Privacy Policy
1. What this policy covers
This policy covers two things: the macOS app "Wenyin" (including the local background program and the Finder extension included in the installer), and the Wenyin website (the static site this page belongs to).
Related documents: trials, purchases, and refunds are in Terms and Licensing; the license and liability terms are in Legal; third-party licenses are in the third-party section of Terms and Licensing.
This policy does not cover other actions you initiate: for example, sharing an exported file with an external AI, a cloud drive, or another person. You decide whether to take such actions, and the rules of the relevant service apply.
2. What happens to a document, step by step
The table below lists, for each processing step, where the data is, whether it leaves your Mac, and what remains.
| Step | Where the data is | Leaves your Mac | What remains |
|---|---|---|---|
| Import | The file you selected; one copy is made in the local library | No | The copy in the library; the index records name, format, size, and time added |
| Detection | Local memory; the detection model and inference runtime ship with the installer | No | Review candidates (source text fragments, categories, replacement terms, positions) are written to the local index file so review can continue after the app closes |
| Review | The local interface | No | Your checked and unchecked choices are stored locally with the index file |
| Replacement (redaction) | Local memory and disk | No | A separate redacted copy within the same project; the original copy is not rewritten |
| Export | The destination you chose | No | The exported file. Undo only retracts the redacted copy in the library; it does not affect files already exported |
| Delete | This Mac | No | The copy in the library moves to the system Trash; the index entry is removed; your original file is unaffected |
One point needs emphasis: detection and review results are sensitive information, so they are stored on your Mac just like the copies you imported. They do not leave your Mac, but if you hand the computer to someone else, that person can see this content through the library. Please protect the device itself (login password, disk encryption, screen lock).
3. Why processing does not need a network connection
Document detection does not use a cloud document recognition service: the detection model and inference runtime ship with the installer, and inference runs on your Mac. Import, detection, review, replacement, and export never connect to the network or upload anything.
What is imported is a copy
On import, Wenyin copies the document into the local library (~/Library/Application Support/文隐/资料). Your original file is not moved, rewritten, or deleted. The redacted result is a separate copy within the same project and is written only to your Mac's disk.
4. What is stored on your Mac, for how long, and how to delete it
| Item | Location | Retention | How to delete |
|---|---|---|---|
| Imported copies and redacted copies | the app’s local data folder | Kept until you delete them or turn on storage cleanup | Delete in the app (goes to the system Trash); or automatic cleanup in Settings → Storage; or the uninstall script |
| Project and document index, including review candidates and checked states | the app’s local data folder | Same as the corresponding document | Delete the corresponding document; use the uninstall script to clear everything |
| Preferences | system preferences folder | Until you change them or uninstall | The uninstall script; or delete manually |
| Trial record (key and number of documents used) | the app’s local data folder + system keychain | Until you uninstall | The uninstall script (the system may ask once when deleting the keychain entry) |
| License status (the license code you pasted) | the app’s local data folder | Until you uninstall | The uninstall script; or delete manually |
| Caches and network caches | system cache folders | Reclaimed by the system and the app as needed | The uninstall script; or delete manually |
| Finder extension container | system container folders | Until you uninstall | The uninstall script; or delete manually |
Storage cleanup (off by default)
In Settings → Storage you can reclaim original copies in the library by number of days (7／14／30／60／90 days) or by a size limit (unlimited／500 MB／1 GB／2 GB／5 GB). Reclaimed items always go to the system Trash, never erased outright. There is also an "automatically delete the redacted copy after export" switch, also off by default. Automatic cleanup only affects the library; your original files were never in the library and are unaffected.
Two meanings of delete
Deleting data in the app moves the copy in the library to the system Trash (where it can be recovered); the original file stays where it is. "Remove from Recents" only affects the Recents list and does not delete files. The interface states both clearly; please follow the prompt.
