Privacy Policy — SunCrow Paint 隐私政策 — 金乌卷

Effective date: Sept 10, 2026 · Operated by Ziontech 生效日期：2026 年 9 月 10 日 · 运营主体：锡安科技

The short version:
  • Your documents and photos are stored only on your device, encrypted with AES-256. We never receive them.
  • Optional cloud backup is end-to-end encrypted — only ciphertext is uploaded, and no one (including us) can read it.
  • No account, no ads, no analytics, no tracking, no selling of data.
  • Everything hinges on your Recovery Key: if you lose it, nobody can decrypt your backup — including us.

1. Overview

SunCrow Paint ("the App", "we", "us") is a private vault for documents and photos built around "disguise encryption". This policy explains what data we handle — and, just as importantly, what we designed the App so we cannot access.

2. Data stored on your device

All content you create or import — documents, photos, categories, tags, cover content — is stored locally in encrypted form (AES-256-GCM). Encryption keys are generated on your device and protected by the iOS Keychain and Secure Enclave; biometric authentication (Face ID / Touch ID) gates access in the interface. Deleting the App deletes its local data.

3. Cloud backup (optional, subscription)

If you subscribe and enable backup, each item is encrypted on your device before upload (end-to-end encryption) and stored as ciphertext via Apple's CloudKit service in this App's iCloud container. For backup bookkeeping we store only: an anonymous backup identifier derived one-way from your Recovery Key (not your identity), encrypted data blobs, storage usage amounts, and your subscription tier. We do not receive your name, email address, or device identifiers, and we hold no keys — therefore we cannot decrypt, moderate, or recover your backed-up content.

4. What we never collect

We do not collect or use your content, photos, contacts, location, advertising identifiers, usage analytics, or browsing history, and we do not integrate any third-party analytics or advertising SDKs.

5. Purchases and subscriptions

Subscriptions (Lite / Pro) are processed entirely by Apple via in-app purchase. We never see your payment details. We receive your subscription status from Apple (for example, Lite or Pro, active or expired) solely to unlock features and apply storage quotas. Apple's own privacy policy governs their processing.

6. Your Recovery Key

Your Recovery Key is shown once when you first enable backup and must be written down. It is never transmitted to us in its original form; a one-way cryptographic derivative is used as your anonymous backup namespace. If you lose it, neither we nor Apple can restore your encrypted backup. This is an intentional property of end-to-end, zero-knowledge design.

7. Children's privacy

The App is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal data from children.

8. Sharing and sale of data

We do not sell or rent data. The only third parties involved are Apple, acting for your own Apple ID: iCloud/CloudKit (backup storage) and the App Store (payments).

9. Your rights

Depending on your region (for example GDPR, UK GDPR, CCPA/CPRA), you may have rights of access, correction, deletion, restriction and portability. Because the App is zero-knowledge, nearly all of your data is under your exclusive control: deleting content in the App deletes it from your device, and deleting a backup in the App removes it from cloud storage. For any other request, contact us at zhysda@126.com.

10. Security

We use AES-256-GCM encryption, hardware-backed keys, and biometric locks, and the App writes no plaintext caches to disk. No system is perfect: the App complements, but does not replace, the security of your device — a compromised or unlocked device remains at risk.

11. Changes to this policy

We may update this policy; the effective date above will change accordingly, and material changes will be mentioned in the App's release notes.

12. Contact

Ziontech
Email: zhysda@126.com

一分钟版本：
  • 你的文档与照片只保存在你的设备上，全程 AES-256 加密，我们从来不会收到它们。
  • 云备份为可选项，端到端加密——上传的只有密文，任何人（包括我们）都无法读取。
  • 无账号、无广告、无统计分析、无追踪、不出售任何数据。
  • 一切取决于你的恢复密钥：一旦丢失，没有任何人能解密你的云端备份——包括我们。

1. 概述

金乌卷（下称"本 App"、"我们"）是一款以"伪装加密"为核心的私密文档与照片保险库。本政策说明我们处理哪些数据——以及同样重要的：我们在设计上就无法访问哪些数据。

2. 存储在你设备上的数据

你创建或导入的全部内容——文档、照片、分类、标签、封面内容——均以加密形式（AES-256-GCM）存储在本地。加密密钥在你的设备上生成，由 iOS 钥匙串（Keychain）与安全隔区（Secure Enclave）保护，并在界面层由面容 ID / 触控 ID 等生物认证把守。删除本 App 即删除其本地数据。

3. 云备份（可选，订阅功能）

当你订阅并开启备份后，每条内容都会先在你的设备上完成端到端加密，再以密文形式通过苹果 CloudKit 服务存入本 App 的 iCloud 容器。出于备份记账目的，我们仅保存：由你的恢复密钥单向派生的匿名备份标识（与你的身份无关）、加密数据块、存储用量数字与订阅档位。我们不会获得你的姓名、邮箱或设备标识，也不持有任何密钥——因此我们无法解密、审核或找回你的备份内容。

4. 我们绝不收集的数据

我们不收集、不使用你的内容、照片、通讯录、位置、广告标识符、使用统计或浏览历史，也不集成任何第三方统计或广告 SDK。

5. 购买与订阅

订阅（Lite / Pro）完全由苹果通过 App 内购买处理，我们不会接触你的支付信息。我们仅从苹果获得订阅状态（例如 Lite 或 Pro、生效或过期），用于解锁功能与套用存储配额。苹果对相关数据的处理适用其自身隐私政策。

6. 你的恢复密钥

首次开启备份时，恢复密钥只会向你显示一次，请务必抄写保存。它不会以原始形式传输给我们；我们仅使用其单向加密派生值作为你的匿名备份命名空间。一旦丢失，我们和苹果都无法为你恢复加密备份——这是端到端、零知识设计的有意属性。

7. 儿童隐私

本 App 不面向 13 岁以下（或你所在司法辖区规定的最低年龄以下）的儿童，我们也不会有意收集儿童的个人信息。

8. 数据共享与出售

我们不出售、不出租任何数据。涉及的唯一第三方是苹果（均为你本人 Apple ID 下的服务行为）：iCloud/CloudKit（备份存储）与 App Store（支付）。

9. 你的权利

根据你所在地区的法律（如 GDPR、英国 GDPR、CCPA/CPRA），你可能享有访问、更正、删除、限制处理与可携带等权利。由于本 App 采用零知识设计，你的绝大部分数据完全处于你的掌控之下：在 App 内删除内容即从设备删除；在 App 内删除备份即从云端删除。其他请求请联系 zhysda@126.com。

10. 安全措施

我们采用 AES-256-GCM 加密、硬件级密钥保护与生物识别锁，App 不会在磁盘上产生明文缓存。任何系统都不是完美的：本 App 是设备安全的补充而非替代——处于解锁或被入侵状态的设备仍然存在风险。

11. 政策变更

我们可能更新本政策，页首的生效日期会相应调整；重大变更将在 App 版本说明中提示。

12. 联系我们

锡安科技
邮箱：zhysda@126.com

Template note: replace all highlighted placeholders and have the final text reviewed by legal counsel before publishing. 模板说明：发布前请替换全部高亮占位内容，并建议由法律专业人士审阅定稿。