Batch Photo 法律文件
隐私政策
生效及最后更新日期：2026 年 7 月 31 日
Batch Photo 是一款以设备本地处理为主的 Android 图片工具。本政策说明图片处理、Google 服务、附近传输及第三方 SDK 涉及的信息处理活动。
1. 适用范围与原则
本政策适用于包名为 com.wkq.photo 的 Batch Photo Android 应用。运营者为 Batch Photo 开发者。我们遵循最小必要、目的明确和本地优先原则。除本政策列明的登录、购买、可选广告/统计、模型资源交付、应用内评价及附近设备传输外，普通图片编辑不会将您的图片上传至开发者服务器。
当前版本没有由开发者运营的云相册、图片云处理或云端账号数据库。Google 登录资料保存在应用私有存储中，用于显示登录状态和关联购买权益。
2. 应用功能
- 批量压缩、缩放、裁剪、旋转、翻转、格式转换、拼图、水印、标注、模糊和马赛克。
- EXIF、IPTC、XMP 等元数据读取、编辑与隐私清理。
- RAW 显影、PDF 导出、二维码/条码生成与识别、图片加密与解密。
- 本地人像分割、背景替换、人脸检测和证件照排版。
- 通过附近设备连接在用户确认的设备之间传输文件。
- Google 登录、Google Play 购买/订阅、恢复购买、应用内评价，以及发布版本按配置启用的 Firebase Analytics 或 Google Mobile Ads。
3. 我们处理的信息
| 信息类别 | 处理目的 | 是否离开设备 |
|---|
| 您选择的图片、RAW、PDF、其他文件及文件名 | 执行编辑、转换、导出、分享、识别、加密或传输，并可能创建临时副本。 | 普通处理仅在本机；您主动分享或传输时才发送至所选应用或设备。 |
| 图片元数据 | 读取或修改坐标、拍摄时间、设备/镜头、作者、版权、描述及 EXIF/IPTC/XMP 字段。 | 默认仅在本机；可随主动导出、分享或传输的文件离开设备。 |
| 人脸与人像特征 | 本地人脸检测和人像分割，用于证件照构图、姿态检查与背景替换。 | 推理在本机完成；不建立身份模板，不用于身份识别。 |
| Google 登录信息 | 在您主动登录时处理账号唯一标识、邮箱、显示名称、头像地址及短暂存在于内存的 ID Token；持久保存账号标识、邮箱和显示名称。 | 登录由 Google 提供；当前应用不上传至开发者服务器。 |
| 购买与订阅信息 | 处理商品 ID、购买状态、购买令牌、有效期及经 SHA-256 处理的账号标识，用于购买、恢复和权益校验。 | 由 Google Play 处理；开发者不取得完整支付卡信息。 |
| 附近设备与传输信息 | 发现/连接设备、显示认证码、传输所选文件和展示进度。旧版 Android 可能要求位置权限用于附近发现，并非为了获取实际 GPS 位置。 | 通过 Google Nearby Connections 在您确认的设备间传输。 |
| 相机画面 | 实时识别二维码和条码。 | 本机分析；除非您另行保存或分享结果，否则不保存或上传画面。 |
| 使用、设备和广告信息 | 启用 Firebase Analytics 时，可能处理应用实例、设备/应用信息、使用事件和网络信息；启用广告时，可能处理广告 ID、IP、设备信息和广告互动。 | 仅在对应服务启用时发送给 Google。 |
| 反馈内容 | 您主动发送的邮箱、邮件正文和附件。 | 由邮件服务商和反馈接收服务处理。 |
4. 设备权限
| 权限或能力 | 用途 |
|---|
| 相机 | 实时扫描二维码和条码，仅在启动扫描时请求。 |
| 照片、文件与存储 | 读取系统选择器中选定的内容并保存结果；Android 9 及以下可能使用旧版写入存储权限。 |
| 附近设备、蓝牙、Wi-Fi 与兼容性位置 | 发现附近设备并点对点传输文件；拒绝后普通本地编辑仍可使用。 |
| 通知与前台服务 | 在文件传输时显示持续状态并维持用户可见任务。 |
| 网络与网络状态 | Google 登录、购买、模型资源交付、评价、可选统计/广告和打开法律帮助页面。 |
| 广告标识及 Privacy Sandbox 广告能力 | 由 Google Mobile Ads 依赖声明，仅在实际启用广告时用于投放、衡量、频控和反欺诈。 |
您可以在 Android 系统设置中撤回运行时权限，撤回只会影响依赖该权限的功能。
5. 第三方服务与 SDK
| 服务/SDK | 用途 | 可能处理的数据 |
|---|
| Google Credential Manager / Google Identity | Google 登录与退出 | 账号标识、邮箱、显示名称、头像、ID Token |
