Updated: September 16, 2026
This privacy policy (the “Privacy Policy”) is designed to provide users (“you”) of our websites, apps, software and other online services (the “Export Message AI”, “Service” or “Platform”) with clear information relating to how Youdao Education Technology (Hong Kong). Limited and its affiliates (“Youdao Education” or “We”) process your personal data or personal information (“Personal Information”). If you do not agree with this policy, you should not use the Service.
In this Privacy Policy, you will find the following information:
1. What is Personal Information and Who is the Provider and Controller?
2. Who are We?
3. What Personal Information Do We collect from you?
4. Cookies
5. Why and how do We use your Personal Information?
6. Who Do We Share Your Personal Information with?
7. Your Rights and Choices
8. Data Security and Data Retention
9. Data Transfers, Storage and Processing Globally
10. Children’s Privacy Notice
11. Modifications to the Privacy Policy
12. Contact Us
13. European Data Protection Specific Information
14. California Privacy Rights
Personal Information refers to any information that could identify you either directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
A service provider is a for-profit legal entity that processes personal information on behalf of a business pursuant to a written contract for a business purpose. The types of service providers to whom we entrust personal information for IT, network, cloud hosting and related services; content moderation; marketing; analytics; payment processing; customer service activities; the provision of the Business Services and the provision of information and services you have requested, such as Alibaba Cloud, Firebase, Google, Facebook, Apple, App Annie, and OpenAI.
A Data Controller is the entity that determines how and why Personal Information are processed. For the processing activities described in the Privacy Policy, Youdao Education acts as the Data Controller.
Youdao Education Technology (Hong Kong). Limited is a company established in Hong Kong. For Export Message AI, we have appointed a Data Protection Officer whom you can contact at export.ai.service@outlook.com for all matters relating to personal data, including in particular the exercise of your rights in relation to Export Message AI’s processing of your data.
We collect your information in three ways: Information You Provide, Automatically Collected Information, and Information from Other Sources. More detail is provided below.
User Content. We may collect the content you choose to import or process through the Service, such as screenshots, screen recordings, and the chat messages you select for export, and the associated metadata (such as the sender, date, and time of each message). This may include text extracted from such content, and any text you choose to submit for AI-powered features (e.g., summarization). Even if you are not a user, information about you may appear in content imported or exported by users on the Platform.
Surveys, Research, and Promotions. We may collect information you provide if you choose to participate in a survey, research, promotion, contest, marketing campaign, or event conducted or sponsored by us.
Information When You Contact Us. When you contact us, we may collect the information you send us, such as proof of identity or age, feedback or inquiries about your use of the Service or information about possible violations of our Terms of Service or other policies.
Technical Information. The certain device and network connection information we may collect when you access the Service. This information includes your device model, operating system, IP address, and system language. We also collect service-related, diagnostic, and performance information, including crash reports and performance logs. We automatically assign you a device ID and user ID. Where you log-in from multiple devices, we use information such as your device ID and user ID to identify your activity across devices to give you a seamless log-in experience and for security purposes.
User-Generated Information. The information uploaded, provided, or created by users while using the Service, including information about the content you view, the duration and frequency of your use, your engagement with other users, your search history and your settings.
Content Characteristics and Features. The characteristics and features we detect and collect about the screenshots, screen recordings, and message content that are part of your User Content, for example, the text of messages contained in your screenshots or screen recordings. We do this, for example, for content moderation and to provide features such as message extraction and export.
Cookies. The tracking technology we use to operate and provide the Platform. To learn more about our use of cookies, please see Article 4 of this Policy. We will obtain your consent to our use of cookies where required by law.
Marketing Information. Such as your mobile identifiers for advertising, your preferences for receiving communications about our activities, events, and publications, and details about how you engage with our communications. Where required under applicable law, we will obtain your separate consent for sending you marketing information.
