We take your personal information and privacy seriously and always follow the principles of lawfulness, data minimization, transparency, and security. This Privacy Policy (the “Policy”) explains how we collect, use, transmit, store, and protect your personal information, and how you can exercise your related rights.

This Policy applies to the “TXLedger” (Chinese name: 甜心账本) products and services provided by Mianchi Tianxin Technology Co., Ltd. (渑池甜心科技有限公司, “we” or “us”), including the iOS and Android mobile apps and any new product forms that emerge as technology evolves. By using TXLedger, you acknowledge that you understand the personal-information practices described in this Policy; for non-essential information related to extended features, we will notify you separately and obtain the necessary authorization where required.

The current version of TXLedger supports phone-number login only, including SMS verification-code login and phone-number-plus-password login. To complete registration, login, identity verification, session persistence, account protection, and troubleshooting, we may collect and process your phone number, SMS verification result, secure processing result of login credentials, user ID, login status, and device and network access logs as necessary.

To protect your account and the service, a security check may be required during login or sensitive operations; during that check we may process the verification result, IP address, and device and network access logs as necessary.

If you choose to set a nickname, avatar, or other profile details, we store what you submit and display it in ledger-member and profile scenarios. Unless a feature explicitly displays it or you actively share it, we do not show your phone number to other ledger members.

TXLedger is a tool for shared ledgers, bookkeeping, and financial insights. To provide the core service, we process the ledger and bookkeeping information you actively create, join, edit, view, or share, including basic ledger information, member collaboration information, income and expense records, notes, dates, amounts, information needed for statistics, and necessary operation records.

Content in a shared ledger may be visible to members of the same ledger according to the product’s permission rules. We only process this information to the extent necessary for bookkeeping, collaboration, queries, statistics, security auditing, and troubleshooting.

The app uses necessary service interfaces to complete account authorization, data storage, queries, synchronization, and permission checks. We do not disclose your ledgers or bookkeeping records to unrelated parties, nor do we use them for third-party advertising.

When you use the bookkeeping assistant, we store the messages you actively send or generate, message processing status, and other information necessary for the bookkeeping features, for message review, feature continuity, and troubleshooting.

When you trigger AI-assisted bookkeeping by text or voice, your input, necessary bookkeeping context, AI suggestions, and confirmation status are used to generate a draft entry for your confirmation. AI results are suggestions only and are recorded to the ledger only after you confirm them.

When you use voice input, the app processes your voice audio after obtaining the system microphone permission, and may use necessary service interfaces for speech-to-text, entry-suggestion generation, message review, and troubleshooting. The image entry point is currently a placeholder; the current version does not store original image assets.

To provide speech-to-text and AI bookkeeping suggestions, the bookkeeping text you enter, your voice audio, and necessary bookkeeping context (such as ledger category names, tag names, currency, and time zone) are sent to our third-party AI service provider, Alibaba Cloud (DashScope / Tongyi speech-recognition and large-language-model services), for processing. This content is sent anonymously: it never carries your phone number, user ID, ledger identifiers, or any other account or identity information. The data is used only to produce speech transcriptions and draft entries for your confirmation, and is never used for advertising or purposes unrelated to bookkeeping. Before you use AI bookkeeping for the first time, the app explains this data sharing in-app and asks for your consent; without your consent the app does not send any of the above data to the third-party AI service. You can withdraw your consent at any time in Settings → “AI Service & Data”; after withdrawal, AI bookkeeping is unavailable, while manual bookkeeping and all other features continue to work.

We never use your SMS verification codes, login status, account passwords, or account security information for AI-assisted bookkeeping, and we never send such sensitive information to unrelated services.

To keep the product running properly, secure the service, optimize compatibility, and troubleshoot issues, we may collect or process necessary runtime information, including your IP address, device model, operating-system version, app version, language, network status, API access logs, error logs, and security logs. We do not sell or rent your personal information for third-party marketing purposes.

The app may store login status, preferences, recently used data, interface settings, and other necessary caches locally on your device to improve loading speed and experience. You can manage local data through app settings, system settings, clearing app data, or uninstalling the app.

The current version does not integrate third-party analytics or tracking SDKs, nor third-party account login. If such third-party capabilities are added later, we will update this Policy before launch and notify you and obtain the necessary authorization as required by law. For the third-party AI service currently integrated (Alibaba Cloud), see Sections 1.3 and 4.2 of this Policy.

When you use TXLedger features, the app may process related information through necessary service interfaces or system capabilities. The information types and scenarios are as follows:

We use, store, and process your information only to the extent necessary to provide phone-number login, account authorization, bookkeeping, shared collaboration, statistics, the bookkeeping assistant, AI suggestions, voice input, version compatibility, troubleshooting, and system security, and to fulfill our legal obligations.

We take reasonable precautions to protect your personal information from unauthorized access, disclosure, use, modification, damage, or loss — for example access control, encrypted transmission, security auditing, rate limiting, and monitoring at the technical level, and policies and permission management at the organizational level. Please understand that no security measure is absolutely risk-free.

