1. 概述与核心承诺 Overview & Core Privacy Commitment
欢迎使用 TwinScene（以下简称“我们”或“本应用”）。TwinScene 是一款专为 iOS 创作者设计的前后摄像头同时录制（画中画与分屏）工具。
我们坚信，创作者拍摄的视频、音频与日常生活具有最高的私密性。因此，TwinScene 在产品架构设计之初即贯彻 “隐私由设计保障（Privacy by Design）” 与 “影像在设备本地处理” 原则；购买与权益验证使用 Apple 和 RevenueCat 服务：
- 无云端视频上传：所有前后摄实时合成、滤镜渲染与编码均由您 iPhone 本地的 GPU/Metal 管道处理。
- 不收集影像生物特征：我们不收集您的面容特征、声音特征或联系信息；购买服务使用匿名用户标识与购买记录。
- 数据所有权归属您：录制产生的所有照片与视频直接存储在您的本地 iOS 系统相册中，我们无法也无权访问或分发。
Welcome to TwinScene ("we", "our", or "the App"). TwinScene is a dual-camera recording tool crafted for iOS creators, allowing simultaneous front-and-back camera capture (Picture-in-Picture and Split Screen).
We firmly believe that personal media and creative work require the utmost level of privacy. TwinScene follows Privacy by Design and processes media on your device; purchase and access verification use Apple and RevenueCat services:
- No Cloud Video Upload: All dual-camera stitching, real-time compositing, and video encoding occur strictly on your device using Apple's GPU and Metal pipeline.
- No Biometric Data Collection: We never gather facial biometric data, voiceprints, or contact details. Purchase services use an anonymous user identifier and purchase records.
- Full User Ownership: Your captured videos and photos remain exclusively in your local device photo library. We cannot access or transmit them.
2. 系统权限使用详述 Detailed System Permissions Usage
为实现双摄录像与媒体保存的核心功能，TwinScene 会在首次使用相关功能时向 iOS 系统申请以下权限。我们仅在必要范围内请求这些权限，具体说明如下：
| 权限名称 | 对应系统 API | 权限用途说明 | 数据处理方式 |
|---|---|---|---|
| 相机权限 | NSCameraUsageDescription |
用于同时调用 iPhone 的前置与后置镜头，实现画中画与分屏实时录像。 | 仅在内存中处理视频帧，不上传、不缓存至服务器。 |
| 麦克风权限 | NSMicrophoneUsageDescription |
用于在录制双摄视频时同步录制环境声音与创作者解说语音。 | 本地直接混流写入视频文件，不进行音频特征提取或云端转录。 |
| 照片图库权限 | NSPhotoLibraryUsageDescriptionNSPhotoLibraryAddUsageDescription |
用于将合成完毕的双摄视频与截图保存至系统相册，并在应用内预览刚录制的作品。 | 仅限写入和应用内媒体查看，绝不扫描或上传您的相册历史内容。 |
| 地理位置 (可选) | NSLocationWhenInUseUsageDescription |
仅当您主动开启“地点水印”功能时，用于获取拍摄时的城市与经纬度标签。 | 仅在 App 使用期间调用 Apple 提供的定位与地理编码服务；开发者不接收或存储位置与轨迹。 |
您随时可以在 iPhone 的 「设置」→「TwinScene」 中更改或关闭上述任何权限。关闭位置权限不会影响基础录像功能；关闭相机或麦克风权限可能会导致无法完成拍摄或录音。
To enable dual-camera recording and video saving, TwinScene requests the following iOS permissions. We strictly limit our requests to what is strictly necessary:
| Permission | iOS Key | Purpose | Data Handling |
|---|---|---|---|
| Camera | NSCameraUsageDescription |
Enables simultaneous front and back camera recording for Picture-in-Picture and split-screen mode. | Processed strictly in device RAM / GPU; never streamed or stored on external servers. |
| Microphone | NSMicrophoneUsageDescription |
Captures synchronized audio and commentary while recording dual-camera clips. | Multiplexed directly into the local video file without voice profiling or cloud transmission. |
| Photo Library | NSPhotoLibraryUsageDescriptionNSPhotoLibraryAddUsageDescription |
Saves synthesized dual-camera videos/photos directly to Camera Roll and previews recorded media. | Write access and in-app preview only; never scans, alters, or uploads existing photos. |
| Location (Optional) | NSLocationWhenInUseUsageDescription |
Used solely when you enable the "Location Watermark" to stamp city/coordinates on your video. | Queried only while using the app through Apple's location and geocoding services; the developer does not receive or store locations or routes. |
You can review and revoke any of these permissions at any time via your device's Settings → TwinScene. Revoking location will not affect core recording features.
