Privacy Policy隐私政策
Huhupao is a heritage passport app. This policy explains the data used by the app, its Apple Watch companion, widgets and the service at app.huhupao.com.
Huhupao 是一款世界遗产护照 App。本政策说明 App、Apple Watch 配套应用、小组件和 app.huhupao.com 服务的数据处理方式。
Last updated / 更新日期:
Location and check-ins / 位置与打卡
With your permission, Huhupao uses location while you use the iPhone or Apple Watch app to center the map, find nearby world heritage sites and verify on-site check-ins. Check-in records include the site, country, date, coordinates, distance and verification source. Manual check-ins use the site location and the date you choose. The current app does not request always-on location access.
获得你的授权后，Huhupao 在你使用 iPhone 或 Apple Watch App 时获取位置，用于地图定位、查找附近世界遗产和验证现场打卡。打卡记录包含遗产、国家、日期、坐标、距离及验证来源。手动打卡使用遗产位置和你选择的日期。当前 App 不申请始终定位权限。
Photos and profile / 照片与个人资料
Photo Scan is a Pro feature that reads metadata from the photos you allow it to access: capture time, GPS coordinates, image dimensions and a local photo identifier. Matching takes place on device. A hash of that metadata prevents duplicate imports; it is not used to identify your device or track you across apps. The scan does not upload original images to our service. Scan progress and unconfirmed candidates stay on device. Your chosen display name and avatar are stored locally and are not included in our iCloud check-in synchronization. Saving a poster to Photos requires separate permission.
照片扫描是 Pro 功能，仅在你授权的照片范围内读取拍摄时间、GPS 坐标、图片尺寸和本地照片标识，并在设备上匹配遗产。元数据的哈希值用于避免重复导入，不用于识别设备或跨 App 跟踪。扫描不会将照片原图上传到我们的服务。扫描进度和未确认的候选记录保存在本地。你设置的昵称和头像也保存在本地，不包含在遗产打卡的 iCloud 同步中。保存海报到相册需要单独授权。
iCloud synchronization / iCloud 同步
For Pro users with iCloud available for Huhupao, synchronization runs automatically after opening the app or changing records, and can also be requested in Sync & Backup. It stores check-ins, including recorded location and dates, photo metadata hashes with their related check-in identifiers, and deletion markers in your private CloudKit database. Original photo images, your avatar and unconfirmed scan candidates are not uploaded by this sync. The private database is associated with your Apple Account and is not available to us through the developer console. You can prevent further synchronization using your device's iCloud settings for Huhupao; disabling sync does not erase existing cloud data.
Pro 用户在系统允许 Huhupao 使用 iCloud 时，打开 App 或修改记录后会自动同步，也可在“同步与备份”中手动发起同步。同步内容包括打卡记录（含已记录的位置和日期）、照片元数据哈希及关联的打卡标识，以及删除标记，保存在你的私有 CloudKit 数据库中。照片原图、头像和未确认的扫描候选不会通过此同步上传。私有数据库关联你的 Apple 账户，我们无法通过开发者控制台读取其中的记录。你可在设备的 iCloud 设置中关闭 Huhupao 同步；关闭同步不会删除已有云端数据。
Apple Watch, widgets and notifications / 手表、小组件与通知
Your paired Apple Watch sends pending check-ins to your iPhone and receives recent history and summary statistics through Apple's WatchConnectivity service. Widgets read a local shared snapshot with heritage entries, visited-site identifiers, theme and progress totals. With notification permission, reminders are scheduled on device from your check-in history. These features do not publish your travel history to a public profile or feed.
配对的 Apple Watch 通过 Apple 的 WatchConnectivity 服务向 iPhone 发送待同步打卡，并接收最近记录和统计信息。小组件读取设备上的共享快照，其中包含遗产条目、已打卡遗产标识、主题和进度统计。获得通知权限后，App 根据设备上的打卡历史安排本地提醒。这些功能不会将你的旅行历史发布到公开个人主页或动态。
Purchases and sharing / 购买与分享
Apple handles Pro purchases and restoration through StoreKit. Huhupao reads verified purchase entitlement information to enable Pro features; we do not receive your payment-card details. If you choose to share a poster, the exported image and any travel information visible on it are passed to the app or recipient you select and become subject to that service's privacy practices.
