隐私政策 / Privacy
草稿，尚未生效。主体及服务信息仍待补充。
Draft — not yet effective. Provider and service details remain incomplete.
简体中文
生效日期：[生效日期待填写]
1. 经营主体
JournalCollage 由[开发者／经营主体名称待填写]提供，经营所在地为[经营所在地待填写]。隐私问题及相关请求请联系[联系邮箱待填写]。
2. 作品、照片与权限
可编辑作品、导入照片、个人素材及用户采用的生成图片保存在当前设备。1.0 不提供作品云备份或跨设备同步。删除应用可能导致本地作品丢失；PNG/JPEG 导出的是成品图片，不是可编辑工程备份。
我们使用你选择的照片提供编辑功能，并请求选取图片或保存成品到相册所需的权限。你可以在系统设置中管理权限。分享作品时，内容会发送给你选择的应用或接收方，其隐私处理规则另行适用。
Apple Vision 主体提取在本机进行。Apple PCC／Image Playground 为后续拟接入能力，不描述为当前已启用。启用前将按实际系统处理及自营服务数据流更新告知，不保证后续生成全部为本机处理。
3. 当前网络与支持数据
开发者说明，当前版本基线不启用用户内容的自营服务端处理、匿名身份／额度服务及相关 AIGC 处理。
应用会下载产品素材与字体。即使作品仅本机保存，分发服务商仍可能处理 IP 地址和网络请求元数据。正式 CDN 服务商、日志字段与保存期限：[分发服务商、日志字段及保存期限待补充]。
联系支持时，我们会收到你主动发送的消息、联系方式及附件。目前应用内支持渠道尚未配置：[联系邮箱待填写]。App Store 购买由 Apple 处理；如果首发前启用购买／核验服务，其正式服务商需另行确认：[购买／核验服务商待补充]。
正式版本的分析、诊断上传、广告、追踪、信息出售／共享及训练实践：[数据处理说明待补充]。没有自营图像服务端不等于不存在网络数据处理。
4. 后续服务
如果后续启用匿名身份、订阅核验、项目额度或 AIGC 处理，将在相关处理开始前更新服务商、数据字段、目的、处理地区及保存期限。Apple 系统能力适用相应政策；PCC 不等同于 JournalCollage 自营后端。
5. 保存与删除
本地作品通常保存至删除作品或卸载应用，仍受设备行为影响。清理下载缓存不删除已保存作品、个人素材及导出文件；卸载不会取消商店订阅。
按开发者确认的当前范围，自营服务端用户内容记录为无。支持邮件、发件人联系方式及必要附件在问题处理期间保存，问题关闭后最多保存 12 个月，再从支持邮箱及正在使用的工单记录中删除；你可以申请提前删除。法律要求保留，或现有争议／安全调查确有需要时，仅为相应目的保留必要信息，并在保留理由终止后删除。邮件服务商备份清除周期：[支持渠道启用前待补充]。CDN 日志期限：[分发服务商、日志字段及保存期限待补充]。本地删除不一定删除分发服务商日志或商店购买记录。隐私请求请联系[联系邮箱待填写]，核验仅使用定位相关记录所需的信息。请勿发送密码、完整银行卡资料或无关身份证件。请求按适用法定期限处理；如依法拒绝或延期，将说明理由。
6. 权利、数据所在地与安全
根据所在地，你可能享有访问、更正、删除、获取副本或反对特定处理的权利，请通过[联系邮箱待填写]提交请求。首发地区为美国。适用隐私要求及跨境安排：[待补充]。分发服务商处理地区：[待补充]。
我们采用适合相关服务的访问控制和认证措施，但无法保证绝对安全。
7. 儿童与更新
本应用为面向 13 岁及以上用户的一般创作工具，不专门面向未满 13 岁儿童。如得知在缺少必要授权的情况下收集了未满 13 岁儿童的个人信息，将核查并采取删除或法律要求的其他措施。父母或监护人可联系[联系邮箱待填写]。核验限于必要信息，定位我们控制的支持记录，删除缺少必要授权收集的信息，并在适用时通知处理服务商采取相应措施；不为年龄核验额外收集儿童资料。商店年龄评级另行按实际功能确定。政策更新时将标明生效日期，并按适用法律要求说明重大变更。
English
Effective date: [EFFECTIVE DATE]
1. Who we are
JournalCollage is provided by [DEVELOPER / LEGAL ENTITY], located in [BUSINESS LOCATION]. Contact us at [CONTACT EMAIL] for privacy questions and requests.
