隐私政策
WalkColor · 最后更新:2026 年 9 月 23 日
WalkColor(以下简称"本应用")非常重视您的隐私。本政策说明我们如何处理您的信息。
我们绝不收集的
无论何种情况,本应用都不会收集或上传:
- 照片和图片本身,以及任何照片内容
- 您在作品中输入的文字内容
- 姓名、邮箱、手机号等可识别您身份的信息
- 精确位置、联系人、通讯录
您导入的照片始终仅在设备本地处理,从不上传至任何服务器。您作品中输入的任何文字在"配方码分享"功能中会被替换为占位符,不会进入网络传输。
配方码分享(可选功能)
当您主动使用"生成配方码"分享作品时,本应用会将以下内容上传至我们的服务器(AWS,美国西海岸):
- 作品的参数化描述:色块位置 / 颜色、装饰形状的类型 / 位置 / 颜色、排版参数等
- 构图模板 ID(如 3:4、1:1)
- 字体族名称(仅字体名,不含具体字形)
上传内容不包含:
- 您的原始照片或任何图像数据
- 您输入的任何文字(客户端在上传前会将全部文字替换为占位符)
- 任何可标识您身份的信息
生成的配方码是一个短字符串(如 kitty2604)。任何持有此配方码的人可以下载并套用这份作品配方到他们自己的照片上。您的照片不会被他人看到。
若您希望下架您生成的某个配方,或举报他人分享的不当内容,请通过 App 说明书底部的"举报 / 反馈"链接联系我们。我们承诺在收到举报后 24 小时内处理。
使用数据分析
为了改进产品体验和修复问题,本应用会通过行业通用的第三方产品分析服务收集匿名的使用数据,包括:
- 设备型号、iOS 版本、App 版本
- 匿名会话标识(随机 UUID,不对应您的真实身份)
- 功能使用事件(如"导入照片""完成导出""切换色块 tab")及相关非敏感参数(如导入图片的像素尺寸、导出耗时等)
- 崩溃和诊断数据: 应用崩溃时的栈信息 (错误类型 / 函数名)、ANR 发生时主线程的卡死位置, 用于定位和修复 bug. 不含个人识别信息.
这些数据仅用于产品改进和问题排查,不会用于广告定向,也不会与任何其他方共享。相关服务器位于中国大陆境外。
后续版本将在 App 设置内提供关闭数据分析的开关;您可以通过联系我们申请停止相关数据收集;您也可以随时通过下方邮箱联系我们,要求停止对您的数据收集。
相册访问
本应用会请求访问您的相册,仅用于以下目的:
- 导入照片进行编辑
- 在编辑器内展示「最近照片」横滑条,便于快速选图(仅读取最近若干张的缩略图,不读取其余相册内容)
- 将导出的图片、视频或 Live Photo 保存到相册
您选择的照片仅在设备本地处理,不会上传到任何服务器。
传感器使用
本应用使用设备的加速度传感器(Accelerometer),仅用于以下单一目的:
- 摇一摇反馈:当您在使用 App 时摇动设备,App 会在屏幕上弹出确认弹窗询问您是否要提交意见反馈。该功能可在确认弹窗中点击"以后不要弹了"永久关闭。
实现细节:
- 仅在 App 处于前台运行时注册加速度传感器监听,App 退到后台或被关闭时立即取消注册;
- 加速度传感器的原始读数(X / Y / Z 三轴瞬时加速度值)仅在设备本地内存中用于检测摇动手势,不会被记录、存储或上传到任何服务器;
- 本应用不使用陀螺仪、磁力计、心率、指纹、计步器、Wi-Fi / 蓝牙扫描列表等其他类型传感器;
- 本应用不读取 IMEI、IMSI、设备 MAC 地址、SUPI、SUCI、软件安装列表、精确位置、联系人、通话记录、日历、短信、本机电话号码、麦克风音频、剪贴板内容等任何其他个人信息。
加速度传感器在 Android 平台上属于免授权传感器(无需弹窗授权),但本应用承诺仅用于上述明示用途。
我们采取的个人信息安全保护措施
即使本应用仅做本地处理、不上传照片内容,我们仍从以下几个方面保障您的个人信息安全:
一、访问控制与最小权限原则。本应用严格遵循最小权限原则,只申请完成功能必需的系统权限(如相册读取、媒体文件写入),以及为实现「摇一摇反馈」功能而使用的加速度传感器(免授权,仅前台监听),不申请通讯录、精确位置、电话、短信、IMEI / MAC 地址 / 软件安装列表等与核心功能无关的权限和个人信息。每项权限的使用目的与触发场景对用户透明,并可随时在系统设置中撤回授权。