We do not use your ledger records, chat messages, or voice content for third-party advertising, nor do we send your behavioral data to third-party analytics platforms. If advertising, analytics, crash reporting, or third-party marketing capabilities are added in the future, we will update this Policy before launch and fulfill notification and authorization obligations as required by law.

TXLedger supports shared ledgers. After you create or join a shared ledger, members with the appropriate permissions may view shared ledger content, necessary member information, and related operation results according to the product rules. The actual visibility scope is determined by product features and member permission rules.

To provide login and account authorization, security verification, speech recognition, AI assistance, file storage, API access, and security protection, we may provide necessary information to, or entrust its processing to, relevant service providers within the minimum necessary scope. We require these providers to process personal information in accordance with applicable laws, this Policy, and reasonable security standards, and prohibit them from using the information for purposes unrelated to the service.

Specifically, speech recognition and AI bookkeeping suggestions are powered by the third-party AI service provider Alibaba Cloud (DashScope / Tongyi speech-recognition and large-language-model services). After you consent to AI data sharing in the app, your voice audio, bookkeeping text, and necessary bookkeeping context are transmitted to Alibaba Cloud anonymously (without your phone number, user ID, ledger identifiers, or any other account or identity information), solely for speech transcription and entry-suggestion generation. We require this provider to protect your personal information to a standard no lower than this Policy, to comply with applicable laws and security standards, and not to use the information for any purpose unrelated to this service.

In general, we do not transfer or publicly disclose your personal information to any company, organization, or individual. However, where required by laws and regulations, by competent administrative or judicial authorities, to protect the life or property of you or others, to safeguard the legitimate rights and interests of the platform and its users, or as necessary to handle security incidents or disputes, we may share, transfer, or disclose relevant information in accordance with the law.

If TXLedger undergoes a merger, acquisition, reorganization, asset transfer, bankruptcy, or similar transaction, your personal information may be transferred as part of that transaction. In such cases, we will take reasonable measures within the scope required by law and notify you of the change where appropriate.

You may, in accordance with the law, access, correct, copy, or delete your personal information, withdraw granted permissions, deactivate your account, or ask us to explain our personal-information practices. You can make a request through the relevant in-app entry, system permission settings, or the contact information at the end of this Policy. To protect your account, we may verify your identity before processing your request.

For information stored locally on your device, you can manage it through app settings, system settings, clearing app data, or uninstalling the app. For account details such as phone number, nickname, and avatar, and for cloud data such as bookkeeping records, collaboration, and messages, you can query, correct, delete, or deactivate through product features or by contacting us.

Please understand that shared-ledger data may also involve the legitimate rights of other ledger members. Account deactivation or deletion requests do not automatically delete shared-ledger data that other members remain entitled to view or lawfully retain; subject to applicable laws and product rules, we will delete, anonymize, or otherwise reasonably handle information directly associated with your personal identity.

We retain your personal information only for as long as necessary to fulfill the service purposes described in this Policy, unless a longer retention period is required by law. Retention periods for account, bookkeeping, collaboration, message, voice, and necessary log data are determined by service provision, dispute resolution, security auditing, accounting records, and legal requirements.

After you delete bookkeeping records, messages, or voice assets, or deactivate your account, we delete or anonymize the relevant information within a reasonable period; however, due to backups, auditing, security, dispute handling, or mandatory legal requirements, some copies may not be immediately and completely removed from backup systems.

Where the service involves cross-border provision of personal information, we take the necessary protective measures required by applicable law and, where required, fulfill statutory obligations such as notification, consent, assessment, certification, or standard contracts.

TXLedger may request system permissions such as microphone, network access, notifications, photo library, or camera as features require. The current core features require network access; voice input requires the microphone permission; the image entry point is currently a placeholder — if photo capture or image parsing is enabled later, we will request camera or photo-library permission before use and update the relevant descriptions. You can manage permissions in system settings; disabling a permission may affect the corresponding feature but will not affect unrelated features.

TXLedger is intended primarily for users capable of independently managing personal or family finances. If you are a minor, please use the service with the consent and guidance of your guardian. If a guardian finds that a minor has provided personal information to us without consent, they may contact us via the contact information at the end of this Policy, and we will handle it in accordance with the law.

This Policy may be updated from time to time as the product and business evolve. Without your explicit consent, we will not materially reduce the rights you are entitled to under this Policy. After an update, we will inform you of the changes through website announcements, page prompts, in-app notifications, or other appropriate means; please check the latest version in a timely manner.

The formation, effectiveness, interpretation, amendment, supplementation, termination, enforcement, and dispute resolution of this Policy are governed by the laws of the People’s Republic of China; where the law has no relevant provision, general international commercial practice and/or industry practice shall be referenced. If any provision of this Policy is deemed void, invalid, or unenforceable, that provision is severable and does not affect the validity and enforceability of the remaining provisions.

Disputes arising from this Policy shall first be resolved through friendly negotiation between the platform and you; if negotiation fails within 60 days from the date the dispute arises, either party may submit the dispute to the Mianchi Arbitration Commission for arbitration under its then-effective rules, with Chinese as the language of arbitration. The arbitral award is final and binding on all parties.

If you have any questions, comments, or suggestions about this Policy or your personal information, you can contact us at service@tianxin.tech. We will generally respond within fifteen business days.