1. Application and acceptance of this agreement
Welcome to XMNotes. This agreement sets out the rights and obligations between you and XMNotes concerning the App, accounts, diary management, cloud sync, membership, and support services. The Privacy Policy, Membership Service Agreement, Auto-Renewal Information, and specific rules you lawfully confirm when using the relevant features together constitute the service terms. Specific matters are governed by the corresponding specific rules; other matters are governed by this agreement.
Please pay particular attention to the terms on intended use and resource limits, prohibited conduct, account restrictions and bans, payments and data processing, service termination, and liability. Matters requiring your consent are confirmed through the corresponding pages and actions. Merely opening an agreement, downloading, or browsing a webpage does not grant every authorization. Rules concerning significant rights and obligations cannot be changed retroactively solely through internal rules that were not brought to your attention. Users under eighteen should read, use the service, and handle payments under the guidance of a guardian.
“Content” in this agreement includes the text, formatting, categories, location text, photos, videos, stationery, and related materials you record or choose to import. “Account” means an XMNotes account, distinct from an Apple account or third-party sign-in account.
“We” in this agreement means the operator of the XMNotes service. “You” means the individual who registers, signs in, or actually uses the relevant services. Each specific agreement binds both parties together with this agreement within its applicable scope. We prominently draw attention to significant limitations and exclusions or reductions of liability; you may request explanations using the contact details on this page.
2. Services and conditions of use
Service scope and intended use
XMNotes supports personal diary writing, organization, searching, calendar review, and related media management, with stationery, fonts, a privacy lock, reminders, and corresponding membership cloud sync, restoration, and export capabilities. iPhone and iPad are currently supported. Saving or syncing a diary does not automatically make it public. Paid features, available plans, and actual limits are described in the App and the Membership Service Agreement; the corresponding confirmation is provided before payment.
Cloud sync and media storage support your actual diaries. They do not provide a general-purpose cloud drive, full-disk imaging, externally linked image hosting, file hosting or distribution, or storage APIs for third parties. Buying membership or lifetime membership does not grant a right to repurpose the service in those ways, or a license for unlimited bandwidth, concurrency, or usage counts, or exemption from reasonable-use constraints.
Normal personal diary writing, saving lawful media related to your diaries, use across your own devices, and obtaining your own content under the rules are supported uses. Abuse cannot be established solely because you have many diaries, make reasonably frequent backups, or use multiple devices of your own. You must provide compatible devices and network access and bear fees lawfully charged by your carrier or chosen third-party services.
AI text organization and separate credits
You may actively choose AI to organize an entire diary's text. That text is sent to DeepSeek through the XMNotes service only after you click “Start Organizing” in the existing confirmation dialog. Canceling does not send the text or deduct credits. For the transmission scope and third-party processing, see the Privacy Policy.
Each request is limited to 5,000 characters. The result automatically replaces the text, and you can undo it to restore the original; some text styles may not be retained. AI results may contain errors or change the expression, so please check them before use. We do not guarantee changes to every diary or complete fidelity or factual accuracy.
AI credit packs are independent of basic membership and can be purchased by all users signed in normally. Each account receives 3 free credits on first activation. An effective organization uses 1 credit; no credit is deducted if no adjustment is needed. Undoing does not return a credit for a service already delivered. Free and purchased credits do not expire and are bound to the XMNotes account. For products, purchases, duplicate requests, crediting, refunds, and service discontinuation rules, see the Membership Service Agreement (including AI credit rules). Apple consumable purchases do not renew automatically.
Membership, transactions, and specific limits
Monthly and annual auto-renewing membership and lifetime membership are based on App Store products, Apple payment confirmation, and verification of valid transactions. Membership is bound to the XMNotes account used at purchase. Restoring purchases requires verification of the original transaction and account ownership. A successful sign-in, payment callback, or visible product does not replace confirmation that benefits have been delivered. Lifetime membership does not automatically cancel existing Apple subscriptions.