二、数据加密与存储安全。用户创作的作品以 JSON 文件形式保存在应用私有沙箱目录,仅本应用可访问,其他应用无法读取;匿名会话标识符通过系统提供的 EncryptedSharedPreferences(基于 AES-256 加密)存储于设备本地;不将任何可识别用户身份的信息保存到公共存储区域。
三、传输加密。本应用涉及的所有网络请求(自动更新版本检查、匿名使用数据上报)均强制使用 HTTPS + TLS 1.2 及以上协议加密传输,不进行任何明文 HTTP 传输。
四、身份鉴别。本应用无需账号注册与登录,不存在任何需要身份鉴别的用户数据;相关权限操作均由系统层身份认证(如设备解锁)前置完成。
五、恶意代码防范。应用代码托管于受管理的代码仓库,通过自动化 CI/CD 流水线发布;引入的第三方依赖均为业界公认的合规组件(如 AndroidX、Google Play Services、PostHog SDK 等),发布前进行静态代码分析与自动化测试,防止引入恶意代码。
六、安全审计与应急响应。定期审查第三方 SDK 的数据收集行为,确认与本政策的承诺一致;若发生安全事件或数据泄露,我们将在 72 小时内通过本页面发布公告,并通过下方联系邮箱向受影响用户说明处置方案。
会员订阅与购买信息
WalkColor 提供部分高级功能,用户可以通过 Apple App Store 应用内购买(In-App Purchase)订阅会员服务。
购买过程中产生的支付行为由 Apple App Store 完成。WalkColor 不会收集、存储或访问您的银行卡信息、支付密码或 Apple ID 密码。
为了验证购买状态、提供会员权益以及支持恢复购买功能,本应用可能处理 Apple 返回的必要交易信息,包括:
- 商品标识符(Product Identifier)
- 交易状态
- 订阅状态
- 购买验证信息
这些信息仅用于:
- 验证您的会员资格
- 开启对应会员功能
- 恢复历史购买
- 处理订阅状态变化
自动续费订阅
如果您购买 WalkColor 自动续费会员,您的订阅将在当前订阅周期结束时自动续订。
您可以通过 Apple ID 设置中的订阅管理页面关闭自动续费。取消订阅后,您仍可以继续使用当前已支付周期内的会员权益。
无账号、无登录
本应用不需要注册账号或登录,不收集姓名、邮箱、手机号等可直接识别您身份的信息。
儿童隐私
本应用不针对 13 岁以下的儿童,也不会有意收集儿童的任何信息。
政策更新
如果本政策有变更,我们会在此页面发布更新版本并标注日期。
开发者 / 运营者信息
本应用不同分发渠道的版本由以下主体分别运营。所有版本均使用相同的隐私保护政策和数据处理规范,不涉及不同运营主体之间的个人信息共享:
▸ 安卓端(小米应用商店分发)
包名:com.dianbo.walkcolor
运营主体:武汉电波文化传媒有限公司
ICP 备案号:鄂ICP备2026019311号-2A
联系邮箱:hi@tldrio.com
▸ 安卓端(荣耀应用商店分发)
包名:com.dianbo.honor
运营主体:武汉电波文化传媒有限公司
ICP 备案号:鄂ICP备2026019311号-3A
联系邮箱:hi@tldrio.com
▸ 安卓端(华为 / vivo 应用商店分发)
包名:com.walkcolor.android
运营主体:田宇康(个人开发者)
ICP 备案号:鄂ICP备2026007066号-3A
联系邮箱:hi@tldrio.com
▸ 安卓端(OPPO 应用商店分发)
包名:com.walkcolor.oppo
运营主体:田宇康(个人开发者)
ICP 备案号:鄂ICP备2026007066号-4A
联系邮箱:hi@tldrio.com
▸ iOS 端(Apple App Store 分发)
运营主体:田宇康(个人开发者)
联系邮箱:hi@tldrio.com
技术支持
如果您在使用中遇到问题,或对本隐私政策有任何疑问,请联系我们:
hi@tldrio.com
Privacy Policy
WalkColor · Last updated: September 23, 2026
WalkColor ("the App") takes your privacy seriously. This policy explains how we handle your information.
