InkSwap Privacy Policy

Version: v1.0
Published: September 10, 2026
Effective: September 10, 2026
Operator: Shenzhen Yinxiaoqian Technology Co., Ltd.

Shenzhen Yinxiaoqian Technology Co., Ltd. (Chinese legal name: 深圳市印小签科技有限公司; "we," "us," or "our") respects your privacy and the security of your personal data. This Policy applies to the InkSwap mobile application (iOS bundle ID and Android application ID: com.yxq.customer.inkswap; the "App") and its image editing, label creation, online material, AI image generation, Bluetooth connection, and printing services.

Please read this Policy before using the App, particularly the text in bold. When you choose AI generation, the prompt or voice recording is sent through our online service to Alibaba Cloud Model Studio (Bailian). Firebase Crashlytics processes diagnostic data, and Firebase Analytics processes App-usage data only after you give express consent.

1. Operator and Scope

• Controller/operator: Shenzhen Yinxiaoqian Technology Co., Ltd. (Chinese legal name: 深圳市印小签科技有限公司)
• App: InkSwap
• App identifier: com.yxq.customer.inkswap
• Customer support and privacy email: support@marklifeprinter.com

This Policy does not apply to a third-party product or service that you access separately after leaving the App and for which that third party independently determines the purposes and means of processing. That third party should provide its own privacy notice.

2. Overview

The current App does not require an account and does not provide payments, advertising, social login, or social sharing. We do not ask you to provide a name, phone number, email address, contacts, messages, call records, financial account, or identity documents as a condition of using the App.

Photos, editing content, and ordinary print content are generally processed only on your device and the printer you choose. They are not uploaded to our servers merely because you edit or print them. Online materials and fonts, AI image generation, crash diagnostics, and consented usage analytics require a network connection and are handled as described below.

3. Data We Process

3.1 Local editing, saving, and printing

When you choose to take or import a photo, enter text, draw, edit a label, or save a result, the App processes your selected content on your device. Working files may be stored temporarily in the App's private storage or system cache and are removed by the relevant workflow, the operating system's cache management, clearing App data, or uninstalling the App.

Ordinary editing and Bluetooth printing do not send your images, text, drawings, or print bitmap to our servers. Print content is sent by Bluetooth directly to the printer you select.

The current build includes a password-protected print-diagnostics tool. It may keep a final print bitmap, print status, App version and build, platform, and server-environment details in the App's private application-support directory for local troubleshooting. The tool does not proactively upload this material. It keeps it for no more than seven days and caps total storage at 200 MiB; it removes older or excess material automatically, and clearing App data or uninstalling also removes it.

3.2 Online materials and fonts

When you open the online material library or choose an online font, the App sends our m.yinxiaoqian.com service the service language and relevant category, page, or font identifier, then downloads your selection. Normal network communications also produce an IP address, request time, request status, and necessary security logs.

We process this data to respond to your request, protect the service, and troubleshoot failures. Materials and fonts may remain cached until the operating system clears the cache, you clear App data, or you uninstall the App. Server access and security logs are ordinarily kept for no more than 180 days, unless law or a security investigation requires longer retention.

3.3 AI image generation

When you choose to generate an image from text or voice, the App processes:

• the text prompt you submit or the WAV voice file you actively record and submit;
• service language, mobile platform, operating-system version, and AI API compatibility version;
• a random 32-character installation identifier created locally when AI is first used. It is not an IMEI, IMSI, Android ID, IDFA, OAID, hardware identifier, account identifier, or advertising identifier, but it can distinguish the same App installation;
• IP address, request time, request status, and necessary security logs generated by the network connection; and
• generated-image URLs and results returned by the online service.

We use this data to perform your requested generation, check service availability, prevent abuse, and troubleshoot failures. A voice file is temporarily stored in the App's cache before transmission and deleted after the request completes, fails, or is canceled. AI history—including prompts, message times, generated-image URLs, and safe error codes—and downloaded images remain in private App storage or temporary cache until the operating system clears the cache, you clear App data, or you uninstall the App.

To perform a generation request, our m.yinxiaoqian.com backend transmits your prompt or voice recording, service language, and technical parameters needed for the request to Alibaba Cloud Model Studio (Bailian), provided by Tongyi Yunqi (Hangzhou) Information Technology Co., Ltd. (通义云启（杭州）信息技术有限公司). Bailian processes this customer business data on our instructions and returns the generated result. Under Bailian's current public notice and production-API data-processing terms, data in transit is protected using AES-256 encryption, and customer business data is not used for model training without customer authorization. Bailian retains call data or logs for the shortest period necessary to comply with applicable law, protect the service, and perform the service; the actual period may depend on product settings, processing region, and legal requirements.

The statement that data is not used for model training assumes that the App uses Bailian's production API under its customer-business-data terms. Bailian's individual Token Plan, Coding Plan, Model Marketplace trial functions, or third-party Marketplace models may be governed by different rules or additional agreements. The App must not use trial-only Model Marketplace output to provide a commercial or publicly distributed service to you. Before enabling a service mode or third-party Marketplace model that changes data use, training rules, processing parties, or commercial-use rights, we will review it, update this Policy, identify the relevant provider and rules, and obtain consent where required.

