Zhuoya Consulting
App Privacy Policy

CarvenData
Privacy Policy

This Policy applies only to the "CarvenData" mobile App and is independent of the website Privacy Policy.

Effective date: 2026-07-04  |  Version: v1.4

1. Scope and Basic Principles

This Privacy Policy applies to CarvenData App (hereinafter referred to as "this App" or "the App"), operated by Zhuoya (Hangzhou) Information Consulting Co., Ltd. (hereinafter referred to as "we"). CarvenData is a questionnaire survey and data collection tool for individual users and enterprise teams:

  • Individual UsersCan complete the full business loop: questionnaire creation and question design, publishing questionnaires and generating distribution links, on-site or remote response collection, local offline filling and resume-from-breakpoint, response collection, and basic statistical charts.
  • Enterprise UsersCan additionally use features such as enterprise project spaces and team collaboration, multi-role permission management (administrator / project manager / reviewer / collector), response review and approval workflows, and batch export and enterprise-level statistical analysis.

This Policy explains what information the App may collect during your use, how this information is used, and your rights. We process personal information in accordance with the principles of lawfulness, legitimacy, necessity, good faith, and data minimization. Location, photos, audio, video, signatures, enterprise project responses, and similar data may constitute sensitive personal information and are processed only when necessary to implement a specific feature.

2. Local Mode Without Login

When you are not logged in, you can create questionnaires, fill them out, save drafts, and manage local attachments on your device. In this mode, wewill notupload your questionnaires, answers, attachments, photos, audio recordings, video recordings, or location information to the server. This data is stored only on the current device.

To provide local features, the App stores local data on your device, such as questionnaire structure, filling progress, answers, attachment paths, upload status, language preference, and privacy consent status. If you later log in and actively sync, upload, or submit, local data will be uploaded to the cloud according to your actions.

3. Information Collected After Login

After you log in, to provide services such as cloud sync, enterprise collaboration, review, statistics, and export, we may collect and process:

  • Account information:Username, phone number, email, name, avatar, encrypted password digest, login token, enterprise organization, and role permissions.
  • Project and questionnaire information:Project name, questionnaire title, question configuration, publishing status, member permissions, and review settings.
  • Response and collection information:Respondent information, answers, submission time, review status, attachments, photos, audio recordings, video recordings, signatures, and location.
  • Operation and security information:Login records, upload failure records, export tasks, error logs, device model, system version, App version, network status, and necessary diagnostic information.

4. System Permission Details

The App requests system permissions only when the corresponding feature is used. You can revoke authorization at any time in your system "Settings". After revocation, questions or collection features that depend on that permission may become unavailable.

Camera
Used for photo questions, avatar upload, automatic photo capture, automatic video recording, and video attachments for on-site image collection and recording.
Photos (Read)
Used to select photos, videos, and documents from the local gallery and upload them to response attachment fields; write permission is required to save QR code images.
Microphone
Used for audio-recording questions, automatic recording, and audio capture during video recording to record audio attachments on site. The microphone is not turned on when the recording feature is not triggered.
Location (While in Use)
Used for location questions, automatic location, automatic photo watermarks, and on-site collection location records. Location is usually obtained per use and is not continuously tracked.
Files/Local Storage
Used for attachment caching, saving exported files, and caching automatically collected materials; only files directly related to App features are read or written.
Network Access
Used for login verification, response upload, and data sync. Without a network, the App still allows offline answering and uploads once connected.

We do not request permissions unrelated to collection features, such as contacts, health data, or biometrics.

5. Enterprise Organizations and Multi-Role Access

When you join an enterprise organization or participate in an enterprise project, authorized personnel such as project owners, project managers, reviewers, and collectors may, according to their permissions, view, review, and export the relevant responses, attachments, and collection records. The questionnaire initiator should independently ensure that its questionnaire content and collection rules comply with laws and regulations and provide necessary notice to respondents.

