Amberling · 光阴
总则
光阴（Amberling，下称"本 App"）是一款完全私密的电子成长册。我们的原则很简单：你的照片、视频和记录只存在你自己的设备与你自己的 iCloud 私有库里；我们没有任何服务器，也无从看到、收集、上传或出售你的任何数据。
我们收集什么
不收集。本 App 没有账号、无需登录、无任何服务器后端，不含第三方 SDK、不做分析追踪、不投放广告。你在 App 内的一切内容都保存在本机；若你开启 iCloud，则同步到你个人的 iCloud 私有数据库（仅你本人可访问，Apple 的标准端到端机制，我们同样看不到）。
照片与相册
- 手动挑选照片时，使用系统相册选择器（PHPicker），此过程不需要、也不申请相册读取权限。
- 使用"智能导入"或自建图片浏览器时，App 会在你主动进入该功能时申请相册访问权限，用于在本机扫描并按时间/地点整理你选择导入的照片。
- 所有整理、去重、分类均在你的设备上完成，照片不会上传到任何服务器。
人脸数据（Face Data）
当你使用"智能导入"时，本 App 会用 Apple 的 Vision 框架在设备本机检测照片中"是否存在人脸及人脸框位置"，用于提供"只看有人 / 只看有娃"的筛选，帮助你更快挑出合适的照片。
- 不生成、不保存任何人脸模板、面纹或生物特征标识；
- 检测结果仅在本次导入过程中临时驻留内存，会话结束即释放，不写入磁盘、不写入 iCloud、不上传任何服务器；
- 不与任何第三方共享，人脸相关信息不出设备；
- 不用于身份识别，不比对任何人脸数据库。
一句话：找娃全程在你手机上完成，人脸不出设备、不上传、不留存。
数据留存与删除
你的记录保存在本机（及你自己的 iCloud）。你可随时在 App 内删除任意记录，或直接卸载 App；卸载后本机数据即删除，iCloud 中的数据可在系统设置中管理。App 内也提供"导出全部数据"带走。
儿童隐私
本 App 供家长记录孩子的成长，所有数据仅存于家长本人的设备与 iCloud，不上传、不收集、不与任何人共享，因此不存在向第三方披露儿童信息的情形。
联系我们
如对本隐私政策有任何疑问，可邮件 shilekevin@gmail.com，或查看 支持页。
Overview
Amberling ("the App") is a completely private digital growth journal. Our principle is simple: your photos, videos and entries live only on your own device and in your own private iCloud. We operate no servers and have no way to see, collect, upload or sell any of your data.
What We Collect
Nothing. The App has no accounts, no login, and no server backend. It contains no third-party SDKs, no analytics/tracking, and no ads. Everything you create stays on your device; if you enable iCloud, it syncs to your personal private iCloud database (accessible only to you — we cannot see it).
Photos & Library
- Manual photo selection uses the system picker (PHPicker) and does not require or request photo library permission.
- "Smart Import" and the in-app photo browser request library access only when you actively enter that feature, to scan and organize the photos you choose to import — entirely on device.
- All organizing, de-duplication and grouping happen on your device; photos are never uploaded to any server.
Face Data
During Smart Import, the App uses Apple's Vision framework on device to detect whether faces are present in your photos (and their bounding rectangles), solely to offer a "show only photos with people / with your child" filter.
- No face templates, faceprints or biometric identifiers are created or stored.
- Detection results exist only transiently in memory during the import session and are discarded afterward — never written to disk, iCloud, or any server.
- Never shared with any third party; face-related information never leaves the device.
- Not used for identification and not matched against any face database.
In short: finding your child runs entirely on your phone; face data never leaves the device, is never uploaded, and is not retained.
Retention & Deletion
Your entries are stored on your device (and your own iCloud). You can delete any entry in the App at any time, or simply uninstall the App; local data is removed on uninstall, and iCloud data can be managed in system Settings. The App also lets you export all your data.
Children's Privacy
The App is for parents to record their child's growth. All data stays only on the parent's own device and iCloud, is never uploaded, collected, or shared, so no child information is ever disclosed to third parties.
Contact
For any questions about this Privacy Policy, email shilekevin@gmail.com or see the Support page.