English

Summary

片刻 Pianke for iOS keeps your business cards on your device. There is no account, no cloud, and no server. The app contains no networking code at all — it cannot upload your data because it has nothing to upload it with. It collects nothing about you.

Who this is from

片刻 Pianke. Questions about this policy: piankecard@gmail.com.

What the app stores (on your device only)

• The card images you capture or import.
• The recognised text and the fields parsed from it (name, company, title, phone, email, address, website, tax id, notes, tags).
• Your own "My Card" profile, used to generate your contact QR.
• Your settings, and an optional follow-up reminder date per card.

All of it lives inside the app's own container on your device. It is included in your iPhone or iPad backup (iCloud or Finder) exactly like any other app's data, under Apple's terms, and is removed when you delete the app.

Scanning: camera, text recognition and QR

• Capture uses Apple's system document scanner (VisionKit), which runs in Apple's own UI. The captured image is handed back to the app and stored only on your device.
• Text recognition uses Apple's on-device Vision framework. No image or text is sent anywhere.
• If a card carries a contact QR, it is decoded on device to help prefill fields.
• The app does not run a camera in the background, and does not read your photo library except for an image you explicitly pick.

Sharing and exporting (all user-initiated)

Nothing leaves the app unless you tap an export or share action. You can:

• write a card to your Contacts — the app only ever writes, on your explicit action, and never reads or uploads your address book;
• export a card as .vcf (vCard) or .csv, or as a PDF/JPEG image, through the iOS share sheet to a destination you choose;
• share your own contact QR image.

Once you hand a file to another app or person, that destination's own terms apply — the app has no further involvement.

Backup and restore (local, and only when you ask)

• A plain JSON backup, and an encrypted .piankevault backup. Encryption uses Apple's CryptoKit (AES-GCM) and happens entirely on your device; the key is derived from the passphrase you choose and never leaves your device. If you lose that passphrase, the backup cannot be recovered — not by us, because we never had it.
• You choose where the backup file goes through the system file picker.

Follow-up reminders

Reminders are local notifications scheduled on your device. No reminder or card content is sent to any server, including Apple's push service.

App lock

You may lock the app with Face ID, Touch ID or your device passcode. This is handled by Apple's LocalAuthentication: the app is told only whether authentication succeeded and never receives your biometric data.

Permissions the app asks for

Permission	Why
Camera	To photograph a card, through the system document scanner.
Photo Library	Not requested. Picking an avatar uses the system photo picker, which runs outside the app and hands over only the one image you choose — the app never gets access to your library.
Photo Library (add)	Only when you export a card image to your photos.
Contacts	Write-only, and only when you tap "Add to Contacts".
Face ID	Optional app lock, via Apple's system prompt.
Notifications	Optional local follow-up reminders.

Every one of them is optional in the sense that declining it disables only that feature. The app requests no network access, no location, no microphone, no health data, and no advertising identifier.

Data retention and deletion

Deleting a card deletes its stored images too. Deleting the app removes everything the app stored on your device. There is nothing stored elsewhere for us to delete, because nothing was ever sent anywhere.

Analytics, ads, tracking

The app contains no analytics, advertising, crash-reporting or tracking SDK, and requests no advertising identifier. It performs no App Tracking Transparency prompt because it does no tracking. Consistent with this, our App Store App Privacy declaration is "Data Not Collected", and the app's PrivacyInfo.xcprivacy manifest declares no tracking and no collected data types.

In-app purchase

Pro is a one-time purchase handled entirely by Apple's StoreKit. The app never sees your payment details; it only asks Apple whether this Apple ID owns the product. Payment processing is Apple's, under Apple's privacy policy.

Children

This is a general business productivity tool and is not directed at children.

Changes to this policy

If how the app handles data changes, this page is updated and the "last updated" date changes with it.

Contact

piankecard@gmail.com (片刻 Pianke).