Unless law, a security investigation, or dispute handling requires longer retention, prompts, voice files, and generated results retained by our own backend to process or troubleshoot a request are ordinarily kept for no more than 30 days, and our access or security logs for no more than 180 days. Bailian retention is governed by the preceding paragraph. This Policy does not give us the right to use your prompts, voice files, or results for advertising, public display, or distribution to other users.

We do not currently use your prompts, voice recordings, or generated results to train a model owned by our company. If we later propose such training, it will be a new processing purpose. Before it begins, we will update this Policy, clearly explain the data scope, purpose, retention, opt-out, and deletion mechanisms, and obtain any voluntary, specific, and express opt-in consent required by applicable law. Refusing training will not affect basic features unrelated to training, and we will not retroactively include existing content in such training without valid new consent.

AI results are synthetic content and may carry, or may have added by the App, an “AI-generated” notice, watermark, or machine-readable metadata. To comply with applicable law and provider rules, our product implementation will provide or retain required labels. You must not remove, obscure, alter, or circumvent those labels. The current client does not provide a reference-image upload entry for the AI model. If we add that capability, we will update the relevant notice before launch.

You may decline AI features and continue using local editing and Bluetooth printing. Do not include identity documents, financial accounts, precise location, health data, biometric data, or other unnecessary sensitive data in a prompt or recording, and do not submit another person's data without authority.

3.4 Bluetooth and printer data

When you search for or connect to a supported printer such as C50 or X2, the App locally processes nearby printer broadcast names, device addresses or system-assigned identifiers, signal strength, model, connection status, and print status. Android 11 or earlier may require location permission to scan for nearby Bluetooth devices. The App does not read, store, or upload your latitude or longitude.

3.5 Firebase Crashlytics crash diagnostics

We use Firebase Crashlytics from Google LLC to identify and fix serious stability problems. Crashlytics operates independently after App initialization; its collection is not conditional on your Firebase Analytics choice. When a crash or serious error occurs, it may process:

• crash stack traces, thread state, exception type and message, crash time, and foreground/background state;
• App package name, version, and build number;
• device model, operating system and version, CPU architecture, RAM and disk space, screen orientation, and diagnostic status such as whether a device is jailbroken or rooted;
• a Crashlytics installation UUID, Firebase installation ID, and random session ID; and
• if you consented to Analytics, page or feature events before the crash as content-free breadcrumbs associated with the report.

We do not set a name, account, phone number, or other user identity in Crashlytics, and we do not intentionally add prompts, recordings, photos, file paths, Bluetooth addresses, credentials, or complete print content. Firebase states that Crashlytics retains crash stack traces and associated installation identifiers for 90 days before beginning removal from live and backup systems. NDK minidumps are stored only temporarily while a crash session is processed.

3.6 Firebase Analytics with your consent

Firebase Analytics is disabled by default in the App's native iOS and Android configuration. In the initial privacy-and-terms flow, you can decide whether to enable Analytics through a separate checkbox that is unchecked by default. Refusing or leaving it unchecked does not block Agree and continue, local editing, saving, Bluetooth printing, or other features that do not depend on Analytics.

When enabled, Analytics may process:

• App-instance ID, sessions and lifecycle events, screen names, App version, app store and installation source, device brand/model, operating system and version, language, network, and other device or App information;
• country-, region-, or city-level approximate location derived from a masked IP address;
• an Android advertising ID when made available by the system and App configuration, or Apple's vendor identifier. We do not use these identifiers for advertising or cross-app or cross-site tracking; and
• start, success, and failure events for connection, printing, image import, and AI generation, with only a limited printer family, image source, or failure category.

We do not send Analytics a name, account, prompt, recording, photo, print content, file path, Bluetooth address or device name, raw error text, or custom user ID. We keep user-level and event-level Google Analytics data for no more than 14 months. Standard aggregated reports may not be affected by this retention setting.

The current version provides an Analytics control on the About InkSwap page. You may turn it off at any time to withdraw consent, after which the App stops future Analytics collection, and you may turn it on again from the same page. Withdrawal does not affect processing already carried out on the basis of valid consent and does not affect features that do not depend on Analytics. You may also email us for assistance and to request deletion.

3.7 Google ML Kit components in the Android package

Because of an underlying editor compatibility dependency, the current Android package includes Google ML Kit Chinese text-recognition and barcode-scanning components. The current InkSwap interface does not expose OCR or barcode/QR scanning, and it does not send your selected images to Google for those unavailable features. If a component is initialized, Google states that ML Kit may process device manufacturer/model, OS version, available ML hardware, App package/version, per-installation identifiers, performance metrics, API configuration, input/output size, feature version, event types, and error codes for diagnostics and usage analytics, transmitted over HTTPS.

