隐私不是选项，
而是架构。

1. 政策范围与核心承诺

本隐私政策适用于 PastelScan iPhone/iPad 应用（以下称“应用”）以及位于 pastelscan.appcodings.com 的配套网站。PastelScan 由 AppCodings 提供。

2. 应用在设备本地处理的数据

为完成你主动发起的扫描操作，应用会在你的设备上处理：

• 使用系统文件扫描界面拍摄的页面；
• 你通过系统照片选择器明确选择的文件图片；
• 文档名称、页面顺序、滤镜选项、收藏状态和创建日期；
• 图像增强结果、缩略图、生成的 PDF 和识别文字。

相机画面、扫描页和你选择的照片只在设备本地处理，不会发送给 AppCodings。未被你选择的照片不会由本应用导入。

3. 本地处理技术

• 图像处理：应用在设备上规范化、增强或转换图像效果。
• Vision OCR：应用使用 Apple Vision 框架在设备上识别文字，并为 PDF 添加可搜索文字层。
• PDF 与文件：生成的 PDF 和缩略图保存在应用的本地私有存储空间。
• SwiftData 索引：文档名称、识别文字、页数、日期、收藏状态和文件引用保存在本地 SwiftData 存储中，用于搜索与管理。

AppCodings 无法查看、检索或恢复这些本地文档内容。PastelScan 本身不提供云同步。

4. 系统权限

只有当你选择“扫描文件”时，应用才会请求和使用相机权限。导入时，你通过 Apple 提供的系统照片选择器决定应用可以读取哪些图片。你可在 iOS/iPadOS “设置”中查看或更改已授权的权限。拒绝相机权限后，仍可尝试使用照片导入功能。

5. Apple 、App Store 与订阅

PastelScan Pro 是由 Apple 处理的月度自动续费订阅。应用使用 StoreKit 获取当地化价格、启动购买、验证交易状态和恢复购买。

• Apple 处理你的 Apple 账户、付款方式、账单与退款；具体处理受 Apple 的隐私政策和条款约束。
• 应用只使用解锁 Pro 所需的产品与有效权益状态，不接收或存储你的完整支付卡信息。
• 应用不会把你的扫描页、OCR 文字或 PDF 作为订阅流程的一部分发送给 Apple。

Apple 还可能根据你的设备隐私与诊断共享设置，处理 App Store 与有限的诊断信息。这类处理由 Apple 控制，并受 Apple 政策约束。应用本身不集成第三方广告、行为分析或跨应用跟踪 SDK。

6. 主动分享与第三方目的地

只有当你在文档页面主动点击“分享”并从系统分享菜单选择目的地时，PDF 才会离开应用的本地存储空间。你选择的邮件、信息、文件服务或其他应用会按各自的政策处理该文件。请在分享敏感文件前核对收件方与目的地。

7. 数据保留、删除与备份

本地文档会保留在设备上，直到你从文档库删除单个文档、在“设置”中选择“删除全部本地文档”，或删除应用。卸载应用通常会删除应用的本地容器，但设备备份与恢复的行为由 Apple 和你的系统设置决定。

由于 AppCodings 不持有你的文档内容，我们无法代你访问、更正、导出、删除或恢复这些内容。

8. 免费次数和偏好设置

应用在设备本地记录免费版当日已成功生成 PDF 的数量，以执行每个本地自然日 10 份的免费额度。应用还会在本地保存语言选择等偏好。这些数据不会发送到开发者服务器。

9. 配套网站

本网站是静态网站，不使用第三方 JavaScript、分析工具、广告技术、跟踪像素或 Cookie。为了向你传送网页并保护网络安全，域名、托管或网络传输提供商可能按其正常运行方式处理 IP 地址、请求时间和基本 HTTP 元数据。我们不使用这些信息建立个人档案或进行跨网站跟踪。

10. 儿童隐私

PastelScan 不需要账号，也不会故意向儿童收集个人信息。如果你是父母或监护人并认为我们收到了儿童的个人数据，请通过本政策末尾的邮箱联系我们。

11. 安全、你的选择与法定权利

本地处理可以减少文档内容在网络上传输的暴露，但没有任何存储或设备能够承诺绝对安全。请使用设备密码、生物识别与最新系统更新保护设备，并审慎分享敏感 PDF。

你可以拒绝或撤销相机权限、只选择需要的照片、删除单个或全部本地文档，并在 Apple 账户设置中管理订阅。如果适用法律赋予你其他隐私权利，你可通过下方联系方式提出请求。由于我们不持有你的应用内文档，对于仅存在于设备的数据，操作必须由你在设备上完成。

12. 政策更新与联系我们

如果应用的数据处理方式发生变化，我们会更新本页及顶部日期，并在法律要求时提供其他通知。重大变更不会追溯性地降低对既有数据的保护，除非适用法律允许或你同意。

隐私相关问题请发送邮件至 [email protected]。

1. Scope and our core commitment

This Privacy Policy applies to the PastelScan iPhone/iPad application (the “App”) and its companion website at pastelscan.appcodings.com. PastelScan is provided by AppCodings.

