PickMD · Legal & Support
Privacy Policy
How PickMD handles information for each feature, including local files, clipboard access, remote content, storage, and user rights.
1. Scope and responsible developer
This policy applies to PickMD for Android and iOS and directly related support services. The developer and personal information handler is Shenzhen Sparock Intelligent Technology Co., Ltd.. Contact: service@sparock.org; (Qianhai Cooperation Zone) Room 501, Building 5, Qianhai Kexing Science Park, Laodong Community, Xixiang Subdistrict, Bao'an District, Shenzhen, Guangdong Province, China.
PickMD currently has no account system. The app version is v1.0. If accounts, synchronization, subscriptions, or online services are added, this policy will be updated before the new processing begins.
2. Information handled for each feature
| Feature | Information | Purpose and method | Need and choice |
|---|---|---|---|
| Import, open, and read Markdown | Selected document content, file name, type, size, path or system file token, and embedded images | Read through the system file picker, open-in flow, or share flow and stored locally. Off-device transmission: [待核实] | Handled only after the user selects or shares a file. Refusal prevents that import, not access to existing documents. |
| Share into PickMD | Markdown, plain text, files, and necessary metadata supplied by the operating system | Delivered by the system after a user action and used to create a local document. | Optional; cancelling has no effect on other features. |
| Clipboard import | Clipboard text and temporary characteristics used to detect Markdown | Checked only at the times described below and used to offer an import. | Not required for basic reading and may be refused or disabled. |
| Local library | Document content, file name, import or creation time, modification time, and ordering | Stored in local files and a local database. System cloud backup: [verification required; current Android project enables encrypted system backup] | Needed for the local library. Documents and app data can be deleted. |
| Reading, search, and outline | Document content, search terms, reading position, recent-reading time, typography, and appearance settings | Processed on-device and saved as local state. Off-device transmission: [待核实] | Search terms are used only when searching. Records can be removed by deleting documents or app data. |
| Export and share | Selected document content, export style, and generated Markdown, text, PDF, or long image | Generated on-device, then saved to a user-selected location or passed to the system share sheet. | Handled only after an export action; the user may cancel. |
| Save image to Photos | A long image generated by PickMD | On iOS, requested after the user chooses to save; Android behavior varies by OS version. | Optional. Refusal affects saving to Photos only. |
| Remote images and links | Remote URL and network information visible to the destination server, such as IP address, request time, and client information | A request may be sent when a document with a remote image is opened or an external link is selected. | Users can avoid loading or opening remote content. Default image behavior requires verification. |
3. Clipboard access
PickMD checks the clipboard only when the operating system permits it. The current design checks after the privacy choice when the app is entered and checks again when the user opens the import flow. Final frequency, foreground/background behavior, and platform differences are [待核实].
- Purpose: detect Markdown text and offer an import.
- Storage: text is saved as a local document only after the user confirms. Temporary cache, logs, or fingerprints: [待核实].
- Refusal: users may deny the operating-system paste prompt. The in-app disable path is [to be provided]. Refusal does not affect file-picker or share imports.
- Re-enable: [in-app setting path to be provided] or the applicable system setting.
4. Remote images and external links
A Markdown document may contain third-party image URLs and links. Loading an image connects to its host; selecting a link generally hands it to a browser or another app. Those third parties may receive the IP address, request time, resource path, and other details supplied by the network component, and process them under their own policies.
Default loading, cache retention, request headers, and redirects are [待核实]. Packet capture must verify HTTP/HTTPS requests, redirects, cache behavior, Referer, and User-Agent before release.
5. System permissions and capabilities
Permissions are to be requested in context, immediately before the relevant feature. Refusing an optional permission must not block unrelated features. See the Permissions page.
A source review on August 3, 2026 found Android network access and legacy external-storage write access through Android 9, plus an iOS purpose string for adding generated images to Photos. File pickers, open-in, sharing, and clipboard access use operating-system capabilities that may not appear as runtime permission prompts. Final release artifacts must still be checked.
6. Storage, retention, and deletion
- Local data: documents, reading records, and settings are intended to remain in the app's private area or a user-selected location. Exact paths and encryption at rest: [待核实].
- Retention: local items remain until deleted, app data is cleared, or the app is uninstalled. Temporary-file and export-cache cleanup: [待核实].
- System backup: the current Android project allows encrypted backup of its database and document directory and permits device transfer. Whether the release keeps this configuration, and the provider, region, and opt-out path, must be verified. iOS backup scope is also [待核实].
- Copies exported to shared folders, Photos, or other apps must be deleted in those locations separately.
8. International transfers
Whether remote images, SDKs, system backups, or other network services transfer personal information outside mainland China is [待核实]. The policy must not state that no transfer occurs until verified. If a transfer occurs, the recipient, contact details, purpose, method, data types, rights channel, required legal mechanism, and separate consent where applicable must be addressed before transfer.
9. Your rights
Subject to applicable law, users may access, copy, correct, supplement, or delete personal information; restrict or object to processing; withdraw consent; and request an explanation of the processing rules. Withdrawal does not invalidate processing already performed on consent before withdrawal.
- Delete local documents in the app or clear app data in system settings.
- Revoke permissions in device settings; only the dependent feature is affected.
- Clipboard-recognition setting: [path to be provided].
- Send other requests to service@sparock.org.
Requests and complaints will be handled and answered within 15 days. If a request cannot be fulfilled, the reason will be explained. Users may also complain to a competent regulatory authority.
10. Minors and children under 14
Child-directed status: Not directed to children under 14. PickMD must not claim that a parental-consent mechanism exists before it is verified.
If personal information of a child under 14 is handled, the best interests of the child apply, dedicated rules must be provided, and parental or guardian consent must be obtained where required. Guardians may contact service@sparock.org to request access, correction, or deletion. See Children’s Privacy.
11. Security and incidents
Security controls must match actual processing and may include least privilege, access controls, transport encryption, secure development, dependency review, recovery, and incident response. Controls currently implemented are [to be verified item by item].
If personal information is or may be leaked, altered, or lost, remedial action and legally required reporting will begin promptly. Affected users will be told the type of incident, likely impact, measures taken or planned, protective steps, and contact channel when notification is required.
12. Policy updates
Changes to features, permissions, third-party services, or purposes will be reflected here. Material changes will be brought to users' attention before new processing begins, and consent will be renewed where required. Historical policies are available on request via the contact email.
13. Contact and complaints
Developer and handler: Shenzhen Sparock Intelligent Technology Co., Ltd.
Email: service@sparock.org
Address: (Qianhai Cooperation Zone) Room 501, Building 5, Qianhai Kexing Science Park, Laodong Community, Xixiang Subdistrict, Bao'an District, Shenzhen, Guangdong Province, China
Privacy complaints and rights requests will be handled and answered within 15 days. PickMD has no account system, so it does not provide a fictitious account-deletion flow. See App Support for local-data deletion.
This is a compliance draft that must be reconciled with the actual release. It is not legal advice and does not claim regulatory or marketplace approval.