1. System permission
On first launch, selfo shows the Privacy Policy and Terms of Use. selfo requests read-and-write Photos access only after you tap “Agree and Continue”; tapping “Not Now” does not request Photos access.
| Permission | Use | Optional? | Effect of refusal or limitation |
|---|---|---|---|
Read-and-write Photos accessPhotoKit .readWrite | Read, preview, play, scan, and group media; create and maintain “selfo 收藏”; confirm favorites and deletion. | Yes | Core organization requires Full Access. If denied or limited, core features are unavailable; legal and subscription information remains viewable. |
iOS presents a single read-and-write Photos authorization. selfo does not request separate “read” and “write” permissions and uses only system capabilities within the authorized scope when needed.
2. Personal information and data list
| Category | Details | Purpose | Processing and retention |
|---|---|---|---|
| Media content | Authorized photos, videos, screenshots, screen recordings, and Live Photos | Display, play, organize, compare, scan, and confirm actions | Core processing on device; not uploaded to a developer-controlled selfo server. Originals remain in the system library. |
| Basic media data | Asset identifier, filename, dates, type, dimensions, duration, file size, and album membership | Sort, group, show details and statistics, and resume progress | On device; related records ordinarily remain with app data. |
| Capture and EXIF data | Existing camera/lens model, aperture, exposure, ISO, focal length, and similar fields | Display media details | Read on device as needed; not uploaded to a selfo server. |
| Embedded location | Coordinates already embedded in a photo or video | Show coordinates, a place name, and map preview; open the media location in Apple Maps when you actively choose to do so | Original coordinates remain system media metadata and may be passed through MapKit to Apple Maps for display or opening the map; resolved details and previews are temporary cache. |
| Organization records | Pending favorites, pending deletion, skipped/completed items, current progress, and selected albums | Resume, batch review, and avoid duplicate handling | On device until undone, cleared, or the app is deleted. |
| Daily free allowance | Media identifier or deduplication digest, media type, current-day pending reservations and used state, and local calendar day reference | Deduplicate, reserve, release, and automatically reset the daily allowance of 20 photos and 10 videos | On device; used state resets at a local-day boundary. A previous-day pending item remains until withdrawn or confirmed and does not use the new day's allowance. |
| Scans and statistics | Similar groups, screenshots and screen recordings, large files, color themes, and organization history such as dates, counts, and estimated space | Provide suggestions, queues, and statistics | On-device regenerable caches and statistics until relevant records or app data are cleared. |
| Settings and technical state | Language, video sound, interface state, teaching progress, startup and task timing | Save preferences, preserve interface state, and manage performance or animation | On device; not used for advertising or cross-app tracking. |
| Subscription entitlement | Product ID, entitlement status, expiration and transaction state, restore result | Show plans, unlock Pro, and restore purchases | StoreKit / App Store and on device; Apple controls billing records. |
| Support communication | Email address, description, attachments, and device, system, or app details you choose to provide | Respond, troubleshoot, handle privacy requests, and retain necessary dispute records | Processed through email; deleted when the purpose is complete or retained only as necessary. |
3. Permissions not currently requested
selfo currently does not request:
- precise or background device location;
- camera or microphone;
- contacts, calendar, or reminders;
- notifications;
- Bluetooth or local network;
- health or motion data; or
- advertising identifier or App Tracking Transparency permission.
Reading capture coordinates already embedded in a media file is not the same as requesting device location permission.
4. Your controls
- Change or withdraw selfo's Photos access in iOS Settings.
- Undo an unconfirmed favorite or deletion mark on a pending page.
- Remove album membership from “selfo 收藏” without deleting the original.
- Manage system-deleted media in Recently Deleted in Apple Photos.
- Delete selfo to remove most local app records.
- Manage subscriptions through your Apple account.
- Email a privacy request about support communications.
5. Required Reason APIs
selfo's Apple privacy manifest declares no tracking and no collected data types. It uses UserDefaults for local preferences and reads system boot time for timing or performance-related logic. These accesses are declared under Apple's Required Reason API rules and are not used to identify, profile, or track users across apps.
See the full Privacy Policy for processing rules.