2. Creations, photos and permissions
Editable creations, imported photos, personal materials and adopted generated images are stored locally on your device. Version 1.0 does not provide project cloud backup or cross-device project synchronization. Deleting the app may remove local work. PNG/JPEG exports are finished images, not editable project backups.
We use photos you select to provide editing features and request access needed to select images or save exports to your photo library. You can manage permissions in device settings. Sharing an export sends it to the app or recipient you choose, whose own privacy practices apply.
Apple Vision subject extraction is performed on the device. Apple PCC / Image Playground processing is a future integration, not described as currently enabled. Before introduction, its actual system processing and any developer-operated service data flows will be disclosed. This policy does not promise that future generation will be exclusively on-device.
3. Current network and support data
The developer states that developer-operated server processing of user content, anonymous identity/quota services and related AIGC processing are not enabled for the current release baseline.
The app downloads product materials and fonts. Delivery providers may process IP addresses and network request metadata even though editable creations remain local. Actual production delivery providers, request-log fields and retention: [DELIVERY PROVIDERS, LOG FIELDS AND RETENTION TO BE COMPLETED].
If you contact support, we receive the message, contact details and attachments you voluntarily send. Support is not currently configured in the app: [CONTACT EMAIL]. App Store purchases are processed by Apple. Production purchase/verification providers, if enabled before release: [PURCHASE / VERIFICATION PROVIDERS TO BE COMPLETED].
Production analytics, diagnostic uploads, advertising, tracking, sale/sharing and training practices: [DATA PRACTICES TO BE COMPLETED]. No claim of “no network data” is made merely because there is no developer-operated image processing.
4. Future services
If anonymous identity, subscription verification, project quotas or AIGC processing are enabled later, this notice will be updated to identify the providers, data fields, purposes, processing locations and retention before the relevant processing begins. Apple system features follow their applicable policies; PCC is not synonymous with an independently operated JournalCollage backend.
5. Retention and deletion
Local creations remain until you delete them or remove the app, subject to device behavior. Download-cache clearing does not delete saved creations, personal materials or exports. Removing the app does not cancel a store subscription.
Current developer-operated user-content server records: none under the developer-confirmed baseline. Support messages, sender contact details and necessary attachments are retained while a request is open and for up to 12 months after closure, then deleted from the support mailbox and active case records. You may request earlier deletion. If law requires retention or records are necessary for an existing dispute or security investigation, we retain only the necessary information for that purpose and delete it when that need ends. Email-provider backup deletion lifecycle: [TO BE COMPLETED BEFORE SUPPORT IS ENABLED]. CDN-log retention: [DELIVERY PROVIDERS, LOG FIELDS AND RETENTION TO BE COMPLETED]. Local deletion does not necessarily delete delivery-provider logs or store purchase records. Privacy requests may be sent to [CONTACT EMAIL], with verification limited to information needed to identify the relevant records. We do not ask you to send passwords, full payment-card details or unnecessary identity documents. We process requests within applicable legal deadlines and explain any permitted refusal or extension.
6. Rights, location and security
Depending on your location, you may have rights to access, correct, delete or obtain a copy of personal information, or object to certain processing. Submit requests to [CONTACT EMAIL]. Initial availability: United States. Applicable privacy requirements and transfer arrangements: [TO BE COMPLETED]. Delivery-provider processing locations: [TO BE COMPLETED].
We use access controls and authentication appropriate to the services, but cannot guarantee absolute security.
7. Children and changes
JournalCollage is a general-audience creative app intended for users aged 13 or older, not directed to children under 13. If we learn that we have collected personal information from a child under 13 without the necessary authorization, we will investigate and take appropriate deletion or other legally required steps. Parents or guardians may contact [CONTACT EMAIL]. We limit verification to necessary information, locate any support records we control, delete information collected without the required authorization, and ask relevant processors to act where applicable. We do not collect additional child information solely to perform age checks. Store age ratings are determined separately from this policy. We may update this policy; the published version will identify its effective date and describe material changes as required by applicable law.