curioo 隐私政策 / Privacy Policy
Core promise: curioo is a local-first photo and stamp-collection app. We do not collect, store, or transmit any personally identifiable information.
中文
curioo 是一款本地优先的拍照与邮票收藏 App。我们严肃对待你的隐私，不收集、不存储、不传输任何能识别你身份的个人信息。
我们如何使用你的数据
1. 照片和邮票数据
你拍摄或从相册选择的照片，以及为它们填写的标题、副标题、地点、日期、编号、备注、标签等信息，全部保存在你的 iPhone 本地，永远不会上传到任何服务器。
2. 相机权限（NSCameraUsageDescription）
仅在你打开「拍摄」标签页时使用，用于实时取景和拍摄。我们不会在后台访问相机。
3. 相册权限（NSPhotoLibraryAddUsageDescription）
仅在你勾选「同时保存到系统相册」或主动从分享菜单选择保存到相册时使用。我们只写入相册，不读取你已有的照片。
通过「从相册选取」选图功能则使用 iOS 系统的 PhotosPicker，由系统沙盒处理，App 本身不持有相册访问权限。
4. 网络访问
仅在以下情况下访问网络：
- 你点击「讲解」按钮时，向维基百科（wikipedia.org）发送一次搜索请求来获取与你照片相关的资料
- 发送的内容：基于本机识别得到的关键词（例如「蒙娜丽莎」）
- 不发送：你的照片本身、位置、设备 ID、任何账户信息
- 维基百科是公益的开源百科服务，其隐私政策见 Wikimedia 隐私政策
5. 内置 AI 模型
讲解功能用到的语言模型（Qwen3 0.6B，Apache 2.0 许可）完全在你的 iPhone 上运行，不联网。模型本身随 App 安装包一起分发，约 350MB。
我们不会做的事
- ❌ 不会上传你的照片
- ❌ 不会收集你的位置信息
- ❌ 不会追踪你的使用行为（无统计、无广告 SDK、无第三方分析）
- ❌ 不会向任何第三方分享你的数据
- ❌ 不会要求你注册账号
- ❌ 不会主动联系你（除非你通过反馈渠道联系我们）
你的权利
- 删除全部数据：设置 → 清空所有邮票，一键删除所有本地照片和元数据
- 撤销权限：iPhone 设置 → 隐私与安全性 → 相机/照片，可以随时撤销
- 完全卸载：卸载 curioo 时，所有相关数据都会随之删除，无残留
儿童隐私
curioo 不针对 13 岁以下儿童设计，也不会专门收集儿童信息。如果你认为你的孩子在未经允许的情况下使用了 App，请联系我们删除任何相关数据（虽然我们不收集任何数据）。
政策更新
本政策可能会随 App 功能更新而修订。任何重大变更我们会通过 App 内更新提示告知，并在此页面更新「最后更新」日期。
联系我们
如有疑问，请发邮件至：feedback@curioo.app
English
curioo is a local-first photo and stamp-collection app. We take your privacy seriously, we do not collect, store, or transmit any personally identifiable information.
How we use your data
1. Photos and stamp data
Photos you capture or pick from your library, along with the titles, subtitles, locations, dates, serial numbers, notes, and tags you assign to them, are stored entirely on your iPhone and are never uploaded to any server.
2. Camera permission (NSCameraUsageDescription)
Only used when you're on the Capture tab, for live preview and shooting. We never access the camera in the background.
3. Photo library permission (NSPhotoLibraryAddUsageDescription)
Only used when you tick "Also save to system Photos" or explicitly choose to save while sharing. We only write to your library, we never read it.
The "Pick from library" feature uses iOS PhotosPicker, which runs in the system sandbox, the app itself never holds library read access.
4. Network access
The app makes network requests only in these cases:
- When you tap "Narrate", we send a single search query to Wikipedia (wikipedia.org) to fetch context for your photo
- Sent: a keyword derived from on-device image recognition (e.g. "Mona Lisa")
- Not sent: your photo, your location, your device ID, any account info
- Wikipedia is a non-profit open encyclopedia. See Wikimedia's privacy policy
5. On-device AI model
The language model used for narration (Qwen3 0.6B, Apache 2.0 licensed) runs entirely on your iPhone. The model ships with the app binary (~350 MB).
What we never do
- ❌ Upload your photos
- ❌ Collect your location
- ❌ Track usage (no analytics, no ad SDKs, no third-party tracking)
- ❌ Share data with any third party
- ❌ Require account registration
- ❌ Contact you (unless you reach out via feedback)
Your rights
- Delete all data: Settings → Clear All Stamps wipes every photo and metadata in one tap
- Revoke permissions: iOS Settings → Privacy & Security → Camera / Photos at any time
- Full uninstall: Removing curioo deletes all associated data with no residue
Children's privacy
curioo is not directed at children under 13, and we do not knowingly collect information from children. If you believe your child has used the app without permission, please contact us, though we collect no data, we are happy to confirm.
Policy updates
We may revise this policy as features evolve. Material changes will be announced via in-app notice and reflected in the "Last updated" date above.
Contact
Questions: feedback@curioo.app