3. 数据收集与隐私保障 Data Collection & Storage
3.1 我们不收集的信息
- 无个人身份识别信息 (PII)：我们不收集您的姓名、身份证号、家庭住址、电话号码或邮箱地址。
- 无面部生物识别信息：尽管应用利用前置镜头拍摄您的面部画中画，但我们不会提取、分析、存储或共享任何面部识别特征或生物数据（符合 Apple Face Data Guideline 规范）。
- 无设备跨应用追踪：我们不使用 IDFA（广告标识符），不参与任何跨应用广告追踪生态。
3.2 本地存储与用户数据安全
TwinScene 会在本地沙盒（App Sandbox）中保存用户偏好设置（例如分辨率与水印选项），并保留录制文件用于应用内的历史记录、回放和分享。您可以在应用内删除这些录制；卸载应用会清除其沙盒内容。导出到系统相册的副本由您在“照片”中管理。
3.3 购买服务数据
RevenueCat 会接收 SDK 生成的匿名 App User ID、商品及交易记录、订阅状态和应用版本等购买服务信息，用于验证付款、同步订阅状态、恢复 Pro 权益及分析购买与订阅收入。这些信息不会包含您的照片、视频、音频或拍摄位置，也不用于跨应用广告追踪。卸载应用不等于删除 Apple 或 RevenueCat 保存的购买记录；购买数据相关请求可通过支持邮箱联系我们。
3.1 Information We DO NOT Collect
- No Personally Identifiable Information (PII): We never collect names, phone numbers, postal addresses, or email addresses through app usage.
- No Biometric / Facial Recognition Data: While the front camera captures your reaction, TwinScene never extracts, analyzes, stores, or shares facial geometry or biometric data (compliant with Apple Guidelines).
- No Cross-App Tracking: We do not access IDFA or engage in cross-app or cross-site tracking.
3.2 Local Storage & Cache Security
TwinScene stores preferences (such as resolution and watermark options) in its local app sandbox and retains recording files for in-app history, playback, and sharing. You can delete these recordings in the app; uninstalling the app removes its sandbox. Copies exported to Photos remain under your control in the Photos app.
3.3 Purchase Service Data
RevenueCat receives an SDK-generated anonymous App User ID, product and transaction records, subscription status, and purchase service information such as the app version to verify payments, sync subscriptions, restore Pro access, and analyze purchase and subscription revenue. This information does not include your photos, videos, audio, or shooting location and is not used for cross-app advertising tracking. Uninstalling the app does not delete purchase records held by Apple or RevenueCat. Contact our support email for purchase data requests.
4. 内购与订阅服务 (In-App Purchases) In-App Purchases & Subscriptions
TwinScene 提供免费功能以及 TwinScene Pro 高级功能（如设备支持时的原生 4K 双摄录制、高帧率与专业布局定制等）。
- 支付处理方：所有的内购交易（按月订阅、按年订阅及永久买断）均由 Apple Inc. 通过 App Store 官方 StoreKit 2 接口安全处理。
- 权益验证：我们使用 RevenueCat 验证购买记录、同步订阅和恢复 Pro 权益。
- 财务安全：TwinScene 无法接触也绝不会存储您的支付卡号、CVC 安全码或账单明细。
- 自动续订说明：订阅会自动按所选周期续费，除非在当前计费周期结束前至少 24 小时在 Apple ID 账户设置中取消订阅。
- 订阅管理与退款：您可以随时在 iPhone 的 「设置」→「Apple ID」→「订阅」 中管理或取消订阅；退款申请均由 Apple 官方政策审核处理。
TwinScene offers core features for free, along with TwinScene Pro premium options (such as native 4K dual-camera recording on supported devices, high frame rates, and custom layouts).
