PickMD · Legal & Support
Privacy Policy
How PickMD handles information for each feature, including local files, clipboard access, remote content, storage, and user rights.
1. Scope and responsible developer
This policy applies to PickMD for Android and iOS and directly related support services. The separate HarmonyOS privacy policy governs PickMD HarmonyOS 0.1.0. The developer and personal information handler is Shenzhen Sparock Intelligent Technology Co., Ltd.. Contact: service@sparock.org; (Qianhai Cooperation Zone) Room 501, Building 5, Qianhai Kexing Science Park, Laodong Community, Xixiang Subdistrict, Bao'an District, Shenzhen, Guangdong Province, China.
PickMD currently has no account system. The app version is 1.0.0. If accounts, synchronization, subscriptions, or online services are added, this policy will be updated before the new processing begins.
2. Information handled for each feature
| Feature | Information | Purpose and method | Need and choice |
|---|---|---|---|
| Import, open, and read Markdown | Selected document content, file name, type, size, path or system file token, and embedded images | Read through the system file picker, open-in flow, or share flow and stored locally. Except for remote images in a document and links the user opens, document content is not sent to a developer server. | Handled only after the user selects or shares a file. Refusal prevents that import, not access to existing documents. |
| Share into PickMD | Markdown, plain text, files, and necessary metadata supplied by the operating system | Delivered by the system after a user action and used to create a local document. | Optional; cancelling has no effect on other features. |
| Clipboard import | Clipboard text and temporary characteristics used to detect Markdown | Checked only at the times described below and used to offer an import. | Not required for basic reading and may be refused or disabled. |
| Local library | Document content, file name, import or creation time, modification time, and ordering | Stored in local files and a local database. Android system-backup rules include the database and document directory and require client-side encryption capability for cloud backup. | Needed for the local library. Documents and app data can be deleted. |
| Reading, search, and outline | Document content, search terms, reading position, recent-reading time, typography, and appearance settings | Processed on-device and saved as local state; not sent to a developer server. | Search terms are used only when searching. Records can be removed by deleting documents or app data. |
| Export and share | Selected document content, export style, and generated Markdown, text, PDF, or long image | Generated on-device, then saved to a user-selected location or passed to the system share sheet. | Handled only after an export action; the user may cancel. |
| Save image to Photos | A long image generated by PickMD | On iOS, requested after the user chooses to save; Android behavior varies by OS version. | Optional. Refusal affects saving to Photos only. |
| Remote images and links | Remote URL and network information visible to the destination server, such as IP address, request time, and client information | Remote images load automatically when a document is opened. External links are handed to the browser or another target app. | Users can avoid opening documents with remote images or selecting external links. The current version has no separate remote-image switch. |
3. Clipboard access
PickMD checks the clipboard after the privacy policy is accepted: on first entry, when the app returns to the foreground, and when the user opens the import flow.
- Purpose: detect Markdown text and offer an import.
- Storage: text becomes a local document only after confirmation. Unimported text is not stored by the app; only a non-reversible content fingerprint is kept locally to avoid duplicate prompts.
- Refusal: users may deny the operating-system paste prompt. The app currently has no clipboard-recognition switch. Refusal does not affect file-picker or share imports.
- Re-enable: use the applicable system control if the target Android or iOS version provides one.
4. Remote images and external links
A Markdown document may contain third-party image URLs and links. Remote images load automatically when a document is opened and connect directly to their hosts; selecting a link hands it to a browser or another app. Those third parties may receive the IP address, request time, resource path, and details supplied by the network component.
Images use memory and disk caches. The disk cache is capped at 128 MiB and evicts entries by capacity rather than a fixed number of days. PickMD does not add a custom Referer, user identity, or tracking identifier to image requests; the operating system and network component may add standard request headers. The current version has no remote-image switch.
5. System permissions and capabilities
Permissions are to be requested in context, immediately before the relevant feature. Refusing an optional permission must not block unrelated features. See the Permissions page.