2. Data processed locally by the App

To complete a scan that you initiate, the App processes the following on your device:

• pages captured with the system document-scanning interface;
• document images you explicitly choose through the system photo picker;
• document names, page order, filter choices, favorite status, and creation dates; and
• image-enhancement results, thumbnails, generated PDFs, and recognized text.

Camera frames, scanned pages, and photos you select are processed only on your device and are not sent to AppCodings. Photos you do not select are not imported by the App.

3. On-device processing technologies

• Image processing: the App normalizes, enhances, or converts page appearance on-device.
• Vision OCR: the App uses Apple’s Vision framework to recognize text on-device and add a searchable text layer to PDFs.
• PDFs and files: generated PDFs and thumbnails are stored in the App’s private local storage.
• SwiftData index: document names, recognized text, page counts, dates, favorite status, and file references are stored in a local SwiftData store to support search and organization.

AppCodings cannot view, retrieve, or recover this local document content. PastelScan does not itself provide cloud synchronization.

4. System permissions

The App requests and uses camera access only when you choose “Scan a document.” When importing, you decide which images the App can read through Apple’s system photo picker. You can review or change granted permissions in iOS/iPadOS Settings. If you decline camera access, you can still try the photo-import option.

5. Apple, the App Store, and subscriptions

PastelScan Pro is a monthly auto-renewable subscription processed by Apple. The App uses StoreKit to obtain localized pricing, start a purchase, verify entitlement status, and restore purchases.

• Apple processes your Apple Account, payment method, billing, and refunds under Apple’s own privacy policy and terms.
• The App uses only the product and active-entitlement status needed to unlock Pro. It does not receive or store your full payment-card details.
• The App does not send your scanned pages, OCR text, or PDFs to Apple as part of the subscription flow.

Apple may also process App Store and limited diagnostic information, depending on your device privacy and diagnostics-sharing settings. Apple controls that processing under its policies. The App itself includes no third-party advertising, behavioral analytics, or cross-app tracking SDK.

6. Sharing you initiate and third-party destinations

A PDF leaves the App’s local storage only when you tap Share on a document and choose a destination in the system share sheet. Mail, messaging, file services, or other apps you choose will process the file under their own policies. Verify recipients and destinations before sharing sensitive documents.

7. Retention, deletion, and backup

Local documents remain on your device until you delete an individual item from the library, choose “Delete all local documents” in Settings, or delete the App. Uninstalling usually removes the App’s local container, but device backup and restoration behavior is controlled by Apple and your system settings.

Because AppCodings does not possess your document content, we cannot access, correct, export, delete, or restore that content for you.

8. Free allowance and preferences

The App locally records how many PDFs the free version successfully completed that day so it can enforce the allowance of 10 finished PDFs per local calendar day. It also stores preferences such as your interface-language selection locally. This information is not sent to a developer server.

9. Companion website

This is a static website. It uses no third-party JavaScript, analytics, advertising technology, tracking pixels, or cookies. To deliver pages and protect network security, domain, hosting, or network-delivery providers may process IP addresses, request times, and basic HTTP metadata as part of normal operation. We do not use that information to build personal profiles or track people across websites.

10. Children’s privacy

PastelScan does not require an account and does not knowingly collect personal information from children. If you are a parent or guardian and believe that we received a child’s personal data, contact us at the address below.

11. Security, your choices, and legal rights

Local processing reduces exposure from sending document content over a network, but no storage system or device can promise absolute security. Protect your device with a passcode, biometric security, and current system updates, and share sensitive PDFs carefully.

You can decline or revoke camera access, select only the photos you need, delete individual or all local documents, and manage your subscription in Apple Account settings. If applicable law grants you additional privacy rights, you may send a request using the contact details below. Because we do not hold your in-App documents, actions involving data that exists only on your device must be completed by you on that device.

12. Policy updates and contact

If the App’s data practices change, we will update this page and the date at the top, and provide any further notice required by law. Material changes will not retroactively reduce protection for existing data unless applicable law permits it or you consent.

For privacy questions, email [email protected].