合拍记 · FrameDir 隐私政策
生效日期：2026 年 9 月 27 日。适用于合拍记 · FrameDir iOS / iPadOS 1.0。本政策依据合拍记项目中准备的 1.0 政策发布，由爱物工造维护。合拍记目前仍在制作与测试中，功能以实际发布版本为准。
本版本主要在设备本地处理数据。我们不运营接收项目、相机画面或语音的后台服务；App 不接入广告追踪或分析服务。
1. 在设备上处理的信息
- 项目与设备： 项目名称、场景、机位配置、相机名称、蓝牙设备标识和最近使用的 Wi‑Fi 名称，用于恢复项目及连接设备。
- 画面与标记： 相机通过局域网发送的实时视频及可能附带的音频用于监看。App 会在内存中短时缓存码流。添加标记时，App 将有画面的机位截图，以及标记前后的短片保存到本机；如果相机码流含音频，短片也可能含音频。标记可记录时间、机位、流时码或相机时间码。
- AI 拾音： 获得麦克风权限并启用此功能后，麦克风音频由 Apple 系统在设备上转写。App 不会将麦克风原始录音保存为音频文件，也不会上传到我们运营的服务器。识别出的文字可按设置保存为项目智记。设备可能需要从 Apple 下载本地语言识别资源。
- Wi‑Fi 凭据： 只有在你选择保存时，Wi‑Fi 密码才会以网络名称为索引存入本机 Keychain；项目数据库只保存网络名称。按你的操作连接受支持相机时，App 会通过本地相机连接发送所需的网络名称与密码，帮助相机加入所选网络。
2. 权限与用途
蓝牙用于发现和连接受支持的相机；本地网络用于接收 RTMP 或相机原生预览，并与相机交换连接命令；麦克风仅在启用 AI 拾音时用于转写；当前 Wi‑Fi 名称用于减少重复输入。你可以在系统设置中撤销权限，相应功能可能因此无法使用。
3. 分享与第三方
App 不会自动向我们或广告商上传上述本地内容。你主动使用系统分享功能时，导出的标记文件可能包含标记文字、时间、机位名称或 RTMP 地址。接收方如何处理副本，取决于你选择的邮件、隔空投送、云盘等服务及其政策。分享前请检查文件和接收方，尤其注意 RTMP 地址中可能含有推流密钥。
开源相机协议组件用于本机连接，不因这些组件而建立向我们运营服务器上传用户内容的通道。Apple 的系统服务、App Store 与系统备份依据 Apple 的政策运行。
4. 保存、删除与安全
项目、设备记录、转写文字和标记媒体保存在 App 本地存储中，不设自动到期日。你可以在 App 内删除标记、智记或已保存设备；删除标记时，关联的截图和短片会一并删除。卸载 App 可移除其应用数据；已导出的副本与系统备份需要在相应位置另行管理。
选择保存的 Wi‑Fi 密码由 iOS Keychain 保护，不写入项目文件。你可以在相机连接页关闭对应网络的密码保存选项；下次按该设置连接时，App 会删除对应的 Keychain 条目。不要仅依赖卸载 App 清理 Keychain 密码。
5. 联系与更新
关于本政策、设备本地数据或删除方式的问题，请邮件联系 sherardchina@gmail.com。未来版本若新增云服务、分析功能或其他数据处理，我们会更新本政策和商店隐私申报，并在适用时提供选择或征求同意。
FrameDir Privacy Policy
Effective September 27, 2026. This policy applies to FrameDir for iOS / iPadOS version 1.0 and is maintained by AILife Lab. FrameDir is still in development and testing; features depend on the version ultimately released.
This version primarily processes data on your device. We do not operate a backend that receives projects, camera footage, or speech. The app does not include advertising trackers or analytics services.
1. Information processed on your device
- Projects and devices: Project names, scene details, camera slots, camera names, Bluetooth device identifiers, and recently used Wi‑Fi names help restore projects and reconnect devices.
- Video and marks: Local camera streams, which may include audio, are shown for monitoring and briefly buffered in memory. When you add a mark, the app saves a still and short clips from camera slots with live video. A clip may include audio from the camera stream. Marks may store time, camera slot, and available stream or camera timecode.
- Speech notes: With microphone permission and the feature enabled, Apple system services transcribe microphone audio on the device. The app does not save raw microphone recording as an audio file or upload it to a server we operate. Recognized text may be saved as a project note according to your settings. The device may download a local language resource from Apple.
- Wi‑Fi credentials: A password is stored in the device Keychain only if you choose to save it. The project database stores the network name, not the password. When you connect a supported camera, the app sends the required network name and password to that camera over a local connection at your direction.
2. Permissions
Bluetooth discovers and connects supported cameras. Local-network access receives RTMP or native camera previews and exchanges connection commands. The microphone is used only when you enable speech notes. The current Wi‑Fi name reduces repeated entry. You may revoke permissions in system settings, although related features may stop working.
3. Sharing and third parties
The app does not automatically upload local content to us or advertisers. If you choose to export and share a mark file, it may include note text, timestamps, camera names, or RTMP addresses. Your chosen recipient or service handles the exported copy under its own terms. Review the file and destination before sharing, especially if an RTMP address contains a stream key.
Open-source camera protocol components support local camera connections; they do not create a channel for uploading your content to a server we operate. Apple's system services, App Store, and device backups operate under Apple's policies.
4. Retention, deletion, and security
Local projects, device records, transcripts, and mark media have no automatic expiry. You can delete marks, speech notes, and saved devices in the app. Deleting a mark also removes its associated still and clip files. Uninstalling the app removes its app data, but exported copies and system backups must be managed where they are stored.
Opt-in Wi‑Fi passwords are protected by the iOS Keychain, not stored in project files. Turning off the save option for that network and connecting with that choice removes the corresponding Keychain entry. Do not rely on app uninstallation alone to clear Keychain entries.
5. Contact and changes
For questions about this policy or local-data deletion, email sherardchina@gmail.com. If a future release introduces cloud services, analytics, or other data handling, we will update this policy and App Store privacy disclosures and provide choices or seek consent where applicable.