Privacy Policy

1. 运营者与联系方式

Pinup 由陈彦涛（个人开发者，品牌名 Cyter）运营。隐私问题、数据请求或投诉可发送至 hi@justpinup.com。

2. Pinup 在本机保存什么

• 画板、便签、Emoji、提醒时间、布局与回收站状态。
• 你主动导入的图片、生成的贴纸、预览图、缩略图和恢复点。
• 应用语言、窗口、外观、启动项等偏好设置。
• 运行诊断日志。日志不记录画板文字、图片、License Key 或账号凭据。

上述内容保存在你的 Mac，包括 ~/Library/Application Support/PinUp、应用偏好设置和必要时的 macOS 钥匙串。Pinup 不会自动上传画板内容。

3. 什么时候联网

• Pinup 使用 Sparkle 从 justpinup.com 检查版本、读取发布说明并下载更新。
• 访问官网或下载文件时，Cloudflare 等基础设施可能处理 IP 地址、User-Agent、请求时间和访问路径等标准网络日志，用于传输、安全与故障排查。
• Pinup 默认开启最小使用统计，由 PostHog 在美国处理，用于了解核心功能并改进产品。统计仅包含操作类型、应用版本、随机安装 ID，以及网络请求产生的来源 IP；不包含你的文字、图片、文件路径或屏幕内容。你可以在「设置 → 通用 → 使用统计」中随时关闭。
• 你主动邮件反馈时，我们会收到你的邮箱地址、邮件内容以及你选择附加的截图、录屏或诊断报告。

当前 Beta 不包含广告、第三方追踪、云同步、账号系统或支付处理，也不会自动上传诊断报告。

4. 文件与系统能力

Pinup 只处理你通过文件选择器、拖放或剪贴板主动提供的图片。主体提取使用 macOS 本地能力完成。开机启动仅在你启用后注册；关闭后可撤销。Pinup 不读取通讯录、邮件或云盘内容。

5. 保存、共享与跨境处理

本地内容由你控制并一直保留，直到你在应用中删除或移除本地数据。反馈邮件和附件仅在解决问题、维护安全及履行合理记录义务所需期间保存，之后删除或去标识化。我们不会出售个人信息。官网、更新下载和邮件服务由 Cloudflare及你的/我们的邮件服务商提供，网络元数据可能在其全球基础设施中处理。

6. 删除与请求

卸载 App 不会自动删除画板。彻底删除时，退出 Pinup 并删除 ~/Library/Application Support/PinUp；如需清除偏好设置，再删除 ~/Library/Preferences/com.cyter.pinup.plist。邮件反馈相关信息可通过支持邮箱请求访问、更正或删除，我们会在适用法律要求的期限内处理。

7. 安全、未成年人及更新

我们使用 Apple 签名与公证、HTTPS 更新和更新签名校验降低软件分发风险，但任何系统都无法保证绝对安全。Pinup 不面向法律规定需监护人同意才能独立使用网络服务的儿童。功能或处理方式发生重大变化时，我们会更新本政策并修改生效日期。

1. Operator and contact

Pinup is operated by Yantao Chen, an independent developer under the Cyter brand. Send privacy questions, requests, or complaints to hi@justpinup.com.

2. What stays on your Mac

• Boards, notes, emoji, reminder dates, layouts, and Trash state.
• Images you import, generated stickers, previews, thumbnails, and recovery points.
• Language, window, appearance, login-item, and other preferences.
• Operational diagnostic logs. Logs exclude board text, images, License Keys, and account credentials.

This data is stored on your Mac, including ~/Library/Application Support/PinUp, app preferences, and the macOS Keychain when needed. Pinup does not automatically upload board content.

3. Network activity

• Pinup uses Sparkle to check justpinup.com for versions, read release notes, and download updates.
• When you visit the site or download files, infrastructure providers such as Cloudflare may process standard network logs including IP address, User-Agent, request time, and path for delivery, security, and troubleshooting.
• Pinup enables minimal usage analytics by default, processed by PostHog in the United States to understand core features and improve the product. It includes only action types, app version, a random installation ID, and the source IP exposed by network requests; it does not include your text, images, file paths, or screen content. You can turn it off at any time in Settings → General → Usage Analytics.
• If you email feedback, we receive your email address, message, and any screenshots, recordings, or diagnostic report you choose to attach.

The current Beta has no advertising, third-party tracking, cloud sync, account system, or payment processing. Diagnostic reports are never uploaded automatically.

4. Files and system features

Pinup processes images you deliberately provide through the file picker, drag and drop, or clipboard. Subject extraction runs through local macOS capabilities. Launch at login is registered only when you enable it and can be disabled. Pinup does not read your contacts, email, or cloud-drive content.

5. Retention, sharing, and global processing

You control local content, which remains until you remove it in the app or delete local data. Feedback and attachments are kept only as reasonably necessary to resolve the issue, maintain security, and meet record-keeping obligations, then deleted or de-identified. We do not sell personal information. The website, updates, and email depend on Cloudflare and relevant email providers, so network metadata may be processed on global infrastructure.

6. Deletion and requests

Removing the app does not remove boards. To delete all local data, quit Pinup and remove ~/Library/Application Support/PinUp; to remove preferences too, delete ~/Library/Preferences/com.cyter.pinup.plist. Request access, correction, or deletion of feedback-related information through the support email. We will respond within timelines required by applicable law.

7. Security, children, and changes

We use Apple signing and notarization, HTTPS updates, and update signature verification to reduce distribution risks, but no system is completely secure. Pinup is not directed to children who cannot independently consent to online services under applicable law. We will revise this policy and its effective date when features or processing materially change.