Cloud sync, cloud restoration, and media downloads require active membership. PDF and Word exports are both membership features, limited to a combined 10 exports daily, resetting at midnight Beijing time, and at most 100 diaries per batch. Retrying the same task does not count again. PDF export content and the final export package including attachments are each limited to 200 MiB. Official media downloads and Word cloud resources have a combined daily limit of 1 GiB. The planned read amount is reserved rounded up to KiB; failures, cancellation, and repeated reads do not refund reserved budget. Metadata and valid local caches do not consume quota. Email has technical safeguards including a fifteen MB limit for the entire encoded message. Generation, sending, delivery, and your actual receipt of files are different statuses; we do not promise that every email will reach the inbox. See the Membership Service Agreement for specific benefits, current PDF/Word exports, limits, expiration, and refunds, and the Auto-Renewal Information for renewal and cancellation.
“Share Diary” is an active-membership feature that generates an image of a single diary and passes it to system sharing. It does not count toward the daily PDF/Word export limit.
Membership cloud space is limited to ten thousand diaries and twenty thousand images (including Live Photos) per XMNotes account. This quota is for the diary cloud service, not a promise of general-purpose storage measured in GB. See the Membership Service Agreement for counting, limit adjustments, and expiration arrangements. Per-diary media, single-file, export-count, and daily cloud-read limits also apply. Ordinary video backup is not a publicly offered membership benefit. Live Photos are still treated as photos, with their necessary paired motion files processed together with the photos. Existing lawful videos and on-device content remain retained. Viewing, downloading, deletion, and expiration arrangements follow the original identity, membership, and feature rules and are not automatically cleared by this agreement update.
3. Your rights and obligations
Account registration, identity, and security
Use an email address or sign-in method you have the right to control, and complete registration, verification, and profile maintenance as prompted. Nicknames, avatars, and signatures must not impersonate other people, official personnel, or organizations or infringe others' rights. If your email address or linked sign-in changes, promptly maintain usable contact details and account security settings. Where verification is legally required, provide truthful information proportionate to its purpose.
Sign in with Apple is authorized by Apple. XMNotes processes only authorization identifiers and information you permit to be provided, and does not obtain your Apple password. Other sign-in methods apply only when actually offered in the App. Availability of a third-party account does not automatically transfer the original XMNotes account or membership ownership. Unlinking, replacement, and restoration must use the verification procedures actually provided.
Accounts and memberships are for the account holder's own use. Selling, renting, lending, or gifting account usage rights, or providing shared accounts, membership held on others' behalf, divided membership benefits, or credential services to multiple people is prohibited. Signing in on multiple supported devices of your own is not account resale or multi-person sharing. Multiple XMNotes accounts remain independent and cannot be used to combine credits, transfer Apple transactions, or evade restrictions.
Set a properly protected password and safeguard your devices, verification codes, and sign-in credentials. Sharing credentials may allow others to view, modify, or delete your diaries. In cases of unauthorized access, unusual sign-ins, or device loss, promptly change your password, stop suspicious sessions, and contact us. Account holders are responsible for actions attributable to them; account theft or disputes are investigated based on evidence, rather than automatically attributing all losses to the user. Customer support will not ask for passwords, verification codes, or complete bank-card information.
You bear the corresponding responsibility for actions you perform, authorize, or cause through your own fault while you have the right to control the account. If ownership cannot be established, information conflicts, or theft is suspected, we may defer sensitive operations and require reasonable verification, but may not use this to request unrelated information. Where concealment or incorrect or invalid contact details prevent verification or receipt of necessary notices, the responsible party bears the corresponding consequences.
Software license, interfaces, and intellectual property
Subject to this agreement and applicable law, XMNotes grants you a limited, non-exclusive software license, not transferable without authorization, as needed to use the service personally. Rights in the software, brand identifiers, our own pages, and materials belong to their lawful rights holders. Third-party and open-source components are used under their respective licenses, which are neither expanded nor narrowed by this agreement.
- Unless permitted by law, the applicable license, or express authorization, you may not copy, adapt, reverse engineer, distribute, or sell the software or services, or remove or falsify rights notices.
- You may not create, operate, or distribute cheats, scripts, cracked versions, or unauthorized service interfaces used to steal credentials, forge requests, tamper with benefits, or bypass verification.
