概要：普通图片编辑和 AI 生成历史默认保留在设备本地。只有当你主动使用 AI 生图时，所选人物图片和对应参考素材才会发送至 AI 服务进行处理。我们不投放广告、不进行跨 App 跟踪，也不出售个人数据。
1. 适用范围
本隐私政策适用于 Endfield Motion iOS 应用（“App”）以及承载本政策的产品网站（合称“服务”）。使用服务即表示你已阅读本政策。如不同意，请不要使用相关功能。
2. 我们处理哪些数据
| 数据类别 | 何时处理 | 用途与去向 |
|---|
| 你选择的照片 |
使用自定义编辑器或 AI 生图时 |
普通编辑在设备上完成；使用 AI 时，人物图会先在设备端压缩至 500 KB 以内，再与所选参考素材发送至 AI 图片处理服务。 |
| AI 参考素材与组合选项 |
选择头盔、抑制器、武器或 Logo 并提交生成时 |
用于构建对应提示并向 AI 服务提供明确参考图，仅为完成你请求的图片生成。 |
| 生成图片与本地历史 |
AI 成功返回结果后 |
图片及其组合说明保存在设备的 Application Support 目录，便于历史查看；只有你选择保存时才写入系统照片图库。 |
| 订阅与购买状态 |
查看 Pro、购买、恢复购买或校验权益时 |
Apple 处理付款；RevenueCat 处理匿名 App 用户标识、产品/交易信息，以及验证权益所需的 App 和设备技术信息。我们不接触完整银行卡信息。 |
| 每日 AI 额度记录 |
Pro 用户检查或消耗 AI 次数时 |
UTC 日期和随机额度事件标识保存在本地，并通过 Apple iCloud Key-Value Storage 在同一 Apple 账户设备间同步。不会同步图片、提示词或生成历史。 |
| 网络请求信息 |
获取 UTC 时间、下载干员媒体、校验订阅或调用 AI 时 |
相关服务可能接收 IP 地址、请求时间、设备网络信息和基础日志，以传输内容、保障安全和排查故障。 |
| 支持通信 |
你主动发送支持邮件时 |
处理你的邮箱地址、邮件内容和你自愿提供的附件，以回复问题。 |
3. 照片权限与设备端处理
App 使用 Apple 的系统照片选择器读取你明确选择的图片，并申请“仅添加”权限以保存静态壁纸、AI 结果和 Live Photo。App 不会因为获得保存权限而浏览整个照片图库。
自定义壁纸的裁剪、旋转、贴纸和武器叠加在设备本地完成。下载的干员视频、头像和原画会缓存在设备上，以减少重复下载。你可在 App 设置中清理这些缓存。
4. AI 图片生成
AI 生图为 Pro 功能。只有在你准备好人物图、选择至少一个次要效果并点击生成后，App 才会将图片和组合指令发送至 img2api.xayoung.com 的图片生成接口及完成生成所需的处理提供商。
- 输入可能包含人物照片，因此可能构成用户内容或个人数据。
- 这些数据仅用于处理生成请求、维护服务安全和排查失败，不用于 Endfield Motion 的广告画像或跨 App 跟踪。
- App 开发者不会在 App 的服务端向你提供长期云端历史库；生成历史由 App 保存在设备本地。
- 处理提供商可能在完成请求所需的短暂期间保留输入、输出或安全日志。请勿上传敏感、机密或无权使用的图片。
AI 结果可能不准确或与参考图存在差异。若你认为某项服务器侧数据应删除，请通过下方邮箱联系，我们会在能够识别并控制该数据的范围内处理或转交请求。
5. Pro 订阅与 RevenueCat
购买由 Apple App Store 完成，权益通过 RevenueCat 验证。Apple 与 RevenueCat 可能依据各自政策处理交易记录、匿名用户标识和必要的技术信息。可查阅 Apple 隐私政策和 RevenueCat 隐私政策。
6. iCloud 与可信 UTC 时间
为在同一 Apple 账户的多台设备之间低成本同步每日 5 张的 AI 额度，App 使用 iCloud Key-Value Storage 保存 UTC 日期和额度事件标识。该记录不包含你的图片、提示词或生成结果。
App 会向 TimeAPI.io 请求当前 UTC 日期，以降低手动修改设备时间绕过额度的风险。该请求不包含照片或提示词，但服务提供商会像一般网络服务一样看到必要的网络元数据。iCloud 数据由 Apple 按你的 iCloud 设置处理。
7. 干员媒体与远程内容
App 会按需从项目配置的内容主机下载干员视频、头像和原画，包括官方内容分发网络及 imgbed.xayoung.com。主机可能记录标准请求信息。相关内容下载后会缓存在设备上，直到你清理缓存、系统回收缓存或卸载 App。
8. 本网站
本网站不使用广告、分析脚本、跟踪像素或 Cookie。语言切换不会写入持久化浏览器存储。网站托管服务仍可能在提供页面和维护安全时记录 IP 地址、浏览器类型、请求时间等标准服务器日志；其保留规则取决于实际部署所选的托管商。
9. 我们如何共享数据
我们仅在提供功能所需范围内与 Apple（购买、照片与 iCloud）、RevenueCat（订阅权益）、AI 图片处理服务、UTC 时间服务和媒体内容主机共享数据。我们不出售或出租个人数据，也不向数据经纪商提供数据。服务提供商应仅在提供服务、安全防护、履行法律义务所需范围内处理数据。
如法律要求，或为保护用户、开发者及公众的权利与安全，我们也可能披露必要信息。
10. 保留与删除
- 本地生成历史：保留至 App 数据被系统移除或你卸载 App。
- 照片图库副本：由你控制，可在系统“照片”中删除。
- 媒体缓存：可在 App 设置中清理，也可能由系统自动回收。
- iCloud 额度记录：旧日期事件会在额度合并/轮换时移除，但 Apple 的同步或备份可能造成短暂延迟。
- 购买记录：由 Apple、RevenueCat 依交易、税务、安全和法律要求保留。
- 支持邮件：仅在解决问题、维护记录或履行法律义务所需期间保留。
你可在 iOS“设置”中撤销照片权限。若要请求访问、更正或删除我们能够控制的服务器侧个人数据，请联系支持邮箱。为防止未经授权的删除，我们可能需要核实请求。
11. 安全与跨境处理
我们采取适合服务性质的技术与管理措施保护数据，例如使用 HTTPS 传输和限制功能所需数据范围。但任何网络传输或存储都无法保证绝对安全。服务提供商可能在你所在国家或地区以外处理数据，并适用当地法律及适当的保护措施。
12. 儿童隐私
服务并非专门面向 13 岁以下儿童（或当地法律规定的更高最低年龄）。我们不会故意向儿童索取个人数据。如果监护人认为儿童向我们提供了数据，请联系我们以便处理。
13. 不跟踪与数据出售
