Effective date: June 22, 2026
This Privacy Policy explains how Winnow (also “the app,” “we”) accesses, processes, and stores information related to your photos, videos, and usage when you use the macOS and iOS versions. Please read it in full before using the app. By using the app, you confirm that you have read, understood, and agree to the practices described here.
1.1 This policy applies to the macOS and iOS clients published under the name “Winnow” (影萃), together with their on-device analysis, similarity comparison, image-quality assessment, batch organization, and deletion-assist features. 1.2 It does not apply to Apple’s operating systems, iCloud, the App Store, or its payment and subscription systems, which Apple handles under its own terms and privacy policy. 1.3 It does not apply to any third-party software or service unrelated to this app that you obtain elsewhere.
2.1 On-device processing: All recognition, similarity comparison, sharpness/exposure assessment, portrait and scene analysis, scoring, and cleanup suggestions for your photos and videos run locally on your device using Apple system frameworks such as PhotoKit and Vision. 2.2 Nothing leaves your device: In the current version, your photos, videos, thumbnails, recognition results, feature prints, kept records, review records, and deletion records are not uploaded to any developer server and are not sent to any third party. 2.3 No developer server: The current version contains no developer-operated backend server, account system, cloud sync, advertising SDK, analytics SDK, or crash-reporting SDK.
3.1 The app reads the photos and videos within the scope you authorize (including “full access” or “limited access”) via the system photo-library permission, in order to analyze and organize them locally. 3.2 You can view, change, or revoke this authorization at any time in System Settings → (Privacy & Security) → Photos. After revoking, the app can no longer read your library and related features become unavailable. 3.3 If you grant only “limited access,” the app can access only the photos and videos you select.
To provide similarity grouping, flaw detection, scoring, and cleanup suggestions, the app may read and process the following locally: pixel content and thumbnails of photos and videos, capture and modification dates, media type (photo / Live Photo / video), file size, source or album information, and image feature prints and quality/portrait/scene metrics computed by the system Vision framework. All such processing occurs in local memory or local storage.
5.1 To speed up repeat scans, reduce duplicate suggestions, and remember your choices, the app stores the following locally (in the app sandbox container or the Application Support directory): the analysis cache and image feature prints, identifiers of photos you manually marked “keep,” identifiers of similar groups you have reviewed, the “month and count” used to compute the free version’s monthly deletion quota, and a flag for whether you have seen the tutorial. 5.2 This local data contains no account information that could independently identify you and does not leave your device. 5.3 You can clear the analysis cache in Settings → Cache, or clear kept records in Settings → Kept. Uninstalling the app generally removes its local data as well.
6.1 We do not collect your photos, videos, or their content for any developer-side purpose. 6.2 We do not track users across apps or websites, do not build user profiles, and do not sell or share any data with data brokers. 6.3 The app’s privacy manifest (PrivacyInfo.xcprivacy) declares: no tracking, no tracking domains, and no developer-side data collection.
7.1 If your original photos or videos are stored only in iCloud and not downloaded locally, when the app needs the originals for analysis or deletion, Apple’s photo system may download content on demand according to your system and iCloud settings. That download is handled by Apple system services and governed by Apple’s terms and privacy policy. 7.2 Deletion is performed through Apple’s system photo-deletion flow; whether it syncs to iCloud and other devices depends on your iCloud Photos settings.
8.1 The app’s Pro entitlement is purchased through Apple’s App Store in-app purchase (StoreKit). Payment, billing, your Apple ID, and transaction receipts are handled by Apple; the developer does not receive sensitive payment details such as card numbers. 8.2 The app only reads, via StoreKit, whether a valid Pro entitlement currently exists, in order to decide locally whether to remove the deletion limit. 8.3 For more about subscriptions, see “Subscription Details.”
As required by Apple, the app declares in its privacy manifest the “required-reason APIs” it uses. For example, the app uses UserDefaults solely to store your preferences and state locally (such as whether you have seen the tutorial), not for tracking or sharing with third parties.
