留一张 · 隐私政策

中文（简体）

一句话

留一张不上传、不联网、不需要账号。所有照片分析都在你的 Mac 本机完成。

我们处理什么

你选择授权的文件夹里的图片，或「照片」App 图库中的图片。
处理内容：生成用于相似度比较的特征向量、计算美学评分、读取拍摄时间与文件大小（用于展示与排序）。
处理结果只保存在本机：~/Library/Application Support/PhotoCurator/（约 3 KB/张，5 万张约 164 MB）。不保存照片副本。

我们不做什么

不上传任何照片或缩略图到服务器
不收集账号、联系人、位置、浏览记录
不做统计上报、不做广告、不做追踪（App 的隐私清单位于 PrivacyInfo.xcprivacy：无数据收集、无追踪）
不写入原始照片的 EXIF（收藏只记在本地 JSON）

唯一可能用到网络的情况

若你扫描的是 iCloud 照片且原图尚未下载到本机，「照片」App 会按系统策略下载原图；本 App 只是读取下载后的结果。这个网络行为由 macOS 与「照片」App 负责，照片不会经过本 App 的任何服务器。

删除

文件夹来源：移入废纸篓，可在 Finder 中「放回原处」；App 内清理后 6 秒内也可撤销。
「照片」App 图库来源：移入「照片」App 的「最近删除」，30 天内可在其中恢复。
留一张不会永久删除任何照片。

诊断信息

App 会在本机写一份轻量诊断日志（版本、系统、错误分类、缓存大小），用于排查问题。它只保存在本机，只有你在「帮助与隐私 → 导出诊断信息」时才会被保存到你选择的位置。日志不包含照片内容与文件名。

儿童

本产品不面向 13 岁以下儿童，也不收集任何个人信息。

联系

反馈请导出诊断信息后联系开发者。（对外联系邮箱待产品补充，此处不编造）

English

Summary

留一张 uploads nothing, needs no account, and works fully offline on your Mac.

What it processes

Images in folders you explicitly grant, or in your Photos library.
It computes similarity feature vectors, aesthetic scores, and reads capture date / file size (for display and sorting).
Results stay on this Mac at ~/Library/Application Support/PhotoCurator/ (~3 KB per photo). No copies of your photos are stored.

What it never does

No uploads of photos or thumbnails.
No collection of accounts, contacts, location, or browsing data.
No analytics, ads, or tracking. The privacy manifest (PrivacyInfo.xcprivacy) declares no data collection and no tracking.
No EXIF writes to your originals; favorites are stored in a local JSON file.

The only case that may use the network

If you scan iCloud Photos whose originals are not downloaded, the Photos app may download them per system policy. That traffic is handled by macOS and Photos; your photos never pass through any server of ours.

Deletion

Folder sources: moved to Trash (restorable in Finder; also undoable for 6 seconds in-app).
Photos library: moved to Recently Deleted, recoverable for 30 days.
留一张 never permanently deletes photos.

Diagnostics

A small local log (version, OS, error category, cache size) is written for troubleshooting. It stays on this Mac and is only exported when you choose “Export Diagnostics”. It contains no photo content or file names.

Children

This product is not directed at children under 13 and does not collect personal information.

Contact

Please export diagnostics and contact the developer. (Public contact email TBD — not invented here.)