隐私政策
片刻 Memento（「本 App」）由 Barry Chen（「开发者」）提供。本政策说明回忆、权限和系统服务如何处理信息。本 App 不设账号，不设开发者服务器，不包含广告或分析 SDK，也不把你的回忆上传给开发者。
1. 本机保存的信息
为创建、浏览、编辑、搜索和分享回忆，本 App 在你的 iPhone 上保存：
- 拍摄或选取的照片原文件、用于渲染的图像和生成的回忆卡片；照片原文件可能包含 EXIF 拍摄时间和 GPS 信息。
- 拍摄时间、时区、可用的经纬度、地点名称、备注、记录标识及创建和修改时间。
- 是否检测到人物等卡片生成结果；人物剪影和照片构图分析在设备上完成，不用于识别你的身份。
- 外观、语言、首次引导和照片导入提示的确认状态。
- 累计成功创建回忆的数量，以及购买解锁状态的本机缓存。购买权益会通过 Apple StoreKit 核验。
- 生成、替换照片和分享时所需的临时文件，以及本机搜索索引和图片缓存。
开发者不通过本 App 收集、出售你的照片、备注或位置，也不将这些信息用于广告或跨 App 追踪。
2. 照片、相机和位置
- 相机：仅在你选择拍照时用于创建回忆。
- 照片选择：系统照片选择器提供你选中的单张照片，不要求授予整个图库的访问权限。若已有完整或有限的照片授权，App 可通过 PhotoKit 补充所选照片的拍摄时间和位置；否则使用文件中可用的元数据。
- 添加照片：你选择将分享图保存到相册时，App 会请求添加照片权限。
- 使用期间定位：拍照时尝试获取一次当前位置，为回忆补充地点；不持续追踪，也不在后台记录轨迹。未授权或无法取得位置时，仍可创建回忆并手动填写地点。
你可以在 iOS 设置中管理权限。关闭相机或添加照片权限会限制对应功能；已保存的回忆仍可使用。关闭当前定位权限不会移除已保存的位置或照片本身的 GPS 信息。从相册导入照片时，App 仍可能使用照片中已有的坐标查询地点名称。
3. Apple 地点查询与购买服务
有可用坐标时，App 通过 Apple 的 MapKit / Core Location 逆地理编码服务查询地点名称和时区，可能将该坐标发送给 Apple。结果保存在本机；开发者不会收到查询坐标。网络不可用或查询失败时，自动地点信息可能缺失，不影响手动填写。
一次性购买、恢复购买和购买权益核验由 Apple StoreKit 处理。App 在设备上读取解锁权益，并缓存解锁状态。开发者不通过本 App 获取银行卡信息或 Apple 账户密码。Apple 对这些服务的信息处理适用其隐私政策。
4. 设备姿态
分享预览通过 CoreMotion 读取手机姿态，让相框随倾斜转动并呈现光影。采样用于当前预览，不保存为回忆或运动历史，不上传给开发者。预览结束或不再活动时停止采样；App 不使用健康数据或步数。
5. 主屏幕小组件
为展示最新回忆和历史回顾，App 在同一设备的共享 App Group 容器中保存照片缩略图，以及回忆标识、拍摄时间、时区、地点、图片构图和更新信息，并共享语言偏好。这些文件供本 App 的小组件读取，不发送给开发者。小组件可以在主屏幕展示照片和地点；如不希望旁人看到，请移除小组件。
6. 分享与网页
只有你主动选择分享或保存时，App 才通过系统分享菜单向你指定的应用提供分享图，或将图片写入相册。分享图可能包含照片、日期、地点和备注；分享前请检查预览。接收方应用如何保存或传输图片，适用其自身政策。
隐私政策、使用条款和支持页托管在 GitHub Pages。打开网页时，会向托管服务发起普通网络请求；GitHub 可能按其隐私声明处理 IP 地址等访问资料。法律网页不接收你的回忆库。
7. 保留、删除与备份
已保存的回忆在本机保留，直到你删除。删除单条回忆会删除该记录并清理其关联文件，不返还累计免费创建额度。「设置 → 清空所有回忆」会删除回忆记录、清理照片和生成文件、临时文件及小组件镜像，并重置累计创建数量；不会重置外观、语言或引导偏好，也不会撤销 Apple 购买权益。若 App 提示清理失败，请按提示重试。
清空或删除 App 不会删除原系统相册中的照片、已保存到相册的分享图、其他应用收到的副本或已有系统备份。删除 App 会由 iOS 移除其本地 App 数据；「卸载 App」保留文稿和数据的系统操作与删除 App 不同。
App 不提供回忆云同步或完整回忆库备份/恢复功能。根据你的设备设置，本地 App 数据可能包含在 iCloud 或电脑的设备备份中；这些备份由系统及你选择的备份服务管理，开发者无法访问或代为删除。详见 Apple 的iCloud 备份说明。重要照片请自行保留；单张分享图不等于完整回忆库备份。
8. 儿童
本 App 不以 13 岁以下儿童为对象，也不故意收集儿童的个人信息。
9. 变更
政策更新后会修改本页日期。若信息处理方式有实质变化，会在 App 内或本页说明。
10. 联系
请发邮件至 funnychen@outlook.com。你主动提交的邮件地址、问题描述及附件会用于回复和处理请求；请仅提供必要信息，不要发送支付密码或不必要的私人照片。开发者无法访问你设备上的回忆库，不能远程恢复或删除其中的内容。
Privacy Policy
Memento (the “App”) is provided by Barry Chen (the “Developer”). This policy explains how memories, permissions, and system services handle information. The App has no account, no developer server, no advertising or analytics SDK, and does not upload your memories to the Developer.