3.8 Customer support and privacy requests

If you email us, we process your email address, message, time sent, and any screenshot, diagnostic material, or other attachment you choose to provide. We use this data to answer a question, handle a complaint, troubleshoot a problem, or respond to a privacy-rights request. Please provide only what is necessary. We keep the correspondence until the request is resolved and for any necessary audit or dispute period, then delete or anonymize it unless law requires retention.

4. Device Permissions

You can manage or revoke permissions in system settings. Revocation affects only the feature that needs the permission and does not affect the lawfulness of earlier processing based on valid authorization.

5. Third-Party SDKs and Providers

We provide online materials, fonts, and AI endpoints through m.yinxiaoqian.com. In addition to Bailian identified above, we may engage cloud-infrastructure or content-delivery providers to process only the data needed to deliver the service on our instructions, subject to contractual, access-control, and security protections. We confirm that any third party with whom we share user data must provide the same or equivalent protection required by this Policy, applicable law, and applicable app-store rules. If we add a recipient that independently determines the purposes or means of processing, or materially change the processing scope, we will update this Policy and obtain consent where required.

6. Sharing, Transfers, and Disclosure

We do not sell personal data and do not share it for targeted advertising or cross-app or cross-site tracking.

Except for providers described here, with your separate consent, or as permitted by law, we do not provide personal data to another independent controller. If a merger, acquisition, reorganization, dissolution, or asset transfer involves personal data, we will identify the recipient and require continued protection under this Policy. A new purpose or processing method will require a new notice and consent where applicable.

We may disclose only necessary information to comply with law, respond to a lawful request from a competent authority, investigate a security incident, or protect the life, safety, property, or legal rights of you or another person.

7. Location, Retention, and International Processing

Device-local data remains on your device. Business data collected through m.yinxiaoqian.com is generally stored in the People's Republic of China and retained for the periods stated in Section 3. AI generation requests are also sent to Bailian systems in the service region selected in our backend; the actual processing location depends on that configured region and model. If you use the App in the European Economic Area, United Kingdom, United States, or another location outside mainland China, this may involve a transfer to mainland China or another selected service region.

Firebase Crashlytics, Firebase Analytics, and Google ML Kit are provided by Google LLC. Related data may be processed in data centers operated by Google and its processors, including outside the People's Republic of China and outside your country or region. The purposes, data types, and retention periods are described in Sections 3 and 5. You can exercise rights through support@marklifeprinter.com and review Google's privacy and security notices. We use contractual and security safeguards required by applicable law and will complete any separate consent, assessment, certification, filing, or other transfer requirement that applies before processing.

At the end of an applicable retention period, we delete or anonymize personal data unless law requires retention or it remains necessary for an active dispute or security incident.

8. Security

We use safeguards appropriate to risk, including access controls, least-privilege permissions, encryption in transit, logging, staff controls, and incident response. Production online endpoints use HTTPS. Firebase and Google ML Kit communications are encrypted in transit as described by Google. Bailian publicly states that it protects data transmitted during application building and model calls using AES-256 encryption. This is a provider-published safeguard and does not mean that any system is free from all risk.

If a personal-data incident may affect your rights, we will take remedial action and provide legally required notice describing the incident, likely effects, actions taken or recommended, and contact details. Internet and Bluetooth communications cannot be guaranteed absolutely secure, and we do not promise zero risk.

9. Your Rights and Choices

Subject to applicable law, you may request access, a copy, correction, completion, deletion, restriction, an explanation of our processing rules, or withdrawal of consent.

You can:

• turn off camera, photo, microphone, Bluetooth, or older-Android location permissions in system settings;
• refuse or withdraw Firebase Analytics as described in Section 3.6;
• clear App data or uninstall to delete data in private App storage; and
• email support@marklifeprinter.com to request access to, correction of, or deletion of server-side data or to make another privacy request.

We may verify necessary identity or ask for the minimum information needed to locate a request. We ordinarily respond within 15 business days after receiving a complete request. If law requires retention, deletion would harm another person's rights, or another statutory exception applies, we will explain the reason. The current App has no user accounts, so there is no account-deletion process.

Depending on your residence, you may also have the right to object to processing, portability, appeal, or complain to a data-protection or consumer-protection authority. Nothing in this Policy limits non-waivable rights.

10. Changes and Service Closure

We may update this Policy when features, processing, or legal requirements change. We will give prominent in-App or other appropriate notice of a material change, such as a new data type, purpose, third-party recipient, or storage location, and obtain fresh consent where required. The current version, publication date, and effective date are shown in this Policy, which is accessible from the App's About page.

If we discontinue the App, we will stop further collection, provide appropriate notice, and delete or anonymize retained personal data as required by law.

11. Contact and Governing Law

For questions, complaints, or privacy requests, contact:

• Operator: Shenzhen Yinxiaoqian Technology Co., Ltd. (深圳市印小签科技有限公司)
• Customer support and privacy email: support@marklifeprinter.com

This Policy is governed by the laws of mainland China, without limiting mandatory consumer or data-protection rights available where you live. It is entered into in Shenzhen, Guangdong Province, People's Republic of China. The parties should first try to resolve a dispute amicably; if that fails, either party may bring the dispute before a court with lawful jurisdiction, subject to mandatory law.