隐私政策Privacy Policy
生效日期：2026 年 10 月 9 日
Snapool 是给一起出门的人用的共享相册。要做到这一点，它必须把你选择上传的照片存到服务器上，并展示给同一个相册里的其他成员。本页逐项写明存了什么、谁能看到、怎么删除。
没有广告，没有第三方统计或追踪，不出售数据，也不把数据交给任何人用于他们自己的目的。
我们存储的内容
| 数据 | 内容 | 用途 |
|---|---|---|
| 你的账号 | 随机生成的账号 ID、「通过 Apple 登录」提供的匿名用户标识、账号创建时间。我们不请求你的邮箱。 | 登录 |
| 你的名字 | 相册成员看到的名字。首次登录时取自「通过 Apple 登录」（仅当你选择提供），之后可以在 App 里修改。 | 让相册里的人知道照片是谁传的 |
| 你上传的照片 | 你挑选的原图文件（含 Live Photo 的视频部分）和一张小缩略图。原图保留文件里自带的元数据，可能包含拍摄地点和拍摄时间、相机型号。我们还另外记录每个文件的拍摄时间、拍摄地点、像素尺寸、文件名、文件大小和 SHA-256 校验值。 | 展示给相册成员、让他们存回原图、跳过他们手机里已有的照片 |
| 相册 | 相册名称、成员、角色（创建者或成员）、邀请码 | 共享相册本身 |
| 通知 | 如果你允许通知：Apple 分配给本 App 的设备推送令牌 | 有人加入或往你的相册传照片时通知你 |
| 登录会话 | 登录令牌的哈希值（SHA-256）和最近使用时间 | 保持登录 |
App 在你的 iPhone 上读取照片图库，用于上传你挑选的照片，以及保存前检查手机里是否已有同一张照片。只有你挑选上传的照片会离开设备；查重在手机上完成。
匿名使用统计：App 会把匿名的使用事件发送到我们自己运营的统计服务器，不经过任何第三方。内容是：安装和打开 App 的时间、使用时长、App 版本、设备型号、系统版本与语言，以及订阅页的打开和订阅结果（哪一档、成功还是失败，不含任何支付信息）。这些事件只带一个随机生成的安装编号，它不来自任何设备标识，重装 App 后会变，也不与你的账号、名字、相册或照片关联。统计服务器在中国大陆（阿里云上海）。
诊断日志：App 在手机上记录上传和保存日志，其中没有照片内容。只有当你在 App 里点「导出诊断日志」并亲自发送给我们时，我们才会收到。
谁能看到你的照片
只有你上传到的那个相册的成员。拿到相册邀请链接的人都可以加入该相册，所以请只把邀请链接发给你希望加入的人。照片不会公开，也不会用于相册以外的任何用途。
服务提供方
| 提供方 | 做什么 |
|---|---|
| Cloudflare, Inc. | 托管 Snapool 服务器（Cloudflare Workers）、数据库（D1）和照片存储（R2）。数据可能在你所在国家或地区以外（包括美国）的 Cloudflare 数据中心处理。Cloudflare 为运行服务保留短期请求日志。 |
| Apple | 「通过 Apple 登录」，以及推送通知的投递（Apple 推送通知服务） |
保存期限与删除
- 照片会一直留在相册里，直到相册创建者删除相册，或上传者删除自己的账号。
- 删除相册（创建者）：相册右上角菜单 →「删除相册」，相册里的所有照片随之从服务器删除。
- 退出相册（成员）：相册右上角菜单 →「退出相册」，你传的照片会留在该相册里。
- 删除账号：设置（人像图标）→「删除账号」，立即从服务器删除你的账号、你上传的所有照片、你创建的所有相册、登录会话和推送令牌。
- 其他成员已经存到自己手机里的照片在他们的系统相册中，不受上述操作影响。
儿童
Snapool 不面向 13 岁以下儿童，我们不会在知情的情况下收集 13 岁以下儿童的个人信息。
你的权利
你可以按上面的方式在 App 里查看和删除自己的数据。其他请求（获取数据副本、更正、或任何疑问）请发邮件联系我们。
政策变更
本政策如有变更，我们会更新本页及顶部的生效日期。
联系方式
开发者：Max Lin（法定姓名 YOUXIANG LIN），个人开发者
返回 Snapool 支持页。
Effective 9 October 2026
Snapool is a shared album for people who travel together. To do that it has to store the photos you choose to upload on a server and show them to the other members of the album. This page lists exactly what is stored, who can see it, and how to delete it.
