1. On-Device Processing

Doumen is operated by the individual developer ZhangXu (Chinese name: 张旭; brand name: Xuyu Tech) and does not require registration or login.

Images you import, patterns you create, project names, edits, inventory and making progress, export settings, and language and appearance preferences are stored on your device by default and are not uploaded to developer-operated servers. Image cropping, color sampling, OCR-assisted import, and background cleanup are also performed on your device.

Diagnostic records remain local by default; you can choose to send diagnostics through Report a Problem in the app or separately email materials to support. Exported PNG files may contain project data and the source image; sharing the file also shares its embedded data.

User-Initiated Diagnostic Feedback

Only when you tap Send in Doumen’s Report a Problem form does Doumen send the permitted diagnostic records and your optional problem description and contact email to the diagnostic service. Neither a description nor an email address is required. Diagnostics are not uploaded automatically or silently. Materials you separately email to support are used only to handle your request.

Diagnostic records may include app and OS versions, device model, random run/page/action associations, fixed operation and error codes, counts and durations, resource summaries, source-image dimensions and byte counts, normalized crop bounds, complete import links from supported sources, manual review coordinates and color-confirmation or undo records, and backup identifiers and snapshot times used to connect troubleshooting evidence. Sync diagnostics may also include anonymous object and content associations within one session, file-role categories, validation rules, and lifecycle categories, format versions, and necessary counts for local, remote, and previous-sync states. Sync object and content associations in feedback change between sessions; original project or cloud-record identifiers, original content hashes, account identities, and sync credentials are not sent. Complete import links may contain access tokens; please do not publish a feedback report. Feedback does not upload source images or project files. The new system summaries do not include raw system logs, call stacks, or arbitrary exception text.

OS-provided crash, hang, and exit-category summaries may cover approximately the previous 24 hours or older delayed reports. Their coverage interval, receipt time, and source build are recorded separately. They do not establish that an event occurred during your current action or app run, and missing records do not establish that no problem occurred.

Ordinary on-device diagnostics use a rolling 30-minute window. System summaries are retained only if received within 30 minutes, although their original OS coverage period may be older. Sanitized summaries and limited direct evidence of allowlisted startup upgrade failures, local data mount failures, and data-version protection blocks that ultimately prevent access to the app, as well as sync failures, may be retained locally for up to seven days. This does not extend the full activity history. Startup blocks and sync failures are recorded separately; sync cancellation and ordinary account or inventory selection prompts do not qualify for seven-day retention on that basis. A summary expires seven days after that failure is first recorded; each item of direct evidence expires seven days after its original occurrence. Repeated failures do not renew these periods, and recovery does not reset them. A genuinely successful sync may record recovery; dismissing a prompt does not establish recovery.

Seven-day failure summaries may include fixed failure and error codes, necessary migration or sync state, source builds, random incident or session associations, first and last recorded times, repeat counts, and recovery results. Limited sync-failure evidence may also contain the anonymous object and content associations within one session described above. They do not include arbitrary exception text, raw call stacks, project names, file paths, accounts, persistent device or project identifiers, original cloud-record identifiers, original content hashes, sync credentials, complete import links, source images, or project files. The startup-block area and sync-failure area each hold at most 16 incidents, each with at most 16 direct evidence records, and each area is limited to 512 KiB. Startup-block incidents are also limited to 32 KiB each. Ordinary events, system summaries, both types of failure records, and pending snapshots share a maximum local allowance of 2 MiB; storage pressure may remove records earlier. When the app is not running, physical files cannot be cleaned up at their exact expiry time. Cleanup runs first on the next launch, and expired records are not sent again.

Reports still upload only when you tap Send and are used only for restricted internal troubleshooting. Server rules remain unchanged: reports are retained for seven days after server receipt, become unavailable to internal readers on expiry, and are removed by scheduled cleanup. The local and server retention periods start separately, so the server retention period may end nearly fourteen days after the original failure. Only a minimal used-report-code marker is kept long term to prevent an old code from referring to another report.

2. Optional iCloud Sync

If you enable iCloud sync, project files, source assets, and sync metadata are stored in your iCloud account through Apple services. Doumen does not operate a separate project-sync server and does not receive your iCloud project content through this feature.

After sync is disabled, the current device stops syncing. Data already stored in iCloud remains under your control through Doumen, device settings, or iCloud. Apple processes this data under its terms and privacy policy.

3. Analytics

Doumen enables Umeng (U-App) mobile analytics only after you agree. If you do not agree, the SDK is not initialized. If you decline, Doumen exits and you can open it again to choose.

Umeng analytics is used to understand app launches, sessions, and feature usage so we can improve the product and perform basic anti-fraud checks. The information that may be processed includes:

• App information: app version, release channel, and SDK version;
• Usage information: launch time, session duration, and feature events that do not include images, patterns, or project content;
• Device and system information: device model, operating system version, language, time zone, disk, CPU, and battery information;
• Network information: IP address, network status, and network service provider;
• Device or installation identifiers: which may include IDFA, OpenUDID, GUID, or the Umeng device identifier.