5. When the app connects to the network
The app needs the network for one thing only: checking for updates and downloading updates. The table below is the complete network list.
| Scenario | Where the request goes | What is sent | What is not sent | Can it be avoided |
|---|---|---|---|---|
| Checking for updates (automatic by default, can be manual) | The update feed onbrickindex.pages.dev : appcast.xml(China route) or appcast-global.xml(overseas route) |
A standard HTTPS request, plus app version information used to compare versions | Document contents, file names, detection results, usage statistics, or system configuration | Yes: set Settings → General → Software Update to manual, or use the app in an offline environment |
| Downloading an update package (requires your click) | The HTTPS address given in the update feed (currently GitHub Releases) | A standard download request | Same as above | Yes: simply do not click download |
| Detection, review, replacement, export | No network request is made | — | — | It is offline by design |
| Finder extension and local interface | Communicates only locally (the Finder extension passes the selected path to the main program) | File paths, project and document metadata | It does not listen on a network port and makes no external requests | No network is involved |
Updates download only the version feed and installer; they do not read or upload documents, send usage statistics, or send system configuration.
Downloads and update checks are provided by the hosting services, whose servers receive the usual connection IP and request records — records that any download produces. There is no telemetry, no crash reporting, and no third-party analytics SDK in the app.
6. System permissions
| Permission | Used | Notes |
|---|---|---|
| Files and Folders | Only when you act | Open the document you selected and write to the library. macOS may ask on first access to certain directories; you decide in System Settings whether to allow it |
| Keychain | Needed to read the local trial record | It may ask once on first read or after an update; please confirm that the requesting party is Wenyin or its background program |
| Finder extension | Registered with the installer; can be turned off in System Settings | A sandboxed process that passes only the selected file paths to the main program and does not read document contents |
| First launch (not notarized) | Must be allowed in System Settings → Privacy & Security | The current version is not notarized by Apple; you are not asked to disable system security protection |
| Other system permissions | Not used, not requested | Screen Recording, Accessibility, Full Disk Access, Camera, Microphone, Location, Contacts, Calendars, Reminders, Photos, and the Automation permission to control other apps are not requested: the app has no features for screen capture, controlling other apps, or full-disk scanning |
You can revoke any of these authorizations in System Settings at any time. If you revoke file access, Wenyin cannot read the locations you choose; this does not affect the safety of your existing files.
7. The local interface (off by default)
Settings also includes a local interface that is off by default, for use from Terminal or automation scripts. It works only inside this Mac and does not listen on a network port.
It returns only metadata such as project names, file names, formats, library copy byte counts, and status; it does not return document text, originals, or detection results. Import copies the file into the library and leaves the original untouched; delete moves the library copy to the system Trash.
8. Finder extension
The Finder extension is a sandboxed process. It passes only the file paths you select to the app; it does not read document contents and does not access the library. "Redact Here" runs in the background without opening a window.
9. What we do not collect
The app does not automatically upload documents, findings, replacement mappings or usage statistics. It has no accounts, advertising tracking or cloud document processing. An order number and machine code may be required for licensing. The machine code identifies the licensed device and is not anonymous information.
When you contact us or purchase through email, WeChat or another sales channel, that service and the seller may receive your display name, contact details, order and payment records, machine code and messages to respond, deliver a licence and provide support. Do not send real documents or unrelated personal information. Group members may see group messages. Each platform handles data under its own rules. Use the contact details on this page to request access, correction or deletion, subject to legally required transaction record retention.
10. This website
- It does not receive documents: the site has no upload entry point and does not send your files anywhere.
- It does not track you: the site sets no tracking cookies, loads no third-party analytics scripts, and does not place ads.
- The download page queries GitHub for public release and installer information; it sends no documents, license codes, or machine codes. GitHub receives connection information, including your IP address.
- Browser storage keeps only your manual light or dark theme choice and the public release information the download page needs; it contains no documents or user identifiers and is cleared with this site’s data in your browser settings.
- This site is hosted on Cloudflare Pages. When providing network delivery, security, and hosting, Cloudflare may process connection information such as IP addresses, request times, and browser details under the Cloudflare Privacy Policy. This site loads no third-party analytics or advertising scripts.
- External links: download buttons and update channels point to the public download repository; the rules of the relevant service apply after you click.