Third Party Platforms and Partners. From which we may collect your personal information. The personal information we collect is subject to this Privacy Policy. The information collected and stored by a third party remains subject to the third party’s privacy practices, including whether the third party continues to share information with us, the types of information shared, and your choices with regard to what is visible to others on that third party website and service.
Other Information. The information that we may collect which is not specifically listed here, but which we will use in accordance with this Privacy Policy or as otherwise disclosed at the time of collection.
Cookies are small text files that are placed on your device when you browse our Export Message AI platform. We use cookies for providing users with a simpler and easier-to-use personalized web experience. Cookies enable us to serve you better and faster, and to make your experience on Export Message AI Service more personal.
If you consented to our use of cookies but later wish to opt out, you may change, at any time, your cookies preferences through the browser (if you access Export Message AI Services via a browser) or user selection mechanism, and you can use your browser settings in order to block the cookies.
We may use the information we collect for a variety of purposes, such as the purposes outlined below:
Providing the Service: We may use your Personal Information in order to provide you with the experiences, products, and services you request, view, engage with, or purchase, including AI-powered features such as message extraction and summarization where available.
Communicating with You: We may use your Personal Information to communicate with you about your account or transactions with us, send you information, or request feedback about features on our sites and applications or changes to our policies.
For Research and Development: We may analyze your use of the Services to analyze and improve the Services and to develop new functions and/or Services, including by studying user interactions and use of the Services.
Maintaining and Enhancing the Safety, Security, and Stability of the Service by identifying and addressing technical or security issues or problems (such as technical bugs, spam accounts, and detecting abuse, fraud, and illegal activity).
Sharing Your Information with Third Party Platforms to Provide You with Features, like content sharing at your request when you integrate your account with a third-party service.
Legal Reasons: We may use your Personal Information to comply with applicable law, respond to valid legal process, investigate or participate in civil discovery, litigation, or other adversarial legal proceedings, or investigate potential violations of or enforce our Terms of Service.
With Your Consent: In some cases, we may specifically ask for your consent to collect, use or share your personal information, such as when required by law and before sending message content to a third-party AI service provider for AI processing where required.
For the purposes referred to under this Privacy Policy, we may share your Personal Information with certain recipients. Such recipients will either act as another controller or as processor acting on behalf and upon our instructions.
The processors which we may share your Personal Information with are the following:
Our Affiliates: As a global company, the Platform is supported by certain entities within our corporate group. These entities process Information You Provide, Automatically Collected Information, and Information From Other Sources for us as necessary to provide important functions, such as storage, content delivery, security, research and development, analytics, online payments, customer and technical support, and content moderation.
Third Party Service Providers: We may share Personal Information with third party service providers for a variety of business purposes, including customer communications and insights, internal business insights, measurement and analytics, cloud hosting, security, and other technology providers necessary to provide our services.
We use third-party artificial intelligence service providers, including OpenAI, to provide AI-powered features such as high-accuracy text extraction from your screenshots and screen recordings, and summaries generated from your exported message content (where available).
When you choose to use AI-powered features, we may send the text extracted from your message content to OpenAI through OpenAI’s API for processing, solely to generate summaries and responses requested by you. Where you separately submit other text (such as prompts or notes) for AI processing, we may also send that text to OpenAI solely to fulfill your request.
We do not send your payment information, account password, contacts, or other unrelated personal information to OpenAI for AI processing.
Usage restrictions: Data sent via OpenAI’s API is used solely to generate AI outputs you request. OpenAI’s business/API terms state that customer content submitted through API services is not used to develop or improve OpenAI services unless the customer explicitly agrees to such use. Accordingly, we do not permit OpenAI to use API-submitted data from Export Message AI to train OpenAI models.
Consent: Before sending your message content or other user-submitted text to OpenAI for AI processing, we will provide an in-app notice and obtain your consent where required. If you do not agree, Export Message AI will not call OpenAI’s API for that AI-powered feature and your text will not be sent to OpenAI for AI processing.
