encrypted, API keys use system secure storage, and AI requests use HTTPS. Images, exports and shared copies have different storage boundaries; database encryption does not mean every file is encrypted.
View, edit or delete records through their corresponding pages. Moving a path to the recycle bin is not permanent deletion. Choosing to keep a road may retain growth history. Deleting AI history does not undo applied plans or erase a provider's copy. Removing a service configuration does not close its third-party account.
There is currently no single control to erase all local records and credentials, and no cloud sync, WebDAV or full portable backup service. Uninstalling does not guarantee removal of system secure-storage entries, external copies or store orders. A path export is not a full backup.
Purchase & support information
The Android app is distributed through Google Play and is currently in testing. The production model is a one-time paid download, without in-app purchases, automatic renewal or a purchase-verification backend. Test eligibility and pricing are shown by the store. Google handles payments and orders. The app does not request card details or automatically read your store orders. The developer can handle sales, refunds and necessary order-support information through the store console.
Third-party AI charges are separate. Any future account, purchase-recognition or subscription service will explain its additional data processing first. This policy does not authorize future uploads in advance.
Your choices & future updates
Use the relevant screens to manage editable records, AI permissions and service settings. Contact the email above to request access, a copy, correction, deletion or restriction of personal data, withdraw consent, or raise an objection or complaint. Rights and response deadlines depend on applicable law. We request only information needed to verify a request. You may also complain to your competent local data protection authority.
The developer cannot remotely read or delete records stored only on your device; we can explain local steps. Requests concerning information already received by a third party should also be directed to that provider. Updates are dated on this page. Material processing changes will be explained through the website and applicable App notices, with renewed consent where required.
Intended audience
小径 is intended for users aged 14 and above, not children under 14. Users below the age of legal adulthood where they live should review these terms and use the service with guardian guidance, obtaining guardian consent where required. Do not submit children’s personal information in AI requests or support messages. Contact the email above if children’s information has been received through support. The App does not currently verify ages or guardian identities; this statement does not imply a technical age-verification system.
Website, hosting and contact channels
This website is hosted on Cloudflare Pages. To deliver content and operate and secure its network, Cloudflare may process connection information such as IP address, request time, requested URL and browser information, potentially outside your region. These pages contain no advertising, behavioral analytics scripts or login forms and do not request API keys.
Google processes email addresses, messages and attachments when you contact us through Gmail. Tencent processes accounts and group messages under its rules when you join the optional QQ community. Do not post private records in the group. We retain support information only as needed to respond, resolve issues and meet necessary obligations, deleting it when those purposes and any required retention end. Store and hosting-provider retention follows their respective policies.
Processing basis and international transfers
Where applicable law distinguishes legal bases, requested services rely on performance of the service agreement; optional disclosures rely on applicable consent and authorization; necessary security and support rely on legitimate interests; and legally required processing relies on legal obligations. You may decline optional AI and continue using core local features.
The actual endpoint you select determines the AI recipient. A preset brand name does not prove that a custom endpoint belongs to that brand. Check the recipient and its privacy policy before sending information, and avoid unnecessary sensitive content. Overseas services may be subject to different data protection rules; their transfer arrangements depend on provider terms and your account agreement. We do not promise that third-party processing remains local.