隱私權政策
推肉肉小工具 — 筆刷液化修圖 · 最後更新：2026 年 10 月 22 日
你的照片不會離開你的裝置。從 1.4 版起，App 會回報一小份匿名的使用統計，你可以在設定裡關掉。
我們不蒐集什麼
這個 App 不蒐集、不儲存、不傳輸任何個人資料。具體而言：
- 不蒐集你的照片或照片的任何內容
- 不蒐集廣告識別碼，也不做跨 App 或跨網站的追蹤
- 不蒐集姓名、電子郵件、電話或任何聯絡方式
- 沒有帳號系統，因此不需要註冊
照片如何被處理
你選取的照片全程在你的裝置上處理。修圖運算使用裝置本身的繪圖晶片完成， 過程中不會有任何資料被傳送到網路上。
這個 App 也不會要求讀取你的相簿。它使用 iOS 系統提供的照片選取器， 該選取器由系統管理，只會把你主動選取的那一張照片交給 App。 換句話說，即使 App 想讀取你的其他照片，在技術上也做不到。
匯出時 App 會要求「加入照片」權限，用途僅限於把你修好的那張照片存回你的相簿。
使用統計（1.4 版起）
為了知道哪些功能真的被用到、該把時間花在哪裡，App 會回報一份匿名的使用統計。 1.4 之前的版本不回報任何東西。
送出去的只有「某個功能被打開過」這件事，目前總共十項：
- App 被開啟
- 選了一張照片
- 切換到自動調整
- 自動調整偵測不到臉
- 拉動了自動調整的滑桿
- 使用了手動筆刷
- 成功匯出一張照片
- 匯出被免費額度擋下
- 在設定頁點了解鎖
- 請系統顯示評分提示
不會送出照片，也不會送出照片的尺寸或內容、偵測到幾張臉、 滑桿拉到多少。同一張照片裡重複的操作只算一次。 另外，安裝後的第一次啟動會額外送出一次安裝事件，內容只有安裝日期。
每一筆事件還夾帶哪些資訊
這些由 TelemetryDeck 的 SDK 自動附加，我們沒有辦法關掉它們。 既然關不掉，就全部列出來 —— 以下是實際攔下封包確認過的完整內容：
- 識別碼：一組每次安裝各自獨立的匿名雜湊值，以及一組工作階段編號
- 時間：收到時間、時區，以及星期幾、幾點、第幾週、月份、季、是否週末
- App：版本與建置編號
- 裝置：機型、處理器架構、作業系統與版本、螢幕解析度與縮放倍率、畫面方向
- 執行環境：是模擬器、除錯版、TestFlight 還是 App Store 版
- 語言與地區：偏好語言、地區、語系設定
- 顯示偏好：淺色或深色模式、書寫方向（由左至右／由右至左）
- 輔助使用設定：粗體文字、文字大小、降低動態效果、降低透明度、 反轉顏色、加深系統色彩、不以顏色區分
- 使用統計：首次使用日期、累計使用天數、最近一個月使用天數、 總啟動次數、平均與上一次的使用時長
- SDK：TelemetryDeck SDK 的名稱與版本
這些欄位單看都不指向特定個人，但組合起來會形成一個相當獨特的裝置特徵。 我們不用它來辨識任何人，TelemetryDeck 也不儲存 IP 位址，但你有權知道這件事。 不想提供的話，把下面說的開關關掉就完全不會送。
你可以隨時關掉。打開 App 首頁右上角的齒輪， 把「分享匿名使用統計」切成「已關閉」。關掉之後完全不送。
付費
購買透過 Apple 的 App Store 處理。我們不會接觸到你的付款資訊。 Apple 如何處理這些資料，請參閱 Apple 的隱私權政策。
第三方
上述的使用統計由 TelemetryDeck GmbH（Von-der-Tann-Str. 54, 86159 Augsburg, Germany）處理，伺服器位於德國與歐洲各地。他們收到的是： 一個每次安裝各自獨立、無法回溯到個人的匿名識別碼；一個取整到小時的時間戳記； 以及系統版本、App 版本與機型。IP 位址不會被儲存， 不論在伺服器紀錄或資料庫裡都沒有。他們的 SDK 是開源的。
這個 App 不包含任何廣告套件，也沒有任何跨 App 或跨網站的追蹤。
回報問題
設定裡的「回報問題或給建議」會用你裝置上的郵件 App 開啟一封草稿， 並預先填入 App 版本、機型、iOS 版本與介面語言，方便重現問題。 那是一封你看得到、改得動、也刪得掉的草稿， 按下寄出才會送出。如果你選擇寄信，我自然會看到你的電子郵件地址 —— 那是你主動寄信的結果，App 本身沒有蒐集它。
兒童
本 App 不會要求、也不會蒐集姓名、年齡或任何聯絡方式，因此不會蒐集兒童的個人資料。 上述的使用統計同樣不含任何可辨識個人的資訊。
政策變更
若未來版本新增任何會蒐集資料的功能，本政策會先行更新，並在 App 內明確告知。
聯絡方式
有任何疑問請來信：tuiroulo.app@gmail.com
Privacy Policy
Liquify — Body & Face Editor · Last updated: 22 October 2026
Your photos never leave your device. From version 1.4, the app reports a small amount of anonymous usage data, which you can turn off in Settings.
