Privacy Policy

Last updated: 2026-09-02

In one sentence

This app has no server. Your photos, index, search terms and licence key exist in exactly two places: your device, and your own external drive. The app itself sends nothing to any server.

Does the app connect to the internet

No. The app makes no network requests, and it has no accounts, sign-in, advertising or analytics.

Three things, for transparency:

• The app contains an open-source text-processing library (swift-transformers) which also offers a "download a model from the internet" feature. This app does not use that feature: the model is installed on your device together with the app, and nothing is downloaded while you use it. The download code is present in the app but is never run.
• Three things are done by iOS on your behalf, talking to Apple and not to us, and all three are under your control (next section).
• If you installed a beta through TestFlight, Apple forwards crashes and feedback to us (see "TestFlight").

Three things iOS does on your behalf

Fetching originals from iCloud. When you back up, if your originals live in iCloud, the app asks whether to back up only what is on this device or to download and back up everything. Only if you choose the latter does iOS fetch the originals from iCloud; that is a connection between your Apple account and Apple. Thumbnails and everything else use only what is already on the device.

Query translation. On iOS 26 or later, and only if you have installed the matching language pack in iOS, the app uses Apple's built-in translation to turn your search into English before matching. Apple states that these translations are processed entirely on the device; Apple may collect usage and performance metrics for the API, including this app's identifier and the language pair, but not your text or its translation. Without the language pack the app never asks to download one, and search works as before.

Photo classification. The app uses Apple's on-device Vision framework to label photos (for example documents or receipts). There is no network part to this.

Photo library permission

The app asks to read your photo library only when you start a backup, for one purpose: copying the photos you chose onto your external drive. Without a drive connected, it never asks.

You can choose full access or limited access. With limited access the app sees only the photos you picked. You can change or withdraw this at any time in iOS Settings → Privacy & Security → Photos.

The app never deletes, edits or moves any photo in your library. Clearing backed-up photos off the phone is something you do yourself in the Photos app.

What is stored on your device

• The search index (one set of numbers per photo), thumbnails and category labels.
• Settings: the licence key, the name you gave your drive, the searches you saved as albums and their names, the names you gave to groups, and the photos you hid.
• A device identifier: a random string the app generates to represent this device in the drive's roster. It is not your Apple ID and not a hardware serial number.
• Logs and performance records: counts and error kinds only; no photos, paths or search terms. They stay on the device and are not sent anywhere.

The index and thumbnails are excluded from iCloud and computer backups of the device; the settings file is included.

Search terms you type are matched in memory and not recorded; only a search you deliberately save as an album is written to settings.

What is stored on your external drive

• The photo originals, copied byte for byte into the DCIM folder. Because they are originals, whatever metadata the photos already carried (capture time, camera, and location if present) travels with them.
• A ledger: for each photo, its file name, size, checksum, capture time and time zone, dimensions, whether it is a screenshot, whether it is a favourite, which device it came from, when it was backed up, and any deletion and restore records.
• A roster: which devices have used this drive and the names their owners typed (empty by default; the app never reads your phone's name).

All of this is plain, unencrypted data. Anyone holding the drive can read everything on it. This is deliberate: your photos remain recoverable even if this app no longer exists.

The drive is shared. When family members add the same drive on their own phones, everyone sees all the photos, all the deletions, and who deleted what.

Deletion

• Deleting a photo in the app moves it to the drive's Recently Deleted, where it can be restored for 30 days; after 30 days it is removed from the drive.
• Removing the drive in Settings leaves everything on the drive untouched.
• The licence key is removed with Settings → Licence → Remove Key.
• Deleting the app from your device deletes everything on the device: index, thumbnails, settings, key, logs. Nothing on the drive is deleted; those are your files and keeping them is your decision.

Licence key

A string you paste into Settings. It lives only in this device's settings file. It is not sent anywhere, and there is nowhere to send it.

TestFlight (beta builds only)

If you installed through TestFlight, the following is Apple's mechanism, not this app's:

• When the app crashes, TestFlight asks whether to send the crash details to us. Nothing is sent unless you agree.
• Feedback you submit (text and screenshots) is sent to us. Whatever is in the screenshot, we will see — do not screenshot anything you do not want seen.
• Testers invited by email are visible to us by name and email address; testers who joined through a public link are not, but we can see their number of sessions and crashes, the day they installed, and the latest installed version.
• Apple keeps crash reports available to us for 120 days.

Third parties

The app integrates no analytics, advertising or tracking SDK. It does not provide, sell or share your data with anyone.

When you tap Share and hand a photo to another app, that is a destination you chose; it does not pass through us.

Children

The app collects no data, and therefore collects no data from children.

Your rights

We hold none of your data, so there is nothing to request, correct or have deleted from us. The "Deletion" section above is the complete set of methods, and all of them are in your hands.

Changes

If this page changes, the "Last updated" date at the top changes with it.