10.1 Local analysis caches and records are overwritten on repeat scans and do not accumulate indefinitely; when a photo is removed from the library, its cache is cleaned up on the next scan. 10.2 You can clear the cache and kept records at any time via the in-app controls; these actions are irreversible, and after clearing the cache the next scan must re-analyze all photos.
The app is not designed for children and does not knowingly collect children’s personal information. Because the app collects no data on the developer side, related risk is minimized.
Because the app currently does not collect or store your personal data on the developer side, most rights of access, correction, deletion, and portability can be exercised by you directly through on-device actions (such as clearing the cache, revoking photo access, or uninstalling the app). Under applicable data-protection laws (such as the GDPR, the CCPA, and China’s PIPL), if you still wish to exercise such rights, you may contact us using the details at the end of this document.
Other than Apple’s operating systems and App Store ecosystem, the current version integrates no third-party data processors. If third-party services are introduced in the future, we will update this policy, the privacy manifest, and the App Store privacy labels before enabling them.
If a future version adds features that change how data is processed — such as accounts, cloud sync, crash reporting, analytics, customer-support feedback, or third-party SDKs — we will update this policy, display it in the app, and seek your consent again where necessary.
To the extent permitted by law, the interpretation and application of this policy follow the mandatory data-protection rules of your jurisdiction; the parts relating to Apple services are additionally governed by Apple’s terms.
Version & updates: This document is dated June 22, 2026. We may update it from time to time; the latest version is shown in the app, and material changes are announced in-app. Continued use constitutes acceptance of the updated version.
Developer & contact: Winnow (影萃). For questions, complaints, or to exercise your rights regarding this document, contact us via the developer contact on the App Store product page or the support channel listed in the app’s Settings. Support email: alexliunew@gmail.com; Support & privacy policy: https://627666.github.io/winnow-support/
生效日期：2026 年 6 月 22 日
本《隐私政策》说明影萃（以下简称「本应用」「我们」）在你使用 macOS 与 iOS 版本时，如何访问、处理与存储与你的照片、视频及使用行为相关的信息。请在使用本应用前完整阅读本政策。你开始使用本应用，即表示你已阅读、理解并同意本政策所述的处理方式。