Please do not send real documents by email or group chat. If you need to explain a detection problem, first reproduce it with a synthetic sample as described inSupport and Updates.
11. Your rights and how to exercise them
Manage local document data in the app and system as described below. For information supplied in messages, orders or licence delivery, contact us to request access, correction or deletion; legally required records remain subject to applicable retention rules.
| What you want to do | How to do it |
|---|---|
| See what Wenyin stores | Open the library to view copies and the index; find the files in Finder using the paths in section 4 |
| Correct a detection result | Check, uncheck, or add candidates in the review pane; detection results are not written into the document itself, so you change this review session's choices |
| Delete a document | Delete it in the app (goes to the system Trash); empty the Trash for complete removal |
| Export your data | Export the documents themselves; library copies can also be copied out directly |
| Clear all local data | Run the 卸载文隐.command script in the installer |
| Complain or ask a question | Contact us through the channels in section 14. For complaints about personal information protection, we will talk with you first; you may also report to a competent authority under the law |
12. Minors
Wenyin is intended for adult users who need to process legal documents. The app has no accounts and does not collect age or personal identity information. Minors should use the app and this website under the guidance of a guardian.
13. Policy changes, versions, and effective dates
Significant changes to how data is handled will be explained on this page and in the update history. Historical versions of the policy are kept in our records; if you need to check an older version, write to us and we will provide it.
14. Contact and response time
- Email:songsong24@foxmail.com
- WeChat groups: the two WeChat groups linked from "Join the group chats" in the website footer (the beta group and the AI discussion group)
- Download repository:github.com/songoao25/wenyin-downloads
Wenyin is maintained by an individual developer. We do not promise a fixed response time, but we will do our best to reply within a reasonable time. For privacy questions, include the version and OS version you use; do not attach real documents.
Related pages: Legal · Purchases and refunds · Third-party licenses · Help
Terms of Use
1. Acceptance and scope
By installing, opening, or using Wenyin, you confirm that you have read and agree to these terms. If you do not agree, do not install or use the software.
These terms apply to the Wenyin macOS app (including its bundled local background program and Finder extension) and to the Wenyin website. This page also covers the license, liability, trials and purchases, refunds, and third-party licenses; data handling is described in the Privacy Policy.
If you use Wenyin on behalf of an organization, you must confirm that you have authority to accept these terms for that organization. We currently offer only single-Mac individual licenses; no team terms are available.
2. Definitions
| Term | Meaning |
|---|---|
| The software | The "Wenyin" macOS app and the local background program, Finder extension, detection model, and inference runtime distributed with it |
| We / us | Wenyin's individual developer |
| You | The natural person who installs or uses the software; if you use it on behalf of an organization, that organization |
| License code | Text issued by us and bound to this Mac, used for offline activation |
| Machine code | An identifier used to bind the license to this Mac; the original hardware information cannot be reconstructed from it |
| Trial | The allowance to generate 5 redacted copies with full functionality before activation |
| Library | The copies, index, and license records under ~/Library/Application Support/文隐/ on this Mac |
| Redacted copy | A separate file generated from your review results and stored separately from the original copy |
| Release notes | The update history for the corresponding version, together with that version's feature and limit descriptions |
3. License scope and restrictions
Subject to your compliance with these terms, we grant you a personal, non-exclusive, non-transferable license to install and use the software on a licensed Mac.
What you may do
- Install and use Wenyin on a licensed Mac to process your own documents;
- Import documents to create library copies, review each detection result, and generate and export redacted copies;
- Decide for yourself whether to give an exported file to an external AI or another service; you initiate this step and are responsible for checking it;
- Re-enter your saved license code after reinstalling or restoring the system on the same Mac (valid when the machine identifier has not changed).
What you may not do
- Use one license code on multiple Macs, or share, rent, resell, or transfer a license code;
- Copy, distribute, or publish the software or its installer (including renamed or re-signed versions);
- Reverse engineer, decompile, or disassemble the app, or bypass license verification, integrity checks, or trial counting, except where the law expressly permits it;
- Remove or modify copyright, trademark, or other rights notices in the app or its documentation;
- Use the software, documentation, interface, or design to train any model;
- Use the software for unlawful purposes, or to process documents you have no right to process.
