Privacy Policy

莳芽记 / ShotMo (hereinafter "the App") is operated and maintained by an independent individual developer (hereinafter "we"). We value the protection of your personal information and have formulated this policy in accordance with the Personal Information Protection Law of the People's Republic of China and other applicable laws and regulations.

• Account information: nickname and login credentials you provide at registration (passwords are stored salted and hashed; we cannot access the plaintext).
• Content data: notes you create, and avatars and images you upload. Note text and images are encrypted with AES-256-GCM and stored as a whole in an encrypted object storage bucket (no plaintext is kept on the server); the secondary password used to decrypt notes is held by you, and the server only stores ciphertext.
• Device and network information: for security and analytics, we record your browser fingerprint (User-Agent, platform, screen, language), login IP and its geolocation at login.
• Transaction information: membership order tier, amount, and payment status (returned by Alipay). We do not directly store your payment account password.

Your data is stored on servers within the territory of the People's Republic of China. We use encrypted transmission (HTTPS/TLS), access control, and regular backups to protect your information; however, please note that no transmission method on the internet is absolutely secure.

• Order information related to payment is provided to Alipay to process the transaction when you pay;
• If you use Alipay account login, with your authorization we obtain the user identifier returned by Alipay to bind your account;
• We will not sell your personal information to third parties, except where required by laws and regulations or with your separate authorization.

When you generate a share card / share link for a note, you authorize viewers of that shared content to decrypt and view the plaintext of that note (limited to that note only, excluding any other content, account, or order information of yours). Once generated, the shared content is independent of your account, and you can cancel that share at any time within the app. We only provide decryption capability for shared content when you actively choose to share.

• Session cookies: to maintain your login state, we write a session cookie (HttpOnly) to your device, which is not used for advertising tracking;
• Microsoft Clarity: the App uses Clarity for anonymous behavior analytics (only aggregated page-interaction data is collected, to improve the product experience);
• Alipay: used for payment and OAuth authorization for account login;
• The above third parties are each governed by their own privacy policies, which we recommend you also review.

You have the right to access, correct, and delete your personal information, withdraw authorization, or delete your account. You can do so in "Settings" after logging in (deletion requires your login password; after deletion, content is retained for audit per the User Agreement). For assistance, contact us at: postmaster@shotmo.cn.

We may update this policy from time to time; material changes will be announced in-app or on the website. Continued use is deemed acceptance of the updated policy.