一卷 Rollbook 胶片拍摄全流程管理 Film photography, from start to finish

隐私政策Privacy Policy

最后更新：2026-10-12Last updated: 2026-10-12

1. 适用范围与联系方式

本政策适用于 iOS App“一卷 Rollbook”（以下简称“一卷”）及本网站。部分功能及对应权限仅在支持该功能的版本中提供；相机、定位等数据处理以你实际使用的功能和授权情况为准。一卷由独立开发者 Jovany Liu 开发和维护。对本政策或你的数据有任何疑问，请来信 slowscopy@gmail.com。

一卷无需注册账号，没有用于收集胶片档案或照片的开发者服务器，也不出售个人信息。App 的联网功能包括可选 iCloud 备份、Apple 地图服务与 StoreKit 内购；主动反馈邮件、外部链接及本网站托管的处理方式分别见下文。

2. 一卷处理哪些数据

  • 你录入的记录：胶片档案、拍摄与曝光参数、测光结果、冲洗记录、配方、药水与器材库存、备注和评价等。
  • 照片：你通过系统照片选择器导入的成片或负片扫描、记录曝光时拍摄的参考照片、你为器材设置的图片。
  • 地点信息：记录曝光时获取的位置坐标及精度、由坐标解析出的地名，以及你手动选择的地点、导入照片自带的位置信息。
  • App 设置与专业版状态：语言、配色、提醒等偏好设置；是否已购买专业版，由 Apple 的 StoreKit 在设备上提供。

这些 App 记录以本机处理和保存为主，并按你启用的功能与 Apple 服务交互；不会自动发送给开发者。一卷不要求姓名、邮箱或手机号，不使用广告标识符追踪用户。若你主动发送反馈邮件，开发者会收到你的邮件地址、正文和附件；App 生成的反馈正文包含设备型号、系统版本、App 版本、Build 号和时间，你可在发送前检查或修改。

3. 相机与照片

  • 相机：经你授权后，只在你使用测光功能时开启，用于实时取景测光、在区域测光时判断取景是否移动，以及在记录曝光时拍摄一张参考照片。测光和图像分析都在设备本机完成。除参考照片外，相机画面不会被保存，也不会上传。
  • 读取照片：导入照片使用系统照片选择器，一卷只能读取你选中的照片，不申请访问整个照片库。负片转正、去色罩等图像处理都在设备本机进行。
  • 写入照片库：只有在你选择把照片保存到“照片”App 时，一卷才会申请“仅添加照片”的权限。
  • 导出照片中的信息：“原始文件导出”保留原文件已有的 EXIF/GPS 信息；“带档案信息导出”会根据可用记录和格式支持，在副本中写入拍摄时间、相机、镜头、光圈、快门、ISO 及 GPS 地点，保存到“照片”时也可设置资产的位置与时间。原始归档文件不因增强导出而被改写。分享前请检查元数据，接收方可能读取其中的地点等信息。

4. 位置信息与 Apple 地图服务

  • 何时获取：在胶片档案中使用测光并记录一次曝光时，一卷会请求“使用 App 期间”的定位权限（第一次会弹出系统询问），授权后尝试获取一次当前位置，并在成功时随该拍摄记录保存。如果你此前已经授权，进入该测光页时一卷也可能先获取一次位置，供记录时使用。
  • 不会持续追踪：一卷只做单次定位，不会在后台获取位置，也不申请“始终”定位权限。
  • Apple 地图服务：为了显示地名，一卷会把拍摄位置的坐标发给 Apple 地图服务解析地址。你选择地点时输入的搜索内容，以及档案地图的显示，也会用到 Apple 地图服务。这些请求由 Apple 处理，开发者收不到。
  • 其他来源：你也可以手动为档案选择地点；导入的照片如果自带位置信息，也会随照片一起保存。
  • 保存在哪里：地点信息保存在本机，可随相关记录进入你导出的备份文件、你开启的 iCloud 备份，以及含地点元数据的照片导出。
  • 你可以拒绝或随时关闭定位权限。拒绝后仍可保存拍摄记录，但不会取得新的设备定位。撤回权限不会自动删除历史地点、手动地点或导入照片已有的位置元数据。