| Google Play Billing | 订阅、一次性购买、恢复购买和权益校验 | 商品、购买状态、购买令牌、哈希账号标识 |
| Google Nearby Connections | 附近发现、连接和文件传输 | 连接/认证信息及所选文件 |
| Google Play Asset Delivery / In-App Review | 交付本地模型资源和应用内评价流程 | 应用、设备、下载和评价交互信息 |
| ML Kit Face Detection / LiteRT | 本地人脸检测与模型推理 | 在本机处理所选图片 |
| Firebase Analytics（可选） | 使用统计与产品改进 | 应用实例、设备/应用信息、事件和 IP 派生信息 |
| Google Mobile Ads（可选） | 横幅、插屏与激励广告 | 广告 ID、IP、设备信息、广告互动及反欺诈信号 |
| AndroidX/Room、MMKV、Gson、Kotlin Coroutines | 本地界面、数据库、键值存储、解析和任务 | 本地设置、任务、会话与权益缓存；库的存在不代表上传 |
| libvips、libheif/libde265、LibRaw、ExifInterface、Apache Commons Imaging、metadata-extractor、ZXing Lite、Zip4j | 本地图片、RAW、元数据、二维码和压缩包处理 | 在本机处理所选文件 |
详见 Google 隐私权政策、Firebase 隐私与安全和 Google Mobile Ads 隐私说明。应用内“开源许可”页面列出开源组件与许可。
6. 本地存储、备份与保留
- 登录会话：保留至退出登录、清除应用数据或卸载；会话文件已排除在 Android 云备份和设备迁移之外。
- 任务记录：本地最多保留 24 条摘要，且已排除在 Android 云备份和设备迁移之外。
- 设置与权益缓存：保留至修改、清除应用数据或卸载；部分非敏感设置可能按 Android 备份机制迁移。
- 临时文件：通常在操作结束、手动清理缓存或后续启动清理；受管理的旧缓存通常在约 24 小时后清理，异常退出可能使其保留更久。
- 导出和接收文件：保留在相册、下载、自选目录或应用私有接收目录，直至手动删除、清除应用数据（仅私有目录）或卸载。
- 第三方记录：购买、统计和广告信息由相应服务商依其政策与法律义务保留。
7. 共享、跨境与安全
我们不会出售您的图片或个人信息。仅在完成您请求的功能、取得授权、履行法律义务或保护安全所必需时，向本政策列明的处理者提供必要信息。Google 等服务商可能在您所在地区之外处理数据，并依其传输机制提供保护。
应用使用 Android 私有存储、系统选择器、临时 URI 授权、HTTPS 和受控缓存目录。附近传输包含设备认证确认。任何系统均无法保证绝对安全，请在分享或传输前确认目标和文件内容。
8. 您的选择与权利
- 不登录也可使用不依赖账号或付费权益的本地功能。
- 可通过系统选择器控制文件访问，并随时撤回相机、附近设备、通知等权限。
- 可退出登录，并按《账号注销协议与数据删除说明》清除数据、撤销 Google 授权和管理订阅。
- 可按适用法律请求访问、更正、删除、限制或反对我们实际持有的个人信息。
9. 儿童隐私
Batch Photo 不专门面向 13 周岁以下儿童，也不会明知而收集其个人信息。适用地区规定更高数字同意年龄的，以当地法律为准。监护人认为儿童提供了信息时可联系我们。
10. 更新与联系我们
功能、SDK 或法律要求变化时，我们可能更新本政策，并修改更新日期；重大变化会通过应用内提示或合理方式告知。
运营者：Batch Photo 开发者
隐私联系邮箱：wukuiqing@gmail.com
项目地址：github.com/wukuiqing49/PhotoKit
联系时仅提供处理请求所需的信息。请勿在公开 GitHub Issue 中提交邮箱、订单号、Token、图片或证件等个人信息。
查看《账号注销协议与数据删除说明》
Batch Photo Legal Document
Privacy Policy
Effective and last updated: July 31, 2026
Batch Photo is an Android image utility designed primarily for on-device processing. This policy describes information processing related to image tools, Google services, nearby transfer, and third-party SDKs.