- Payment Processor: All financial transactions (Monthly, Annual subscriptions, and Lifetime unlock) are securely processed by Apple Inc. through StoreKit 2.
- Access Verification: We use RevenueCat to verify purchase records, sync subscriptions, and restore Pro access.
- Financial Data Safety: TwinScene never accesses, stores, or handles credit card numbers, billing addresses, or banking credentials.
- Auto-Renewal: Subscriptions automatically renew unless canceled in your Apple ID account settings at least 24 hours before the end of the current billing cycle.
- Managing Subscriptions & Refunds: You can manage or cancel subscriptions via iPhone Settings → Apple ID → Subscriptions. Refunds are governed by Apple's refund policy.
5. 第三方服务与 SDK 披露 Third-Party Services & SDKs
我们坚持极其克制的工程理念，TwinScene 客户端未集成任何第三方商业广告 SDK 或侵入式分析追踪库（例如 Google AdMob, Meta SDK, Firebase Analytics, AppsFlyer 等）。
SnapKit 仅用于本地 UI 布局。RevenueCat SDK 连接 RevenueCat 服务进行购买与权益验证，并处理第 3.3 节列明的数据。详情见 RevenueCat 隐私政策。
We believe in minimal third-party dependencies. TwinScene contains NO third-party advertising SDKs or invasive analytics trackers (such as Google AdMob, Meta SDK, Firebase, AppsFlyer, etc.).
SnapKit handles local UI layout. The RevenueCat SDK connects to RevenueCat for purchase and access verification and processes the data listed in section 3.3. See the RevenueCat Privacy Policy.
6. 用户权利 (GDPR & CCPA 合规) Your Rights (GDPR & CCPA Compliance)
根据欧盟通用数据保护条例（GDPR）与美国加州消费者隐私法案（CCPA/CPRA），您享有以下法定权利：
- 访问权与导出权：由于所有拍摄的媒体文件均保存在您的本地 iPhone 相册或文件系统中，您可以随时直接导出、分享或查看这些内容。
- 删除权（被遗忘权）：您可以在 TwinScene 的录制历史与系统相册中分别删除对应副本；卸载 TwinScene 会清除应用沙盒中的本地数据。
- 不售卖个人信息声明：我们不出售或出租个人信息，也不与广告数据中介分享；购买服务数据仅用于上述权益验证、恢复及购买与订阅收入分析。
Under the European Union General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA/CPRA), you retain specific privacy rights:
- Right to Access & Portability: Because all recorded videos and snapshots reside directly on your iPhone, you maintain uninterrupted access to view, export, or share them at any time.
- Right to Deletion: You can delete copies separately from TwinScene recording history and Apple Photos. Uninstalling TwinScene removes data stored in its app sandbox.
- "Do Not Sell My Info": We do not sell, rent, or trade your personal data under any circumstances.
7. 未成年人与儿童隐私 (COPPA) Children's Privacy (COPPA Compliance)
TwinScene 不会主动向 13 周岁以下儿童（或您所在司法管辖区规定的最低年龄）收集任何个人信息。若您是未成年人，请在监护人指导和同意下使用本应用。
TwinScene is not directed to children under the age of 13. We do not knowingly collect personal data from children. If you believe any media was captured inadvertently, you can delete it directly from your device at any time.
8. 政策修订与生效 Policy Updates & Effective Date
我们可能会根据法律法规变化或应用功能升级对本隐私政策进行修订。重大修订将在此网页公布，并在公布之日起生效。建议您定期查阅以了解最新政策。
We may update this Privacy Policy from time to time to reflect functional improvements or legal changes. Revisions will be published directly on this page and will take effect upon publication. We encourage you to review this page periodically.