yCam Privacy Policy

Last Updated: September 26, 2026　Effective Date: September 26, 2026

This Policy explains what information yCam (the "App") handles, why, where it is stored, and how you control it. The App is operated by Hangzhou Xingxi Technology Co., Ltd. ("we", "us"), which is the controller of the information described here. By tapping "Agree" you confirm that you have read this Policy.

In short: your photos, videos and viewfinder images never leave your device. All AI features, including AI Looks and AI composition, run on your device. Signing in is optional. Usage statistics are off until you choose to allow them, and you can turn them off at any time. We do not sell or share your personal information.

1. What Stays on Your Device

• The live viewfinder, all look (filter) rendering and color adjustments
• AI Looks: scene matching, look generation and learning your taste all run on your device with models built into the App. Your taste profile never leaves your device
• AI composition and AI crop: run on your device with built-in models
• Photos and videos you take: saved to your system photo library
• The card images of looks you save, look strengths, presets and settings: stored inside the App

2. What We Receive, and Why

2.1 Anonymous install ID (every launch)

When the App starts, it registers with our server using a random install ID created when you install the App. It is not derived from your device (we do not use the advertising identifier, the vendor identifier, serial numbers or DeviceCheck), is not linked to your real identity, and is deleted when you uninstall the App; a reinstall creates a new one that we cannot link to the old one. Along with it we receive the App version, system version, device model and language. We use this to keep the service working and to count how many installs are active. We keep the install record, with the last time it was seen, until the install is no longer in use; the daily record of active installs is deleted after 180 days.

2.2 Record of your consent

We keep a record of when you agreed to which version of these documents, and each time you turn usage statistics on or off, with the time and App version. It contains no IP address, location or account data; its subject is this install, not you as a person. We keep it for as long as the install exists, so that we can show your choice was respected, and it is not deleted when you delete your account.

2.3 Optional account (only if you sign in)

If you choose Sign in with Apple, we receive an anonymous user identifier from Apple and a token that lets us revoke the sign-in with Apple when you delete your account. We do not request, receive or store your name, email address, phone number or age. We also record which install was signed in to the account and when, so that your saved looks follow your account. Account data is kept until you delete the account; in this version we do not proactively delete accounts for inactivity. When you delete your account we show success immediately and complete the server-side deletion within 24 hours, keeping only an anonymous deletion record (a random id and a timestamp) to prove it was carried out; signing in again with the same Apple ID afterwards creates a brand-new, empty account.

2.4 Saved looks (only if you sign in)

To restore your saved looks on your other devices, we store for each saved look: its ID, the version of the look set, for looks generated for you a set of 32 numbers that describe the colors, and the time it was saved. The card image taken when you saved a look is never uploaded. On a new device, the App draws a new card image on your device by applying the look to your current viewfinder. When you remove a saved look, we keep a deletion marker for 90 days so that your other devices also remove it. Saved looks are capped per account (currently 500).

2.5 Usage statistics (only if you allow them)

The "Help improve yCam" choice is off until you decide. If you allow it, the App sends usage events such as: app launch time and permission status; session length and counts; which looks were applied, swiped, saved or removed and for how long a look was used; whether a photo or video was saved and with which options (look, Live, front camera, aspect ratio, AI composition); reasons a save failed; editing and AI composition steps; guide steps; setting changes; sign-in and sign-out events (without your account ID); performance samples (frame rate, device temperature state, battery level, Low Power Mode); and whether the sign-in prompt was shown and its result. Each event carries the install ID, a random session ID, a sequence number, the time rounded to the hour, your time zone offset in whole hours, the App and system version, device model, language, a coarse scene group number computed on the device that cannot reconstruct any image, and internal model version numbers. Our server also records the time it received each event. Events are batched on the device and sent over HTTPS to our own domain only. The server does not store your IP address; gateway access logs are kept for no more than 7 days and are never joined with the install ID.

Usage statistics never contain photos, videos, images, location, your name, email or account ID. Raw events are deleted after 180 days; totals that do not identify any install may be kept longer. You can turn statistics off at any time in Settings → Help improve yCam; doing so stops all sending and deletes unsent events on your device.

3. Where Your Data Is Stored and Data Partition

Our servers are located in the United States (Amazon Web Services, region us-east-2, Ohio). This version operates a single global data partition; all users' data is stored in that partition. The App is not offered in mainland China, the European Union, the European Economic Area, the United Kingdom or Switzerland. Data is sent over encrypted connections (HTTPS).

4. Sharing

We do not sell or share your personal information, do not use it for cross-context behavioral advertising, and do not use it to track you. The App contains no third-party analytics, advertising or social SDKs. Our cloud provider hosts the servers and processes data only on our instructions. Apple handles Sign in with Apple under its own privacy policy. We disclose information only when required by law.

