隐私政策 · Privacy Policy
相了个框 · Frame It Up（iOS）
生效日期 Effective date: 2026-10-08
简体中文
我们不收集任何数据。照片的处理全部在你的设备上完成，不会离开你的设备。
不收集、不上传
- App 没有账号系统，无需登录。
- App 自身不进行任何网络请求，不上传照片、编辑记录或任何其他信息。购买 Pro 时，由系统通过 App Store 与 Apple 通信。
- App 不包含广告、统计分析、崩溃上报或任何第三方 SDK，不追踪你，也不与任何第三方共享数据。
- 开发者无法看到你的照片或你在 App 里做的任何事情。
照片权限
- 读取照片：用于导入你选择的照片进行编辑、读取照片自带的拍摄信息（机型、镜头、参数、时间等）以显示在相框上，以及把你选择的照片备份进隐私相册。
- 添加照片：用于把编辑结果、九宫格图片，或你从隐私相册恢复的照片存回系统相册。
- 删除照片：只有在你把照片备份进隐私相册、并在系统弹窗中确认后，才会删除系统相册中的原图。
- 你可以随时在 iOS「设置」中更改或撤销权限。
Face ID
只有在你为隐私相册设置密码并主动开启 Face ID 后才会使用，用于在本机解锁隐私相册的加密密钥。识别由 iOS 完成，App 拿不到你的面部数据。
隐私相册
- 放进隐私相册的照片和视频在本机加密保存（AES-GCM）。加密密钥保存在本机钥匙串中（仅限此设备，不同步到 iCloud）；如果你设置了密码，密钥由你的密码保护。
- 密码不会上传，也无法找回。忘记密码将无法打开隐私相册中的内容。
- 隐私相册的内容不会离开本机。卸载 App 会删除这些内容。
保存在本机的其他数据
编辑记录、外观设置、你填写的署名等只保存在 App 自己的本机存储里，用来让照片记住自己的编辑。删除照片或卸载 App 即可清除。
购买
「相了个框 Pro」的订阅与买断由 Apple 通过 App Store 处理。我们收不到你的姓名、Apple ID 或付款信息；App 只在本机读取 Apple 签名的购买记录，用来判断是否已解锁 Pro。
儿童
App 不收集任何人的个人信息，包括儿童。
变更
如本政策有变化，会更新本页面并修改上方的生效日期。
联系
注：同一开发者的 Android 版九宫格功能使用在设备上运行的 MediaPipe 人像分割模型，同样不联网。iOS 版不含任何第三方 SDK，主体识别使用 iOS 自带的 Vision 框架。
English
We do not collect any data. All photo processing happens on your device, and your photos never leave it.
No collection, no uploads
- There are no accounts and no sign-in.
- The app itself makes no network requests. It does not upload photos, edits or any other information. When you buy Pro, iOS talks to Apple through the App Store.
- The app contains no ads, analytics, crash reporting or any third-party SDK. It does not track you and shares nothing with third parties.
- The developer cannot see your photos or anything you do in the app.
Photo library access
- Read: to import the photos you choose for editing, to read the shooting information stored in them (camera, lens, settings, date) for display on frames, and to back up the photos you choose into the private album.
- Add: to save edited photos, 3×3 grid images, or photos you restore from the private album back to your library.
- Delete: originals are deleted from your library only after you back them up into the private album and confirm in the system prompt.
- You can change or revoke access at any time in iOS Settings.
Face ID
Used only if you set a passcode for the private album and turn on Face ID. It unlocks the album's encryption key on this device. Recognition is done by iOS; the app never receives your face data.
Private album
- Photos and videos in the private album are encrypted on this device (AES-GCM). The key is kept in this device's Keychain (this device only, not synced to iCloud); if you set a passcode, the key is protected by your passcode.
- Your passcode is never uploaded and cannot be recovered. If you forget it, the album's contents cannot be opened.
- Private album contents never leave the device. Deleting the app deletes them.
Other data stored on your device
Edit history, appearance settings and the name you enter for signatures are stored only in the app's own local storage, so each photo remembers its edits. Delete the photo or the app to remove them.
Purchases
Frame It Up Pro subscriptions and the lifetime purchase are processed by Apple through the App Store. We never receive your name, Apple ID or payment details; the app only reads Apple-signed purchase records on your device to check whether Pro is unlocked.
Children
The app collects no personal information from anyone, including children.
Changes
If this policy changes, this page will be updated along with the effective date above.
Contact
Email: xzghua@hotmail.com
Note: the developer's Android version uses an on-device MediaPipe person-segmentation model for the 3×3 grid feature, also fully offline. The iOS app contains no third-party SDK; subject detection uses Apple's built-in Vision framework.