- Except as permitted by law, the applicable open-source license, or express authorization, you may not sign in to, access, or use the service through third-party clients, plug-ins, or proxy services not authorized by XMNotes, or create, promote, sell, or distribute tools for such unauthorized access. Whether access is in bulk or at excessive frequency does not affect this access boundary.
- You may not access, collect, alter, or delete other accounts' information without authorization, impersonate official interfaces, support, notices, transactions, or partnerships, or conduct unauthorized commercial activities on behalf of XMNotes.
- This clause does not broadly deprive you of lawful interoperability, open-source use, access to information, or lawful management of your own content. Such actions must still respect security boundaries and others' rights.
Content rights, necessary processing permission, and sharing
You retain your lawful rights in your own content and must ensure its sources and processing methods are lawful and that you have the rights or authorization needed to save, upload, and actively share it. If diaries involve others' privacy, likenesses, personal information, trade secrets, or protected works, process them lawfully. Storage in a private account does not justify disregarding others' rights.
To perform saving, display, format conversion, sync, backup, restoration, export, and necessary maintenance initiated by you, you permit XMNotes to copy, transmit, store, compress, or convert content within the corresponding purposes and necessary scope, and to have entrusted providers performing those services process it as agreed. This permission does not transfer ownership or authorize making private diaries public, selling them, or using them for unrelated purposes. Once the processing purpose ends, content is handled under the Privacy Policy and law.
Before actively sharing, exporting, or emailing content, check the recipients and files, respect recipients' wishes, and do not send harassing, fraudulent, or unlawful content. Third parties may independently cache, copy, or reshare content after receipt. Withdrawing a local file or deleting the original in XMNotes cannot guarantee retrieval of their copies. Their independent processing is governed by their own rules; XMNotes remains responsible for its own legal obligations.
Necessary content processing permission includes technical conversion for devices, file formats, and network environments, preview generation, and storage and transmission through entrusted parties, all limited to providing selected services, ensuring security, or meeting legal obligations. You are responsible for the authenticity, lawful sources, and authorized use of submitted content. Where complaints, error correction, or cooperation with competent authorities legally require it, we may verify relevant content and records within the necessary scope.
Prohibited content and conduct
You may not use account names, avatars, diaries, attachments, feedback, email exports, or other service operations for unlawful, infringing, or security-endangering conduct, including:
- Endangering national security, disclosing legally protected secrets, undermining national unity, or creating or distributing information prohibited by laws and regulations.
- Inciting hatred, discrimination, or violence; promoting terrorism, extremism, or cults; or distributing unlawful pornography, gambling, fraud, prohibited-goods trading, or content inciting crime.
- Spreading rumors, threatening, stalking, harassing, insulting, or defaming others, or infringing lawful rights such as likeness, reputation, privacy, intellectual property, personal information, or trade secrets.
- Collecting others' information without lawful authorization, stealing identities, publishing deceptive information, or using the service for extortion, phishing, fraud, or unlawful gain.
- Sending spam advertisements, malicious marketing, or information explicitly refused by others through feedback, email, or selected sharing channels. The personal diary service must not be resold as a commercial hosting or distribution service.
This clause also applies when the service is invoked through other applications. Content being non-public does not exempt it from corresponding legal liability. We handle valid complaints and competent authorities' requests in accordance with law. These enforcement powers do not constitute a promise to continuously inspect every private diary manually or discover every violation.
Reasonable resource use and abuse prevention
You must not consume storage, transmission, email, computing, or API resources in ways that depart from diary use, bypass existing rules, or materially harm service stability. Prohibited conduct includes:
- Using the service primarily to store hard-drive backups, film or television resources, software installers, unrelated archives, or other large volumes of non-diary files; or splitting, renaming, changing extensions, encoding, or concealing files in blank or meaningless diaries to bypass file and purpose checks.
- Using cloud objects, download addresses, accounts, or APIs as public image hosting, origins for externally linked resources, download sites, file relays, continuous distribution, or storage services for others.
- Using bots, scripts, crawlers, coordinated device control, unauthorized clients, or direct API calls for abnormal bulk uploads, downloads, transfers, exports, email sending, registration, or request replay.
