玲珑码盒隐私政策

XYZQRBox Privacy Policy
最后更新／生效日期：2026 年 10 月 22 日 · 适用版本：2.0.1 及后续更新
应用提供方：大连鑫雨至软件开发有限公司（XYZTech）
联系邮箱：XYZTechFeedBack@gmail.com

本政策适用于 XYZQRBox（中文名“玲珑码盒”）的 iPhone 和 iPad 版本，说明扫码、相册识别、二维码与条形码生成、位置二维码、加密与动态二维码、历史记录、桌面与锁屏小组件、会员购买以及广告和统计如何处理信息。

核心说明：扫描、识别、生成与历史记录在设备本机完成，历史记录不上传云端；不需要注册账号。免费版包含广告；App 会弹出 Apple“允许跟踪”（ATT）请求，是否允许由你决定。广告服务及你同意后的可选统计服务可能处理设备与使用信息，详见第 5 节。

1. 本机功能与处理的信息

  • 摄像头扫码：使用相机实时识别画面中的 QR Code、EAN、UPC、Code 128、Data Matrix、PDF417、Aztec 等码，识别结果自动保存到本机历史。
  • 相册识别：从你选择的图片中识别全部二维码，不需要相机权限。
  • 生成二维码与条形码：使用你输入的文本、网址、Wi-Fi、名片、电话、短信、邮件、日历事件、位置等内容生成码；可使用你选择的图片或 GIF 作为中心元素。导出前在本机校验能否被识别。
  • 位置二维码：你在地图上选点或选择“使用当前位置”时，App 读取所选坐标（WGS-84）生成二维码。
  • 历史记录：按生成、扫描、相册、条形码、位置分类保存在本机，支持搜索和批量管理。删除记录只删除本机这一条，不会删除系统相册中的图片。
  • 小组件：你钉到桌面或锁屏的二维码会保存在本机，以便小组件显示。

照片、二维码内容和历史记录可能包含网址、联系方式、Wi-Fi 密码、位置等个人信息。我们不会为广告或统计目的读取或上传这些内容。

2. 加密二维码与剪贴板

加密二维码使用 AES-256-GCM 在本机加密，二维码中只包含密文；密码保存在本机 Apple 钥匙串，不写入二维码或历史记录。解密在 App 内本机完成，解密文本复制到剪贴板后 2 分钟自动过期。条形码页面在你选择“粘贴”时读取剪贴板内容。请勿把含有敏感信息的二维码交给不可信的人。

3. 设备权限

  • 相机：用于摄像头扫码和手电筒。相册识别与手动生成不需要相机权限。
  • 照片：用于从相册选择图片识别、选择中心图片，以及在你保存时把二维码写入相册。
  • 位置：仅在你选择“使用当前位置”时使用，用于生成位置二维码。
  • 钥匙串：保存加密二维码的密码。

你可在 iOS“设置”中管理权限；拒绝某项权限只影响依赖它的功能。

4. 你主动触发的联网与分享

打开二维码中的网址会访问对应网站，对方服务器可收到你的 IP 地址等网络信息；遇到 http 链接时 App 会先提示“此链接未使用加密连接”。位置选点使用 Apple 地图（MapKit）显示地图，地图数据请求由 Apple 按其隐私政策处理。通过系统分享、复制或保存到相册的内容由你选择的目标处理。购买与恢复购买由 Apple StoreKit 处理，我们不接收完整的支付卡信息。

5. 广告、统计与隐私选择

免费版包含横幅、插屏广告；高清分享与复制、多码卡片可通过观看一段激励广告解锁一次。确认有效会员后不展示横幅与插屏广告。你可在 App“设置”中管理广告隐私选项。

5.1 按 App Store 地区选择服务

我们根据 Apple 提供的 App Store 商店国家或地区选择广告和使用统计服务（与玲珑图片、玲珑动态相同），该判断不使用你的精确位置或界面语言：

  • 中国大陆商店：广告使用穿山甲（Pangle / GroMore，北京巨量引擎网络技术有限公司）；可选使用统计使用友盟 U-App（友盟同欣（北京）科技有限公司）。
  • 其他国家和地区：广告使用 Google AdMob，并通过 Google User Messaging Platform（UMP）处理适用地区的隐私选择；可选使用统计使用 Google Analytics for Firebase（Google LLC 及其关联方）。

每次运行最多初始化一个广告服务和一个统计服务，不会同时启用友盟和 Firebase 统计；商店地区无法确定时，这些地区服务保持未初始化。

5.2 允许跟踪（ATT）

玲珑码盒会弹出 Apple“App 跟踪透明度”（允许跟踪）请求。只有你选择“允许”时，广告服务才可能通过该授权访问设备广告标识符（IDFA），并按 App Store 隐私标签所述，将使用数据用于在其他公司的 App 和网站中追踪你，以投放和衡量广告。选择“要求 App 不跟踪”时，App 不会取得 IDFA；但广告投放、频次控制、衡量和反作弊所需的基础数据处理仍会进行。你可随时在 iOS“设置 → 隐私与安全性 → 跟踪”中更改。拒绝跟踪不影响扫码、生成和历史等核心功能。