A source review on August 3, 2026 found Android network access and legacy external-storage write access through Android 9, plus an iOS purpose string for adding generated images to Photos. File pickers, open-in, sharing, and clipboard access use operating-system capabilities that may not appear as runtime permission prompts. Final release artifacts must still be checked.
6. Storage, retention, and deletion
- Local data: Android documents are stored under the app-private
files/documents/directory. iOS documents are stored underLeafDocumentsin Application Support. Reading records and settings use the local database or platform preference storage. PickMD does not add separate document-content encryption; protection relies on the operating-system sandbox and device security. - Retention: documents, reading state, and settings remain until deleted, app data is cleared, or the app is uninstalled. File-replacement temporary files are removed when the operation ends; share staging is cleared before the next share; private exports remain until their export records or app data are deleted.
- Image cache: the remote-image disk cache is capped at 128 MiB and evicts entries by capacity, with no fixed retention period.
- System backup: Android permits encrypted cloud backup of its database and document directory and permits device transfer. Backups are managed by the system service configured on the device. iOS backup behavior depends on the user's system settings.
- Copies exported to shared folders, Photos, or other apps must be deleted in those locations separately.
8. International transfers
PickMD has no developer-operated account or cloud-sync server. A remote-image host embedded in a user's document, a user-selected share target, or a system-backup provider may process information outside mainland China. Whether an international transfer occurs depends on the relevant host, service provider, and device settings. Review the third party's privacy terms and processing location before using remote content, sharing, or backup.
9. Your rights
Subject to applicable law, users may access, copy, correct, supplement, or delete personal information; restrict or object to processing; withdraw consent; and request an explanation of the processing rules. Withdrawal does not invalidate processing already performed on consent before withdrawal.
- Delete local documents in the app or clear app data in system settings.
- Revoke permissions in device settings; only the dependent feature is affected.
- The app currently has no clipboard-recognition switch. Available system controls vary by Android and iOS version.
- Send other requests to service@sparock.org.
Requests and complaints will be handled and answered within 15 days. If a request cannot be fulfilled, the reason will be explained. Users may also complain to a competent regulatory authority.
10. Minors and children under 14
Child-directed status: not directed to children under 14. PickMD must not claim that a parental-consent mechanism exists before it is verified.
If personal information of a child under 14 is handled, the best interests of the child apply, dedicated rules must be provided, and parental or guardian consent must be obtained where required. Guardians may contact service@sparock.org to request access, correction, or deletion. See Children’s Privacy.
11. Security and incidents
The current version stores documents in app-private directories, uses system file pickers and scoped file access, and grants file access only to a user-selected share target. Android blocks cleartext network traffic. File paths and exported artifacts are checked for allowed scope and integrity. PickMD does not add separate document-content encryption, so users should enable a device passcode and platform storage protection.
If personal information is or may be leaked, altered, or lost, remedial action and legally required reporting will begin promptly. Affected users will be told the type of incident, likely impact, measures taken or planned, protective steps, and contact channel when notification is required.
12. Policy updates
Changes to features, permissions, third-party services, or purposes will be reflected here. Material changes will be brought to users' attention before new processing begins, and consent will be renewed where required. Historical policies are available on request via the contact email.
13. Contact and complaints
Developer and handler: Shenzhen Sparock Intelligent Technology Co., Ltd.
Email: service@sparock.org
Address: (Qianhai Cooperation Zone) Room 501, Building 5, Qianhai Kexing Science Park, Laodong Community, Xixiang Subdistrict, Bao'an District, Shenzhen, Guangdong Province, China
Privacy complaints and rights requests will be handled and answered within 15 days. PickMD has no account system, so it does not provide a fictitious account-deletion flow. See App Support for local-data deletion.
This is a compliance draft that must be reconciled with the actual release. It is not legal advice and does not claim regulatory or marketplace approval.