PickMD · Legal & Support
Data Collection List
A structured record of each information type, purpose, scenario, method, location, retention period, sensitivity, and choice.
Verification status
Any “on-device only” statement still requires final packet capture, SDK review, and system-backup verification.
Information handling list
| Information | Purpose | Scenario | Method | Location | Retention | Sensitive? | Can refuse? |
|---|---|---|---|---|---|---|---|
| Markdown content | Import, read, search, export | User selects, shares, or confirms pasted content | Parsed and stored by the app; off-device transmission [待核实] | Local app area or user-selected location; backup [待核实] | Until deleted, app data is cleared, or uninstall; temporary copies require verification | May be, depending on content | Yes, cancel import |
| File name, type, size, and access token | Identify and reopen a file | File picker, open-in, or share | Provided by system APIs; transmission [待核实] | Local database | Until document deletion | Usually not; names may contain personal information | Yes |
| Clipboard text | Detect and import Markdown | After privacy choice or import action | Temporary read; saved only after confirmation; logs/cache [待核实] | Unimported persistence [待核实]; imported content becomes a document | [待核实] | May be | Yes |
| Local and remote images | Render documents and exports | Open or export a document | Local decode; remote request; cache [待核实] | Local cache or document directory [待核实] | [cache period requires verification] | May be | Avoid remote content; in-app control requires verification |
| Search terms | Find document content | User searches | On-device matching; recording/transmission [待核实] | [待核实] | [待核实] | May be | Yes |
| Reading records | Restore position and recent items | Reading | Local state; transmission [待核实] | Local database | Until document or app data deletion | Usually no | Delete document or app data |
| Appearance and settings | Remember preferences | Settings changes | Stored locally; system backup [待核实] | Local settings | Until reset, clear, or uninstall | No | Reset or clear |
| Exported files | Create and share Markdown, text, PDF, or image | User exports | Generated locally; sent to user-selected recipient when shared | Cache, selected folder, Photos, or recipient app | User-controlled; cache period requires verification | May be | Cancel export/share |
| Network request data | Remote image or link access | Remote URL is opened | Sent to destination server | Third-party server and local cache | Third-party and cache rules; verification required | IP address may be personal data | Avoid access; default loading requires verification |
Items that must not be assumed
Device identifiers, installed-app inventory, location, contacts, SMS, call logs, camera, microphone, advertising ID, analytics, crash reporting, cloud sync, and push handling must be determined from the final dependencies and runtime behavior. Silence in a product description is not proof that data is never handled.