- Repeatedly uploading then deleting, clearing then restoring, cycling the same resources between devices or accounts, or creating retries known to be invalid to continuously generate unreasonable cloud traffic and computing costs.
- Rotating accounts, devices, credentials, network sources, or task identifiers to evade membership, file-size, diary-count, usage-count, concurrency, rate, ban, or other clearly stated limits.
- Falsifying object sizes, digests, file types, membership status, transactions, receipts, or task status, or exploiting vulnerabilities to obtain unpaid benefits, duplicate delivery, or others' data.
- Reselling, renting, holding membership on others' behalf, or sharing it among multiple people; processing content in bulk for others; or helping third parties evade resource and identity restrictions.
- Maliciously occupying connections, generating high concurrency, scanning for vulnerabilities, brute-forcing passwords, attacking the service or storage or email providers, or spreading viruses or other malicious programs.
Abuse may be assessed comprehensively based on purpose, duration, frequency, concurrency, repetition, attempts to bypass verification, actual effects on the service and other users, and explanations and corrective action. Reasonable retries after ordinary network failures, non-malicious usage peaks, and lawful information rights requests are not automatically abuse. Report vulnerabilities through customer support; do not expand testing to others' data or cause ongoing harm.
To protect security and fair resource use, we may enforce clearly stated feature limits and necessary temporary safeguards, including rejecting abnormal tasks, rate-limiting, reducing concurrency, requiring renewed verification, or suspending high-risk operations. Membership fees do not cover resource consumption in breach of the agreement. New or adjusted long-term restrictions affecting purchased benefits must be explained in accordance with law; a general reference to “reasonable use” does not permit arbitrary reduction of promised benefits.
Breach handling, bans, compensation, and appeals
If unlawful infringement, abuse as a general-purpose cloud drive, account trading or impersonation, restriction circumvention, attacks, or other clear breaches of this agreement are suspected, we may take one or more measures based on evidence, impact, and circumstances:
- Issue reminders and explanations, require additional identity or usage verification, set a correction deadline, or reject affected upload, download, sync, or export tasks.
- Apply rate limits, reduce concurrency, restrict certain resource operations, or suspend relevant sync, storage, download, export, email, or other service capabilities.
- Revoke misused sessions or unlawfully obtained benefits and temporarily ban accounts. Accounts involved in serious or repeated violations, or refusing to stop ongoing harm, may be permanently banned and the corresponding services terminated.
- Lawfully stop transmission of, restrict access to, delete, or otherwise necessarily handle specific unlawful or infringing content, retain necessary evidence, and cooperate with competent authorities under statutory conditions.
- Pursue liability for legally attributable harm, require infringement to stop, and seek compensation for substantiated reasonable losses. Investigation and rights-enforcement costs must have actual, reasonable, and legal grounds.
In emergencies such as major security risks, ongoing attacks, clear illegality, or competent authorities' requests, necessary measures may be taken first and explained afterward to the extent permitted. In other cases, the reasons, scope, effects, and duration or restoration conditions are generally explained through App notices, announcements, or the account email. Measures should not exceed what is necessary. Suspected violations do not automatically mean a permanent ban, unconditional deletion of all lawful content, forfeiture of all fees, or exemption from our statutory liability.
You may email xiaomonotes@163.com with your account identifier, relevant tasks or notices, and necessary explanations to request investigation, appeal, and human review. Passwords or verification codes are not required. We normally reply within fifteen days. For complex matters, we explain the reasons, progress, and expected handling arrangements. Once an error is confirmed or a risk is resolved, we promptly correct it and restore the corresponding capabilities. You must not use new accounts or other means to circumvent measures that remain lawful and effective.
Security checks process necessary records under the Privacy Policy. This clause does not authorize unrestricted browsing, disclosure, or trading of private content. Bans, appeals, refunds, lawful access to your information, and content cleanup are handled separately. Rights that may not be restricted by law remain protected.
For unlawful conduct or breaches attributable to you, we reserve the right to require cessation of infringement, elimination of effects, assumption of breach liability, and compensation for losses. Recoverable losses include substantiated direct losses, legally owed third-party liabilities, and actual reasonable and necessary expenses for investigation and evidence gathering, legal representation, litigation, arbitration, preservation, or enforcement. They are determined by evidence and applicable law, without double recovery. If a third party asserts rights arising from your submitted content or misuse, you must cooperate by providing explanations and evidence you are entitled to hold.