Retention: We retain AI-processed data on our servers for up to 365 days, unless a longer retention period is required or permitted by applicable law, necessary for security, fraud prevention, dispute resolution, legal compliance, or requested by you through saved content features. Retention and deletion practices for data processed by OpenAI through the API are governed by OpenAI’s applicable API terms and policies; OpenAI states that it retains personal data only as long as needed to provide its services or for legitimate business purposes such as safety, security, dispute resolution, and legal compliance.
Deletion: You may request deletion of content associated with your account by contacting us at export.ai.service@outlook.com. After we verify your request, we will delete or de-identify the applicable data from our systems within a reasonable period and, where applicable, make commercially reasonable efforts to request deletion by our processors in accordance with our contractual terms, OpenAI’s API-related policies, and applicable law. Some data may be retained for longer where required for legal, security, fraud prevention, or compliance purposes.
OpenAI policy references: OpenAI Privacy Policy: https://openai.com/policies/privacy-policy/ ; OpenAI Services Agreement: https://openai.com/policies/services-agreement/
Our Export Message AI may contain links to third-party websites, tools or services. Those third parties have separate and independent privacy policies that you are invited to read carefully. This Privacy Policy does not apply to your use of such third-party sites, tools or services. We do not own or control those third parties, and we assume no responsibility or liability for their content and activities.
You can access and edit most of your profile information by signing into our Service. You can delete the User Content you uploaded. You may also be afforded certain rights under applicable laws, which may include the right to access, delete, update, or rectify your data, to be informed of the processing of your data, to file complaints with authorities, and potentially other rights.
Please be aware that if you do not allow us to collect personal information from you, we may not be able to deliver certain experiences, products, and services to you, and some of our services may not be able to take account of your interests and preferences. If collection of personal information is mandatory, we will make that clear at the point of collection so that you can make an informed decision whether to participate.
If you have any questions on how to use the above tools, want to know about what rights you may have or want to exercise them, or have any requests, inquiries, or complaints, please contact us pursuant to the means mentioned in Article 12 of this Policy.
Security of your information is important to us. We maintain appropriate technical, administrative, and physical security measures that are designed to protect your information from unauthorized access, theft, disclosure, modification, or loss. We regularly review our security measures to consider available new technology and methods. However, you should understand that no data storage system or transmission of data over the Internet or any other public network can be guaranteed to be 100 percent secure. Please note that information collected by third parties may not have the same security protections as information you submit to us, and we are not responsible for protecting the security of such information.
We retain information for as long as necessary to provide the Service and for the other purposes set out in this Privacy Policy. We also retain information when necessary to comply with contractual and legal obligations, when we have a legitimate business interest to do so (such as improving and developing the Service, and enhancing its safety, security and stability), and for the exercise or defense of legal claims.
For AI-processed data retained by us, we keep it for up to 365 days as described in the “Third-Party AI Service Providers” section, unless a longer retention period is required or permitted by law for security, fraud prevention, dispute resolution, or compliance purposes.
Upon expiry of the applicable data retention period, we undertake to erase or irrevocably anonymize the relevant Personal Information.
The personal data we collect from you may be stored on a server located in United States, Singapore and Hong Kong, outside of the country where you live. We maintain major servers around the world to bring you our services globally and continuously.
We operate globally and may transfer your personal information our Affiliates or third parties in locations around the world for the purposes described in this Privacy Policy. Wherever your personal information is transferred, stored or processed by us, we will take reasonable steps to safeguard the privacy of your personal information. These steps may include implementing standard contractual clauses which recognized by law, obtaining your consent, or other lawful means of transferring personal information.
We are not directed at children (the age of 13 in the United States, the age of 16 in the EU, or any age if required in an applicable jurisdiction to comply with applicable laws), and we do not knowingly collect information from children. If you are under the age then DO NOT DOWNLOAD OR USE THE SERVICES. If you believe that we may have personal information from or about a child, please contact us as the means mentioned in Article 12 of this Policy. Note that we’ll attempt to delete the account of any child that’s reported to us as soon as possible. You are responsible for any and all account activity conducted by a child on your account.
