PRIVATE BY DEFAULT
隐私政策
你的饮品记录与照片，默认只属于你。杯迹不要求注册账号，也不含广告、分析或跨 App 跟踪 SDK。
1. 杯迹处理哪些内容
为了提供饮品日记功能，应用会在设备上保存你输入或选择的内容，包括饮品名称、类别、杯型、温度、甜度、时间、价格、店铺、备注，以及你可以修改的咖啡因、糖分和热量参考估算。若你主动添加地点，记录还会包含当时的位置坐标。
你拍摄或从系统照片选择器选取的饮品图片，可用于在设备端识别主体并制作个人贴纸。贴纸会保留完成编辑和再次使用所需的图片与渲染信息。画布作品会保存贴纸排列、旋转、缩放、图层、颜色或你选择并裁剪的背景图片。为让桌面小组件显示作品，必要的轻量快照会写入应用与小组件共享的 App Group 容器。
这些内容默认不会上传到开发者运营的账户或服务器；本版本没有应用账号系统。
2. 照片与相机
相机和照片权限均为可选，只会在你主动选择拍摄、选图或保存导出内容时请求。系统照片选择器只把你明确选择的项目交给应用，杯迹不会扫描你的整个照片图库。饮品主体识别使用 Apple Vision 在设备端完成，照片不会为了识别而上传到开发者服务器。
当你保存或分享贴纸画布、图片、视频或实况图时，内容只会发送到你确认的系统相册或分享目标。第三方接收方对其收到内容的处理适用其自身政策。
3. 可选定位与地图
只有你点击添加当前位置时，杯迹才会请求“使用 App 期间”的定位权限。获得的位置用于给该杯饮品添加地点，并在个人足迹地图中回看；拒绝定位不会影响不带地点的记录、贴纸、日历或统计功能。你可以在 iOS“设置”中随时更改权限，也可以编辑或删除相应记录。
地图由 Apple MapKit 提供。显示地图或地点时，Apple 可能处理完成地图请求所需的信息，适用 Apple 的隐私政策。杯迹不会将精确位置提供给广告或分析服务。
4. 备份、iCloud 与系统服务
本地文件备份由你主动创建，并通过系统分享面板保存到你选择的位置。永久 Pro 还可以主动把饮品记录、自定义贴纸和组件画布保存到该用户的 Apple iCloud 私有数据库，并从中恢复。该功能需要设备登录 iCloud；不使用时，杯迹不会自行把本地记录同步到 iCloud。
iCloud 私有数据库中的内容由用户拥有，默认仅当前用户可以访问；它会占用用户的 iCloud 存储空间。iCloud、设备备份、照片、地图和 App Store 由 Apple 提供并受 Apple 条款与隐私政策约束。
5. 购买、诊断与第三方服务
可选的“永久 Pro”是通过 Apple StoreKit 提供的一次性非消耗型购买。Apple 负责付款并向应用提供产品、交易和权益状态，以便完成购买与恢复购买；开发者不会收到你的 Apple ID 密码或银行卡资料。
杯迹当前不含广告 SDK、分析 SDK或跨 App 跟踪功能，也不运营用于接收饮品记录或照片的后端服务。应用的隐私清单声明不跟踪，且没有由开发者收集的数据类型。Apple 或 iOS 可能依据你的系统设置提供 App Store、系统诊断、崩溃或备份服务；这些系统级处理由 Apple 管理。
6. 保留、导出与删除
本地内容会保留到你编辑、删除或清除应用数据。你可以在“我的”中导出记录 CSV、创建本地备份，并使用“删除全部本地与 iCloud 数据”删除杯迹的本地记录、贴纸、组件作品和最新 iCloud 私有备份。你也可以单独删除饮品记录或组件作品。卸载应用通常会移除应用容器内的数据；你另存的导出文件、照片、系统备份和 Apple 交易记录需在相应系统服务中管理。
7. 联系、儿童与政策更新
当你主动发送支持邮件时，我们会收到你的邮件地址、正文及你选择附上的文件，仅用于回复和处理问题。请勿发送密码、付款卡号或不必要的敏感内容。支持往来会在处理请求及合理后续所需期间保留；你可以联系我们请求删除相关邮件。
杯迹不专门面向儿童，也没有儿童账户。若功能、服务或法律要求变化，我们会更新本页和日期。关于访问、更正或删除的协助，请联系 tg20260602@163.com。
ENGLISH
Privacy Policy
Information handled by the app
CupTrace stores the content you enter or select for a drink journal on your device: drink name and category, size, temperature, sweetness, time, price, shop, note, editable reference estimates for caffeine, sugar and calories, and optional coordinates when you add a place. Custom stickers can contain the selected source image, an on-device subject cutout and editing settings. Widget canvases contain sticker placement, transformations, layers, color, or a cropped background image you select. Limited snapshots are copied to the App Group shared with the CupTrace widget.
No app account is required. This version does not upload your journal or photos to a developer-operated account or server.
Camera, photos, location and sharing
Camera and photo access are optional and requested only after you choose the related feature. The system photo picker exposes only items you select. Apple Vision performs drink-photo subject isolation on device; photos are not uploaded to a developer server for this processing. Content is written to Photos or sent through the system share sheet only when you confirm an export or destination.
When-in-use location is optional and requested only when you add your current location to an entry. Coordinates support the entry and personal footprint map. Denying location does not prevent entries without a place. Apple MapKit may process information needed to display maps under Apple's privacy policy. CupTrace does not send precise location to advertising or analytics services.
Backups, iCloud and purchases
You may explicitly create a local backup and choose where to save it using the system share sheet. Lifetime Pro users may explicitly upload journal records, custom stickers and widget canvases to the user's private Apple iCloud database and restore them later. The app does not automatically sync this content when the feature is not used. Private CloudKit data is owned by and, by default, accessible only to that user, and counts against their iCloud storage.
Lifetime Pro is a one-time non-consumable purchase provided through Apple StoreKit. Apple handles payment and supplies product, transaction and entitlement status for purchase and restoration. We do not receive Apple ID passwords or payment-card details.
No advertising, analytics or tracking
CupTrace currently contains no advertising SDK, analytics SDK or cross-app tracking. Its privacy manifest declares no tracking and no developer-collected data types. Apple may separately provide App Store, iCloud, Photos, Maps, device backup, crash or system diagnostic services according to your settings and Apple's policies.
Your controls and contact
Keep, edit or delete local entries and projects as you choose. In Me, you can export CSV data, create a backup, and use “Delete all local and iCloud data” to remove local CupTrace records, stickers and widget projects and the latest private iCloud backup. Files or images you exported, operating-system backups and Apple transaction records must be managed in the corresponding system service. Uninstalling normally removes the app container.
If you email support, we receive the address, message and attachments you choose to send, solely to handle the request. Do not send passwords or unnecessary sensitive information. CupTrace is not specifically directed at children and has no child accounts. For privacy or access, correction and deletion assistance, email tg20260602@163.com. We will update this page when relevant practices change.