1.1 本政策适用于以「影萃」为名发布的 macOS 与 iOS 客户端，以及随附的本地分析、相似度比对、画质评估、批量整理与删除辅助功能。 1.2 本政策不适用于 Apple 提供的操作系统、iCloud、App Store 及其支付与订阅体系，这些服务由 Apple 依其自身条款与隐私政策处理。 1.3 本政策不适用于你通过其它途径获取、与本应用无关的任何第三方软件或服务。
2.1 本地处理：本应用对照片、视频的全部识别、相似度比对、清晰度与曝光评估、人像与场景分析、评分与清理建议，均在你的设备本地使用 Apple 提供的 PhotoKit 与 Vision 等系统框架完成。 2.2 不离开设备：在本应用当前版本中，你的照片、视频、缩略图、识别结果、特征指纹、保留记录、浏览记录与删除记录不会被上传到开发者服务器，也不会发送给任何第三方。 2.3 无开发者服务器：本应用当前版本不包含由开发者运营的后端服务器、账号系统、云同步、广告 SDK、统计分析 SDK 或崩溃上报 SDK。
3.1 本应用通过系统照片库授权（包括「完全访问」或「有限访问」）读取你授权范围内的照片与视频，用于在本地进行分析与整理。 3.2 你可以随时在系统「设置 →（隐私与安全性）→ 照片」中查看、调整或撤销授权。撤销授权后，本应用将无法继续读取照片库，相关功能将不可用。 3.3 若你仅授予「有限访问」，本应用只能访问你选定的照片与视频。
为实现相似分组、瑕疵识别、评分与清理建议，本应用可能在本地读取并处理以下信息：照片与视频的像素内容、缩略图、拍摄时间与修改时间、媒体类型（图片／实况／视频）、文件体积、所属相册或来源信息、由系统 Vision 框架计算的图像特征指纹与质量／人像／场景指标。上述处理均在本地内存或本地存储中进行。
5.1 为加快重复扫描、减少重复建议并记住你的选择，本应用会在设备本地（应用沙盒容器或 Application Support 目录）保存：分析缓存与图像特征指纹、你手动确认「保留」的照片标识、已浏览相似组的标识、用于免费版每月删除额度计算的「自然月与当月删除计数」、以及是否已查看新手教程的标记。 5.2 上述本地数据不包含可独立标识你个人身份的账户信息，且不会离开设备。 5.3 你可以在「设置 → 缓存」中清空分析缓存，或在「设置 → 手动保留」中清空保留记录；卸载本应用通常会一并移除其本地数据。
6.1 我们不收集你的照片、视频或其内容用于开发者侧的任何目的。 6.2 我们不进行跨应用或跨网站的用户追踪，不构建用户画像，不向数据经纪商出售或共享任何数据。 6.3 本应用的隐私清单（PrivacyInfo.xcprivacy）声明：不进行追踪、不存在追踪域名、开发者侧不收集数据。
7.1 若你的原始照片或视频仅存储于 iCloud 而未下载到本机，当本应用需要读取原片进行分析或删除时，Apple 的照片系统可能依据你的系统与 iCloud 设置按需下载内容。该下载过程由 Apple 系统服务处理，受 Apple 的条款与隐私政策约束。 7.2 删除操作通过 Apple 系统照片删除流程执行，是否同步到 iCloud 及其它设备，由你的 iCloud 照片设置决定。
8.1 本应用的 Pro 权益通过 Apple 的 App Store 内购买（StoreKit）实现。支付、账单、Apple ID 及交易凭证由 Apple 处理，开发者不会收到你的支付卡号等敏感支付信息。 8.2 本应用仅通过 StoreKit 读取当前是否拥有有效的 Pro 权益，用于在本地判断是否解除删除上限。 8.3 有关订阅的更多说明，请参见《订阅说明》。
依据 Apple 要求，本应用在隐私清单中声明其使用的「需说明用途的 API」。例如，本应用使用 UserDefaults 仅为在设备本地保存你的偏好与状态（如是否已查看教程），不用于追踪或与第三方共享。
10.1 本地分析缓存与记录会在你重复扫描时被覆盖更新，不会无限累积；从图库中删除的照片，其对应缓存会在下次扫描时被清理。 10.2 你可随时通过应用内入口清空缓存与保留记录；这些操作不可撤销，且清空缓存后下次扫描需要重新分析。
本应用并非面向儿童设计，也不会有意收集儿童的个人信息。由于本应用不在开发者侧收集任何数据，相关风险已被最大程度降低。
因本应用当前不在开发者侧收集或存储你的个人数据，多数数据访问、更正、删除与可携带等权利可由你通过本机操作（如清空缓存、撤销照片授权、卸载应用）直接实现。在适用的数据保护法律（如《通用数据保护条例》GDPR、《加州消费者隐私法》CCPA、中国《个人信息保护法》等）框架下，若你仍希望行使相关权利，可通过本文结尾的方式联系我们。
除 Apple 提供的操作系统与 App Store 生态外，本应用当前版本不集成第三方数据处理者。若未来引入第三方服务，我们会更新本政策、隐私清单与 App Store 隐私标签后再行启用。
若未来版本加入账号、云同步、崩溃上报、统计分析、客服反馈或第三方 SDK 等会改变数据处理方式的功能，我们将更新本政策并在应用内展示，必要时再次征得你的同意。
本政策的解释与适用，在法律允许的范围内，适用你所在司法管辖区的强制性数据保护规定；与 Apple 服务相关的部分，另受 Apple 相应条款约束。
版本与更新：本文件版本 2026 年 6 月 22 日。我们可能不时更新本文件，更新后会在应用内同步展示最新版本，重大变更会通过应用内提示告知。继续使用即视为接受更新后的版本。
开发者与联系方式：影萃（PhotoCleaner）。如对本文件有疑问、投诉或希望行使相关权利，请通过 App Store 商品页提供的开发者联系方式，或应用内「设置」中公布的支持渠道与我们联系。支持邮箱：alexliunew@gmail.com；支持与隐私政策页面：https://627666.github.io/winnow-support/