What We Never Collect
Under no circumstances does the App collect or upload:
- Your photos or any image content
- Any text you type into your artwork
- Name, email, phone number, or any personally identifiable information
- Precise location, contacts, or address book
Photos you import are always processed locally and never uploaded. Any text you add in your artwork is replaced with a placeholder before the "Style Code Sharing" feature transmits data — your actual text never leaves your device.
Style Code Sharing (Optional Feature)
When you actively use "Generate Style Code" to share your artwork, the App uploads the following to our server (AWS, US West):
- A parametric description of your composition: block position/color, decoration shape types/positions/colors, layout parameters
- Composition template ID (e.g. 3:4, 1:1)
- Font family names (names only, no glyph data)
The upload does not include:
- Your source photo or any image data
- Any text you typed (the client replaces all text with placeholders before upload)
- Any personally identifiable information
The generated Style Code is a short string (e.g. kitty2604). Anyone with this code can download and apply this composition to their own photo. Your photos are never visible to others.
To remove a Style Code you generated, or to report inappropriate content shared by others, use the "Report / Feedback" link at the bottom of the in-app Guide. We respond to all reports within 24 hours.
Usage Analytics
To improve the product and diagnose issues, the App collects anonymous usage data through an industry-standard third-party product analytics service. This includes:
- Device model, iOS version, app version
- An anonymous session identifier (randomly generated UUID, not linked to your real identity)
- Feature usage events (e.g. "photo imported", "export completed", "block tab switched") with non-sensitive parameters such as image dimensions and export duration
- Crash and diagnostic data: stack info on app crashes (error type, function name), main-thread location on ANR events, used for bug triage. Contains no personal identifiers.
The data is used solely for product improvement and troubleshooting, never for advertising, and is never shared with any other party. The servers used for this purpose are located outside mainland China.
A toggle to disable usage analytics will be added to the in-app Settings in a future release. In the meantime, you may email us at the address below to opt out.
Photo Library Access
The App requests access to your photo library solely to:
- Import photos for editing
- Show a “recent photos” strip inside the editor for quick picking (only thumbnails of the most recent items are read; the rest of your library is not)
- Save exported images, videos, or Live Photos to your library
Your photos are processed locally on your device and are never uploaded to any server.
Sensor Usage
The App uses the device's accelerometer for a single purpose only:
- Shake-to-feedback: when you shake the device while using the App, a confirmation dialog appears asking whether you want to submit feedback. You may permanently disable this feature by tapping "Don't show again" in the confirmation dialog.
Implementation details:
- The accelerometer listener is registered only while the App is in the foreground; it is unregistered immediately when the App enters the background or is closed.
- Raw accelerometer readings (instantaneous X / Y / Z axis values) are used only in local device memory for shake gesture detection. They are never logged, stored, or uploaded to any server.
- The App does not use any other type of sensor (gyroscope, magnetometer, heart rate, fingerprint, pedometer, Wi-Fi / Bluetooth scan list, etc.).
- The App does not read IMEI, IMSI, device MAC address, SUPI, SUCI, installed-application list, precise location, contacts, call logs, calendar, SMS, phone number, microphone audio, clipboard content, or any other personal information.
The accelerometer is a permission-free sensor on Android (no runtime permission prompt), but the App commits to using it solely for the disclosed purpose above.