Apple 通过 StoreKit 处理 Pro 购买和恢复购买。Huhupao 读取已验证的购买权益以启用 Pro 功能，我们不会获得你的银行卡信息。你主动分享海报时，导出的图片及其中可见的旅行信息会发送给你选择的 App 或接收方，并受该服务的隐私规则约束。
Network services / 网络服务
The app downloads map tiles and fonts from OpenFreeMap and heritage data, descriptions and artwork from our Cloudflare-hosted service. These requests expose the IP address and request metadata needed to deliver content; map requests reveal the requested map area, and description requests include a site identifier and language. Our heritage service does not accept personal check-in history or photo uploads. Network providers may keep service and security logs. OpenFreeMap describes anonymized server logs and temporary IP logging during security incidents in its privacy policy; Cloudflare's handling is described in its privacy policy. Apple's services follow Apple's privacy policy. Huhupao does not sell your travel records or add advertising or cross-app tracking SDKs.
App 从 OpenFreeMap 下载地图瓦片和字体，并从托管于 Cloudflare 的服务下载遗产图鉴、介绍和印章素材。网络请求会向服务提供方暴露提供内容所需的 IP 地址和请求元数据；地图请求包含浏览的地图区域，介绍请求包含遗产标识和语言。我们的遗产服务不接收个人打卡历史或照片上传。网络服务提供方可能保留服务和安全日志，其处理方式详见上述隐私政策。Huhupao 不出售你的旅行记录，也不加入广告或跨 App 跟踪 SDK。
Retention and deletion / 保存与删除
Local records remain until removed using an available app action or by deleting the app and its data. Manual check-ins can be removed from site details. Removal is synchronized using a deletion marker and is not a permanent purge of the original CloudKit record or photo hash. To erase all cloud records, first stop Huhupao synchronization on every device, then remove Huhupao's data through your Apple Account's iCloud storage management; Apple's storage guide explains the system controls. Deleting the app alone does not delete iCloud data, and cloud records may return after reinstalling with sync enabled. Remove the Watch app separately to clear its local queue and history. Cached content may be replaced or cleared by the app or operating system. Saved posters, shared copies and system backups are managed separately in Photos, the destination service or your backup settings. We cannot erase your private iCloud database on your behalf.
本地记录会保留到你通过 App 提供的操作移除，或删除 App 及其数据。手动打卡可在遗产详情中移除；同步通过删除标记隐藏该记录，不会永久清除原始 CloudKit 记录或照片哈希。如需清除全部云端记录，请先在所有设备上停止 Huhupao 同步，再通过 Apple 账户的 iCloud 储存空间管理删除 Huhupao 数据，具体操作参阅上述 Apple 指南。仅删除 App 不会删除 iCloud 数据，重新安装并开启同步后记录可能恢复。手表上的本地队列和历史需通过单独删除 Watch App 清除。缓存可能由 App 或系统替换或清理。已保存海报、分享副本及系统备份需分别在相册、目标服务或备份设置中管理。我们无法代你删除私有 iCloud 数据库。
Your choices and privacy requests / 你的选择与隐私请求
You can revoke location, Photos and notification permissions in device settings, restrict photo access to selected images and stop iCloud synchronization using system controls. Browsing the bundled atlas and manual check-ins do not require location permission. To ask about access, correction or deletion of information you have sent us, contact support@huhupao.com. Support emails include the address and content you choose to send; we retain them while handling your request and necessary follow-up, or where retention is legally required. You may request their deletion. Do not send your full travel history or photos unless needed to explain the issue. We do not require a Huhupao account. Changes to this policy will be posted here with an updated date.
你可在系统设置中撤回定位、相册和通知权限，将相册访问限定为所选照片，并通过系统设置停止 iCloud 同步。浏览内置图鉴和手动打卡不需要定位权限。如需查询、更正或删除你发送给我们的信息，请联系 support@huhupao.com。支持邮件包含你主动提供的邮箱地址和内容，我们在处理请求及必要的后续事项期间保留这些信息，或按法律要求保留；你可以请求删除。除非说明问题所必需，请勿发送完整旅行历史或照片。使用 Huhupao 无需注册独立账户。政策变更会在本页公布并更新日期。