5. Permissions

1. Camera: to frame and take photos. Required to use the App.
2. Photo library (add): to save your photos and videos.
3. Photo library (read): to import photos for editing and show your latest photo as a thumbnail.
4. Microphone: to record sound in videos. If denied, videos have no sound.
5. Each permission is requested only when needed. You can change it any time in system Settings. The App does not request your location.

6. Your Rights and Choices

• Delete your account: in Settings, tap "Delete account". This removes your account, saved looks and account links from our servers and revokes Sign in with Apple.
• Withdraw consent to statistics: turn off "Help improve yCam" in Settings.
• Remove local data: uninstalling the App deletes all data stored on your device, including the install ID.
• Access, rectification and other requests: contact contact@yololiv.com. We reply within 30 days. This version has no in-app data export; export requests are handled through the same contact. Withdrawing consent does not affect processing already carried out beforehand.
• Complaints: you may complain to us using the contact above, and you also have the right to lodge a complaint with your local data protection authority.

7. Security

We use encrypted connections and access controls. The sign-in and install tokens we issue are stored on our servers only in hashed form; on your device they are kept in the this-device-only keychain and are not synced through iCloud. We use Apple's App Attest to verify that requests come from an unmodified copy of the App; the related key identifiers are not linked to any account or install and are kept for no more than 30 days. Usage statistics and accounts are stored in separate tables, and the events table has no account column. If a security incident affecting your information occurs, we will notify you as required by law.

8. Children

The App is intended for a general audience and is not directed at children; we do not collect age information. If you are a minor, please use it with your parent's or guardian's consent. A guardian who believes a child's information was collected may contact us to delete it.

9. Changes to This Policy

When we change this Policy, the App will ask you to review and agree again before you continue.

10. Contact

Hangzhou Xingxi Technology Co., Ltd. · contact@yololiv.com

This Policy is provided in English and Chinese. In case of any discrepancy between the two versions, the Chinese version prevails.

---

yCam 隐私政策

更新日期：2026年9月26日　生效日期：2026年9月26日

本政策说明 yCam（以下简称"本应用"）处理哪些信息、为什么处理、存放在哪里，以及你如何控制。本应用由杭州星犀科技有限公司（以下简称"我们"）运营，我们是本政策所述信息的控制者。你点击"同意"即表示已阅读本政策。

一句话概览：你的照片、视频与取景画面从不离开你的设备。AI 滤镜、AI 构图等全部 AI 功能都在设备上运行。登录是可选的。使用统计在你选择允许之前是关闭的，你随时可以关闭。我们不出售、不共享你的个人信息。

一、只留在你设备上的

• 实时取景、所有滤镜渲染与调色
• AI 滤镜：场景匹配、滤镜生成与口味学习全部由应用内置模型在设备上完成，你的口味偏好从不离开设备
• AI 构图与 AI 裁剪：由应用内置模型在设备上完成
• 你拍摄的照片与视频：保存到系统相册
• 收藏滤镜时的卡片图、滤镜强度、调参预设与设置：保存在本应用内

二、我们会收到什么，以及为什么

2.1 匿名安装标识（每次启动）

本应用启动时会用一个随机的安装标识向我们的服务器登记。它在你安装本应用时生成，不由你的设备信息推导（我们不使用广告标识 IDFA、供应商标识 IDFV、序列号或 DeviceCheck），不关联你的真实身份，卸载即失效；重装后会生成一个全新的标识，我们无法把新旧标识关联起来。同时收到的还有应用版本、系统版本、机型与语言。我们用它维持服务运转、统计有多少安装在使用。安装记录（含最近一次出现的时间）在该安装仍在使用期间保存；每日活跃安装的记录 180 天后删除。

2.2 你的同意记录

我们会记录你在什么时候同意了哪一版协议，以及每一次打开或关闭使用统计的时间与应用版本。这份记录不含 IP、位置或账号信息，主体是这一次安装而不是你本人。它与安装同期保存，用于证明你的选择得到了尊重，删除账号时不会删除它。

2.3 可选的账号（仅在你登录时）

如你选择通过 Apple 登录，我们会从 Apple 收到一个匿名用户标识，以及一个在你删除账号时用于向 Apple 撤销授权的凭据。我们不索取、不接收、不保存你的姓名、邮箱、手机号或年龄。 我们还会记录哪个安装在什么时间登录了该账号，以便你收藏的滤镜跟着账号走。账号数据保留至你删除账号为止；本版本不会因账号长期不活跃而主动删除账号。你删除账号时，我们会立即向你显示成功，并在 24 小时内完成服务端删除，仅保留一条不含任何身份信息的匿名删除记录（随机编号与时间）用于证明删除已执行；之后用同一 Apple ID 再次登录，将得到一个全新的空账号。

