JianHe is operated by 芜湖鸠江区德谷科技坊 (Degu Technology Workshop, Jiujiang District, Wuhu, China). If you have questions about how your personal information is handled, or would like to request deletion of your account, contact x3011809458@gmail.com.
This English version is provided for convenience. If it differs from the Chinese version, the Chinese version prevails.
1. Information we process
- Local items: Prompts, skills, snippets and related settings you save in the Windows app are stored on your device by default.
- Account information: When you sign up or sign in with email, we store your email address, a hash of your password, your account identifier and the records needed for sign-in. We never store your password in plain text.
- Google sign-in: If you choose to sign in with Google, JianHe uses Google OAuth to obtain your Google account's unique identifier and, if available, the email address Google has verified, in order to create, link and sign in to your JianHe account. JianHe does not store your Google name or profile picture in its account database.
- Devices and sessions: When you sign in, we store the device name, platform, app version, most recent sign-in time and the token records that keep your session active. The server stores a hash of the refresh token.
- Cloud sync and feedback: If you use cloud sync, the items you upload and their sync records are stored on our servers. If you submit feedback, we store its content and status.
- Website analytics: When you visit the JianHe website, we count page views, how you arrived (such as the referring site and campaign link parameters), browser, operating system, device type, screen size, language, approximate region, and some actions on the page (such as clicking a download button, opening an FAQ item, or which sections you scrolled to). Analytics uses no cookies and is not linked to your JianHe account. The Windows app does not include this analytics.
2. Why and how we use it
We use this information to provide account sign-up and sign-in, identify devices, maintain sessions, sync across devices, handle feedback and keep the service secure. Google account information is used only for account creation, linking, authentication and sign-in. It is not used for advertising and is never sold to third parties.
You can use JianHe's local features without signing in. Cloud sync requires sign-in and may be limited by your account's entitlements; items are uploaded only when you use it.
Website analytics is used only to understand website traffic, where visitors come from and how pages are used, so we can improve the website. It is not used to identify individuals or for advertising.
3. Storage and security
Local items stay on your device. Cloud sync content and account information are stored on JianHe's servers. Cloud sync currently uses a plain-text JSON protocol, so the server can read synced content: it is not end-to-end encrypted. Data is transmitted over HTTPS and server access is restricted. Please don't put sensitive information you don't want uploaded into your items or feedback.
The Google OAuth client secret is kept on the server and is never included in the Windows app. Temporary data created during authentication is used only to complete sign-in.
4. Third-party services
Google sign-in uses Google OAuth. If you choose it, you are redirected to Google, which authenticates your Google account. Google's own privacy policy applies to data processed by its services. JianHe never uploads your local items to Google for sign-in.
Website analytics is provided by Umami Cloud (Umami Software, Inc.), and analytics data is stored on its servers outside mainland China. Umami uses no cookies and does not store visitors’ full IP addresses; the IP address is used only to infer an approximate region. Umami’s own privacy policy applies to its processing of this data. If you prefer not to be counted, you can use your browser’s ad or tracker blocking; the website and downloads still work normally.
5. Retention and deletion
While your account exists, we keep the data needed to provide account and sync services; temporary sign-in records are handled according to their validity period. You can delete local items in the app. To access, correct or delete your account and related personal information on our servers, email the address above; we will verify and process your request. Uninstalling the app does not automatically delete your account or synced data on the server.
Website analytics data is kept for the analytics service’s retention period, currently about 6 months, and then deleted automatically.
6. Changes to this policy
If features or the way we process data change, we will update this page and its "last updated" date. You can always find the latest version through the link at the bottom of the page.