隐私政策 / Privacy Policy

English

This policy describes version 1.2.0 and later. Stickers, background removal, image editing and Live Photo tools process selected media on your device. Local creations are stored in the app. Apple may download selected iCloud media; exported copies are managed by the destination app or service.

Before AI upload, we request your permission to send the selected photo and style instructions to Mengqu's server, then to API易 (APIYI) and its Adobe Firefly image-generation channel to produce your requested image. This is not a direct OpenAI API integration. Photos may contain faces or personal information; we do not identify people or create facial identity templates. You may withdraw consent in Settings. Withdrawal prevents future submissions but does not cancel submitted jobs or erase history. Local tools remain available.

Face data in photos

Stickers, background removal, editing and Live Photo tools process selected media on the device. Foreground segmentation does not send those photos to us. Versions with local portrait retouching use Apple Vision to temporarily locate faces and facial landmarks, limiting skin softening, face lighting and skin-tone adjustments to the intended areas while protecting details such as eyes, eyebrows and lips. These landmarks and processing masks are used only in device memory during editing, are not written to work files, and are not uploaded to Mengqu or AI providers. They are released when the photo is replaced or the editor is closed. Saved or exported photo copies follow the local-work and export rules described here. We do not identify people from faces or create facial identity templates or biometric profiles. A whole photo explicitly selected and approved for AI creation may contain a visible face; local landmarks and masks are not sent with the AI request. We do not use photos or faces for ad tracking or sell them.

To generate the requested image, the whole selected photo and style instructions travel over HTTPS to Mengqu's business server in Singapore, then to APIYI and its Adobe Firefly image-generation channel. We do not share face-containing photos with other users unless the user chooses to make a work public; copies of public or exported works may be retained by others. We keep the input and generated images in private AI history under a random anonymous account until the user deletes the work or the current account. Deletion revokes access and queues image files for background cleanup. On-server daily backups normally rotate after about 14 days and are not immediately rewritten. APIYI and its upstream provider may process or retain request content under their own policies; we cannot guarantee their exact retention period or immediate deletion. Users may decline or withdraw AI photo-sharing consent and continue using local tools.

A random anonymous account and a Keychain credential support your account, quota and image history. We retain input photos, generated results and task records for your history. Apple processes payments; we verify transaction identifiers, products, account binding and subscription dates. We do not receive card details. The new app uses StoreKit 2 without the RevenueCat SDK.

Feedback uses a separate device identity and includes the messages and optional contact details you send. Product statistics record app opens, visited pages, generation and feedback events; these events do not include photos, prompts, media URLs or message bodies. Network infrastructure processes information such as IP addresses needed to serve requests. We do not use advertising identifiers for tracking or sell personal information.

You can delete AI history, individual local works or your current account in the app. Account deletion revokes access and queues image files for cleanup; transaction, security and duplicate-request records may remain for reconciliation. Backups are not immediately rewritten. The feedback screen has a separate deletion action. Exported copies are outside our control. Uninstalling, clearing cache or deleting an account does not cancel an Apple subscription.

Our business server is in Singapore. Apple and AI processing may take place outside your country. Requests use HTTPS and private media requires authorization. Third-party retention and processing rules apply to their operations; we do not promise immediate deletion by providers or exclusion from training. You can decline AI sharing and use local tools. Versions 1.1.6 and earlier continue to use LeanCloud and the prior RevenueCat purchase service. Private accounts, credits, purchase identities and history are not automatically migrated. The app is not intended for children under 13. Contact jintao081@qq.com for privacy requests.