6. How Information Is Used

  • To provide core business features such as questionnaire creation, publishing, filling, submission, saving, uploading, review, statistics, analysis, export, and enterprise collaboration.
  • To complete account login, identity verification, permission control, and security risk control.
  • To support offline filling, resume-from-breakpoint, retry on failure, and local statistics.
  • To troubleshoot crashes, compatibility, and upload issues and improve App stability.
  • To comply with laws, regulations, and regulatory requirements.

We will not use your personal information for advertising, behavioral profiling, or selling to third parties.

7. Data Storage and Security

Your cloud data is in principle stored within China. Response data is transmitted encrypted via HTTPS. We protect personal information security through measures such as access control, identity authentication, permission verification, transmission encryption, log auditing, and data backup. Crash logs are retained on the server for no more than 90 days and then automatically cleared.

8. Data Sharing

Except in the following circumstances, we will not share your personal information:

  • When required by laws and regulations or by administrative or judicial authorities in accordance with the law;
  • When entrusting processing, to the extent necessary, to technical service providers such as cloud servers, object storage, map address resolution, and message notifications; such providers must sign confidentiality agreements;
  • Circumstances in which you have explicitly authorized it.

9. Data Retention

Account data is retained during the account's valid period. After account deletion, data is cleared according to the deletion request rules (seeAccount Deletion Information). The retention period for questionnaire responses is determined by the organization that initiated the corresponding project. Local cache is retained until you clear the cache, uninstall the App, or log out and clear data.

10. Protection of Minors

This App is primarily intended for users and enterprise organizations with the corresponding civil legal capacity. If a questionnaire involves the personal information of minors, the questionnaire initiator shall obtain guardian consent in accordance with the law. If you discover that we have processed a minor's personal information without the necessary consent, please contact us promptly.

11. Your Rights

Within the scope permitted by law, you have the right to:

  • access, copy, correct, supplement, and delete personal information;
  • withdraw your authorization for system permissions such as camera, microphone, photo album, location, and notifications (via the system "Settings");
  • request cancellation of your account and deletion of associated personal data (seeAccount Deletion Information）；
  • raise questions or file complaints about data processing.

12. List of Third-Party SDKs and Technical Services

To implement the App's core functions, we have integrated the following third-party open-source libraries or technical services:

Dio (network requests)
Communicates with the server API to transmit business data such as accounts, questionnaires, responses, and attachments.
Geolocator / Geocoding
Obtains the device's GPS latitude and longitude and system geocoding; used only when a location question or on-site collection is triggered.
Camera / image_picker
Takes photos, records videos, and selects images from the photo album; used only for response attachments and avatar capture.
record / audioplayers
Records and plays audio; used only for audio-recording questions and audio attachments.
device_info_plus
Reads the device model and system version for compatibility adaptation and crash diagnostics.
package_info_plus
Reads the App version number for version detection and update prompts.
permission_handler
Requests camera, microphone, location, storage, and other permissions from the operating system; does not collect additional data.
shared_preferences
Stores login status, language preferences, and privacy consent flags locally on the device; not uploaded to the server.
cached_network_image
Caches network images from the server locally to reduce repeated traffic.
qr_flutter
Generates QR code images locally; does not send data externally.
fl_chart
Renders statistical charts locally; no data is transmitted externally.
url_launcher
Opens the system browser or external apps; does not collect additional data.

13. Policy Updates

We may update this policy due to business or legal changes. Material changes will be notified within the App. Continued use of the App constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this policy or need to exercise your data rights, please contact us through the following channels:

  • Company name: Zhuoya (Hangzhou) Information Consulting Co., Ltd.
  • Contact email: postmaster@zhuoya.net.cn
  • Contact phone: 13614161086
  • Office address: Room 031, 26th Floor, Zhumeng Sci-Tech Innovation Park, Building B, Xiaoshan Chamber of Commerce Building, No. 185 Jincheng Road, Beigan Street, Xiaoshan District, Hangzhou, Zhejiang Province