5.3 广告可能处理的数据

根据所选服务、SDK 配置、你的隐私选择及广告互动，广告服务可能处理：设备与 App 信息（机型、系统、App 版本、语言、时区、屏幕信息）；网络信息（IP 地址、连接类型及据此推断的大致地区）；设备或应用标识（如 IDFV，以及经你 ATT 授权且可用时的 IDFA）；广告展示、点击、关闭、转化、频次及反作弊信号；崩溃、性能等诊断信息。这些数据用于广告投放、频次控制、效果衡量、归因、反作弊和安全。根据 App Store 隐私标签，App 及其服务提供方可能处理粗略位置、设备 ID、使用数据（产品交互）、广告数据及诊断数据。我们不会把扫描内容、二维码内容、历史记录或加密密码提供给广告服务，也不会把精确位置提供给广告服务用于广告。

5.4 可选使用统计

使用情况统计需要你在 App 内选择“允许”后才会初始化对应地区的统计 SDK；选择“暂不”不影响扫码、生成、历史或会员功能。统计用于了解启动、会话、页面访问、参与度和版本使用情况，以改进 App；所选服务可能处理应用实例或设备标识、设备与系统信息、App 版本、语言、IP 地址等网络信息及使用事件名称、时间和时长。我们不会把扫描内容、二维码内容或历史记录作为统计事件发送。统计授权与广告隐私选择和 ATT 授权相互独立，一项不能代替另一项。

5.5 第三方政策

6. 保留与删除

  • 历史记录、小组件内容和设置保存在本机，直到你在 App 中删除、卸载 App 或系统移除相关数据；钥匙串中的加密密码可能在卸载后仍由系统保留。
  • 已保存到系统相册、分享给他人或其他 App 的副本需在相应位置删除。
  • 广告和统计服务提供方按其政策和后台设置保留已收到的数据；撤回选择可停止后续处理，但不保证立即删除其历史记录。

你可通过 XYZTechFeedBack@gmail.com 提出访问、更正、删除或其他依法享有的请求。玲珑码盒没有注册账号，因此没有账号注销步骤。

7. 未成年人与跨境处理

本 App 面向一般工具使用场景，不以收集儿童信息为目的。未成年人应在监护人指导下使用和购买。广告、统计等第三方服务及你访问的网站可能在你所在国家或地区以外处理数据。

8. 政策更新与联系

我们会在功能或数据处理方式变化时更新本政策及日期；需要另行告知或同意的新处理将按适用要求处理。隐私问题请联系 大连鑫雨至软件开发有限公司（XYZTech）：XYZTechFeedBack@gmail.com，注明“XYZQRBox / 玲珑码盒”。请勿发送含密码或敏感二维码内容的截图。

XYZQRBox Privacy Policy

Last updated / effective: October 22, 2026 · Applies to version 2.0.1 and later updates
App provider: Dalian Xinyuzhi Software Development Co., Ltd. (XYZTech)
Contact: XYZTechFeedBack@gmail.com

This policy covers XYZQRBox (玲珑码盒) for iPhone and iPad. It explains scanning, photo recognition, QR and barcode creation, location codes, encrypted and animated codes, history, Home and Lock Screen widgets, membership purchases, and advertising and analytics.

Summary: scanning, recognition, generation and history happen on your device; history is never uploaded and no account is required. The free version includes ads; the app shows Apple’s App Tracking Transparency (ATT) prompt and you decide whether to allow tracking. Advertising services, and optional analytics if you consent, may process device and usage information (section 5).

1. On-device features and information

  • Camera scanning reads QR Code, EAN, UPC, Code 128, Data Matrix, PDF417, Aztec and other codes in the camera view and saves results to local history.
  • Photo recognition lists every QR code in an image you pick, without camera permission.
  • QR and barcode creation uses the text, URL, Wi-Fi, contact, phone, SMS, email, calendar, location or other content you enter, and any image or GIF you choose as the centre element. Scannability is checked on-device before export.
  • Location codes use the coordinates (WGS-84) of the point you pick on the map or of your current location if you choose “Use current location”.
  • History is stored locally by type and is searchable. Deleting a record removes only that local entry, not images in your photo library.
  • Codes you pin to Home or Lock Screen widgets are stored locally so the widget can show them.

Photos, code contents and history may contain URLs, contact details, Wi-Fi passwords or locations. We do not read or upload this content for advertising or analytics.

2. Encrypted QR and clipboard

Encrypted QR uses AES-256-GCM on your device; the code holds only ciphertext, and the password is kept in the local Apple Keychain, never in the code or history. Decryption happens in the app on-device, and decrypted text copied to the clipboard expires after two minutes. The barcode screen reads the clipboard when you choose Paste. Do not give codes containing sensitive information to people you do not trust.