App 不含第三方广告 SDK，不将数据用于跨公司定向广告，也不出售个人数据。因此 App 不会请求 App Tracking Transparency 跟踪许可。
14. 政策更新
当功能、服务提供商或法律要求发生变化时，我们可能更新本政策。重大变化会通过本页面、App 内提示或其他适当方式说明，并更新生效日期。
At a glance: Standard photo editing and AI generation history stay on your device by default. Only when you actively use AI generation are the selected person image and matching reference assets sent to an AI service for processing. We do not serve ads, track you across apps, or sell personal data.
1. Scope
This Privacy Policy applies to the Endfield Motion iOS application (the “App”) and the product website hosting this Policy (together, the “Services”). By using the Services, you acknowledge this Policy. If you do not agree, do not use the relevant features.
2. Data we process
| Data category | When processed | Purpose and destination |
|---|
| Photos you select |
When using the custom editor or AI generation |
Standard editing occurs on device. For AI generation, the person image is compressed on device to under 500 KB, then sent with selected reference assets to the AI image service. |
| AI references and composition choices |
When you submit a helmet, suppressor, weapon, or logo option |
Used to build the corresponding instruction and provide explicit reference images to the AI service solely to fulfill your generation request. |
| Generated images and local history |
After the AI returns a successful result |
The image and composition description are stored in the App’s Application Support directory for history. A copy enters Photos only when you choose to save it. |
| Subscription and purchase status |
When viewing Pro, purchasing, restoring, or checking entitlement |
Apple processes payment. RevenueCat processes an anonymous App user identifier, product/transaction information, and App/device technical data needed to validate entitlement. We do not receive full payment card details. |
| Daily AI quota records |
When a Pro user checks or consumes AI quota |
The UTC date and random quota-event identifiers are stored locally and synced through Apple iCloud Key-Value Storage across devices on the same Apple account. Images, prompts, and generation history are not synced. |
| Network request information |
When obtaining UTC time, downloading operator media, checking subscriptions, or calling AI |
Relevant services may receive an IP address, request time, basic network/device information, and logs needed to deliver content, secure services, and diagnose failures. |
| Support communications |
When you email support |
We process your email address, message, and attachments you choose to provide so we can respond. |
3. Photo access and on-device processing
The App uses Apple’s system photo picker to read only images you explicitly select. It requests add-only access to save static wallpapers, AI results, and Live Photos. Add-only permission does not allow the App to browse your entire photo library.