What we do not collect
This app does not collect, store or transmit any personal data. Specifically:
- No photos, and nothing contained in them
- No advertising identifiers, and no tracking across apps or websites
- No name, email address, phone number or any other contact details
- No account system, so there is nothing to sign up for
How your photos are handled
Every photo you select is processed entirely on your device. The editing work is done by the device's own graphics chip, and nothing is transmitted over the network at any point.
The app also does not ask to read your photo library. It uses the photo picker provided by iOS, which is managed by the system and hands the app only the single photo you chose. In other words, even if the app wanted to read your other photos, it has no technical means of doing so.
When you export, the app asks for “Add Photos Only” permission. That is used for one thing: saving your edited photo back to your library.
Usage data (from version 1.4)
So that I can tell which features are actually used and where my time is best spent, the app reports anonymous usage data. Versions before 1.4 report nothing at all.
What is sent is only the fact that a feature was opened — ten things in total:
- The app was opened
- A photo was picked
- Auto adjust was opened
- Auto adjust found no face
- An auto adjust slider was moved
- A manual brush was used
- A photo was exported successfully
- An export was blocked by the free limit
- Unlock was tapped in Settings
- A review prompt was requested
No photo is sent, nor its size or contents, nor how many faces were found, nor how far a slider was moved. Repeated actions on the same photo count once. In addition, the first launch after installing sends one install event whose only content is the install date.
What else rides along with each event
The following is attached automatically by TelemetryDeck's SDK and there is no way for us to switch it off. Since it cannot be removed, here is all of it — verified by capturing an actual request:
- Identifiers: an anonymous hash that is separate for each installation, plus a session identifier
- Time: when it was received, the time zone, and the day of week, hour, week, month, quarter and whether it is a weekend
- App: version and build number
- Device: model, processor architecture, operating system and version, screen resolution and scale factor, screen orientation
- Run context: whether this is a simulator, a debug build, TestFlight or the App Store build
- Language and region: preferred language, region, locale
- Display preferences: light or dark mode, writing direction
- Accessibility settings: bold text, text size, reduce motion, reduce transparency, invert colours, darker system colours, differentiate without colour
- Usage statistics: first-use date, total days used, days used in the last month, total launches, average and previous session length
- SDK: the name and version of the TelemetryDeck SDK
No single field here points to a particular person, but taken together they form a fairly distinctive device fingerprint. We do not use it to identify anyone, and TelemetryDeck does not store IP addresses, but you have a right to know. If you would rather not provide it, the switch described below stops all of it.
You can turn this off at any time. Tap the gear in the top right of the app's home screen and switch “Share anonymous usage stats” to “Off”. Once it is off, nothing is sent.
Payments
Purchases are handled by Apple's App Store. We never see your payment details. For how Apple handles that data, please refer to Apple's own privacy policy.
Third parties
The usage data described above is processed by TelemetryDeck GmbH (Von-der-Tann-Str. 54, 86159 Augsburg, Germany), on servers in Germany and across Europe. What they receive is: an anonymous identifier that is separate for each installation and cannot be traced back to a person; a timestamp rounded to the nearest hour; and the system version, app version and device type. IP addresses are not stored, neither in logs nor in the database. Their SDK is open source.
This app contains no advertising SDKs and does no tracking across apps or websites.
Reporting a problem
“Report a problem or suggest something” in Settings opens a draft in the mail app on your device, pre-filled with the app version, device model, iOS version and interface language so that problems can be reproduced. It is a draft you can read, edit and delete, and nothing is sent until you send it. If you do write to me, I will of course see your email address — that is a result of you sending a message, not something the app collects.
Children
This app does not ask for or collect names, ages or contact details, so it collects no personal data from children. The usage data described above likewise contains nothing that identifies a person.
Changes to this policy
If a future version adds any feature that collects data, this policy will be updated first, and the change will be stated clearly inside the app.
Contact
Questions: tuiroulo.app@gmail.com