法律文档 · 中文
隐私协议
最近更新：2026 年 10 月 10 日 · 生效日期：2026 年 10 月 10 日
本协议概要：OmniR（OmniR欧慕芮）iOS 应用不上传你的相册内容、不上传你的搜索请求、不上传你的搜索结果。所有识别与匹配全部在你设备本地完成。
一、核心承诺
OmniR（OmniR欧慕芮，以下简称"我们"）在设计 OmniR iOS 应用时，把"数据留在你的设备"作为第一原则。本协议旨在以清晰、可读的方式说明 OmniR iOS 应用如何处理你的数据。
简而言之：
- 你的照片与视频内容不上传到任何我们运营的服务器；
- 你输入的搜索关键词（文字或参考图片）不上传到任何我们运营的服务器；
- 本应用不集成第三方分析、追踪、广告或社交分享 SDK；
- 本应用的 AI 模型（人脸识别 / 场景识别）全部在设备本地运行。
二、本应用涉及的数据
OmniR iOS 应用在设备本地工作。为保证透明度，下表列出本应用"接触"或"处理"的数据类型及其流向：
| 数据类型 | 处理位置 | 是否上传 |
|---|
| 设备本机相册中的图片与视频内容 | 本机 | 否 |
| AI 模型抽取的特征向量（人脸 / 场景向量） | 本机 | 否 |
| 用户主动添加的人物标签、文字标签 | 本机 | 否 |
| 视频 / 图片的元数据（时长、拍摄时间、抽帧时间戳） | 本机 | 否 |
| 用户在搜索框中输入的文字关键词 | 本机 | 否 |
| 用户选择的"参考图片"用于以图搜图 | 本机 | 否 |
| 崩溃日志与诊断信息（如果启用） | iOS 系统 | 由你决定 |
我们没有运行任何接收上述数据的服务器。表中所有"处理位置 = 本机"的条目，意味着相关计算在你 iPhone / iPad 的 NPU 或 CPU 上完成，结果也只写在你的 iOS 沙盒中。
三、需要你授权的 iOS 系统权限
iOS 会在首次使用时弹出系统级授权框，由你决定是否授予。OmniR 仅在你授权后访问以下系统资源，且访问范围被严格限制在本地处理：
- 相册（Photos Library）：用于读取本机图片与视频，作为本地 AI 模型的输入。授权范围由你在系统弹窗中选择（"所有照片"或"选定照片"）。我们不读取照片库以外的文件，不修改你的照片，也不上传任何照片。
本应用不申请以下权限：定位、通讯录、麦克风、相机（拍摄）、蓝牙、健康、运动、HomeKit、通讯等。任何与本应用功能无关的权限都不会出现在授权弹窗中。
四、数据存储与设备控制
所有由 OmniR 处理的数据（特征向量、抽帧元数据、用户标签）都保存于你的 iOS 设备 App 沙盒内（On My iPhone / OmniR），由 iOS 文件系统隔离保护。
如果你启用了 iCloud 备份，iOS 会按系统默认策略把 App 容器内的数据备份到你的个人 iCloud——这是 iOS 系统行为，不由 OmniR 控制。你可以在设置 → Apple ID → iCloud → iCloud 备份 → OmniR中关闭本应用的备份。
卸载 App 会清空我们 iPhone 上的应用数据；但如果你的 iCloud 中保留有备份，重新安装同一 App 时 iCloud 会按系统策略恢复备份。如需彻底清除，关闭 iCloud 备份后卸载，并在 iCloud 设置中删除 OmniR 现有备份。
五、第三方 SDK 与服务
OmniR iOS v1.0 不集成任何第三方分析、追踪、广告、A/B 测试、Crash 上报或社交分享 SDK。应用内唯一的对外通信是 Apple 提供的标准系统 API：
- Apple App Store：本应用为付费下载 App，购买与下载流程由 Apple 处理，订单信息留存于 Apple，不存储于 OmniR。
- Apple PhotoKit / Vision：用于访问系统相册与本地视觉能力，由 Apple 提供。
上述通信由 Apple 作为独立数据控制者处理，相关数据收集受 Apple 自身隐私协议管辖。
六、儿童隐私
本应用面向通用 C 端用户，不以 13 岁以下儿童为目标群体，也不故意收集 13 岁以下儿童的个人信息。如果你认为儿童在未获监护人同意的情况下向我们提供了个人信息，请通过文末邮箱联系我们，我们将协助你删除相关内容。
七、跨境数据传输
由于我们不上传你的相册与搜索数据到我们运营的服务器，本应用不涉及跨境数据传输。
八、你的权利
你的数据在你手上。OmniR 提供以下方式保障你的控制权：
- 访问：所有由 OmniR 抽取的标签、人物分组、索引元数据均可在 App 内查看。
- 更正：标签、人物分组、误识别结果可在 App 内修改或删除。
- 删除：在 App 内「设置」中可一键清除全部本地数据（特征向量、标签、人物库）。卸载本应用同样会清除全部本地数据。
- 导出：本应用支持将本地标签与人物库导出（具体位置以 App 内功能为准）。
- 撤回授权：可在 iOS 设置 → 隐私 → 照片 → OmniR 中随时撤销相册授权。
九、安全
由于数据不离开你的设备，OmniR 的安全模型主要依赖 iOS 自身的沙盒机制与全盘加密（Data Protection）。我们建议你：
- 为设备设置强密码或启用 Face ID / Touch ID；
- 及时更新 iOS 至最新版本以获得最新安全补丁；
- 不要越狱（jailbreak）运行本应用。
十、协议变更
我们可能根据产品功能、法律法规或服务变更修订本协议。重大变更将通过 App 内通知与本页面顶部的"最近更新"日期告知你。变更发布后继续使用本应用即视为接受变更后的协议。
十一、适用法律与争议解决
本协议的订立、生效、解释、履行、修改及争议解决均适用中华人民共和国法律。因本协议产生的任何争议，双方应友好协商解决；协商不成的，任一方可向 OmniR 运营方所在地有管辖权的人民法院提起诉讼。
十二、联系我们
如有隐私相关问题、投诉、行使你的权利或任何反馈，请联系我们：
—— 隐私协议 · 中文版 结束 ——
LEGAL · ENGLISH
Privacy Policy
Last updated: October 10, 2026 · Effective: October 10, 2026
Short version: OmniR (OmniR欧慕芮) does not upload your photos, does not upload your search queries, and does not upload your search results. All recognition and matching happen locally on your device.