繁體中文

摘要

片刻 Pianke iOS 版把你的名片留在你的裝置上。沒有帳號、沒有雲端、沒有伺服器。這支 App 完全不含任何 網路程式碼 —— 它無法上傳你的資料,因為它沒有可以上傳的東西。我們不收集任何關於你的資料。

由誰提供

片刻 Pianke。對本政策有疑問:piankecard@gmail.com。

App 儲存了什麼(僅存在你的裝置)

• 你拍攝或匯入的名片影像。
• 辨識出的文字,以及從中解析的欄位(姓名、公司、職稱、電話、Email、地址、網站、統一編號、備註、標籤)。
• 你自己的「我的名片」資料,用來產生你的聯絡人 QR。
• 你的設定,以及每張名片可選的跟進提醒時間。

以上全部存放在 App 自己的容器內。它會像其他 App 的資料一樣被納入你的 iPhone/iPad 備份(iCloud 或 Finder),適用 Apple 的條款;刪除 App 時一併移除。

掃描:相機、文字辨識與 QR

• 拍攝由 Apple 系統內建的文件掃描器(VisionKit) 執行,在 Apple 自己的介面中完成。擷取後的影像回傳 給 App,僅儲存在你的裝置。
• 文字辨識使用 Apple 裝置端的 Vision 框架。影像與文字都不會傳送到任何地方。
• 若名片上有聯絡人 QR,會在裝置端解碼以協助預填欄位。
• App 不會在背景使用相機,也不會存取相簿 —— 除非是你明確挑選的圖片。

分享與匯出(全部由你主動觸發)

除非你按下匯出或分享,否則沒有任何資料離開 App。你可以:

• 將名片寫入你的聯絡人 —— App 只會在你明確操作時寫入,永遠不會讀取或上傳你的通訊錄;
• 透過 iOS 分享面板,把名片匯出為 .vcf(vCard)、.csv,或 PDF／JPEG 影像,傳給你選擇的目的地;
• 分享你自己的聯絡人 QR 圖片。

一旦你把檔案交給另一個 App 或另一個人,適用的是該目的地自己的條款 —— App 不再介入。

備份與還原(本機,且僅在你要求時)

• 提供純 JSON 備份,以及加密的 .piankevault 備份。加密使用 Apple CryptoKit(AES-GCM),完全在你的 裝置上完成;金鑰由你設定的密語推導,不會離開你的裝置。若你遺失該密語,備份無法還原 —— 我們也做不 到,因為我們從未持有它。
• 備份檔要放在哪裡,由你透過系統檔案選擇器決定。

跟進提醒

提醒是排在你裝置上的本機通知。提醒內容與名片內容不會傳送到任何伺服器,包含 Apple 的推播服務。

App 鎖

你可以用 Face ID、Touch ID 或裝置密碼鎖定 App。這由 Apple 的 LocalAuthentication 處理:App 只會 得知驗證是否成功,不會取得你的生物特徵資料。

App 要求的權限

權限	用途
相機	透過系統文件掃描器拍攝名片。
相簿(讀取)	不要求。挑選大頭貼走的是系統相片選取器,它在 App 之外執行,只把你選的那一張交給 App —— App 從來拿不到你的相簿。
相簿(新增)	僅在你把名片影像匯出到相簿時。
聯絡人	只寫入,且僅在你按下「加入聯絡人」時。
Face ID	選用的 App 鎖,透過 Apple 系統提示。
通知	選用的本機跟進提醒。

以上每一項都是選用的:拒絕授權只會停用對應功能。App 不要求網路連線、不要求定位、不要求麥克風、不要求 健康資料,也不索取廣告識別碼。

資料保存與刪除

刪除名片時會一併刪除它的影像。刪除 App 會移除 App 在你裝置上儲存的一切。沒有任何資料存在別處等我們刪除, 因為從來沒有東西被送出去過。

分析、廣告、追蹤

App 不含任何分析、廣告、崩潰回報或追蹤 SDK,也不索取廣告識別碼;因為不做追蹤,所以不會出現 App 追蹤透明度(ATT)的詢問。與此一致,我們在 App Store 的 App 隱私聲明為「未收集任何資料」, App 的 PrivacyInfo.xcprivacy 也宣告無追蹤、無收集任何資料類型。

App 內購買

Pro 為一次買斷,完全由 Apple StoreKit 處理。App 不會看到你的付款資訊,只會向 Apple 詢問這個 Apple ID 是否持有該項目。付款處理屬於 Apple,適用 Apple 的隱私政策。

兒童

本 App 為一般商務生產力工具,並非以兒童為對象。

政策變更

若 App 的資料處理方式有變動,本頁將更新並修改「最後更新」日期。

聯絡方式

piankecard@gmail.com(片刻 Pianke)。