隐私政策
适用于 iOS 应用「AI旅拍」（AI Travel Cam）· 生效日期：2026 年 9 月 22 日
本政策说明 clxstech.com 的运营方（以下称「我们」）在你使用 AI旅拍 时如何处理信息。我们的原则很简单：能在你手机上完成的事，就不上传。
1. 默认在本机处理的数据
取景时的相机画面用于实时分析场景、人体姿势与构图。这些分析全部在你的手机上完成，画面不会离开设备，也不会被保存 —— 只有你按下快门的那一张会存入 App 内的作品库（存放在你的手机里）。
你拍的照片、出片后的照片、作品库、埋点事件的本地队列、账本（剩余次数）都保存在 App 的沙盒目录中，随 App 卸载一并删除，也可以在「设置 › 清除本地数据」中随时清除。
2. 只有你主动触发才会上传的数据
当你点击「深度建议」时，App 会把当前取景画面压缩成一张长边 512 像素的小图，连同端侧已识别的场景类型、光线、景别、人数等标签，发送到我们的服务器（部署在 Cloudflare），由 AI 模型生成建议。第一次使用前 App 会弹出说明并征得你的同意。
- 这张小图只用于生成本次建议，不做长期存储；我们会把生成的文字建议按场景标签短期缓存（不含图片），以便相同场景下不必重复调用模型。
- 你可以在「设置 › 仅端侧模式」中彻底关闭云端功能，关闭后 App 的其他功能完整可用。
3. 我们收集的其他信息
| 信息 | 用途 | 是否关联到你 |
|---|---|---|
| 匿名安装 ID（随机生成的字符串） | 区分设备、统计每月赠送次数、防止滥用 | 否。不与 Apple ID、设备序列号或广告标识关联；卸载重装即变 |
| 产品交互事件（如：引导显示 / 被采纳、拍照、分享、打开付费页） | 了解功能是否好用，改进产品 | 否。只带匿名安装 ID，不含画面、不含照片 |
| App 版本与平台 | 兼容性排查 | 否 |
我们不做跨 App 追踪，不使用广告标识符（IDFA），不接入任何第三方广告或分析 SDK。
4. 可选的账号（Sign in with Apple）
你不需要注册或登录就能使用全部功能。如果你选择「通过 Apple 登录」，我们会收到 Apple 提供的稳定用户标识，以及你选择分享的姓名和邮箱（可使用 Apple 的隐藏邮箱）。登录的唯一用途是让你购买的次数在多台设备间同步。
你可以随时在「设置 › 退出登录」退出，或在「设置 › 删除账号」永久删除账号：我们会删除账号记录并解除与设备的关联；为防止重复入账，已核验的购买记录会以匿名形式保留。
5. 购买与订阅
订阅和次数包由 Apple App Store 处理，我们不会收到你的支付信息。为防止伪造交易，App 会把 Apple 签发的交易凭证发送到我们的服务器核验；我们保存交易编号、商品和到期时间，不保存任何支付卡信息。
6. 数据存放与安全
服务器部署在 Cloudflare 的全球网络上，传输全程 HTTPS。上传的画面只在内存中处理，请求结束即释放。
7. 你的权利
你可以随时：在 App 内清除全部本地数据；删除账号；关闭云端功能；通过 support@clxstech.com 要求我们导出或删除与你的匿名安装 ID 或账号关联的服务器数据。我们会在 30 天内处理。
8. 儿童
本 App 不面向 13 岁以下儿童，我们不会有意收集儿童的个人信息。
9. 变更
本政策更新时会修改顶部的生效日期；涉及数据用途的重大变化会在 App 内提示。
10. 联系我们
Privacy Policy
Applies to the iOS app “AI Travel Cam” (AI旅拍) · Effective September 22, 2026
This policy explains how the operator of clxstech.com (“we”) handles information when you use AI Travel Cam. The principle is simple: whatever can be done on your phone is not uploaded.
1. Data processed on your device by default
The camera feed in the viewfinder is analysed in real time for scene, body pose and composition. All of this runs on your phone; frames never leave the device and are not stored — only the photo you take when you press the shutter is saved to the app's in-app gallery (on your phone).
Your photos, finished photos, gallery, the local queue of analytics events and your usage ledger (remaining uses) live in the app's sandbox. They are removed when you delete the app, and you can clear them at any time via Settings › Clear local data.
2. Data uploaded only when you ask
When you tap “Deep advice”, the app shrinks the current frame to a small image (512 px on the long side) and sends it, together with the on-device labels (scene type, light, framing, number of people), to our server (hosted on Cloudflare) where an AI model generates advice. The first time, the app explains this and asks for your consent.
- The image is used only to generate that advice and is not stored long-term. We briefly cache the generated text advice keyed by scene labels (never the image) so identical scenes don't call the model again.
- You can turn cloud features off entirely under Settings › On-device only. Everything else keeps working.
3. Other information we collect
| Information | Purpose | Linked to you? |
|---|---|---|
| Anonymous installation ID (a random string) | Tell devices apart, count monthly free uses, prevent abuse | No. Not linked to your Apple ID, device serial or advertising identifier; changes if you reinstall |
| Product interaction events (e.g. guidance shown / adopted, photo taken, shared, paywall opened) | Understand whether features work, improve the product | No. Carries only the anonymous installation ID; no frames, no photos |
| App version and platform | Compatibility troubleshooting | No |
We do not track you across apps, do not use the advertising identifier (IDFA), and include no third-party advertising or analytics SDKs.
4. Optional account (Sign in with Apple)
No registration or sign-in is needed to use any feature. If you choose Sign in with Apple, we receive Apple's stable user identifier plus the name and email you choose to share (Apple's private relay email works). The only purpose of signing in is to sync purchased uses across your devices.
You can sign out at any time (Settings › Sign out) or permanently delete your account (Settings › Delete account): we delete the account record and unlink your devices. Verified purchase records are kept in anonymised form to prevent double-crediting.
5. Purchases and subscriptions
Subscriptions and packs are processed by the Apple App Store; we never receive your payment details. To prevent forged transactions, the app sends Apple's signed transaction to our server for verification; we store the transaction ID, product and expiry date, and no card information.
6. Storage and security
Our servers run on Cloudflare's global network; all transport is HTTPS. Uploaded frames are processed in memory and released when the request ends.
7. Your rights
At any time you can clear all local data in the app, delete your account, turn cloud features off, or email support@clxstech.com to request export or deletion of server data associated with your anonymous installation ID or account. We respond within 30 days.
8. Children
The app is not directed at children under 13 and we do not knowingly collect personal information from them.
9. Changes
When this policy changes we update the effective date above; material changes to how data is used are announced in the app.