1. Core Commitment
OmniR ("we") designs the OmniR iOS app around one principle: your data stays on your device. This policy explains in plain language how the OmniR iOS app handles your data.
In short:
- Your photos and videos are never uploaded to any server we operate;
- The text keywords and reference images you enter for search are never uploaded to any server we operate;
- The app does not integrate any third-party analytics, tracking, advertising, or social SDK;
- The AI models (face recognition / scene matching) run entirely on-device.
2. Data the App Handles
The OmniR iOS app works locally on your device. For full transparency, the table below lists every category of data the app touches, where it is processed, and whether it is uploaded.
| Data category | Processed | Uploaded? |
|---|
| Photos and videos in your on-device library | On-device | No |
| Feature vectors (face / scene embeddings) extracted by on-device AI | On-device | No |
| Tags, names, and groupings you create | On-device | No |
| Media metadata (duration, capture time, frame timestamps) | On-device | No |
| Text keywords you type into the search box | On-device | No |
| Reference image you select for visual search | On-device | No |
| Crash logs and diagnostics (if enabled) | iOS / controlled by you | Your choice |
We do not operate any server that receives the data above. "On-device" means the work runs on your iPhone or iPad's CPU/NPU, and the results stay in your iOS sandbox.
3. iOS Permissions We Request
iOS shows a system-level permission prompt the first time you use a feature. OmniR only requests the permissions below, and only acts on them locally:
- Photos Library: to read on-device photos and videos as input to the local AI model. The scope (All Photos vs. Selected Photos) is chosen by you in the iOS prompt. We never read files outside your photo library, never modify your photos, and never upload any photo.
The app does not request location, contacts, microphone, camera (capture), Bluetooth, Health, Motion, HomeKit, telephony, or any other permission unrelated to its core function.
4. Data Storage and Device Control
All data processed by OmniR (feature vectors, frame metadata, user tags) is stored in your iOS app sandbox (On My iPhone / OmniR), protected by iOS file isolation.
If you have iCloud Backup enabled, iOS may back up the app container to your personal iCloud per system default. This is iOS behavior, not OmniR's. You can disable OmniR backup in Settings → Apple ID → iCloud → iCloud Backup → OmniR.
Uninstalling the app clears OmniR's data from your device. However, if iCloud Backup is enabled and a backup still exists, iOS will restore that backup when the app is reinstalled. To wipe data permanently, disable iCloud Backup first, then uninstall, and delete the existing OmniR backup from iCloud settings.
5. Third-Party SDKs and Services
OmniR for iOS v1.0 does not integrate any third-party analytics, tracking, advertising, A/B testing, crash-reporting, or social-sharing SDK. The only external communication is through Apple-provided system APIs:
- Apple App Store: OmniR is a paid-download app. The purchase and download flow is handled by Apple; order data is stored by Apple, not by OmniR.
- Apple PhotoKit / Vision: for accessing the system photo library and on-device vision capabilities.
These communications are handled by Apple as an independent data controller under Apple's own privacy policy.
6. Children's Privacy
The app is intended for general consumers and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information without parental consent, please contact us at the email below and we will help you remove it.
7. International Data Transfers
Because we do not upload your photo or search data to any server we operate, the app does not involve cross-border data transfers.
8. Your Rights
Your data stays under your control:
- Access: all tags, groupings, and indexing metadata created by OmniR are visible inside the app.
- Correction: tags, person groupings, and mis-recognized results can be edited or deleted inside the app.
- Deletion: in-app Settings offers a one-tap wipe of all local data (feature vectors, tags, person library). Uninstalling the app also removes all local data.
- Export: the app supports exporting your local tags and person library (see in-app feature).
- Withdraw permission: you can revoke photo access at any time in iOS Settings → Privacy → Photos → OmniR.
9. Security
Because data does not leave your device, OmniR's security model leans on iOS's sandboxing and on-device data protection. We recommend that you:
- Use a strong device passcode or Face ID / Touch ID;
- Keep iOS up to date for the latest security patches;
- Do not run the app on a jailbroken device.
10. Changes to This Policy
We may revise this policy as the product, the law, or our services evolve. Material changes will be announced inside the app and reflected by the "Last updated" date at the top of this page. Continued use of the app after such updates indicates acceptance of the revised policy.
11. Governing Law
This policy is governed by the laws of the People's Republic of China. Any disputes arising from this policy shall first be resolved through friendly negotiation; failing that, either party may bring the dispute before the People's Court with jurisdiction over the operator's location.
12. Contact Us
If you have any privacy questions, complaints, rights requests, or feedback, please contact us:
— End of Privacy Policy —