生效日期 / Effective date：2026-07-14
Tracejar 没有服务器。 你的记录只存在你的设备上，以及（当你开启 iCloud 同步时）你自己的私人 iCloud 里。开发者无法访问你的任何内容。我们不收集、不分析、不出售你的数据，也没有任何广告或第三方 SDK。
Tracejar 由 Tongwei Zhang 独立开发。联系方式：zhangtongwei@gmail.com
App 内置的隐私清单（Privacy Manifest）中，「收集的数据类型」为空。
你的日记内容（文字、照片、视频、语音、心情、标签、可选的位置）存储在：
1. 你的设备本地（通过 Apple 的 SwiftData）； 2. 你自己的私人 iCloud 数据库——仅当你在设置中开启「iCloud 同步」（默认开启）。这属于你的 Apple ID 私有区域，开发者没有任何访问权限。
若你使用中国大陆 Apple ID，iCloud 数据由云上贵州（GCBD）运营；使用其他区域 Apple ID 时，由 Apple Inc. 在相应司法辖区存储。我们不持有任何服务器端数据。
| 权限 | 何时用 | 说明 |
|---|---|---|
| 相册 | 你主动选择照片/视频时 | 仅读取你选中的项目 |
| 麦克风 | 你主动录制语音时 | 录音存进你的记录 |
| 位置 | 默认关闭 | 只有你在「设置 → 自动定位」里主动开启后，新建记录才会标记当前位置 |
| 面容 ID | 你开启 App 锁时 | 由 iOS 的 LocalAuthentication 处理，App 只收到「成功/失败」，永远接触不到你的生物特征数据 |
WhenUnlockedThisDeviceOnly —— 不离开本机、不同步到 iCloud。我们不存明文，也无法找回。从相册导入的照片/视频按原样保存，可能保留其原始元数据（如 EXIF、拍摄时间、GPS 坐标）。这些数据同样只留在你的设备与你的私人 iCloud 中，不会发送给我们或任何第三方。
「导出 CSV」由你主动触发，文件在本机临时生成，通过系统分享面板由你自己决定发送到哪里。导出不包含照片/视频/语音的二进制内容（仅记数量）。
你可以随时在 App 内查看、编辑、删除任何记录；随时关闭 iCloud 同步；删除 App 即删除本机数据；在 iCloud 设置中可删除 iCloud 副本。由于我们不持有服务器端数据，这些操作全部由你直接完成，无需向我们申请。
Tracejar 不面向 13 岁以下儿童，也不会有意收集其信息。
本政策如有更新，我们会修改本页面的生效日期。有任何问题请联系：zhangtongwei@gmail.com
Tracejar has no servers. Your entries live only on your device and — if you turn on iCloud Sync — in your own private iCloud. The developer cannot access any of your content. We do not collect, analyze, or sell your data. There are no ads and no third-party SDKs.
Tracejar is developed independently by Tongwei Zhang. Contact: zhangtongwei@gmail.com
The app's bundled Privacy Manifest declares no collected data types.
Your entries (text, photos, videos, voice notes, mood, tags, optional location) are stored:
1. Locally on your device (via Apple's SwiftData); and 2. In your own private iCloud database — only if you enable "iCloud Sync" in Settings (on by default). This is your Apple ID's private area; the developer has no access to it.
If you use a mainland-China Apple ID, iCloud is operated by GCBD (云上贵州). With Apple IDs from other regions, data is stored by Apple Inc. in the applicable jurisdiction. We hold no server-side data.
| Permission | When it's used | Notes |
|---|---|---|
| Photo Library | Only when you pick a photo/video | We read only the items you select |
| Microphone | Only when you record a voice note | Saved into your entry |
| Location | Off by default | Only if you turn on Settings → "Attach location to new entries" will new entries be tagged with your location |
| Face ID | Only if you enable App Lock | Handled by iOS LocalAuthentication; the app receives only success/failure and never sees your biometric data |
WhenUnlockedThisDeviceOnly — it never leaves the device and is never synced to iCloud. We never store it in plain text and cannot recover it.Photos and videos imported from your library are stored as-is and may retain their original metadata (EXIF, capture time, GPS). That metadata likewise stays on your device and in your private iCloud, and is never sent to us or any third party.
"Export as CSV" is user-initiated. The file is generated temporarily on-device and shared wherever you choose via the system share sheet. Photos/videos/audio binaries are not included (only counts).
You can view, edit, and delete any entry at any time in the app; turn off iCloud Sync at any time; delete the app to remove local data; and delete the iCloud copy from iCloud settings. Because we hold no server-side data, you perform all of this directly — no request to us is needed.
Tracejar is not directed at children under 13 and does not knowingly collect their information.
If this policy changes we will update the effective date on this page. Questions: zhangtongwei@gmail.com