Last updated: October 2, 2026
PicFelio offers 20 trial analyses without signing in. A random installation credential is kept in the device Keychain; our server stores a protected anonymous identity and trial usage. A keyed digest of the source IP and day is stored to limit creation of new trial identities. Signed-in free accounts receive 50 analyses per month. Purchases and iCloud sync require sign-in. Elsewhere, Sign in with Apple is used without requesting your name or email address. Our server stores account identifiers, protected authentication credentials, subscription and quota records. It uses a keyed digest of the verified phone number and does not store the phone number in plain text. The app keeps a masked phone number on your device to show the signed-in account.
For mainland China App Store accounts, phone sign-in is provided by Alibaba Cloud Fusion Authentication. Before the first initialization under the current policy version, PicFelio displays the disclosure and consent checkbox on its sign-in page and stores the user's choice on the device. Depending on the authentication route, the service may use number authentication, SMS authentication, a graphical CAPTCHA, and the gateway SDK of China Mobile, China Unicom, or China Telecom. These components may process a phone number, IP or network address, network type, device manufacturer and model, operating-system version, SIM state, carrier type, and verification interaction data to authenticate the user, prevent abuse, and analyze service reliability. The SDK declares its analytics data as not linked to the user and not used for tracking or advertising.
Photos, recognized text, descriptions and your saved library are kept on your device. When privacy mode is off and cloud analysis is enabled, the app uploads a reduced image directly to our private Alibaba Cloud OSS bucket using a short-lived, single-object authorization; recognized text, capture time and approximate city-level location may be sent to our server and Alibaba Cloud Bailian for analysis. Ordinary image objects are automatically deleted within 24 hours and are deleted when you delete your account. Our server normally verifies object metadata and gives Bailian a short-lived read URL without reading the image bytes. During testing, a server-side diagnostic mode may retain encrypted request data and a reduced image for the fixed sole test account for up to 10 days. This mode is unavailable to ordinary accounts. Account deletion removes existing diagnostic records. Usage and operation records are stored to enforce quotas.
If you turn on iCloud sync, saved library copies and related metadata are placed in your Apple iCloud Documents account so your devices can restore them. Apple handles that storage. Purchases are processed by Apple; we verify transaction data and keep subscription records to provide the purchased quota.
PicFelio does not display advertising, sell personal data, or use collected data to track you across other companies' apps or websites. You can turn on privacy mode, switch off iCloud sync, or delete your account in Settings. Account deletion removes our active account, session, usage and purchase records. A limited protected purchase binding may remain to prevent transfer of the same subscription to another account. Account deletion does not automatically remove device copies or previously uploaded iCloud copies. Contact support for privacy requests.
更新日期：2026 年 10 月 2 日
图拍拍提供未登录累计 20 次试用。设备 Keychain 保存随机安装凭据，服务端保存受保护的匿名身份和试用用量；来源 IP 的带密钥摘要与日期用于限制新试用身份创建。登录免费账号每月可分析 50 张。购买和 iCloud 同步需要登录。其他地区使用 Apple 登录，App 不请求姓名或电子邮箱。服务端保存账号标识、受保护的认证凭据、订阅和额度记录；已验证手机号仅以带密钥的摘要用于账号识别，不保存明文手机号。App 在设备上保存遮盖后的手机号，用于展示当前账号。
中国大陆 App Store 账号可使用阿里云融合认证手机号登录。在当前隐私政策版本下首次初始化前，图拍拍会在自己的登录页显示披露内容和同意勾选框，并在设备上保存用户的选择。根据认证路径，服务可能使用号码认证、短信认证、图形验证码，以及中国移动、中国联通或中国电信的网关认证 SDK；这些组件可能为登录认证、防止滥用和分析服务可靠性处理手机号、IP 或网络地址、网络类型、设备制造商和型号、操作系统版本、SIM 卡状态、运营商类型及验证交互信息。SDK 声明其分析数据不关联用户，也不用于跟踪或广告。
照片、识别文字、说明和已保存资料保存在设备上。关闭隐私模式并启用云端分析时，App 使用短时、单对象授权将缩小图片直接上传至我们的阿里云私有 OSS；识别文字、拍摄时间和城市级地点可能经服务端发送至阿里云百炼。普通图片对象在 24 小时内自动删除，删除账号时也会同步删除。正常分析中业务服务端仅核验对象元数据并向百炼签发短时读取地址，不读取图片字节。测试期间，服务端诊断模式可仅为固定的唯一测试账号加密保存请求数据和缩小图片，最多 10 天；普通账号无法启用。删除账号会移除已有诊断记录。服务端保存用量和操作记录以执行额度。
开启 iCloud 同步后，已保存资料的副本和相关元数据会进入你的 Apple iCloud Documents 账号，供同账号设备恢复，存储由 Apple 提供。订阅由 Apple 处理；我们验证交易数据并保存订阅记录以提供对应额度。
图拍拍不展示广告、不出售个人信息，也不使用收集的数据跨其他公司的 App 或网站跟踪你。你可以在设置中开启隐私模式、关闭 iCloud 同步或删除账号。删除账号会移除服务端的有效账号、会话、用量和购买记录；为防止同一订阅转移到其他账号，可能保留少量受保护的购买绑定。删除账号不会自动删除设备副本或此前上传至 iCloud 的副本。如有隐私请求，请联系支持团队。