Contact

For any privacy question: support@laai.ai

---

隱私政策

最後更新：2026-09-02

一句話

這個 App 沒有伺服器。你的照片、索引、搜尋字和授權金鑰只存在兩個地方：你的裝置，和你自己的外接硬碟。App 本身不會把任何東西送到任何伺服器。

App 自己會不會連網

不會。App 不發出任何網路請求，也沒有帳號、登入、廣告或分析工具。

為了透明，三件事寫清楚：

• App 內含一個開放原始碼的文字處理程式庫（swift-transformers）。它另外提供「從網路下載模型」的功能，這個 App 沒有走那條路——模型已經隨 App 一起裝在你的裝置上，使用過程中不會下載任何東西。那段下載程式碼在 App 裡，但不會被執行。
• 有三件事會由 iOS 代你跟 Apple 連線，都不是這個 App 的伺服器，也都在你控制之下（見下一節）。
• 如果你是透過 TestFlight 安裝的測試版，Apple 會把當機與回饋送給我們（見「TestFlight」）。

由 iOS 代你連線的三件事

從 iCloud 取回照片原檔。 備份時如果你的照片原檔在 iCloud 上，App 會問你要「只備份在這台裝置上的」還是「下載並備份全部」。你選後者，iOS 才會向 iCloud 取回原檔；那是你的 Apple 帳號與 Apple 之間的連線。縮圖和其他功能一律只用裝置上已有的內容。

查詢翻譯。 在 iOS 26 以上、而且你已經在系統裡安裝了對應語言包的裝置上，App 會用 iOS 內建的翻譯把你的搜尋字翻成英文再比對。Apple 說明這個翻譯完全在裝置上處理；Apple 會收到 API 的使用量與效能指標（包括這個 App 的識別碼與語言對），但不包括你打的字或翻譯結果。沒裝語言包，App 不會要求下載，搜尋照常。

照片分類。 App 用 iOS 內建的 Vision 框架在裝置上替照片加標籤（例如文件、收據）。這個功能沒有網路的部分。

相簿權限

App 只在你開始備份時才要求讀取相簿，用途只有一個：把你挑選的照片複製到你的外接硬碟。沒接硬碟的時候，App 不會問。

你可以選「允許完整取用」或「限制取用」。選「限制取用」時，App 只看得到你挑選的那些照片。你隨時可以在 iOS 的「設定」→「隱私權與安全性」→「照片」裡改變或收回。

App 不會刪除、修改或搬移你相簿裡的任何一張照片。 要從手機上清掉已經備份的照片，是你自己在「照片」App 裡做的事。

存在你的裝置上的東西

• 搜尋索引（每張照片一組數字）、縮圖、分類標籤。
• 設定：授權金鑰、你替硬碟取的名字、你存成相簿的那幾句搜尋字與相簿名稱、你替分類取的名字、你隱藏的照片。
• 一個裝置識別碼：App 自己產生的一串亂數，用來在硬碟的名冊上代表這台裝置。它不是你的 Apple ID，也不是硬體序號。
• 日誌與效能紀錄：只有次數與錯誤類別，沒有照片、路徑或搜尋字。留在裝置上，不會送出。

索引與縮圖不會進入 iCloud 或電腦的裝置備份；設定檔會。

你打的搜尋字只在記憶體裡比對，不會被記錄；只有你主動「存成相簿」的那一句會存在設定裡。

存在你的外接硬碟上的東西

• 照片原檔，逐位元組的複製，放在 DCIM 資料夾。因為是原檔，照片裡原本的中繼資料（拍攝時間、相機、以及如果有的話，拍攝地點）都跟著過去。
• 一份清單：每張照片的檔名、大小、校驗碼、拍攝時間與時區、尺寸、是不是截圖、有沒有加最愛、來自哪台裝置、什麼時候備份的，以及刪除與還原的紀錄。
• 一份名冊：哪些裝置用過這顆硬碟，以及各自取的名字（名字是人自己打的，預設是空的；App 不會抓你手機的名稱）。

這些都是明文，沒有加密。 拿到硬碟的任何人都讀得到上面的一切。這是刻意的：就算 App 消失了，你的照片仍然拿得回來。

硬碟是共用的。 家人把同一顆硬碟加進各自的手機，每個人都看得到全部的照片、全部的刪除，以及是誰刪的。

刪除

• 在 App 裡刪除照片，照片會進硬碟上的「最近刪除」，30 天內可以還原；30 天後才真的從硬碟上刪掉。
• 在「設定」裡移除硬碟，硬碟上的東西一個都不會動。
• 移除授權金鑰：「設定」→「授權」→「移除金鑰」。
• 把 App 從裝置上刪除，裝置上的一切（索引、縮圖、設定、金鑰、日誌）會一起消失。硬碟上的東西不會——那是你的檔案，要不要留是你決定。

授權金鑰

一串你貼進「設定」的文字。它只存在這台裝置的設定檔裡，不會送到任何地方，也沒有任何地方可以送。

TestFlight（測試版才有）

如果你是透過 TestFlight 安裝的，以下是 Apple 的機制，不是這個 App 的：

• 當機時，TestFlight 會問你要不要把當機資料送給我們。你不同意就不會送。
• 你主動送出的意見回饋（文字與截圖）會送給我們。截圖裡有什麼，我們就看到什麼——不想被看到的畫面請不要截圖。
• 用邀請信加入的測試者，我們看得到姓名與 email；用公開連結加入的看不到，但看得到使用次數、當機次數、安裝日期與版本。
• Apple 保留當機報告供我們下載 120 天。

第三方

App 沒有整合任何分析、廣告或追蹤 SDK。App 不會把你的資料提供、出售或分享給任何人。

你自己按「分享」把照片交給別的 App，那是你選的目的地，不經過我們。

兒童

這個 App 不蒐集任何資料，因此也不會蒐集兒童的資料。

你的權利

我們手上沒有你的任何資料，所以沒有東西可以向我們查詢、更正或要求刪除。上面「刪除」一節就是全部的方法，都在你自己手上。

變更

這一頁如果有變更，我們會更新頁首的「最後更新」日期。

聯絡我們

有任何隱私相關的問題，請寄到：support@laai.ai