The license does not include accounts and cloud services, subscriptions, cross-device sync, remote revocation, or team or education licenses. These capabilities are not provided at this time; see section 6 of this page.
4. Trial
Before activation, you can use the full functionality to try 5 documents and confirm whether the actual output meets your needs. The count is one document for each redacted copy successfully generated.
| Action | Counted |
|---|---|
| Successfully generating one redacted copy | Counts as 1 |
| Importing, previewing, detection, scanning, reviewing, or exporting an existing copy | Not counted |
| Failure or cancellation | Not counted |
| Undo | Does not return used allowance |
- The trial is counted by copies, not by days; no expiration date is set.
- When the allowance is used up, the app stops generating new redacted copies and asks you to activate. Importing, detection, and review remain available, and copies already generated can still be exported.
- The trial record is stored on this Mac. If the record cannot be read, the app clearly informs you and refuses to generate new copies; it does not rebuild the allowance automatically.
5. License code and activation
Activation is in Settings → License: paste the license code and you are done. The whole process is offline and does not need a network connection. The license code is issued by us and verified on this Mac to confirm it corresponds to this device.
The license code is tied to this Mac and activation happens offline. Reinstalling the system on the same Mac usually does not require a new purchase; after a logic-board repair or a virtual-machine rebuild, contact us for a transfer (see section 6).
- In Settings → License, copy the machine code and send it to us when purchasing.
- After receiving the license code, paste it in Settings → License.
- The app verifies it on this Mac and shows the licensed state on success.
If the license code will not activate: first confirm it was copied completely and that the installer came from this website; if the app says the machine code does not match, move the license to a new Mac as described in section 6; if it still fails, contact us through section 15.
License verification is a software-level check. Because licensing is entirely offline, we cannot deactivate a license on a particular Mac remotely.
6. Purchases, moving to a new Mac, and refunds
The public beta is ongoing: the final price has not been determined, this website provides no online payment entry point, and payment and delivery are handled manually. Once the price and purchase entry point are settled, this page will be updated before any sales begin.
- Contact us through the channels in section 15 to confirm whether purchases are currently open.
- Copy the machine code in Settings → License in the app and send it to us together with your order number.
- Once receipt is confirmed on the actual payment channel, we issue a license code.
- Paste it in the app to activate; after that you can use the app offline.
- One code, one Mac: a license code is bound to the Mac used for activation, and each license includes one free transfer to a new Mac. To move the license, provide the original order number and the new machine code; the license on the old Mac cannot be deactivated remotely.
- Reissuing: if you lose your license code, request it again with the same order number on the same machine. We resend the original license and no second valid license is created.
- Refunds: you may request a refund before the license code is delivered. After delivery, no voluntary refund is offered to the extent permitted by applicable law. Where the product does not meet quality requirements, does not match its description, or we are otherwise liable under law, the matter is handled under the laws of mainland China and the rules of the sales channel; your statutory rights as a consumer are not affected.
- Invoices: Wenyin is operated by an individual developer, not a company, so we cannot issue Chinese VAT invoices and do not promise other reimbursement documents. If an invoice is a precondition for your purchase, confirm before paying.
We expressly do not promise: that all unauthorized use can be prevented, that an old license is revoked immediately after a refund, that all future major versions are free forever, or a fixed response time.
7. Your responsibilities
- Lawful use: process only documents you have the right to process, and comply with applicable laws, professional rules, and confidentiality obligations. Wenyin is a tool; it does not change the responsibilities you already have.
- Review each item: automatic detection can miss or misidentify items. Before exporting, review every candidate, add anything missed, and deselect anything misidentified.
- Check exported files: open the exported file and confirm that the information to be removed has been handled and that the layout is intact. Do not rely only on the in-app preview.
- Keep your own backups: copies in the library are working copies, not backups. Keep your own backup of important documents.
- Protect your device: detection results and copies are stored on this Mac. If you share the computer with others, protect this data with a login password, disk encryption, and screen lock.
