Magix Realm魔力次元
EN
法律中心

OFFICIAL DOCUMENT

MagixDiary 隐私政策

MagixDiary Privacy Policy / MagixDiary 隐私政策

Effective date / 生效日期：2026-07-31 Document version / 文档版本：1.0

中文版本

1. 适用范围与运营主体

本政策适用于 MagixDiary iOS 应用。应用的开发者和运营者为 App Store 产品页“提供者”字段所列主体（下称“MagixRealm”或“我们”）。本政策只描述当前 iOS 版本已经启用的处理活动；不包含 Android 专属的 Google、广告、厂商登录或国内支付能力。

MagixDiary 是本地优先的私人日记工具。当前 iOS 版本不要求注册 MagixRealm 账号，不提供自有云同步服务，也不接入广告、跨应用跟踪或第三方行为分析 SDK。你的日记正文和媒体不会因为使用应用而自动上传到 MagixRealm 服务器。

2. 我们处理的信息

  • 日记内容与结构：日记本标题、封面、页面正文、标签、收藏/隐藏状态、自由画布对象、对象位置与样式、手写笔迹、搜索索引和自动恢复片段。用途是创建、编辑、搜索、预览和恢复你的日记。
  • 你主动选择的媒体：通过系统照片选择器选择的照片或视频、你主动录制的音频，以及在相机功能可用时由你主动拍摄的照片或视频。用途是把这些内容加入指定日记页面。
  • 本地处理结果：Apple Vision 在设备上生成的主体 mask 和透明抠图、视频缩略图、音频波形、渲染缓存及生成的视频。用途是完成你选择的编辑和导出操作。
  • 项目包与文件：你通过系统文件选择器导入的 .lwp 项目包，以及你主动导出的项目包或视频。用途是导入、备份、迁移或分享。
  • 购买与权益信息：StoreKit 提供的商品标识、商品展示信息、已验证交易类型、订阅到期/撤销状态和当前权益。用途是展示商品、完成购买、恢复购买并解锁对应权益。支付凭证和 Apple Account 由 Apple 处理；MagixDiary 不读取你的银行卡号或 Apple Account 密码。

3. 权限与系统能力

  • 照片图库读取：用于选择要加入日记的照片和视频。MagixDiary 优先使用 PhotosPicker，只接收你明确选中的项目；拒绝不会影响文字、手写等基础记录能力。
  • 照片图库添加：仅在你点击保存时，把生成的日记视频写入照片图库。拒绝后仍可使用系统文件导出或分享方式（如相关页面提供）。
  • 相机：仅在你主动选择拍照或录像时用于采集内容，不在后台开启。
  • 麦克风：仅在你主动开始录音时采集声音；录音完成后存入本地加密资源仓库，不在后台持续录制。
  • 文件与分享：系统文件选择器、文件导出器和分享面板只在你主动操作时运行。目标应用或存储位置收到的副本受其自身政策约束。
  • Apple Vision：主体分离在设备上执行；应用不会为了默认抠图把照片上传到第三方服务。

你可以在 iOS“设置”中查看或撤回相机、麦克风和照片权限。撤回权限不删除此前已保存在日记中的副本；请在 MagixDiary 中删除相关对象或日记。

4. 本地存储与安全

日记 payload、恢复片段和图片/视频/音频资源使用 AES-256-GCM 加密；搜索索引存入 SQLCipher 数据库。主密钥保存在本设备 iOS Keychain 中，并使用仅限本设备的可访问属性。文件写入同时使用 iOS Data Protection，资源读取时校验长度和 SHA-256 完整性。

上述措施用于降低设备文件被直接读取或篡改的风险，但任何系统都无法承诺绝对安全。请保护设备密码，并谨慎导出或分享私密内容。

5. 对外提供、共享与传输

我们不会出售日记内容，不会用私密日记建立广告画像，也不会把日记内容提供给数据经纪商。

仅在以下情况下，信息可能离开应用沙盒：

  1. 你主动使用照片保存、文件导出或系统分享，将副本发送到你选择的位置或应用；
  2. 你使用 StoreKit 查看、购买或恢复商品，Apple 处理商品请求、付款和交易状态；
  3. 法律法规要求，或为保护用户、公众及我们的合法权益而必须披露，且披露范围被限制在必要程度。

SQLCipher.swift 和 ZIPFoundation 仅在设备本地执行加密数据库和项目包处理，不自行上传日记内容。Apple 系统服务及开源组件详情见应用内《第三方 SDK 与系统服务清单》。

6. 保存期限与删除

本地日记和媒体在你删除对应内容或卸载应用前保存在设备上。临时录音、导出和渲染文件在操作完成、取消或失败后按功能逻辑清理。你保存到照片图库、文件 App、备份位置或其他应用的副本不会随 MagixDiary 内删除而自动消失。

