01 / 适用范围Scope
本政策由咔位开发者雷猴提供，对照当前免费版的 Pose 参考、参考照片跟拍、拍摄、滤镜、美颜、作品管理、邮箱账号及建议入口。云端 AI 和付费服务的旧代码不等于当前已向用户开放的功能；未来开放这些服务前，需要重新核对并更新说明。
This policy is provided by Kawi developer Leihou (雷猴) for the current free version. It covers pose references, reference-photo shooting, the camera, filters, beauty effects, saved works, email accounts and feedback. Legacy code for cloud AI and paid services does not mean those features are currently available. Data practices must be reviewed and this page updated before those services are offered.
02 / 照片与本地处理Photos and on-device processing
当前免费版的 Pose 图片导入、参考照片跟拍、人物提取、姿态对照、滤镜与美颜使用设备上的 Apple 框架处理，不向开发者服务器上传参考图、相机帧或成片。
In the current free version, pose-image imports, reference-photo shooting, subject cutouts, pose comparison, filters and beauty effects use Apple frameworks on your device. These features do not upload reference images, camera frames or captured photos to the developer’s servers.
美颜会在设备上检测脸部位置、眼睛或嘴部特征点，以及人物区域，用于计算局部图像效果；姿态对照会使用人物关键点。未发现将这些检测结果用于身份识别、建立服务器人脸档案或上传开发者服务器的代码。
Beauty effects detect face positions, eye or mouth landmarks and subject regions on your device to calculate image effects. Pose comparison uses body keypoints. The reviewed code does not use these results to identify you, create server-side face profiles or upload them to the developer’s servers.
拍摄成片和作品索引保存在 App 的设备存储中；获准后，也会另存一份到系统照片图库。用户自行分享、系统照片同步或设备备份由相应系统服务和你的设置决定，不能据此承诺照片永远不会离开设备。
Captured photos and the works index are stored in the app’s local storage. With permission, photos are also saved to the system photo library. Sharing you initiate, system photo synchronization and device backups depend on those services and your settings. Local processing is not a guarantee that photos can never leave your device.
03 / 哪些功能会联网What connects to our servers
游客会话与账号Guest sessions and accounts
启动时账号服务可能建立或恢复游客会话。App 生成随机安装标识并发送给后端；后端保存关联的用户标识、创建及最近访问时间。它不是广告标识，但游客安装标识与用户标识仍可关联到同一账号，用于会话和账号功能，不能称为完全匿名的数据。
The account service may create or restore a guest session at startup. The app generates a random installation identifier and sends it to the backend, which stores an associated user ID and creation and last-access times. This is not an advertising identifier. Guest installation and user IDs are still linked to an account for session and account functionality; they are not fully anonymous data.
管理后台使用账号创建及最近访问记录统计账号总数和一段时间内的活跃账号数。此为开发者自己的服务统计，不向广告网络提供数据，也不记录拍摄画面、图库浏览或每次按钮点击。
The administration dashboard uses account creation and last-access records to count accounts and accounts active within a time period. These are the developer’s own service statistics. They are not shared with advertising networks and do not record camera images, library browsing or every button tap.
选择邮箱注册或登录时，邮箱、密码及验证码通过 HTTPS 账号接口提交。服务器保存加盐密码派生结果、验证码摘要及有效期，并签发登录及刷新令牌；App 将会话存入系统钥匙串。
Email registration and login send your email address, password and verification code over HTTPS. The server stores a salted password-derived value, verification-code digests and expiry information, and issues access and refresh tokens. The app stores its session in the system Keychain.
提建议Feedback
点击提交时，App 会发送分类、正文、可选联系方式、请求编号、账号或游客会话令牌，以及 App 版本和 iOS 版本／平台信息，用于接收、处理问题和产品建议。请不要填写密码、验证码或与问题无关的敏感资料。未提交的反馈内容在发送成功前保留在本机。
When you submit feedback, the app sends its category, message, any contact details you choose to provide, a request ID, an account or guest-session token, and the app and iOS version/platform information. These are used to receive and handle issues and product suggestions. Do not include passwords, verification codes or unrelated sensitive information. Unsubmitted feedback remains on your device until submission succeeds.
反馈服务已上线；建议与提交账号关联保存，仅经管理员鉴权查看。成功提交会返回编号；网络失败或没有成功回执，不代表已接收。
The feedback service is live. Submissions are stored with the submitting account and require authenticated administrator access to view. Successful submissions return an ID. A network error or missing success receipt does not mean the submission was received.