Doumen does not upload your imported images, pattern content, project files, project names, or exported files through Umeng, and does not collect precise location or a list of installed apps through Umeng.

• Service name: Umeng Mobile Analytics SDK (U-App)
• Service provider: Umeng Tongxin (Beijing) Technology Co., Ltd. (友盟同欣（北京）科技有限公司)
• How it is used: after you agree, the SDK automatically collects the information above and transmits it to Umeng servers to generate analytics reports
• Storage location: under the Umeng privacy policy, the information is stored in China
• Retention: kept only for the shortest period needed to serve the analytics and anti-fraud purposes and to meet security and legal obligations, then deleted or anonymized
• Umeng Privacy Policy
• Umeng device opt-out page
• Umeng privacy contact: Umeng_Legal@service.umeng.com

We require third parties to protect your information in accordance with this policy and applicable law.

4. Extracting Images from Share Links

When you choose to extract images from a share link, Doumen requests the linked content and downloads images directly from the source platform and its image services. Those services receive the link information needed for the request (which may include a share token), your IP address, and network information such as request headers, and process it under their own rules. Doumen does not relay these requests through developer-operated servers; pattern recognition and editing remain on device. Saving images to Photos depends on your selection and system permission.

5. System Permissions

• System photo or file picker: choose images to process;
• Photo-library add permission: save exported images to Photos;
• File and sharing features: import, save, or share files; and
• iCloud: sync projects after you enable sync.

6. Retention, Deletion, and Your Rights

You manage local projects on your device; diagnostic records and submitted reports follow the windows and retention periods above. Uninstalling Doumen usually removes data in the app sandbox. Content saved to Photos, Files, iCloud, or shared with others must be managed or deleted in those locations. Support email is retained only as needed to respond, maintain necessary records, or meet legal obligations.

You can access, export, correct, or delete local data through Doumen and system features. You may also contact us to request access, correction, deletion, or other applicable privacy rights.

7. Policy Updates and Contact

If our information practices change materially, we will update this policy and seek consent again where required by law.

For questions, comments, or complaints, contact xuyutechnologies@outlook.com.

1. Agreement to Terms

These Terms constitute a legally binding agreement between you and Doumen's individual developer, ZhangXu (Chinese name: 张旭; brand name: Xuyu Tech), regarding your use of the app. By downloading, installing, accessing, or using Doumen, you agree to be bound by these Terms.

2. Eligibility and License

• Minors should use Doumen under the guidance of a parent or guardian.
• Doumen grants you a limited, non-exclusive, non-transferable, revocable license for personal, non-commercial craft and creative use.

3. Permitted and Prohibited Uses

You may use Doumen to extract images from share links, generate bead patterns from local images, import existing pattern images with crop/color/OCR assistance, edit patterns, save and duplicate local projects, track inventory inputs, manage making-session progress, optionally sync projects through Apple iCloud, and export PNG/PDF pattern sheets.

• Do not use the app for illegal or unauthorized purposes.
• Do not reverse engineer, derive source code, or circumvent security controls.
• Do not use Doumen to process or distribute infringing, illegal, or rights-violating content.
• Do not imply that Doumen has an official partnership with any bead brand or platform unless authorized.

4. User Content, Local Files, and Third-Party Services

• You are responsible for the images, patterns, and files you import, create, save, export, or share.
• Only import images you own or have permission to use, and comply with the source platform's terms of service. Copyright remains with the respective rights holders. Importing, editing, or exporting an image does not grant you additional rights to use or distribute it. Do not use this feature to infringe others' rights.
• Doumen stores projects locally by default and may optionally sync project data through Apple iCloud when you enable iCloud sync.
• Doumen does not provide Xuyu Tech accounts, community publishing, online asset libraries, or bead purchasing services.
• Apple system services such as Photos, Files, and App Store distribution are governed by Apple's own terms and policies.
• Color matching, OCR/import recognition, background cleanup, inventory estimates, making progress, and bead usage counts are craft references and may vary due to image quality, display differences, OCR errors, bead batches, lighting, and manual edits.

5. Fees, Disclaimers, and Liability

• Doumen is distributed as a free app.
• The app is provided "as is" and "as available" without warranties.
• We do not guarantee exact color reproduction, exact pattern recognition, exact background removal, exact material quantities, uninterrupted operation, or suitability for every craft project.
• To the maximum extent permitted by law, the developer is not liable for indirect losses, wasted materials, failed craft projects, data loss, iCloud sync conflicts, Apple service outages, or consequential damages.

6. Governing Law, Disputes, and Contact

To the extent permitted by law, these Terms are governed by the laws of the developer's principal place of business or residence. Mandatory consumer protection rules and platform rules apply where required.

Contact: xuyutechnologies@outlook.com