Privacy Policy

Your reading is private

We process information necessary for accounts, reading and sync, AI features and membership. We do not sell personal information or use your reading content for advertising targeting.

Information we process

Account information

Sign-in may provide an account identifier, email or hidden email, nickname, authentication token and Apple account identifier. Passwords, where applicable, are stored as irreversible hashes.

Reading and synchronization

We process book fingerprints, titles, authors, reading positions, bookmarks, excerpts, annotations, categories, reading preferences, device names, app versions and sync times. Original book files stay on your device unless you explicitly enable the cloud library. Cloud library uploads are separate from AI permissions.

AI and speech

Only after permission for the relevant service, we send the book information, selected text and necessary source material, relevant excerpts and annotations, questions and conversation needed to produce the result. Voice questions may send recordings; online speech sends the text to read, language and voice settings. Consent does not authorize uploading the entire original book file. Recordings are not saved as cloud-library content. Online services also receive connection information such as IP addresses and request times.

Recipients and purposes

Xiaomi MiMo

When MiMo is selected by the service, AI annotations, dictionary explanations, book conversations, reports and search use Xiaomi MiMo (Beijing Xiaomi Mobile Software Co., Ltd. and affiliated companies). Listening and speech recognition continue to use MiMo regardless of the text provider. Requests are forwarded by our server. Relevant questions may be processed by MiMo search tools. The MiMo API platform policy describes access controls, encryption, retention and deletion requests, and states that submitted text is not used for training or other purposes without prior consent. We do not grant training permission on your behalf. Revoking in-app permission does not automatically delete data already sent.

DeepSeek

When DeepSeek is selected, our server sends the book information, selected text and necessary source material, relevant excerpts and annotations, questions and conversation needed for annotations, dictionary explanations, book conversations and reports to DeepSeek (Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co., Ltd. and affiliates), using its official API. When verification requires search, only the query is sent to the official DeepSeek Search API; DeepSeek also receives the retrieved information and sources to answer. This separate search request does not include original source material, conversation history or the user's IP address, and is no longer sent to MiMo. Search failures do not silently change recipients. We do not send Apple login tokens, payment details or complete original book files. Audio and listening text still use MiMo. The text recipient and data scope are disclosed before first use; permission can be declined or revoked in settings.

The DeepSeek privacy policy describes encryption, access controls, retention and rights channels. Third-party processing, retention and deletion follow their policies and applicable law. Do not submit sensitive information or content you are not entitled to provide. We do not separately use reading material for advertising or submit it to model-training tasks. Contact our support address for assistance with deletion requests.

Microsoft speech and public references

Online dictionary pronunciation sends the selected word or text, language, voice and connection information to Microsoft Edge speech, not book context or Apple account information. Separate permission is requested; if declined, on-device Apple speech is used.

Public encyclopedia lookups may use Baidu, Microsoft Bing or Wikimedia content and images. Clicking an encyclopedia lookup sends the query and connection information, without reading records, book context or Apple identity. It does not use AI or open an AI permission dialog. Remote images cause requests to the corresponding image hosts. Automatic Google Books title/author lookup requires existing public-reference permission. See the Microsoft privacy statement, Baidu privacy policy and Google privacy policy. Do not enter sensitive information in public-reference queries.

Your own API

Your device sends necessary text, context, questions and conversation directly to your configured provider or proxy, using your API key for authentication, without our server. Permission identifies the provider and endpoint. Changing the recipient requires new confirmation. Verify the actual operator and privacy practices of custom endpoints; we cannot guarantee the protection of unknown proxies.

A saved text key takes priority and connects directly without first requesting ShanZhu sign-in or usage services. Clearing it restores platform service. Personal speech currently supports the official Xiaomi MiMo API: voice questions send the recording for recognition, and listening sends the text to read and voice settings, using a separate speech key. We do not attach ShanZhu account tokens, conversation history or complete book files. Keys stay in the device's system Keychain and are not synchronized to ShanZhu servers or cloud storage. Personal speech requires separate permission and is billed to your MiMo account, without platform usage. Declining sends nothing; local reading and on-device speech remain available.

Permission and withdrawal

Before the first relevant AI or online-speech request, the app identifies the data and recipient, with further details available. The checkbox is unselected by default. Data is sent only after you select it and choose “Agree and continue”. Accepting login terms or this policy is not AI permission. If declined, local reading, importing, excerpts and offline functions remain available. Automatic reports do not send material without permission.

Withdraw permission in Settings → AI privacy & permissions. Withdrawal stops new requests, but does not automatically remove already-sent data or cached results. Contact support for deletion assistance. Account changes, recipient changes or material disclosure changes require renewed permission.

Protection, retention and deletion

We require third-party recipients to provide protection no less than this policy and applicable review requirements: encrypted transport, access controls, processing for disclosed purposes, and retention and rights-request channels. We review official API policies and will stop sending data if these safeguards cannot be maintained. Verify protection for your own endpoints.

Data is retained as needed to provide services and satisfy legal obligations. We use encryption in transit, access controls and server-side validation. Settings → Delete account permanently removes your account and cloud reading data; original local books remain on your device. Account deletion does not cancel Apple subscriptions: cancel renewal separately in Apple subscription settings.

Children

If you are under the applicable age of digital consent, use the service with parental or guardian consent and supervision. We do not knowingly collect unnecessary information from children.

Contact us

For access, correction, export, deletion or privacy questions, contact support@shixian.cc. This policy may change with services or laws; the update date appears above.