连接信息Connection information
云主机、邮件服务及网络基础设施会接触完成请求所需的连接信息。服务日志可能包含连接 IP、请求路径、时间及状态码，用于服务安全与运维。即使未启用单独的网站访问日志，API 服务及容器日志仍开启，不等于完全无日志。现有 API 服务及容器日志未设轮转或自动删除期限，按当前配置可无限期保留，不适用“账号及反馈保留至主动注销”的规则；不能保证注销账号会清除这些独立日志。云服务商自身的日志处理方式尚未确认，不承诺其没有日志或内部副本。
Cloud hosting, email services and network infrastructure handle information needed to process connections and requests. Service logs may contain the connecting IP address, request path, time and status code, and are used for service security and operations. Even without a separate web access log, API and container logging remain enabled; this does not mean the service has no logs. Existing API and container logs have no rotation or automatic deletion deadline and may be retained indefinitely under the current configuration. The account-and-feedback retention rule does not apply to these separate logs, and account deletion is not guaranteed to remove them. Cloud providers’ own log practices remain unconfirmed; we do not claim that they have no logs or internal copies.
04 / 系统权限System permissions
- 相机：用于取景、拍照及实时人物参考。Camera: framing, taking photos and live subject references.
- 照片读取或系统选片：用于导入你选择的 Pose 与参考照片，具体访问范围以 iOS 授权界面为准。Photo access or the system picker: importing pose and reference images you choose. The scope depends on the iOS permission screen.
- 添加照片：用于把拍摄结果写入系统照片图库。Add photos: saving captured photos to the system photo library.
- 设备运动：用于水平仪等拍摄辅助，不等于申请地理位置权限。Device motion: shooting aids such as the level indicator. This is not location permission.
可以通过 iOS 设置修改授权。拒绝某项权限可能使相应功能不可用，但不应被要求开放无关权限。所检查的配置未发现通讯录、麦克风或定位权限请求。
You can change permissions in iOS Settings. Denying a permission may prevent the related feature from working; unrelated permissions should not be required. The reviewed configuration contains no requests for contacts, microphone or location access.
05 / 服务提供方与分享Service providers and sharing
腾讯云上海服务器处理账号和反馈请求；注册验证码使用腾讯云邮件推送 SES，配置地域为广州。邮件服务需要处理收件邮箱和验证码邮件内容。
Tencent Cloud servers in Shanghai, China process account and feedback requests. Verification emails are sent through Tencent Cloud Simple Email Service (SES), configured in the Guangzhou region of China. The email service processes the recipient email address and verification-email content.
Apple 提供 iOS 权限、系统图库、钥匙串及应用分发等能力。其自有服务按 Apple 的政策与用户设置运行。本静态页面不包含广告、分析脚本、第三方字体、表单、Cookie 或浏览器存储代码；托管服务仍可能产生必要的连接日志。
Apple provides system permissions, the photo library, Keychain and app distribution. Apple’s own services operate under its policies and your settings. This static page contains no advertising, analytics scripts, third-party fonts, forms, cookies or browser-storage code. The hosting service may still generate connection logs.
本次检查未发现广告或第三方行为分析 SDK。未来改变数据用途或增加服务提供方时，应先核对适用要求并更新本说明，不能把一次代码检索当成完整的生产审计。
The reviewed app contains no advertising or third-party behavioral analytics SDK. Changes to data uses or service providers require a review of applicable requirements and an update to this page. A source-code check is not a complete production audit.
06 / 存储地点与保留期限Storage and retention
本地作品、导入素材及设置保留在设备上，直到你删除相应内容或系统清理相关数据。系统照片图库中的副本需单独管理；卸载 App 不等于注销云端账号或删除所有钥匙串与备份数据。
Local works, imported assets and settings remain on your device until you delete them or the system clears the related data. Copies in the system photo library must be managed separately. Uninstalling the app does not delete your server account or guarantee removal of all Keychain or backup data.
已确认的保留规则：账号及建议保留至你主动注销。注销成功时，删除该账号及关联的在线建议、认证记录和其他账号关联数据，使既有登录会话失效；不会因此删除本机作品或系统照片。
Accounts and feedback are retained until you actively delete your account. Successful deletion removes the online account and its associated feedback, authentication records and other account-linked data, and invalidates existing sessions. It does not delete local works or photos in the system photo library.