2.4 收藏的滤镜（仅在你登录时）

为了让你在其他设备上找回收藏，我们为每个收藏保存：滤镜编号、滤镜库版本、为你生成的滤镜所对应的 32 个描述颜色的数字，以及收藏时间。收藏时拍下的卡片图从不上传。在新设备上，应用会在你的设备上用当前取景画面套上该滤镜，重新生成一张卡片图。你取消收藏后，我们会保留一条删除标记 90 天，让你的其他设备也同步删除。每个账号的云端收藏有数量上限（当前 500 个）。

2.5 使用统计（仅在你允许时）

"帮助改进 yCam"在你做出选择之前是关闭的。如你允许，本应用会上报以下使用事件：启动耗时与权限状态；使用时长与次数；套用、滑过、收藏、取消收藏了哪些滤镜以及每个滤镜用了多久；是否保存了照片或视频以及使用的选项（滤镜、实况、前置镜头、画幅、AI 构图）；保存失败的原因；编辑与 AI 构图的步骤；引导步骤；设置变更；登录与退出事件（不含账号编号）；性能抽样（帧率、设备温度状态、电量、低电量模式）；以及登录提示是否出现和结果。每条事件附带：安装标识、随机会话编号、序号、精确到小时的时间、按整小时计的时区、应用与系统版本、机型、语言、一个在设备上算出的粗略场景分组号（无法还原任何画面），以及内部模型版本号。服务器还会记录收到每条事件的时间。事件在本机分批打包，只经 HTTPS 发送到我们自己的域名。服务器不保存你的 IP 地址；网关访问日志保留不超过 7 天，且不与安装标识关联。

使用统计从不包含照片、视频、任何画面、位置、你的姓名、邮箱或账号编号。 原始事件 180 天后删除；不指向任何具体安装的汇总数字可能保存更久。你可以随时在设置 → 帮助改进 yCam中关闭，关闭后立即停止上报，并删除设备上尚未发送的事件。

三、数据存放在哪里与数据分区

我们的服务器位于美国（Amazon Web Services，俄亥俄 us-east-2 区域）。本版本只运营一个全球数据分区，所有用户的数据存放在同一分区中。本应用不在中国大陆、欧盟、欧洲经济区、英国与瑞士提供。数据通过加密连接（HTTPS）传输。

四、共享

我们不出售、不共享你的个人信息，不将其用于跨场景的行为广告，也不用它追踪你。 本应用不含任何第三方统计、广告或社交 SDK。云服务商为我们托管服务器，仅按我们的指示处理数据。"通过 Apple 登录"由 Apple 按其隐私政策处理。仅在法律要求时我们才会披露信息。

五、系统权限

1. 相机：用于取景与拍照，使用本应用所必需。
2. 相册（写入）：用于保存你的照片与视频。
3. 相册（读取）：用于导入照片进行编辑，以及显示最近一张照片的缩略图。
4. 麦克风：用于录像时录音；拒绝授权则视频没有声音。
5. 每项权限只在需要时申请，你可以随时在系统设置中更改。本应用不申请你的位置。

六、你的权利与选择

• 删除账号：在设置中点击"删除账号"，即从我们的服务器删除你的账号、收藏与账号关联，并向 Apple 撤销授权。
• 撤回统计同意：在设置中关闭"帮助改进 yCam"。
• 删除本地数据：卸载本应用即删除设备上的全部数据，包括安装标识。
• 查阅、更正及其他请求：请联系 contact@yololiv.com，我们将在 30 天内答复。本版本不提供应用内的数据导出功能，导出请求同样通过该邮箱受理。撤回同意不影响撤回前基于同意已进行的处理。
• 投诉：你可以通过上述邮箱向我们投诉，也有权向你所在地的数据保护主管机构投诉。

七、安全

我们使用加密连接与访问控制。我们签发的登录凭据与安装凭据在服务器上只以哈希形式保存；在你的设备上，凭据保存在仅限本设备的钥匙串中，不随 iCloud 同步。我们使用 Apple 的 App Attest 验证请求来自未经篡改的本应用，相关密钥标识不与任何账号或安装关联，保留不超过 30 天。使用统计与账号在服务端分表存放，事件表不含任何账号字段。如发生影响你信息的安全事件，我们将依法通知你。

八、未成年人

本应用面向一般受众，不面向儿童设计；我们不收集年龄信息。如你是未成年人，请在父母或监护人同意下使用。监护人如认为儿童信息被收集，可联系我们删除。

九、本政策的更新

本政策变更后，应用会请你重新阅读并同意，之后才能继续使用。

十、联系我们

杭州星犀科技有限公司 · contact@yololiv.com

本政策以英文和中文两种文本提供。两种文本如有不一致，以中文文本为准。