- Use feedback channels responsibly: do not send real documents when reporting a problem. Use a synthetic sample when a reproduction is needed.
8. Third-party components and licenses
Wenyin includes the following third-party components and resources, each under its own license. The license restrictions in these terms do not apply to them.
- Sparkle 2.10.0 (MIT): in-app updates.
- ONNX Runtime 1.31.0 (MIT): on-device inference; components bundled with it follow their own licenses (including MPL-2.0 and others). See the notices shipped with the app for the complete list.
- Detection model base: HFL Chinese-RoBERTa-wwm-ext (Apache-2.0): Wenyin trained and quantized on top of it. The installer distributes
vocab.txt(identical to upstream, unmodified) and the self-trained derivative weightsmodel.onnx; the upstream original training weights are not redistributed. The upstream repository provides no separate NOTICE file. This app and its model are not official releases of HFL, Google, or any upstream institution. - Site fonts (SIL OFL 1.1): Source Han Serif, EB Garamond, and Noto Serif JP/KR; subsetted and self-hosted, with copyright and license texts retained.
Complete license texts: third-party-notices.txt and the OFL files in the site font directory (SOURCE-HAN-OFL.txt, EB-GARAMOND-OFL.txt, NOTO-SERIF-JP-OFL.txt, NOTO-SERIF-KR-OFL.txt). The ThirdPartyNotices.txt inside the installer matches the text provided on this page.
9. Intellectual property
Wenyin is commercial closed-source software. Copyright and other rights in the software belong to the developer. Without written permission, no one may copy, distribute, publish, or resell the software or its license codes, or use the software, documentation, interface, or design to train any model. All rights not expressly granted by these terms are reserved by the developer.
The product name, icon, and interface design belong to the developer. Third-party components distributed with the app or this website follow their respective licenses; see section 8 of this page.
10. Original files and copies
Wenyin only creates copies: it copies a document into the library at import, and generates a separate redacted copy during redaction. Original files are not overwritten, moved, or deleted. Deleting data in the app moves the library copy to the system Trash; undo only retracts the redacted copy in the library and does not affect files already exported.
11. Disclaimer and limitation of liability
To the extent permitted by applicable law, the software is provided "as is". We make no warranty as to the completeness or fitness of detection results, or their fitness for a particular purpose, and we are not liable for indirect loss arising from the use of, or inability to use, the software.
We are not responsible for the following: your failure to review detection results; your delivery of an unchecked exported file to a third party; operating problems caused by your system version, hardware, or third-party software; and consequences of your own decision to give a file to an external service.
This section does not exclude or limit any liability that cannot be excluded or limited by law, and it does not affect your statutory rights as a consumer.
12. Termination
If you breach these terms (for example, sharing a license code, bypassing license verification, or distributing the software), the license terminates automatically: stop using the software and delete it and its local data. If a paid license is terminated for breach, we do not refund amounts already paid.
You may stop using Wenyin and uninstall it at any time; see Help for uninstall steps. Because the license is offline and permanent, uninstalling does not automatically produce a refund, and it does not remotely invalidate the license on the old Mac.
If we stop maintaining a version, your installed copy can still be used offline on that Mac; updates and support may end, and we will state this in the update history.
13. Governing law and dispute resolution
These terms are governed by the laws of the mainland region of the People's Republic of China. If a dispute arises, please first contact us through the contact details. If no agreement can be reached, either party may bring a lawsuit before a court with jurisdiction.
14. Changes to these terms and notices
When these terms are updated, the effective date and document version at the top of this page are changed, and changes affecting your rights are explained in the update history. Material changes are also announced in the website footer and the WeChat groups.
Continuing to use a new version of the software after a change means you accept the updated terms. If you do not agree, stop using the software and uninstall it.
15. Contact
- Email: songsong24@foxmail.com
- WeChat groups: the two groups linked from "Join the group chats" in the website footer (the beta group and the AI discussion group)
- Download repository: github.com/songoao25/wenyin-downloads
Wenyin is maintained by an individual developer. We do not promise a fixed response time, but we will try to reply within a reasonable period.
Related pages: Privacy Policy · Help · Download