后台已上线每小时运行的失效认证数据清理任务。在服务正常运行时，定期清理过期刷新令牌、失效验证码的验证信息和过期注销尝试记录。为保留邮件发送限额，验证码发送记录在 24 小时窗口内保留必要的计数信息，窗口结束后由定期任务清理失效记录；此安排不延长验证码可用时间，也不代表验证码到期瞬间所有后台记录就已删除。
An hourly cleanup task for expired authentication data is live. When running normally, it periodically clears expired refresh tokens, invalid verification-code data and expired account-deletion attempt records. Records needed for verification-email rate limits retain necessary counts within a 24-hour window; invalid records are then cleared by the scheduled task. This does not extend code validity or mean every related record is deleted at the instant a code expires.
账号服务部署在中国上海，邮件服务配置为广州地域。在中国以外使用账号、反馈或验证码功能时，相关数据会传至上述中国境内服务处理。截至 2026 年 10 月 16 日，当前部署没有数据库备份定时任务，实例快照列表为空；这不保证云服务商没有日志或内部副本。以后启用数据库备份前，需要明确其保留及删除安排并更新说明。独立服务日志的保留规则见“连接信息”；未来启用日志轮转、自动清理或备份时，将更新相应说明。
Account services run in Shanghai, China, and email services are configured in Guangzhou, China. If you use account, feedback or verification-code features outside China, the related data is sent to these services in China. As of 16 October 2026, the current deployment has no scheduled database-backup task and its instance snapshot list is empty. This does not guarantee that cloud providers have no logs or internal copies. Retention and deletion arrangements must be established and this page updated before database backups are enabled. See “Connection information” for the separate service-log retention rules. Changes introducing log rotation, automated cleanup or backups will be reflected in this policy.
07 / 管理、删除与联系请求Manage, delete and request data
作品页删除只移除 App 自己保存的作品及索引，不会同时删除系统照片图库副本；后者请在系统“照片”中单独管理。
Deleting a work removes the app’s local photo and index entry. It does not also delete copies in the system photo library; manage those separately in Photos.
退出登录不等于注销账号。0.3（37）中可从“我的 → 注销账号”发起永久注销；邮箱账号需要输入当前密码并再次确认，游客账号无需密码但仍需确认。注销接口已上线。仅在服务器明确确认删除后，App 才清除登录状态；失败时保留账号，供你重试。注销不会自动取消 Apple 订阅。
Signing out is different from deleting an account. Version 0.3 (37) provides My → Delete account. Email accounts require the current password and a final confirmation. Guest accounts require confirmation but no password. The deletion service is live. The app clears its signed-in state only after the server confirms deletion. If deletion fails, the account is kept so you can retry. Account deletion does not automatically cancel Apple subscriptions.
访问、更正或删除请求可通过下方支持邮箱提出。请只提供定位账号和解决请求所需的信息，不要发送密码或验证码；涉及账号数据时需要核验身份。处理时间取决于身份核验和请求范围，本政策不承诺固定回复或完成天数。
For questions about accessing, correcting or deleting data, use the support email below. Provide only what is needed to identify the account and handle the request; do not send passwords or verification codes. Account-data requests require identity verification. Handling time depends on identity verification and the scope of the request. This policy does not promise a fixed response or completion deadline.
08 / 联系与政策更新Contact and policy updates
开发者：雷猴（咔位）。
Developer: Leihou (雷猴), Kawi.
隐私与支持联系邮箱：happyleihou@163.com。发送数据查询或删除请求时，请说明问题和使用的账号，不要发送密码或验证码。邮件也会经过发送及接收双方使用的邮件服务，请只提供处理请求所需的信息。
Privacy and support email: happyleihou@163.com. Describe your request and identify the account concerned without sending passwords or verification codes. Email also passes through the sender’s and recipient’s email services. Include only information needed to handle the request.
目前未提供邮政联系地址，请通过上述邮箱联系开发者。
A postal contact address is not currently provided. Please contact the developer using the email address above.
如数据处理方式发生变化，应同步更新本页、App 内说明和 App Store 隐私披露。本政策自 2026 年 10 月 16 日起生效；后续修订会在本页标明更新日期。
Changes to data practices must be reflected on this page, in the app’s explanations and in App Store privacy disclosures. This policy takes effect on 16 October 2026. Later revisions will show their update date on this page.
操作帮助请参阅技术支持。
For help using the app, see Support.