PlanRight Android Privacy Policy

How the Android app handles your data

PlanRight turns selected text, images or recordings into calendar suggestions and meeting notes. Text and image recognition sends selected content through ZEALX to an AI service after you allow AI data sharing. A screen capture you initiate and authorize may start recognition automatically if you have already allowed it. Audio uses a separate disclosure and explicit Process recording action; it is not uploaded automatically when recording stops.

Last updated: 2026-09-28

Information you provide and recognition

You can type text, select an image or take a picture using Android's system pickers and camera. You can also start a one-frame screen capture from the app, a Quick Settings tile or a system shortcut. Android asks for screen-capture permission and shows a foreground notification. The full frame may contain messages, names, health details or other sensitive information outside the intended event. Review your screen before capture. This is not continuous background recording.

On-device OCR processes image text locally. For text and image AI recognition, the app sends the text you entered, on-device OCR text and, for image recognition, a compressed JPEG of the selected image or captured frame, plus language, reference date and time zone, through ZEALX to Alibaba Cloud Model Studio. A retry may use another configured model from the same provider. Results return as editable suggestions. The ZEALX application does not keep submitted text/image content or its AI response as a persistent recognition record after the request ends. Audio processing has different temporary retention, described below. The AI provider handles requests under its own terms and privacy notice.

You can decline or withdraw text/image AI sharing in Settings. Without it, text and image content is not sent for AI recognition. After you have granted consent, a screen capture that you actively start and authorize in Android may proceed to recognition without another tap on Recognize. Audio requires separate disclosure and consent, described below.

Voice input and meeting recordings

Audio recording is optional and starts only after you choose Start recording and grant Android microphone permission. A visible recording notification provides a Stop recording action; the app does not silently start recording in the background or at device startup. Voice input is limited to 60 seconds per recording and meeting recording to 60 minutes. Inform all participants and obtain any required permission before recording them. Recordings may capture names, other people's voices and sensitive information. Do not submit content you are not entitled to record or share.

Stopping a recording does not upload it. After the separate audio disclosure and your explicit Process recording action, selected audio is sent over HTTPS through ZEALX to Alibaba Cloud Model Studio (Bailian) speech services for transcription. The transcript, language, reference date and time zone are used to generate meeting notes, action items and calendar suggestions. Existing text/image AI authorization does not by itself authorize an audio upload. Declining audio processing leaves non-audio features available. Provider processing and retention remain subject to the provider's terms and privacy notice, independently of ZEALX's retention periods.

Raw audio stays in app-private storage until successful processing or discard. Unprocessed recordings expire after 24 hours, can no longer be uploaded and are cleaned up the next time the app opens; Android may prevent deletion while the app is not running. ZEALX temporarily stores encrypted transcripts and processing results to complete a request and safely recover its result. Unfinished sessions expire 2 hours after starting; completed results expire no later than 24 hours after completion. Expiration prevents access even if service cleanup is pending. Non-content operation/status and checksum metadata may remain for 48 hours after a terminal state to prevent replay; other security and usage-limit records follow their separate retention rules. Meeting notes and transcripts saved on your device remain until you delete them. Discarding requests cancellation and deletes local raw audio, but cannot recall data already sent to a provider.

Voice event suggestions require review before saving. For meetings, you can explicitly enable automatic saving of confirmed, clearly dated events for you to a calendar you select. Unclear, proposed, conflicting or other-person events remain for review. You can leave automatic saving off and review all suggestions. Deleting notes or a transcript does not delete events already saved in the Android calendar. AI output can be wrong even when marked confirmed; independently verify important dates and commitments.

Accounts, payments and feedback

The Android app offers registration, password sign-in, email-code sign-in and email-verified password reset. ZEALX processes your email address, a random account identifier, salted password hashes if you set a password, hashed verification-code and session records, an installation public-key digest, request timestamps and rate-limit records for login, account security and abuse prevention. The one-time code expires after 10 minutes; sessions expire after 30 days. Resetting a password revokes existing sessions. Verification mail is sent through Alibaba Cloud Enterprise Mail. We do not store plaintext passwords, raw verification codes or raw session tokens in the account database. Deleting your account also removes its password hash.

If Google Play subscriptions are offered and you purchase one, Google handles payment details. The app sends a pseudonymous account identifier and purchase token to ZEALX for purchase verification, entitlement, fraud prevention and restoration. ZEALX stores token digests, product and subscription status, and necessary transaction records; it does not receive your full payment-card number. Cancel an active Play subscription separately in Google Play.

If you submit feedback, ZEALX receives its text, an optional reply email, app and Android versions, device type and language. Feedback is sent through our enterprise email service and kept in the support mailbox as needed to respond, troubleshoot and satisfy applicable obligations.

Calendar, local storage and security data

With calendar permission, the app reads existing events on your device to choose a calendar and check for duplicates or conflicts. Existing calendar content is not uploaded merely because you grant this permission. The app writes, changes or deletes events after your confirmation, including your explicit opt-in to the limited meeting auto-save flow described above. Saved schedules and history are stored locally; retained source text, when enabled, is cleared after 30 days. A temporary captured image is cleared from private app storage after about 120 seconds. Audio and meeting-note retention is described above. Android cloud backup is disabled.

The app and server process request status, timestamps, IP address and security identifiers to operate, protect and diagnose the service. Google Play Integrity may process app, device and licensing signals to verify Play requests. The bundled on-device ML Kit OCR does not send OCR input or output to Google for recognition, but Google's SDK may collect app/device identifiers, performance and usage diagnostics. Google Play Billing and Integrity also process the information needed to provide those services.

We do not sell personal data or use it for cross-app advertising tracking. Access to service records is limited for operations and support; network requests use HTTPS. No transmission or storage method is perfectly secure.

Retention and your choices

You can delete local history in the app and manage events already written to your system calendar there. Deleting an online account does not automatically remove data stored on your phone or events in your system calendar. For account deletion, use the in-app account settings or the web form at https://api.zealx.net/account/delete, which verifies control of your email address without requiring the app.

Account deletion removes the email/account mapping, sign-in sessions and membership access. We retain a non-login deletion marker and limited pseudonymous order, transaction and anti-duplicate records where needed for accounting, refunds, fraud prevention and applicable legal obligations. These records are not automatically deleted with the account; support email and service-provider copies may follow their own retention rules. For questions or a request about feedback and retained records, contact liutiancheng@zealx.net. Deleting the account does not cancel an active Google Play subscription; cancel it in Google Play first.

We may update this policy as processing changes. The app is not directed at children. Contact liutiancheng@zealx.net with privacy questions.