1. Scope and controller
This Policy applies to Weave Code and its account, extension download, code intelligence, web preview, and Cloud Code features. The operator and personal information controller is Changsheng Zou.
It does not govern third-party websites, extensions, code models, or other services that operate under their own privacy policies.
2. Information we process
| Category | Information | Purpose |
|---|---|---|
| Account data | Mobile number, optional email address or nickname, password hash, account status, registration time, and sign-in time. | Registration, authentication, password recovery, account administration, and user identification. We do not store passwords in plaintext. |
| SMS and security records | Mobile number, verification records, verification purpose, delivery result, IP address, user agent, failed attempts, token hash, and token expiry. | Sending and checking verification codes, preventing abuse, maintaining sessions, and investigating security issues. |
| Membership data | VIP status, membership plan, start and expiry dates, and trial status. | Displaying membership status and controlling eligible features. Before payment services become available, the App does not itself collect payment card numbers. |
| Projects and editor data | Code, project files, images, recent projects, editor settings, installed extensions, and themes that you create or choose to open. | Editing, preview, project management, extensions, and preferences. This content is generally stored on your device or in local App storage. |
| Cloud Code data | Prompts you submit, code snippets, files or editor context you explicitly attach, and model service endpoints and settings you configure. | Sending a request to the AI service you choose and returning its result. Relevant content is sent only when you actively use and submit the feature. |
| Extension and network data | Extension identifier, version, download request, download state, and necessary network error information. | Listing, downloading, installing, and updating extensions and diagnosing download failures. |
| Operational and diagnostic data | App version, device and operating system type, feature events, crashes, performance, request errors, and timestamps. | Reliability, troubleshooting, and product improvement. Diagnostic data should not normally include project content, passwords, or complete verification codes. |
3. Device permissions
The App may request or use the permissions below when needed. Names may vary by operating system version, and you can manage permissions in system settings.
- Network access: for accounts, verification codes, extension downloads, websites, Cloud Code, and necessary update or diagnostic requests.
- File access and persistent authorization: to open, edit, and save files and projects you select, and to retain access when you permit it.
- Clipboard read access: only when you paste or perform a related editing action.
- Saving images or media: when you explicitly export, download, or save an image.
- Background tasks and termination preparation: to complete necessary saves, downloads, or cleanup and reduce loss of project state.
Refusing an optional permission does not affect unrelated features, but the corresponding feature may not work.
4. Purposes of processing
We process information only as reasonably necessary to:
- create and verify accounts, maintain sessions, recover passwords, and protect account security;
- provide code editing, project management, preview, extensions, code intelligence, and Cloud Code;
- determine VIP or trial eligibility and display the remaining period;
- handle support, feedback, disputes, and failures;
- perform security auditing, abuse prevention, crash analysis, and performance improvement; and
- comply with applicable law.
If we intend to use information for a materially unrelated purpose, we will provide additional notice and obtain consent where required.
5. Third-party services and disclosures
We do not sell personal information. The following providers may process information only as needed for a specific function:
- Alibaba Cloud SMS: receives the mobile number and request parameters required to deliver verification codes.
- Huawei Cloud Storage or AppGallery Connect: stores and delivers public resources such as extension packages.
- An AI provider you configure or select: receives prompts and selected context when you actively use Cloud Code. The provider processes information under its own terms and privacy policy.
- Hosting, CDN, analytics, and error-diagnostic providers: may receive IP address, device or browser type, App version, access time, page or feature events, errors, and performance data.
We may also disclose necessary information with separate consent, to comply with law, to protect material lawful interests of users or the public, or as part of a merger, separation, or asset transfer. A successor will be required to follow this Policy or obtain consent again.
6. Storage and retention
- Account and membership data is stored in databases and servers deployed within the People’s Republic of China. The current account server is located in Alibaba Cloud’s China East 2 (Shanghai) region. If the server location changes, we will update this Policy and handle any related data migration as required by law.
- Verification records are deleted after the period needed for anti-abuse and troubleshooting. The current service is designed to periodically delete SMS challenge records older than seven days.
- Session tokens are normally valid for no more than 30 days and may expire earlier after sign-out, password change, security risk, or server-side revocation.
- Account and membership data is retained while the account exists. After a valid deletion request, it will be deleted or anonymized subject to legal obligations and backup cycles.
- Local projects, settings, and extensions are generally retained until you delete them, clear App data, or uninstall the App.
- Security and operational logs are retained for a reasonable period needed for security, audit, dispute handling, and legal obligations.
7. Security
We use reasonable measures such as access control, encrypted transport, password hashing, token hashing, least privilege, logging, and backups. No Internet service can guarantee absolute security. If an incident may affect your rights, we will respond and notify as required by law.
Keep your account, password, verification code, API key, and device secure. Never disclose verification codes, passwords, or keys to others.
8. Your rights
Subject to applicable law, you may request access, correction, supplementation, a copy, deletion, withdrawal of consent, restriction of processing, account deletion, or submit a question or complaint.
You may sign out, delete local projects and settings, or contact us using the details below. To protect account security, we may verify your identity first. We may be unable to act immediately where law requires retention or deletion would prevent us from performing a legal obligation, in which case we will explain the reason.
9. Children
The App is not specifically directed to children under 14. A child under 14 should use the App and submit information only with the consent and guidance of a guardian. A guardian who believes a child supplied personal information without consent should contact us.
10. Extensions, code, and external links
Extensions, themes, project code, preview pages, and external links may be provided by third parties and may execute code, access the network, or process data you provide. Before installing an extension or running an untrusted project, review its source, permissions, and license and assess the risk.
Third-party terms and privacy policies apply after you navigate to an external website or service. This Policy does not control third-party processing.
11. Changes to this Policy
We may update this Policy when features, providers, or legal requirements change. Material changes will be announced through an in-App notice, website notice, or another appropriate method. The updated Policy will show its date and apply from the stated effective date.
12. Contact us
For privacy questions, rights requests, or complaints, contact us as follows:
- Developer
- Changsheng Zou
- zcs2004@126.com
- App website
- https://weavecode.dhuzcs.com/
- Privacy Policy
- https://privacypolicyweavecode.dhuzcs.com/en.html
We will handle reasonable requests within the period required by law after verifying identity.