No advertising, no third-party analytics or tracking, and no selling or sharing of data with anyone for their own purposes.
What we store
| Data | What it is | Why |
|---|---|---|
| Your account | A random account ID, the anonymous user identifier Sign in with Apple gives us, and the time the account was created. We do not request your email address. | To sign you in |
| Your name | The name shown to album members. Taken from Sign in with Apple the first time (only if you share it), and editable in the app. | So others in an album know who uploaded what |
| Photos you upload | The original photo files you pick, including Live Photo videos, plus a small thumbnail. Original files keep their embedded metadata, which can include where and when the photo was taken and the camera model. We also store the capture time, location, pixel size, file name, file size and a SHA-256 checksum of each file. | To show the photos to album members, let them save the originals, and skip photos they already have |
| Albums | Album titles, members, roles (owner or member) and invite codes | To run shared albums |
| Notifications | If you allow notifications, the device push token Apple assigns to the app | To tell you when someone joins or uploads to your album |
| Sessions | A hashed (SHA-256) sign-in token and when it was last used | To keep you signed in |
The app reads your photo library on your iPhone to upload the photos you choose and to check whether a photo is already on your phone before saving. Only photos you pick for upload leave the device; the duplicate check happens on the phone.
Anonymous usage statistics: the app sends anonymous usage events to an analytics server we run ourselves, with no third party involved. They contain: when the app was installed and opened, time spent, the app version, device model, OS version and language, and opens of the subscription screen with the outcome (which plan, success or failure, no payment details). The events carry only a randomly generated install number that is not derived from any device identifier, changes when you reinstall the app, and is not linked to your account, name, albums or photos. The analytics server is in mainland China (Alibaba Cloud, Shanghai).
Diagnostic logs: the app keeps upload and save logs on your phone. They contain no photo content and are only sent to us if you choose Export diagnostic logs in the app and send them yourself.
Who can see your photos
Only members of the album you uploaded them to. Anyone who has an album's invite link can join that album, so share invite links only with people you want in it. Photos are never public and are never used for any purpose other than the album.
Service providers
| Provider | What they do |
|---|---|
| Cloudflare, Inc. | Hosts the Snapool server (Cloudflare Workers), the database (D1) and photo storage (R2). Data may be processed in Cloudflare data centres outside your country, including the United States. Cloudflare keeps short-lived request logs for operating the service. |
| Apple | Sign in with Apple, and delivering push notifications (Apple Push Notification service) |
How long we keep it, and how to delete it
- Photos stay in an album until the album owner deletes the album, or the uploader deletes their account.
- Delete an album (owner): album menu → Delete album. All photos in it are deleted from the server.
- Leave an album (member): album menu → Leave album. Photos you uploaded stay in that album.
- Delete your account: Settings (the person icon) → Delete account. This deletes your account, every photo you uploaded, every album you own, your sessions and your push tokens from our server immediately.
- Copies that members have already saved to their own phones are in their photo libraries and are not affected by any of the above.
Children
Snapool is not directed at children under 13, and we do not knowingly collect personal information from children under 13.
Your rights
You can see and delete your data in the app as described above. For anything else — a copy of your data, a correction, or a question — email us.
Changes to this policy
If this policy changes, we will update this page and the effective date at the top.
Contact
Developer: Max Lin (legal name YOUXIANG LIN), an individual developer
Back to Snapool support.