狐理狐图 隐私政策
更新日期：2026 年 10 月 24 日 · 适用于 iOS App「狐理狐图」（com.douzifox.foxpix）及其自动填充扩展
一句话：你的截图、照片和保险箱里的东西，不出你的手机。
狐理狐图没有自己的服务器，没有账号系统，不收集、不上传、不分析任何个人信息。识字、分类、查找隐私、保险箱，全部在你的设备上完成。你可以开飞行模式验证：除了跨设备同步要等有网，所有功能照常可用。
我们收集什么
什么都不收集。App 不含任何统计、崩溃上报或广告 SDK，不向我们或任何第三方发送数据。App Store 上的「App 隐私」标签为「不收集数据」。
App 在你手机上处理哪些数据
- 截图和照片：用 Apple 的 Vision 框架和 App 自带的看图模型在本机识别文字、二维码、人脸和画面内容，按规则分类。识别结果只存在本机的 App 数据库里，用于显示分类和「为什么是隐私」。
- 保险箱：你存进保险箱的卡号、账号密码、证件、地址等，以条目形式存在 iOS 系统钥匙串（Keychain）里，由系统加密。打开保险箱、查看隐藏字段需要 Face ID / Touch ID 或设备密码。
- 手帐：只记累计的张数、释放的空间和到达里程碑的日期，不记任何截图内容或保险箱内容。
- 剪贴板：从保险箱复制的内容只放纯文字，只能在这台设备上粘贴（不走「通用剪贴板」），到你设定的时间（30 秒到 2 分钟）由系统自动清空。
- 敲两下背面（快捷指令）：你自己装上并触发时，快捷指令把当前屏幕画面交给 App，在本机识别后存进保险箱；这张画面不存进相册，也不保留在 App 里。
- 导入和导出保险箱：从别的密码 App 导出的 CSV / JSON 文件在本机读取，App 不保留原文件。导出时生成的文件是明文，存到哪里由你选；导进别的密码 App 后请把文件删掉。
App 为什么要这些权限
- 照片图库（完整访问）：读取截图和照片来识别、分类；把你收藏的照片放进相簿；在你点「应用」并确认系统弹窗后删除你选择丢弃的照片。没有完整访问权限，App 找不到所有截图。
- Face ID / Touch ID：打开 App（可在设置里关闭）和打开保险箱时验证是你本人。生物特征数据由 iOS 保管，App 接触不到。
- 后台处理：扫描没做完时，退到后台继续做；「空闲时扫全相册」是设置里的开关，默认关。
- 运动传感器：「屏幕朝下就锁上」开着时，App 在前台用它判断手机是不是扣在桌上，只在本机即时判断，不记录。这项不需要单独授权，可在设置里关闭。
网络
App 本身不连接任何我们或第三方的服务器。它只使用以下三项 Apple 系统服务，均由 iOS 完成：
- 应用内购买（StoreKit）：购买「领养狐豆豆」完整版、恢复购买、兑换代码。支付由 Apple 处理，我们拿不到你的支付信息。
- iCloud 钥匙串同步：保险箱条目默认随你的 Apple 账户在你的设备之间同步，端到端加密，Apple 和我们都看不到内容。可以在「设置 → 隐私 → 保险箱用 iCloud 钥匙串同步」里关掉，关掉后只存在这台设备。
- iCloud 照片：原图只在 iCloud 上的照片，App 在 Wi-Fi 下通过系统相册服务取一张小图来识别；蜂窝网络下会先问你。这是下载你自己的照片，不是上传。
自动填充扩展
在系统设置里启用后，登录框上方会出现狐理狐图的建议，可以填账号密码和验证码；iOS 18 起，任意输入框长按 →「自动填充」还能插入保险箱里的地址、卡号等。填入前必须通过 Face ID / Touch ID 或设备密码。扩展只读取你保险箱里的条目，不记录你在哪些网站或 App 里使用了它。
数据保留与删除
- 识别结果、手帐：删除 App 即清除；设置里「清空缓存」只清识别结果，不动照片。
- 保险箱条目：在 App 里逐条删除；开着 iCloud 钥匙串同步时，删除会同步到你的其他设备。删除 App 不会自动清空钥匙串里的条目，这是为了换机、重装不丢数据；想彻底清除请先在 App 里删除。
- 丢弃的照片进入系统相册「最近删除」，30 天内可以找回。
儿童
狐理狐图不收集任何人的个人信息，包括儿童的。识别、整理和保险箱都在手机上完成，不会传到任何地方。
变更
政策有变动会在这一页更新并标注日期。如果变动涉及数据的收集方式，会在 App 内提示。
联系
FoxPix Privacy Policy
Updated October 24, 2026 · Applies to the iOS app FoxPix (com.douzifox.foxpix) and its AutoFill extension
In one line: your screenshots, photos and vault never leave your phone.