3. Permissions

  • Camera: camera scanning and torch. Photo recognition and manual creation do not need it.
  • Photos: picking images to recognize or use as a centre image, and saving codes to Photos when you choose.
  • Location: only when you choose “Use current location” for a location code.
  • Keychain: storing encrypted-QR passwords.

Manage permissions in iOS Settings; refusing one affects only the features that depend on it.

4. Network activity and sharing you initiate

Opening a URL from a code visits that website, whose server can receive your IP address and request details; the app warns before opening plain-http links. Picking a location shows Apple Maps (MapKit); map requests are handled by Apple under its privacy policy. Content you share, copy or save goes to the destination you choose. Purchases and restores are processed by Apple StoreKit; we do not receive full payment-card details.

5. Advertising, analytics and choices

The free version shows banner and interstitial ads; HD sharing/copying and multi-code cards can be unlocked once by watching a rewarded ad. Banner and interstitial ads are not shown once a valid membership is confirmed. Manage ad privacy options in the app’s Settings.

5.1 Services selected by App Store region

We select advertising and usage-analytics providers by the App Store storefront country or region supplied by Apple (the same as XYZPhoto and XYZMaker), not by your precise location or interface language:

  • Mainland China storefront: advertising by Pangle / GroMore (Beijing Ocean Engine Network Technology Co., Ltd.); optional usage analytics by Umeng U-App (Umeng Tongxin (Beijing) Technology Co., Ltd.).
  • Other countries and regions: advertising by Google AdMob, with Google User Messaging Platform (UMP) for applicable privacy choices; optional usage analytics by Google Analytics for Firebase (Google LLC and affiliates).

At most one advertising provider and one analytics provider are initialized per run; Umeng and Firebase Analytics are never enabled together. If the storefront cannot be determined, these regional services stay uninitialized.

5.2 App Tracking Transparency (ATT)

XYZQRBox shows Apple’s App Tracking Transparency prompt. Only if you choose Allow may advertising services access the device advertising identifier (IDFA) through that permission and, as stated in the App Store privacy label, use usage data to track you across other companies’ apps and websites for ad delivery and measurement. If you choose Ask App Not to Track, the app does not obtain IDFA; basic processing needed for ad delivery, frequency control, measurement and fraud prevention still occurs. Change this at any time in iOS Settings → Privacy & Security → Tracking. Refusing tracking does not affect scanning, creation or history.

5.3 Data advertising may process

Depending on the provider, SDK configuration, your choices and ad interactions, advertising services may process device and app information (model, OS, app version, language, time zone, screen), network information (IP address, connection type and approximate region inferred from it), device or app identifiers (such as IDFV and, where authorized through ATT and available, IDFA), ad impressions, clicks, dismissals, conversions, frequency and anti-fraud signals, and crash, performance and other diagnostics, for ad delivery, frequency control, measurement, attribution, fraud prevention and security. According to the App Store privacy label, the app and its providers may process coarse location, device ID, usage data (product interaction), advertising data and diagnostics. We never supply scanned content, code contents, history or encryption passwords to advertising services, and do not pass precise location to them for advertising.

5.4 Optional usage analytics

The regional analytics SDK is initialized only after you choose Allow in the app; choosing Not now does not affect scanning, creation, history or membership. Analytics helps us understand launches, sessions, page visits, engagement and version usage; the selected provider may process app-instance or device identifiers, device and OS information, app version, language, network information such as IP address, and usage-event names, times and durations. Scanned content, code contents and history are not sent as analytics events. Analytics consent, advertising privacy choices and ATT permission are independent; one does not replace another.

5.5 Third-party policies

6. Retention and deletion

  • History, widget content and settings stay on the device until you delete them in the app, delete the app, or the system removes the data; Keychain passwords may persist after deletion.
  • Copies saved to Photos or shared with others or other apps must be deleted where they are stored.
  • Advertising and analytics providers retain received data under their own policies and settings; withdrawing a choice stops further processing but does not guarantee immediate deletion of their history.

Contact XYZTechFeedBack@gmail.com for access, correction, deletion or other requests available under applicable law. There is no XYZQRBox account, so there is no account-deletion step.

7. Minors and international processing

The app is a general-purpose tool and is not intended to collect children’s information. Minors should use and purchase with guardian guidance. Advertising and analytics providers and websites you visit may process data outside your country or region.

8. Changes and contact

We will update this policy and its date when features or data practices change and handle new processing that needs notice or consent as required. Contact Dalian Xinyuzhi Software Development Co., Ltd. (XYZTech) at XYZTechFeedBack@gmail.com, identifying “XYZQRBox / 玲珑码盒”. Do not send screenshots containing passwords or sensitive code contents.