1. Scope and Principles
This policy applies to the Batch Photo Android app with package name com.wkq.photo. The operator is the Batch Photo developer. We follow data minimization, purpose limitation, and local-first processing. Except for sign-in, purchases, optional ads/analytics, model delivery, in-app review, and nearby transfer described here, ordinary image editing does not upload images to a developer-operated server.
The current version has no developer-operated cloud gallery, cloud image processing, or cloud account database. Google profile details are stored in app-private storage to show sign-in state and associate purchase entitlements.
2. App Features
- Batch compression, resizing, cropping, rotation, flipping, conversion, collage, watermarking, markup, blur, and redaction.
- Reading, editing, and removing EXIF, IPTC, XMP, and other metadata.
- RAW development, PDF export, QR/barcode creation and recognition, and image encryption/decryption.
- On-device portrait segmentation, background replacement, face detection, and ID-photo layout.
- File transfer between user-confirmed devices through nearby connections.
- Google Sign-In, Google Play purchases/subscriptions, purchase restoration, in-app review, and optionally configured Firebase Analytics or Google Mobile Ads.
3. Information We Process
| Category | Purpose | Leaves the device? |
|---|
| Images, RAW files, PDFs, other files, and filenames you select | Editing, conversion, export, sharing, recognition, encryption, or transfer; temporary copies may be created. | Ordinary processing is local; sent only when you choose to share or transfer. |
| Image metadata | Read or modify coordinates, capture time, device/lens data, author, copyright, description, and EXIF/IPTC/XMP fields. | Local by default; may accompany an exported, shared, or transferred file. |
| Face and portrait features | Local face detection and segmentation for ID-photo framing, pose checks, and background replacement. | Inference is local; no identity template is created and no identification is performed. |
| Google sign-in information | When you sign in, account ID, email, display name, avatar URL, and a briefly held ID token are processed; account ID, email, and display name are persisted. | Sign-in is provided by Google; the current app does not send the profile to a developer server. |
| Purchase and subscription information | Product ID, status, purchase token, entitlement period, and a SHA-256 account identifier for purchase, restoration, and access checks. | Processed by Google Play; no full payment-card details are received by the developer. |
| Nearby-device and transfer information | Discover/connect devices, show authentication digits, transfer selected files, and report progress. Older Android versions may require location permission for discovery, not to obtain actual GPS location. | Transferred through Google Nearby Connections between confirmed devices. |
| Camera frames | Live QR/barcode recognition. | Analyzed locally and not retained or uploaded unless you separately save or share results. |
| Usage, device, and ad data | When enabled, Firebase Analytics may process app-instance, device/app, event, and network information; ads may process advertising ID, IP, device data, and interactions. | Sent to Google only when the relevant service is enabled. |
| Feedback | Email address, message, and attachments you voluntarily send. | Processed by the sending and receiving email providers. |
4. Device Permissions
| Permission/capability | Purpose |
|---|
| Camera | Live QR/barcode scanning, requested when scanning starts. |
| Photos, files, and storage | Read selected content and save results; Android 9 and earlier may use legacy write-storage permission. |
| Nearby devices, Bluetooth, Wi-Fi, compatibility location | Nearby discovery and peer-to-peer transfer; ordinary local editing remains available if denied. |
| Notifications and foreground service | Show transfer status and keep a user-visible transfer running. |
| Internet and network state | Google sign-in, purchases, model delivery, reviews, optional analytics/ads, and legal/help pages. |
| Advertising ID and Privacy Sandbox ad capabilities | Declared by Google Mobile Ads and used for delivery, measurement, frequency control, and anti-fraud only when ads are enabled. |
You may revoke runtime permissions in Android settings. Revocation affects only features that require them.