Security Measures We Take to Protect Your Information
Even though the App only processes data locally and does not upload photo content, we safeguard your personal information through the following measures:
1. Access Control & Least Privilege. The App strictly follows the principle of least privilege, requesting only the system permissions required for core functionality (photo library read, media file write) and the accelerometer used for the Shake-to-feedback feature (permission-free, foreground-only). We do not request contacts, precise location, phone, SMS, IMEI / MAC address / installed-app list, or other permissions and personal information unrelated to core features. The purpose and trigger of each permission are transparent to users, who may revoke access at any time via system settings.
2. Data Encryption & Storage Security. User creations are saved as JSON files in the app's private sandbox directory, accessible only to this app; anonymous session identifiers are stored locally via EncryptedSharedPreferences (AES-256); no identifiable user information is written to public storage.
3. Encryption in Transit. All network requests (auto-update version checks, anonymous analytics) are forced over HTTPS + TLS 1.2 or above; no plaintext HTTP transmission is used.
4. Identity Verification. The App requires no account registration or login, so there is no user identity data requiring authentication; permission operations rely on system-level identity verification (e.g., device unlock).
5. Malicious Code Prevention. Application code is hosted in a managed repository and released via automated CI/CD pipelines; third-party dependencies are all industry-recognized components (AndroidX, Google Play Services, PostHog SDK, etc.) and undergo static analysis and automated testing before release.
6. Security Audit & Incident Response. We periodically review third-party SDKs' data collection behavior to confirm compliance with this policy; in the event of a security incident or data breach, we will publish a notice on this page within 72 hours and contact affected users via the support email below.
Subscription and Purchase Information
WalkColor provides optional premium features through Apple App Store In-App Purchase subscriptions.
All payment transactions are processed by Apple App Store. WalkColor does not collect, store, or access your bank card information, payment password, or Apple ID password.
To verify purchases, provide subscription benefits, and support restore purchases, the App may process necessary transaction information provided by Apple, including:
- Product Identifier
- Transaction status
- Subscription status
- Purchase verification information
This information is used only for:
- Verifying subscription eligibility
- Providing premium features
- Restoring previous purchases
- Handling subscription status changes
Auto-Renewable Subscription
If you purchase a WalkColor auto-renewable subscription, your subscription will automatically renew at the end of each billing period.
You can manage or cancel your subscription through your Apple ID subscription settings. After cancellation, you can continue using subscription benefits until the end of the paid period.
No Accounts or Login
The App does not require registration or login, and does not collect your name, email address, phone number, or other directly identifying information.
Children's Privacy
The App is not directed at children under 13 and does not knowingly collect any information from children.
Policy Updates
If this policy changes, we will post the updated version on this page with a revised date.
Developer / Operator Information
Different distribution channels of this application are operated by the following entities. All versions share the same privacy policy and data handling standards; no personal information is shared between these operating entities:
▸ Android (Xiaomi App Store)
Package: com.dianbo.walkcolor
Operator: Wuhan Dianbo Culture Media Co., Ltd.
ICP filing: 鄂ICP备2026019311号-2A
Contact: hi@tldrio.com
▸ Android (HONOR app store)
Package: com.dianbo.honor
Operator: Wuhan Dianbo Culture Media Co., Ltd.
ICP filing: 鄂ICP备2026019311号-3A
Contact: hi@tldrio.com
▸ Android (Huawei / vivo app stores)
Package: com.walkcolor.android
Operator: Yukang Tian (individual developer)
ICP filing: 鄂ICP备2026007066号-3A
Contact: hi@tldrio.com
▸ Android (OPPO app store)
Package: com.walkcolor.oppo
Operator: Yukang Tian (individual developer)
ICP filing: 鄂ICP备2026007066号-4A
Contact: hi@tldrio.com
▸ iOS (Apple App Store)
Operator: Yukang Tian (individual developer)
Contact: hi@tldrio.com
Support
If you have any questions about this privacy policy or need help with the App, please contact us:
hi@tldrio.com