当前版本没有 MagixRealm 云端日记账号，因此我们没有可供删除的云端日记副本。具体删除步骤和 StoreKit 订阅处理见《账号与本地数据删除说明》。

7. 未成年人

MagixDiary 面向一般用户，不以收集未成年人个人信息为目的。监护人应根据未成年人的年龄和所在地规则决定是否允许其使用相机、麦克风、分享和购买功能。我们不会基于日记内容投放广告或进行年龄画像。

8. 你的选择与权利

你可以在应用内查看、修改、导出或删除本地日记；在 iOS 设置中管理系统权限；在 Apple Account 的订阅设置中管理或取消自动续费。若你对本政策或本地数据处理有疑问，可通过 App Store 产品页的“App 支持”联系方式与我们联系。涉及付款、退款或 Apple Account 的请求由 Apple 支持处理。

9. 政策更新

若处理目的、权限、SDK、云服务或共享对象发生实质变化，我们会更新本政策和文档版本，并在适用法律要求时再次征得同意。更新不会把此前本地保存的私密日记自动转为云端或广告用途。

English Version

1. Scope and provider

This policy applies to the MagixDiary iOS app. The provider is the entity identified as the seller or provider on the App Store product page (“MagixRealm”, “we”, or “us”). It describes processing enabled in the current iOS release and does not import Android-only Google, advertising, vendor login, or regional payment behavior.

MagixDiary is local-first. The current iOS release does not require a MagixRealm account, does not provide a MagixRealm cloud-sync service, and does not include advertising, cross-app tracking, or third-party behavioral analytics SDKs. Diary content is not automatically uploaded to a MagixRealm server.

2. Information processed

  • Diary content and structure: titles, covers, pages, text, tags, favorite/hidden state, canvas objects and styles, handwriting, local search indexes, and recovery fragments, used to create, edit, search, preview, and recover diaries.
  • Media you choose: photos and videos selected through the system picker, audio you record, and photos or videos you capture when a camera surface is available and you choose to use it.
  • On-device results: Apple Vision foreground masks and cutouts, video thumbnails, waveforms, render caches, and generated videos.
  • Packages and files: .lwp packages selected through the system file picker and files you intentionally export or share.
  • Purchases and entitlements: product identifiers and display information, verified transaction type, subscription expiration or revocation state, and current entitlement supplied by StoreKit. Apple processes payment credentials and the Apple Account; MagixDiary does not read card numbers or Apple Account passwords.

3. Permissions and Apple capabilities

  • Photo library read: lets you choose photos or videos for a diary. MagixDiary prefers PhotosPicker and receives only items you select.
  • Photo library add: saves a generated diary video only after you choose Save.
  • Camera: captures content only after you choose a camera action; it is not activated in the background.
  • Microphone: records only after you start recording; completed audio is stored in the encrypted local resource repository.
  • Files and sharing: system import, export, and share surfaces run only after your action. Copies sent elsewhere are governed by the destination’s policies.
  • Apple Vision: foreground separation runs on device; MagixDiary does not upload a photo to a third party for default cutout processing.

You can change permissions in iOS Settings. Revoking a permission does not erase copies already stored in a diary.

4. Local storage and security

Diary payloads, recovery fragments, and media resources use AES-256-GCM encryption. Search indexes use SQLCipher. The primary key is stored in the device Keychain with a this-device-only accessibility class. Files also use iOS Data Protection, and resources are checked for length and SHA-256 integrity when read.

These controls reduce the risk of direct access or tampering, but no system can guarantee absolute security. Protect your device passcode and review private content before exporting or sharing it.

5. Disclosure and transfer

We do not sell diary content, use private diaries for advertising profiles, or provide diary content to data brokers. Information leaves the app sandbox only when you direct a save, export, or share; when StoreKit communicates with Apple for products, purchases, or restoration; or when disclosure is legally required and limited to what is necessary.

SQLCipher.swift and ZIPFoundation perform database and package work locally and do not independently upload diary content. See the in-app Third-Party SDK and Apple Services List for details.

6. Retention and deletion

Local diaries and media remain on the device until you delete them or remove the app. Temporary recording, export, and rendering files are cleared according to the operation’s completion, cancellation, or failure path. Copies saved to Photos, Files, backups, or another app are not removed automatically when you delete the original in MagixDiary.

The current release has no MagixRealm cloud diary account and therefore no MagixRealm-hosted diary copy to delete. See the Account and Local Data Deletion Notice for instructions.

7. Children

MagixDiary is a general-audience creative tool and is not designed to collect children’s personal information. Guardians should decide whether camera, microphone, sharing, and purchase features are appropriate. We do not use diary content for advertising or age profiling.

8. Your choices and contact

You can view, change, export, or delete local diaries; manage permissions in iOS Settings; and manage auto-renewal in Apple Account subscription settings. Contact us through the App Support channel on the App Store product page. Apple Support handles payment, refund, and Apple Account requests.

9. Changes

If purposes, permissions, SDKs, cloud services, or recipients materially change, we will update this policy and its version and request consent where required. An update will not silently convert existing private diaries into cloud or advertising data.