Privacy policy

Data collection

TJ NOVA LTD does not collect data through the app. Version 1.0 contains no account, analytics SDK, advertising SDK, third-party crash SDK and no cloud AI. The only network call the app can make is the optional trusted timestamp described below, which carries a digest and nothing else. The support site uses no analytics and has no form.

TJ NOVA LTD 不通过本应用收集数据。1.0 版本没有账号体系，没有统计 SDK、广告 SDK、第三方崩溃收集 SDK，也没有云端 AI。App 唯一会发出的网络请求是下面写的那个可选时间戳功能，它只带一个摘要，别的什么都不带。支持站点同样不做统计、没有表单。

Photos and local records

Selected images are re-encoded as JPEG stored copies inside the app container. Original GPS, capture-time and camera-device metadata is not retained in that stored copy, although the encoder may add non-sensitive structural fields such as pixel dimensions. Local records use iOS complete file protection.

你选的照片会被另存一份 JPEG 放进 App 自己的空间里。另存时会去掉原图的定位、拍摄时间和相机型号，但可能还带着宽高这类基本信息。这些文件受 iOS 保护：手机锁屏时它们打不开。

Exports

The PDF and JSON export can include a vehicle label, rental company, trip UUID, phase and angle names, stored-copy hashes and timestamps, quality flags and user-confirmed observations. It excludes photo pixels, local file paths, booking reference and precise location. Review exports before sharing; recipients control copies after export.

导出的文件里可能有：车辆标识、租车公司、这趟行程的编号、阶段和角度名、每张照片的校验值和时间戳、质量标记，以及你自己确认过的记录。里面没有照片本身，也没有文件路径、预订号和精确位置。发出去之前自己先看一遍 —— 一旦发出去，那份副本就归对方了。

Retention and deletion

There is no automatic retention deadline. Records remain in the app container until the device owner uses Delete Local Trip or removes the app. The delete action does not remove copies already exported.

没有自动过期这回事。记录会一直留在手机上，直到你用"删除本地行程"或者卸载 App。已经导出发出去的副本，删不掉。

Optional trusted timestamps

ClearReturn can ask an independent timestamp authority to certify when a photo already existed. This is off unless you turn it on, and it is the only feature that uses the network. When you use it, the app sends a 32-byte SHA-256 digest of the stored copy and nothing else: not the photo, not the vehicle, not the trip, not your identity. A digest cannot be turned back into the image it came from. What comes back is a signed statement by a third party that this digest existed before a given moment, stored on your device alongside the trip.

ClearReturn 可以请一个独立的时间戳机构来证明某张照片在某个时刻之前就已经存在。这个功能默认关闭，你不开它就不会用，而且它是整个 App 里唯一会联网的地方。用的时候，发出去的只有那份本地副本的 32 字节 SHA-256 摘要 —— 不是照片、不是车、不是行程、不是你的身份。摘要没法还原成原图。换回来的是第三方签名的一句话：这个摘要在某个时间点之前就存在了。这句话跟行程一起存在你手机上。

Why this exists: the app strips the original GPS and capture time when it re-encodes a photo, and a hash alone shows only that a stored copy has not changed since it was saved. Without a third-party timestamp there is nothing to answer "you could have taken that at any time". This closes that gap without weakening anything else.

为什么要有这个功能：App 在另存照片时会去掉原图的定位和拍摄时间，而哈希只能证明"存下来之后没被改过"。没有第三方时间戳，就没法回答"这照片你什么时候拍的都行"。这个功能补的正是这一块，同时不削弱其它任何隐私设计。

Permissions

Camera access is requested only after choosing Use camera. Photo-library access is used only for images the person selects. Precise location is not collected.

只有你点了"使用相机"之后才会申请相机权限。相册权限只用于你自己选中的图片。不采集精确位置。

Contact

Privacy questions: info@tjnovaltd.com. Controller: TJ NOVA LTD, Company No. 17308318, England and Wales.

隐私相关问题请联系 info@tjnovaltd.com。数据控制者：TJ NOVA LTD，公司注册号 17308318，注册地英格兰及威尔士。