1. Information stored on your device
To create, browse, edit, search, and share memories, the App stores the following on your iPhone:
- Original photos you capture or select, render images, and generated memory cards. Original files may include EXIF capture time and GPS information.
- Capture time, time zone, available coordinates, place names, notes, record identifiers, and creation and modification times.
- Card-generation results such as whether a person was detected. Person cutouts and photo-framing analysis run on-device and are not used to identify you.
- Appearance, language, and acknowledgment of onboarding and photo-import guidance.
- The cumulative number of successfully created memories and a local cache of purchase unlock status. Purchase entitlements are verified through Apple StoreKit.
- Temporary files for generation, photo replacement, and sharing, as well as a local search index and image cache.
The Developer does not collect or sell your photos, notes, or location through the App, or use them for advertising or tracking across apps.
2. Photos, camera, and location
- Camera — used to create a memory when you choose to take a photo.
- Photo selection — the system photo picker provides the single photo you select without requiring access to your entire library. With existing full or limited Photos authorization, the App may use PhotoKit to supplement that photo’s capture time and location; otherwise it uses available file metadata.
- Add photos — the App requests permission to add photos when you choose to save a share image to Photos.
- Location while in use — the App attempts a one-time location fix when taking a photo to label the memory. It does not continuously track location or record routes in the background. Without permission or a usable fix, you can still create a memory and enter a place manually.
You can manage permissions in iOS Settings. Denying camera or add-photos access limits those features; saved memories remain usable. Turning off current-location access does not remove saved locations or GPS metadata already in a photo. Imported photos may still provide coordinates for a place-name lookup.
3. Apple place lookup and purchase services
When coordinates are available, the App uses Apple MapKit / Core Location reverse geocoding to find a place name and time zone, which may send those coordinates to Apple. Results stay on-device; the Developer does not receive the coordinates. Without network access or a successful lookup, automatic place information may be unavailable; you can enter it manually.
Apple StoreKit handles the one-time purchase, restoration, and entitlement verification. The App reads the entitlement on-device and caches unlock status. The Developer does not obtain payment card details or your Apple Account password through the App. Apple’s handling of information for these services is governed by its Privacy Policy.
4. Device motion
The share preview uses CoreMotion to read device orientation so the frame and lighting respond to tilting your phone. Samples are used for the current preview, are not saved as memories or activity history, and are not uploaded to the Developer. Sampling stops when the preview ends or becomes inactive. The App does not use health data or step counts.
5. Home Screen widgets
To display the latest memory and historical recall, the App stores photo thumbnails, memory identifiers, capture times, time zones, place names, photo-framing and update information in a shared App Group container on the same device, and shares your language preference. These files are read by the App’s widgets and are not sent to the Developer. Widgets can show photos and places on your Home Screen; remove them if you do not want others to see this content.
6. Sharing and web pages
Only when you choose to share or save does the App provide a share image to your selected app through the system share sheet, or write an image to Photos. The image may include your photo, date, place, and note; check the preview before sharing. The receiving app’s own policy governs how it stores or transmits the image.
The privacy, terms, and support pages are hosted on GitHub Pages. Opening a page makes an ordinary network request to the hosting service; GitHub may process access information such as IP addresses under its Privacy Statement. The legal pages do not receive your memory library.
7. Retention, deletion, and backups
Saved memories remain on-device until you delete them. Deleting a single memory removes its record and cleans up associated files, without restoring cumulative free quota. “Settings → Clear all memories” deletes memory records, cleans up photo and generated files, temporary files, and the widget mirror, and resets the creation count. It does not reset appearance, language, or guidance preferences, or revoke Apple purchase entitlements. If the App reports a cleanup failure, follow the prompt to retry.
Clearing memories or deleting the App does not delete original photos in Photos, saved share images, copies received by other apps, or existing system backups. iOS removes local app data when you delete the App; the separate “Offload App” operation retains documents and data.
The App does not provide cloud sync or a full-library backup/restore feature. Depending on device settings, local app data may be included in iCloud or computer device backups. The system and your chosen backup service manage those backups; the Developer cannot access or delete them for you. See Apple’s iCloud Backup explanation. Keep your own copies of important photos; a single share image is not a full-library backup.
8. Children
The App is not directed at children under 13 and does not knowingly collect personal information from children.
9. Changes
The date on this page changes when the policy is updated. Material changes to information handling will be explained in the App or on this page.
10. Contact
Email funnychen@outlook.com. The email address, description, and attachments you voluntarily send are used to reply to and handle your request. Provide only necessary information; do not send payment passwords or unnecessary private photos. The Developer cannot access your on-device memory library or remotely restore or delete its contents.