隐私政策
本政策说明北京喜浪科技有限公司运营的 CaptureSlate 如何处理账号、订阅、照片、地址及设备权限相关数据。
生效日期：2026 年 9 月 1 日
1. 适用范围与运营者
本政策适用于 CaptureSlate 移动应用及与其账号、订阅和支持相关的服务。运营者为北京喜浪科技有限公司，联系邮箱为 admin@xlangtech.com。
2. 我们处理的数据
- 账号与身份数据：访客会话或注册账号对应的 Firebase 用户 ID、邮箱地址，以及用户选择 Google 或 Apple 登录时由该服务提供的姓名、邮箱和身份凭据。访客用户无需提供邮箱或姓名。
- 订阅数据：RevenueCat、App Store 或 Google Play 提供的购买状态、产品、到期时间、交易标识及订阅验证所需技术信息。我们不会取得完整银行卡信息。
- 本地项目数据：用户输入的物业地址、标签、照片、拍摄时间、文件名，以及在用户授权后记录的精确经纬度、高度和定位精度。
- 技术数据：Firebase、Google、Apple、RevenueCat 和应用商店可能为认证、安全、订阅验证及防欺诈处理 IP 地址、设备与应用信息和诊断日志。
CaptureSlate 不包含广告 SDK，目前也未接入行为分析或崩溃分析服务。
3. 数据用途与法律依据
我们仅为创建和保护访客会话或注册账号、完成登录、恢复订阅权益、拍摄及整理照片、生成导出文件、在用户主动开启时提供局域网电脑传输、提供支持及履行法律义务而处理数据。处理依据包括履行用户协议、用户同意、保障服务安全的合法利益以及适用法律要求。
精确位置仅用于照片记录中的可选 GPS 元数据。拒绝定位不会阻止拍照，用户可随时在系统设置中撤回权限。
4. 本地存储和电脑传输
地址、标签、原始照片和 GPS 元数据默认保存在设备的应用专属目录，不上传至北京喜浪科技有限公司运营的云端服务。电脑传输仅在用户主动开启后，通过同一局域网的临时 HTTP 服务进行，并受访问码或受信任设备会话保护。局域网传输本身可能不是端到端加密，请仅在可信网络中使用。
5. 第三方服务与共享
账号认证由 Google Firebase Authentication 处理；可选登录由 Google Sign-In 或 Sign in with Apple 处理；订阅及权益验证由 RevenueCat、Apple App Store 或 Google Play 处理。我们不会出售个人数据，也不会为跨应用定向广告共享数据。
上述服务可能作为我们的服务提供商或独立平台运营者，按其条款和隐私政策在用户所在国家或地区之外处理数据。受我们委托的服务提供商应提供与本政策及适用法律相当的保护。
6. 保留、删除和撤回授权
本地项目数据保留到用户在应用中删除对应内容或卸载应用。账号数据保留到用户删除账号。订阅与交易记录可能由应用商店、RevenueCat 或我们在法律、财务、安全和防欺诈所需期限内保留。
用户可在系统设置中撤回相机、照片、定位或本地网络权限。删除账号入口位于“设置 → 账号与订阅”，也可按照账号删除说明提交外部请求。账号删除不会自动取消商店订阅。
7. 用户权利、安全与未成年人
依据适用法律，用户可能享有访问、更正、删除、限制处理、撤回同意或投诉等权利。请通过联系邮箱提出请求。我们采取合理的技术和组织措施保护数据，但任何系统都无法保证绝对安全。
CaptureSlate 面向专业现场拍摄工作，不以儿童为目标。未达到所在地数字服务同意年龄的用户不应自行创建账号。
8. 政策更新与联系
如数据处理方式发生重大变化，我们会更新本政策和生效日期，并在适当情况下在应用内提示。隐私问题、权利请求或账号删除请求请联系 admin@xlangtech.com。
Privacy Policy
This policy explains how CaptureSlate, operated by Beijing Xilang Technology Co., Ltd., handles account, subscription, photo, address, and device-permission data.
Effective date: September 1, 2026
1. Scope and operator
This policy applies to the CaptureSlate mobile app and related account, subscription, and support services. The operator is Beijing Xilang Technology Co., Ltd. Contact admin@xlangtech.com.
2. Data we process
- Account and identity data: the Firebase user ID assigned to a guest session or registered account, email address, and the name, email, and authentication credentials supplied by Google or Apple when you choose those sign-in methods. Guest users do not need to provide an email address or name.
- Subscription data: purchase status, product, expiration time, transaction identifiers, and technical information used for entitlement validation from RevenueCat, the App Store, or Google Play. We do not receive full payment-card details.
- Local project data: property addresses, tags, photos, capture times, filenames, and—when authorized—precise coordinates, altitude, and location accuracy.
- Technical data: Firebase, Google, Apple, RevenueCat, and the app stores may process IP address, device and app information, and diagnostic logs for authentication, security, subscription validation, and fraud prevention.
CaptureSlate contains no advertising SDK and currently uses no behavioral analytics or crash-reporting service.
3. Purposes and legal bases
We process data only to create and secure guest sessions or registered accounts, complete sign-in, restore subscription entitlements, capture and organize photos, generate exports, provide local-network computer transfer when you start it, support users, and comply with law. Legal bases may include performing our Terms, your consent, legitimate interests in service security, and legal obligations.
Precise location is optional GPS metadata in photo records. Denying location does not prevent photography, and permission can be withdrawn in system settings.
4. Local storage and computer transfer
Addresses, tags, original photos, and GPS metadata are stored by default in the app-specific area on your device and are not uploaded to cloud services operated by Beijing Xilang Technology Co., Ltd. Computer Transfer runs only when you start it, using a temporary HTTP service on the same local network protected by an access code or trusted-device session. Local-network transport may not be end-to-end encrypted, so use it only on a trusted network.
5. Service providers and sharing
Google Firebase Authentication processes account authentication; Google Sign-In or Sign in with Apple processes optional provider login; RevenueCat, Apple App Store, or Google Play processes subscriptions and entitlement validation. We do not sell personal data or share it for cross-app targeted advertising.
These providers may act as our service providers or independent platform operators and may process data outside your country under their own terms and privacy policies. Providers acting for us are expected to provide protections equivalent to this policy and applicable law.
6. Retention, deletion, and consent
Local project data remains until you delete it in the app or uninstall the app. Account data remains until account deletion. Stores, RevenueCat, or we may retain subscription and transaction records as required for legal, accounting, security, or fraud-prevention purposes.
You can revoke camera, photo, location, or local-network access in system settings. Delete an account from Settings → Account & Subscription or use the external instructions on the Account Deletion page. Account deletion does not automatically cancel a store subscription.
7. Rights, security, and children
Depending on applicable law, you may have rights to access, correct, delete, restrict processing, withdraw consent, or complain. Contact us to exercise a right. We use reasonable technical and organizational safeguards, but no system is completely secure.
CaptureSlate is a professional field-photography tool and is not directed to children. Anyone below the digital-consent age in their location should not create an account independently.
8. Changes and contact
We will update this policy and its effective date when practices materially change and provide in-app notice where appropriate. Contact admin@xlangtech.com for privacy questions, rights requests, or account deletion.