5. Third-Party Services and SDKs
| Service/SDK | Purpose | Potential data |
|---|
| Google Credential Manager / Google Identity | Sign-in and sign-out | Account ID, email, name, avatar, ID token |
| Google Play Billing | Subscriptions, purchases, restoration, entitlement checks | Product, purchase status/token, hashed account ID |
| Google Nearby Connections | Nearby discovery, connection, transfer | Connection/authentication data and selected files |
| Google Play Asset Delivery / In-App Review | Local model delivery and review flow | App, device, download, and review-interaction data |
| ML Kit Face Detection / LiteRT | On-device face detection and inference | Selected images processed locally |
| Firebase Analytics (optional) | Usage analytics and improvement | App instance, device/app data, events, IP-derived information |
| Google Mobile Ads (optional) | Banner, interstitial, rewarded ads | Advertising ID, IP, device data, interactions, anti-fraud signals |
| AndroidX/Room, MMKV, Gson, Kotlin Coroutines | Local UI, database, storage, parsing, tasks | Local settings, tasks, session, and entitlement cache; inclusion does not itself mean upload |
| libvips, libheif/libde265, LibRaw, ExifInterface, Apache Commons Imaging, metadata-extractor, ZXing Lite, Zip4j | Local image, RAW, metadata, QR, and archive processing | Selected files processed locally |
See the Google Privacy Policy, Firebase Privacy and Security, and Google Mobile Ads privacy documentation. The in-app Open Source Licenses screen identifies open-source components and licenses.
6. Local Storage, Backup, and Retention
- Sign-in session: retained until sign-out, app-data clearing, or uninstall; excluded from Android cloud backup and device transfer.
- Task history: up to 24 local summaries; excluded from Android cloud backup and device transfer.
- Settings and entitlement cache: retained until changed, app data is cleared, or uninstall; some non-sensitive settings may migrate through Android backup.
- Temporary files: generally removed after an operation, manual cache cleanup, or a later startup cleanup; managed stale cache is generally cleaned after about 24 hours, but abnormal exits may extend retention.
- Exported and received files: remain in Photos, Downloads, selected folders, or app-private received storage until manual deletion, app-data clearing (private storage only), or uninstall.
- Third-party records: purchase, analytics, and ad data is retained under provider policies and legal duties.
7. Sharing, International Processing, and Security
We do not sell images or personal information. Necessary data is provided to listed processors only to complete requested features, with authorization, to comply with law, or to protect safety. Providers such as Google may process data outside your region under their transfer safeguards.
The app uses Android private storage, system pickers, temporary URI grants, HTTPS, and controlled cache directories. Nearby transfer uses device-authentication confirmation. No system is absolutely secure; verify destinations and file contents before sharing or transfer.
8. Your Choices and Rights
- Local features that do not need an account or paid entitlement can be used without sign-in.
- You control file access through system pickers and may revoke camera, nearby, notification, and other permissions.
- You may sign out and follow the Account Deletion Agreement & Data Deletion Notice to erase data, revoke Google access, and manage subscriptions.
- Where applicable, you may request access, correction, deletion, restriction, or objection for information we actually hold.
9. Children's Privacy
Batch Photo is not directed to children under 13 and does not knowingly collect their personal information. A higher digital-consent age required in your region applies. Guardians may contact us if they believe a child provided information.
10. Updates and Contact
We may update this policy when features, SDKs, or legal requirements change. The update date will change, and material changes will be communicated in the app or by another reasonable method.
Operator: Batch Photo developer
Privacy email: wukuiqing@gmail.com
Project: github.com/wukuiqing49/PhotoKit
Provide only information necessary to handle your request. Do not post emails, order numbers, tokens, images, or identity documents in a public GitHub Issue.
Read the Account Deletion Agreement & Data Deletion Notice