Oiiyao App Privacy Policy
Version 1.0
1. Who is responsible for your information
Oiiyao App is operated and provided by Hefei Weimu Technology Co., Ltd. This policy explains how account information, content, device permissions and related information are collected, used, retained and deleted when you use the iOS and Android apps.
Privacy enquiries and rights requests can be raised through the online support or WeCom support in the bottom-right corner of the Oiiyao website, without signing in. The channel is WeCom support.
The App serves mainland China and overseas regions where registration is enabled. Available features vary by region, platform and account status. Registration being open does not mean local compliance review has been completed, and this policy does not grant blanket consent to international transfers.
2. Information you provide and its purposes
Accounts and security: when you register, sign in, verify your identity, link or recover an account, we process the phone number, dialling code, email address, verification codes, password and account identifiers you choose to provide, to establish and maintain accounts, verify identity, handle security issues and close accounts. Not every method is available on every platform or in every region.
Video, audio, images and text: when you select and submit a feature, we process the selected media, prompts, speech scripts, subtitles, editing parameters and results, to store uploads, perform the requested AI or editing task, display progress, recover tasks and provide downloads or exports. Content that requires cloud processing is sent to servers; processing is not confined to your device.
Portraits and voices: face swap, avatar and voice-cloning features can involve identifiable faces or voices and, depending on their use and applicable law, sensitive personal information. Submit only content you are authorised to use. Face swap asks you to confirm separately, before submission, that you have obtained permission to use the portraits of the video subjects and the reference photo; accepting this policy does not replace any required separate consent.
Orders, entitlements and invoices: to query orders, quotas, billing, coupons and handle invoices, we process the relevant transaction, entitlement, quota, billing and coupon records. Saving an invoice title or requesting an invoice can also involve a company name, tax number, address, phone number, bank name, bank account and recipient email address. In-app purchasing is not currently enabled, but this does not mean the App processes no financial information.
Support: when you open support and start a conversation, we process the messages, images and contact details you choose to send. Guest conversations use a randomly generated identifier stored on your device to associate sessions. It is not an IMEI and not an advertising identifier.
Do not provide sensitive information unrelated to the requested feature. Refusing optional information generally affects only the associated feature; a request may not work without necessary fields. This processing is based on what is necessary to provide the service you request, and on applicable tax, transaction, security and dispute-handling obligations.
3. Device permissions and local storage
The final Android release package requests: internet access, network state, wake lock, audio settings modification, recording, reading media images, reading media videos, reading the photos you select (the system limited-photo grant), and read/write external storage for Android 6.0 and earlier. The App does not request location, contacts or camera permissions.
On iOS the purposes declared are: selecting the images and videos you specify, saving works and images to your photo library, and using the microphone only when you start recording.
Selecting photos, videos and files: the system picker is invoked only when you import. The App reads the content you select and may create sandbox copies for processing or upload; this does not mean reading your entire library. Saving to Photos may require system authorisation.
Microphone access is requested when you use recording. You can refuse it or revoke it in system settings, which prevents recording; revoking the permission does not delete recordings you already submitted.
Platform secure storage holds necessary state such as session credentials. The App also stores preferences, caches and recovery information. Signing out clears the session and the state currently visible to the account, but minimal account-isolated recovery identifiers and encrypted parameters for unresolved submissions may remain to prevent duplicate submissions after network failures. Signing out, uninstalling the App and deleting server data are three different actions, and some platform secure storage can outlive an uninstall.
4. Service providers and information flows
The App uses the DCloud uni-app x engine, provided by 数字天堂（北京）网络技术有限公司, for native runtime capability. The vendor describes performance and error diagnostics that may process device and application information, anonymous identifiers and error stacks, depending on the integrated version; see its engine privacy policy. uni statistics reporting is switched off in this App, but switching off statistics does not establish that all engine diagnostics are disabled.
The application server, the subtitle recognition service and object storage are operated by us and hosted in mainland China (Alibaba Cloud Hangzhou region). AI tasks are performed at those services and at whichever provider your chosen feature actually routes to.
The media or text you submit may need to be read by an AI provider to complete the task; encryption in transit does not mean a recipient cannot read content it processes. The actual participants depend on the features you use and the real service routing.
5. Retention, deletion and account closure
Retention reflects the time needed to provide the requested service and applicable tax, transaction, security and dispute-handling obligations; we do not keep everything indefinitely.
You can request account closure from the account security area in the App after identity verification. Pending tasks or security matters may need to be resolved first. Contact support if verification cannot be completed. Do not send passwords, verification codes or private keys to support.
Current implementation: closure disables the account, invalidates all sessions and asynchronously disables your sharing pages. Your phone number is retained so that the same number cannot repeatedly register and repeatedly claim new-user entitlements. Your media, task records, support conversations and provider copies are not deleted as part of closure. This policy does not promise complete deletion on closure.
6. Processing locations and your rights
Overseas availability does not mean all information stays in mainland China, and it does not establish that a particular international transfer occurs. Actual processing and storage locations depend on where the services described above are hosted, on the service routing of your chosen feature and on access paths.
Depending on applicable law, you may have rights to information, access, copies, correction, deletion, withdrawal of consent, restriction or objection, portability and complaints to an authority. Withdrawal does not affect prior processing based on consent. We may verify identity to a proportionate extent and will not ask for materials unrelated to your request.
To exercise these rights, contact us through the support channels listed in section 1. We will handle the request after verifying your identity.
7. Security, children and policy changes
The App uses HTTPS transport and platform secure storage to reduce risk, but no system is absolutely secure. Protect your account and do not upload information you lack authority to use.
Children's use must meet the age and guardian-authorisation requirements of their location: a user who has not reached the minimum adult age in their jurisdiction should read and use the service under a guardian's supervision, guidance and consent. Appropriate protections apply to children's information, particularly portraits and voices.
If this policy changes in a way that affects processing purposes, recipients, sensitive information or other material aspects, we will point it out again through in-app notices. Updates do not retroactively remove rights you already hold.