4. The operator's rights and obligations
Service arrangements, third parties, software updates, and feedback
Apple, Alibaba Cloud, Qiniu, Tencent Bugly, Umeng, and others provide the payment, sign-in, email, storage, resources, or diagnostic capabilities actually integrated. See Third-Party Services and Components and the Privacy Policy. Sharing apps or external websites you select have their own usage and privacy rules. We cannot control all their conduct, but remain responsible for our own choices, arrangements, and legal responsibilities.
The service may be updated for system compatibility, security fixes, and feature maintenance. Installation follows actual system and App mechanisms. Where an older version presents material security risks, we may explain the reasons and require a supported version. Updates do not silently grant new permissions; changes to important benefits or information-processing rules require the corresponding procedures.
Product feedback you voluntarily provide may be used to evaluate, improve, and implement features. We do not promise to adopt it, use it exclusively, or pay additional compensation for it. This does not transfer diary ownership or permit disclosure of personal information, confidential content, or materials involving others' rights in feedback. The current App contains no advertising. This agreement does not establish diary-based advertising profiles or authorize unrelated marketing.
For security, compliance, system compatibility, or changes in supply conditions, we may adjust service implementation, technical approaches, providers, supported versions, and feature combinations, and set necessary limits on request frequency, concurrency, file sizes, counts, and other resources as agreed. Material adjustments affecting purchased benefits are handled under Sections 6 and 7; this clause does not authorize retroactive cancellation of promised benefits. Where third-party software or open-source components have separate licenses, you and we each comply with them.
For product suggestions you actively submit and have the right to authorize, we may make necessary copies, evaluate, modify, and implement them to develop and improve services. We have no obligation to adopt the suggestion, keep the suggestion itself confidential, use it exclusively, or pay compensation. Information you expressly mark as confidential, personal information, and content involving others' rights remain protected by law. Identical or similar features may be independently developed by us or come from other sources. Receiving a suggestion does not automatically create a promise of compensation, attribution, or ownership.
We may provide information about features, memberships, and service adjustments through legally available channels. The current App has no advertising or advertising profiles based on diary content. If commercial promotion or new information processing is actually added in future, we first perform legally required notice, choice, and consent procedures. This agreement does not grant unrelated marketing authorization.
5. Risks, force majeure, and limits of liability
We exercise reasonable care in providing and maintaining the service, but do not guarantee that all devices, networks, and third-party services are always available, that software is error-free, that data is entirely risk-free, or that the service meets every particular purpose. Important records should not exist in only one copy. The service does not provide dedicated safeguards for critical systems such as nuclear-facility control, medical treatment, or transport safety that may directly endanger people or significant property.
Natural disasters, lawful emergency measures, underlying network failures, third-party interruptions, malicious attacks, and improper actions may affect the service. For interruptions, security incidents, or recoverable failures, we take preventive, remedial, and restoration measures within our control and provide legally required notices. Liability is determined by the facts, fault, causation, and law; calling an event a “third-party cause” or “network risk” does not automatically exempt us.
For material changes to the service form, providers, or purchased benefits, we explain impacts, options, and data handling in advance as required by law. Information transfers involving mergers, restructuring, or changes of operator follow the Privacy Policy. This agreement does not exclude warranties or liabilities that cannot legally be excluded, improperly limit liability for personal injury, intent, gross negligence, or other non-excludable matters, or deprive consumers of statutory remedies.
For harm caused by your own system modifications, use of unsupported or unauthorized software, mistaken actions, failure to save or complete sync, failure to safeguard devices or credentials, or improper handling by external recipients you choose, each party bears responsibility according to its fault and causation. We are not responsible for particular purposes we have not promised, losses that cannot reasonably be foreseen, losses lacking causation, or losses increased because the claimant failed to take reasonable measures, except for liability required by law.