Cropping, rotation, sticker placement, and weapon overlays in the custom editor are performed on device. Downloaded operator videos, portraits, and artwork are cached on device to avoid repeated downloads. You can clear these caches in App Settings.
4. AI image generation
AI generation is a Pro feature. Only after you prepare a person image, select at least one secondary effect, and tap Generate does the App send images and composition instructions to the image endpoint at img2api.xayoung.com and processors required to fulfill the generation.
- Inputs may include a photo of a person and may therefore be user content or personal data.
- The data is used to fulfill the generation request, protect the service, and diagnose failures—not for Endfield Motion advertising profiles or cross-app tracking.
- The App developer does not provide a persistent server-side generation library; the App stores your generation history locally on your device.
- Processors may hold transient copies of inputs, outputs, or security logs for the period needed to complete and protect the request. Do not upload sensitive, confidential, or unauthorized images.
AI output can be inaccurate or differ from its references. If you believe server-side data should be deleted, contact us below; where the data can be identified and is within our control, we will process or forward the request.
5. Pro subscriptions and RevenueCat
Purchases are completed by the Apple App Store, and entitlements are validated using RevenueCat. Apple and RevenueCat may process transaction records, anonymous identifiers, and necessary technical information under their policies. See Apple’s Privacy Policy and RevenueCat’s Privacy Policy.
6. iCloud and trusted UTC time
To sync the five-image daily AI allowance at low cost across devices on the same Apple account, the App stores the UTC date and quota-event identifiers in iCloud Key-Value Storage. The record contains no photo, prompt, or generated image.
The App requests the current UTC date from TimeAPI.io to reduce attempts to bypass the quota by changing device time. This request contains no photo or prompt, although the provider receives network metadata required for an ordinary web request. Apple handles iCloud data according to your iCloud settings.
7. Operator media and remote content
The App downloads operator videos, portraits, and artwork on demand from configured content hosts, including an official content delivery network and imgbed.xayoung.com. Hosts may record standard request information. Downloaded content remains in device caches until you clear it, the system reclaims it, or you uninstall the App.
8. This website
This site uses no ads, analytics scripts, tracking pixels, or cookies. Changing language does not write to persistent browser storage. The hosting provider may still record standard server logs such as IP address, browser type, and request time to deliver and secure the site; retention depends on the provider selected for deployment.
9. How we share data
We share data only as needed with Apple (purchases, Photos, and iCloud), RevenueCat (subscription entitlement), AI image processors, the UTC time service, and media hosts. We do not sell or rent personal data or provide it to data brokers. Providers are expected to process data only as needed to deliver and secure their services or meet legal obligations.
We may also disclose necessary information if required by law or to protect the rights and safety of users, the developer, or the public.
10. Retention and deletion
- Local generation history: retained until iOS removes App data or you uninstall the App.
- Copies in Photos: controlled by you and removable in the Photos app.
- Media caches: removable in App Settings and may also be reclaimed by iOS.
- iCloud quota records: prior-day events are removed during quota merging/rotation, subject to possible Apple sync or backup delay.
- Purchase records: retained by Apple and RevenueCat as required for transactions, tax, security, and law.
- Support email: retained only as needed to resolve the issue, maintain an appropriate record, or satisfy legal obligations.
You can revoke photo permission in iOS Settings. To request access, correction, or deletion of server-side personal data under our control, email support. We may need to verify the request to prevent unauthorized deletion.
11. Security and international processing
We use technical and organizational measures appropriate to the Services, including HTTPS transport and limiting data to what each function needs. No network transmission or storage is completely secure. Providers may process data outside your country or region, subject to local law and appropriate safeguards.
12. Children’s privacy
The Services are not directed to children under 13, or any higher minimum age required by local law. We do not knowingly solicit personal data from children. A parent or guardian who believes a child provided data should contact us.
13. Tracking and sale
The App contains no third-party advertising SDK, does not use data for cross-company targeted advertising, and does not sell personal data. It therefore does not request App Tracking Transparency permission.
14. Changes to this Policy
We may update this Policy as features, providers, or legal requirements change. Material changes will be described on this page, in the App, or through another appropriate notice, and the effective date will be revised.