Privacy Policy

1. Provider and scope

selfo is provided by individual developer 叶尔特斯·拜布提汗. Where applicable law uses concepts such as controller or personal information processor, this individual developer is the responsible party for processing whose purposes and means are determined by the developer.

This policy applies to the selfo iOS app, the public support channel linked from this site, and the selfo official website. selfo currently has no proprietary account system, requires no login, and operates no developer-controlled cloud storage service for photos or videos.

2. Information processed by the app

2.1 Photos, videos, and media metadata

After you grant read-and-write access to Photos, selfo reads authorized photos, videos, screenshots, screen recordings, and Live Photos to display, play, scan, compare, group, and organize them. Core image and video analysis occurs on your device. Media content is not uploaded to a developer-controlled selfo server.

To display information and provide organization features, selfo may read system asset identifiers, original filenames, creation and modification dates, media types, dimensions, duration, file size, album membership, and existing EXIF details such as camera and lens model, aperture, exposure, ISO, and focal length.

2.2 Location embedded in media

selfo does not request device location permission. If coordinates are already embedded in a media file, selfo may read them. When you view a place name or map preview, or actively choose to open the media location in Apple Maps, coordinates may be passed through MapKit to Apple Maps for reverse geocoding, map snapshot loading, or opening the map. selfo does not separately persist coordinates on a developer server; resolved place details and map caches are temporary display data.

2.3 Local organization data

selfo stores data needed to continue your experience locally on the device, including:

• pending favorite and deletion marks, skipped and completed items, and current progress;
• regenerable scan results for similar photos, screenshots and screen recordings, large files, and color themes;
• media identifiers or deduplication digests and free-allowance state recorded by local calendar day, including current-day reservations, used allowance, and previous-day pending marks;
• organization history such as date, item count, estimated space released, and skipped count; and
• language, video sound, selected albums, information-panel state, and teaching progress.

2.4 Subscription entitlements

If you purchase selfo Pro, Apple handles payment, renewal, cancellation, and refunds. selfo reads product identifiers, entitlement status, expiration, and transaction state through StoreKit to show plans, unlock features, and restore purchases. selfo does not receive your card number, complete payment credentials, or Apple ID password.

2.5 Support communications

When you choose to email us, we process your email address, message, attachments, and any device model, iOS version, app version, screenshots, or logs you provide. We use them only to respond, troubleshoot, handle privacy requests, and preserve necessary dispute records. Do not send unrelated private photos, identity documents, payment card information, or passwords.

3. Permissions and choices

selfo currently requests only read-and-write Photos access. Core organization requires Full Access. If you deny access or provide Limited Access, core functionality may be unavailable, while legal and subscription information remains viewable.

Creating and maintaining the ordinary “selfo 收藏” album, adding original media to it, and completing confirmed deletion require appropriate Photos access. “selfo 收藏” is not the Apple Photos heart state, and adding album membership does not copy or move the original.

selfo does not request camera, microphone, contacts, calendar, precise or background device location, Bluetooth, health, notifications, or app tracking permission. You can change Photos access in iOS Settings or delete the app to remove most local app data.

4. System services and recipients

selfo does not sell personal information, share it for cross-context behavioral advertising, or integrate advertising, third-party analytics, attribution, social login, or crash-reporting SDKs. Actual features may involve:

• Apple Photos / PhotoKit / iCloud Photos: access and modify your authorized system library; whether an original is downloaded from iCloud depends on your Apple settings and library state.
• Apple StoreKit / App Store: provide product information, process purchases and billing, determine entitlements, and restore purchases.
• Apple Maps / MapKit: process embedded media coordinates when displaying a place name or map preview, or when you actively choose to open the media location in Apple Maps. Apple states that Apple Maps in China uses map services from Amap Software Co., Ltd.
• DGCharts: bundled locally to draw statistics; it is not used to collect or transmit personal information.
• Google / Gmail: process support email when you contact us.

Apple services are governed by Apple's Privacy Policy; see Apple Maps & Privacy for Maps-specific details. Support email processing is also governed by Google's Privacy Policy.

5. Retention and security

• Media remains in the system library for as long as your Apple settings and actions determine.
• Organization records, scan caches, and settings usually remain until you clear the relevant record, delete the app, or the system clears app data.
• Used free allowance resets automatically when the user's local calendar day changes. A reservation still pending from the previous day remains as a local record that can be confirmed without using the new day's allowance until you withdraw or confirm it, or the relevant record or app data is cleared.
• Resolved place names and map previews are temporary runtime or system cache data.
• Support email is kept only for the shortest period needed to handle and reasonably follow up on a request and maintain necessary security or dispute records. It is deleted or anonymized when that purpose is complete, unless applicable law requires longer retention. You may ask for earlier deletion.
• Apple, GitHub, Google, and other providers retain information they control under their own policies.

We use measures proportionate to the risks and scale of an individual developer, including data minimization, local processing by default, system permission boundaries, and no developer-controlled media upload backend. No electronic storage or transmission method can be guaranteed absolutely secure.

6. Your choices and rights

You can adjust Photos access in iOS Settings, revoke unconfirmed organization marks in selfo, delete the app to remove most local records, and manage subscriptions through your Apple account.

Where applicable law provides, you may request access, a copy, correction, supplementation, deletion, or restriction of personal information controlled by the developer; withdraw consent; or request an explanation of processing rules. selfo has no proprietary account, so selfo account deletion does not currently apply. If accounts are added, an appropriate deletion path will be provided.

We do not sell personal information or share it for cross-context behavioral advertising. If an applicable U.S. state privacy law grants you additional rights, we will handle them as required. In all cases, you may email us to request access, correction, or deletion of support communications under our control. We do not discriminate against users for exercising applicable rights.

7. International processing

selfo does not upload photos or videos to a developer-controlled server outside your region. Apple Maps, the App Store, iCloud, GitHub Pages, and Gmail may process relevant coordinates, transaction state, website logs, or support messages outside your country or region through their global infrastructure.

For users in China mainland, whether a specific operation constitutes a cross-border transfer and which notice, consent, or assessment steps apply depends on the information, provider roles, and applicable law. Where required, necessary procedures will be completed before the relevant processing. This policy does not replace any separate consent required by law.

8. Website access data

This website is a static site hosted on GitHub Pages. The developer has added no proprietary analytics, advertising, profiling cookies, login, payment, or upload form.

GitHub states that a visitor's IP address is logged and stored for security purposes whenever a GitHub Pages site is visited, whether or not the visitor is signed in. GitHub may also process device and browser information, request time, pages visited, referring pages, and link interactions under its privacy statement. Connection information from China mainland may be processed outside China. See GitHub Pages data collection and the GitHub General Privacy Statement.

9. Children

selfo is not directed to children under 13 and is not offered as a service directed to children under 14 in China mainland. Minors should use selfo only with a parent or guardian's consent and guidance. If a guardian believes a minor sent personal information to us, contact us so we can verify and handle it under applicable law.

10. Changes and contact

If features, processing, or legal requirements change, we will update this policy and its date. Material changes will be communicated reasonably in the app, release notes, or this site. If renewed consent is required, it will be requested separately.