Force majeure and other legally recognized grounds for reducing or exempting liability are handled according to their actual effects and statutory conditions. We perform legally required notification, evidentiary, and loss-mitigation obligations. The diary service does not guarantee expected commercial returns or replace your reasonable care in keeping important materials and checking sync results.
6. Notices and agreement changes
Necessary notices about security, accounts, transactions, service maintenance, agreements, or rights requests may be provided through available App prompts, announcements, or your registered email. Promotional information is handled separately under law; necessary notices are not treated as marketing authorization. Keep your contact details usable. The legal effect of notices, required consent, and delivery are determined under applicable law; a “sent means delivered” statement alone cannot exclude your lawful rights.
Updates to this agreement display a version and date. Material changes are prominently explained, and the corresponding procedure is followed where renewed consent is legally required. You may lawfully choose to accept or stop affected services and handle existing orders, remaining benefits, and content retrieval. Invalidity of an individual term does not automatically affect other independently performable provisions. A temporary failure to assert a right is not a permanent waiver.
We may revise agreements, specific rules, and service descriptions in response to legal, business, and technical changes, publishing updated versions and their applicable times. Changes affecting significant rights and obligations receive appropriate prominent notice and legally required procedures. Maintain valid contact details and read necessary notices. You bear attributable consequences caused by your failure to update contact details promptly. If you disagree with a material adjustment, affected services, orders, and content retrieval are handled lawfully; continued webpage browsing cannot directly constitute every new authorization.
7. Service interruption, termination, and data handling
Local records, successfully synced business copies, historical operational backups, actively exported files, and third-party recipient copies are stored separately. Completion of an upload alone does not confirm that a diary and all attachments have synced. Device damage, incomplete sync, accidental deletion, uninstallation, and recipients' actions may make recovery impossible. Keep lawful copies of important records under your own control.
Stopping use, signing out, uninstalling the App, deleting an account, membership expiration, and bans for violations are different matters. Signing out does not automatically delete an account. Uninstallation may lose unsaved local content. Membership expiration does not automatically delete local records, but the corresponding cloud operations and membership exports stop. Successful account deletion immediately blocks sign-in to the original account. Relevant on-device and official-side data and resources are retained for 30 days without access. Restoration requires email contact and completion of manual restoration within the period; sending an email alone does not extend it. After expiration, recovery is permanently impossible and the relevant content is cleared. For the specific scope and boundaries of personal cloud drives and backups, see Account Deletion Information. None of these actions replaces cancellation of Apple subscriptions.
You may lawfully stop use, request account deletion, or manage content. A long absence from sign-in does not automatically waive content ownership. Account security verification is based on actual risks. If the entire service is discontinued or an ordinary account is permanently closed for normal business reasons, in principle at least 30 days' advance notice is given through appropriate means, with arrangements for obtaining lawful content and necessary transition, except where law requires otherwise or security, illegality, or similar circumstances require immediate action. Lifetime membership or cloud-storage wording cannot guarantee that any commercial service will never end.
During violation handling, we still lawfully accept requests to access or copy your information and exercise other rights. We explain the grounds for content that must be deleted, preserved, restricted, or cannot be provided by law. Restricted accounts must not use data retrieval to continue distributing unlawful content or conducting attacks. Transaction, security, dispute, and statutory records are retained only within the necessary scope and duration; account bans do not justify permanently taking possession of users' lawful content.
We may change, interrupt, suspend, or terminate corresponding services within the necessary scope because of laws or policies or competent authorities' requirements, major security risks, serious user breaches, overdue legally payable fees, necessary maintenance, force majeure, or lawful business adjustments, mergers, divisions, and service transfers. We make reasonable efforts to restore recoverable failures and give appropriate notice of ordinary planned maintenance. Normal maintenance does not automatically restart membership periods; services actually not provided as agreed are remedied in accordance with law.
When the entire service stops, we cease new unnecessary information collection, lawfully handle purchased benefits, unperformed portions, and personal information, and provide appropriate notice, necessary transition, and arrangements for obtaining lawful content. Necessary measures may be taken first if law requires immediate action, competent authorities lawfully restrict disclosure, or urgent security risks exist. A business transfer does not exempt the recipient from its legal information-protection obligations.