We reserve the right to change this Privacy Policy at any time. When we update the Privacy Policy, we will notify you by updating the “Last Updated” date at the top of this policy and posting the new Privacy Policy and providing any other notice required by applicable law. We recommend that you review the Privacy Policy each time you visit the Platform to stay informed of our privacy practices.
If you have any requests, questions, comments, or concerns regarding this Privacy Policy or privacy practices, please contact our Data Protection Officer at export.ai.service@outlook.com.
If you are in the European Economic Area (“EEA”), Switzerland, or the United Kingdom (“UK”), you have various rights in relation to the processing of your Personal Information:
Access to Personal Information processed concerning you;
Rectify inaccurate Personal Information;
Delete any Personal Information concerning you;
Restrict processing;
Receive your Personal Information provided to us in an interoperable format (data portability);
Object to the processing on grounds relating to your particular situation.
In order to exercise any of your rights, or if you have any other questions about our use of your Personal Information, please send a request at the contact details specified at Article 12 of this Privacy Policy. We will reply your requests in 30 days; for complicated issues we may need a 60-day extension period. Please note that we may request you to provide us with additional information in order to confirm your identity and ensure that you are entitled to access the relevant Personal Information.
In any case, you also have the right to lodge a complaint with the competent data protection authority.
We rely on the following legal bases when we process Personal Information about individuals in the EEA, Switzerland, or the UK:
Contractual Necessity: We process Personal Information for the management of our relationship on the basis of the contract between Youdao Education and you in order to provide you with the Export Message AI and any other services that you request, send you communications related to your purchase, manage our relationship and carry out any related administration, etc.
Consent: We rely on your prior consent to send you marketing communications and to store cookies on your device as described in the section specific to cookies. You have the right to withdraw your consent at any time (without calling into question the processing previously carried out) by sending a request at the contact details specified at the end of this Privacy Policy.
Legal Obligations: We process Personal Information to comply with the legal obligations to which we are subject.
Legitimate interests, unless overridden by your interests or fundamental rights and freedoms: We process Personal Information based on our legitimate interests which consist in: (i) complying with non-EU laws and responding to requests from competent authorities; (ii) meeting our corporate and social responsibility commitments; and (iii) protecting our rights, property or security and that of our clients.
The personal data we collect from you is stored on a server located in United States, Singapore and Hong Kong. We maintain major servers around the world to bring you our services globally and continuously. These entities commit to processing information in compliance with applicable privacy laws and to implementing appropriate security measures to protect your information.
When we transfer your information outside of the EEA, the UK, or Switzerland, we ensure it benefits from an adequate level of data protection by relying on adequacy decisions or standard contractual clauses, as applicable.
The California Consumer Privacy Act of 2018 (CCPA) provides California residents the right to request:
Disclosure of our practices: the categories of Personal Information we collect, the categories of sources from which the Personal Information is collected, our purpose(s) for collecting the Personal Information, and the categories of third parties with whom we have shared Personal Information.
Access to specific pieces of your Personal Information we have collected.
Deletion of any of your Personal Information we have collected.
Opt out of “sale”: that your Personal Information not be sold to third parties.
As required by the CCPA, we will not discriminate against you for exercising any of these rights.
You may exercise your rights by sending a request at the contact details specified at Article 12 of this Privacy Policy. We will acknowledge receipt of your request within 10 business days, and provide a substantive response or notify you of the reason and extension period within 45 days. Under the CCPA, only you or an authorized agent may make a request related to your Personal Information. We must verify your identity to respond to certain requests.
California Civil Code Section 1798.83, also known as “Shine The Light” law, permits California residents to annually request, free of charge, information about the disclosure of their Personal Information (if any) to third parties for the third parties’ direct marketing purposes in the preceding calendar year. If applicable, this information would include the categories of customer information, as well as the names and addresses of those businesses with which we shared customer information for the immediately prior calendar year. To submit a request, you could contact us with the method mentioned in Article 12 in this Policy.