FoxPix has no server and no account system. It does not collect, upload or analyze any personal information. Text recognition, sorting, privacy detection and the vault all run on your device. You can verify this in Airplane Mode: everything keeps working except cross-device sync, which simply waits for a connection.
What we collect
Nothing. The app contains no analytics, crash-reporting or advertising SDKs and sends no data to us or to any third party. Its App Store privacy label is "Data Not Collected".
What the app processes on your device
- Screenshots and photos: recognized on-device with Apple's Vision framework and an image model built into the app (text, QR codes, faces, what the picture shows) and sorted by rules. Results are stored only in the app's local database, to show categories and the reason behind them.
- Vault: cards, logins, IDs, addresses and other items you save are stored as entries in the iOS Keychain, encrypted by the system. Opening the vault or revealing a hidden field requires Face ID / Touch ID or your device passcode.
- Journal: only running totals (photos sorted, space freed) and milestone dates. Never the content of a screenshot or a vault item.
- Clipboard: items copied from the vault are plain text, local to this device (no Universal Clipboard), and cleared by the system after the time you choose (30 seconds to 2 minutes).
- Back Tap (Shortcuts): when you install and trigger the shortcut, it hands the current screen to the app, which reads it on-device and saves the result to the vault. The screen image is not saved to Photos or kept by the app.
- Vault import and export: CSV / JSON files exported from other password apps are read on-device; the app does not keep the original file. Exported files are plain text and saved wherever you choose; delete them after importing into another password app.
Why the app asks for permissions
- Photos (full access): to read screenshots and photos for recognition, to add kept photos to albums, and to delete the photos you chose to discard, always after you tap Apply and confirm the system dialog. Without full access the app cannot find all screenshots.
- Face ID / Touch ID: to confirm it is you when opening the app (optional) and the vault. Biometric data is handled by iOS; the app never sees it.
- Background processing: to finish a scan after you leave the app; "scan the library when idle" is an opt-in switch, off by default.
- Motion sensor: with "Lock when face down" on, the app uses it while open to tell whether the phone is lying face down. This is decided on the spot and never recorded. It needs no separate permission and can be turned off in Settings.
Network
The app contacts no server of ours or of any third party. It uses only these three Apple system services, all performed by iOS:
- In-App Purchase (StoreKit): buying the full version, restoring purchases, redeeming codes. Apple handles payment; we never receive your payment details.
- iCloud Keychain: vault items sync between your own devices through your Apple Account, end-to-end encrypted, unreadable to Apple and to us. You can turn this off in Settings → Privacy; items then stay on this device only.
- iCloud Photos: for photos whose originals are only in iCloud, the app fetches a small preview through the system photo library on Wi-Fi (it asks first on cellular). This downloads your own photos; it uploads nothing.
AutoFill extension
Once enabled in iOS Settings, FoxPix suggestions appear above login fields for accounts, passwords and verification codes; on iOS 18 and later you can also long-press any text field → AutoFill to insert an address, card number or other vault item. Filling requires Face ID / Touch ID or your passcode. The extension only reads your vault items and keeps no record of where you used them.
Retention and deletion
- Recognition results and the journal are removed when you delete the app; "Clear cache" in Settings removes recognition results only and never touches photos.
- Vault items are deleted one by one inside the app; with iCloud Keychain on, deletion syncs to your other devices. Deleting the app does not remove Keychain items (so a reinstall or a new phone keeps your data); delete them in the app first if you want them gone.
- Discarded photos go to the system "Recently Deleted" album and can be recovered for 30 days.
Children
FoxPix collects no personal information from anyone, including children. Recognition, sorting and the vault all stay on the phone.
Changes
Changes are posted on this page with a new date. A change that affects how data is handled will also be announced in the app.
Contact
Email: douzifox@gmail.com