5. 本地存储与可选的 iCloud 备份

一卷的数据默认保存在本机的 App 存储空间中。一卷不提供多设备实时同步。

  • iCloud 备份默认关闭，需要你在一卷的“设置 > iCloud 备份”中主动开启。开启后，数据保存在你自己 Apple 账户下、一卷专用的 iCloud 私有数据库中，开发者无法访问。
  • 备份内容：
    • “完整备份”包括档案等资料（含地点信息）、器材自定义图片、胶片照片原图和拍摄参考照片；
    • “轻量备份”只包括资料和器材自定义图片，不上传胶片照片原图和参考照片。
  • 关闭 iCloud 备份会停止之后的上传，但不会删除已经存放在 iCloud 中的数据。使用“清空本机数据”也不会删除 iCloud 中的数据。
  • 如需删除云端数据，请在 iOS 的 iCloud 储存空间管理中查找一卷，并使用系统提供的删除数据操作；不同系统版本与账户状态的入口可能不同。可参考 Apple 关于第三方 App 的 iCloud 数据说明。若没有显示相应入口，请联系 Apple 支持或来信求助，不要把关闭 App 内备份开关当作删除成功。此 App 内备份与 iPhone 的整机 iCloud 备份是不同功能，系统备份请另行管理。

6. 备份文件与导出

  • 你可以在“设置 > 备份与恢复”中导出本地备份文件（.rollbookbackup），保存到你选择的位置。完整备份包含资料和照片原图。
  • 备份文件不加密，里面包含你的记录和地点等信息。请把它保存在可信的位置，分享前请确认接收方。
  • 从备份文件恢复，仅支持全新安装或没有数据的状态。

7. App 内购（StoreKit）

一卷专业版通过 Apple 的 App 内购买项目出售。付款、退款、恢复购买和兑换代码都由 Apple 处理。一卷只从 Apple 获取商品信息（名称、价格）和经 Apple 签名验证的购买记录，用来在设备上确认你是否拥有专业版。一卷接触不到银行卡、Apple 账户密码等付款信息，也不会把购买记录发给开发者。

8. 通知、闹钟与生物识别

  • 通知与闹钟：只有在你使用冲洗计时等提醒功能时，一卷才会请求通知和系统闹钟权限，用于在步骤结束时提醒你。提醒在设备本机安排，不经过开发者服务器。
  • Face ID / Touch ID / 设备密码：只在打开隐私档案前用于确认是设备持有人。验证由 iOS 完成，一卷只得到“通过”或“未通过”的结果，拿不到任何生物特征数据。

9. 数据保存期限与删除

  • 一卷保留本机记录供你使用，直到你执行相应删除操作；设备故障或删除 App 等情况也可能造成丢失。你可以在 App 内删除单条档案、拍摄、冲洗、配方等记录；部分记录会先进入回收站，之后可以永久删除。
  • 在“设置 > 备份与恢复”中使用“清空本机数据”，会清除这台设备上的档案、照片、冲洗、库存等数据，不影响 iCloud 中的数据。
  • 删除一卷 App 时，iOS 会删除 App 在本机的数据，但不会删除 iCloud 备份、你导出的备份文件，以及已经保存到“照片”或分享出去的照片。
  • iCloud 数据需另行管理；导出的文件及已保存到“照片”的内容需在相应位置删除，并检查其回收站或“最近删除”。已分享给他人的副本不受一卷控制。开发者无法代删你设备和私有 iCloud 中的记录。主动发送给开发者的反馈邮件及附件用于处理支持请求，你可通过上述邮箱请求删除这些通信内容。

10. 如何撤回系统权限

你可以随时在 iPhone 的“设置”中找到“一卷”，关闭相机、定位、照片、通知等权限。定位也可以在“设置 > 隐私与安全性 > 定位服务”中修改，Face ID 授权可以在“设置 > 面容 ID 与密码 > 其他 App”中修改。拒绝权限会限制需要该权限的部分，例如无法取景测光或保存到照片库；拒绝定位仍可记录曝光。设备身份验证属于 App 内访问控制，不等于对导出备份文件加密。

11. 第三方服务与数据共享

  • 一卷不含广告、统计分析或用户追踪 SDK，不出售或出租你的数据，也不会为广告目的与他人共享数据。
  • 一卷用到的 Apple 服务包括 iCloud（仅在你开启 iCloud 备份时使用）、Apple 地图服务和 App Store 内购，相关数据由 Apple 按照 Apple 隐私政策 处理。
  • 一卷使用 ZIPFoundation、libjpeg-turbo、libtiff 等组件在设备上打包备份和处理图像；这些处理不会把图像发送给这些组件的维护者。
  • 你在 App 中点开的外部链接（例如厂商资料页面）会在浏览器中打开，此时适用对方网站的隐私政策。
  • 本网站托管在 GitHub Pages。按照 GitHub 的说明，访问 GitHub Pages 网站时，访问者的 IP 地址会被记录，并出于安全目的保存。本网站只在你的浏览器中记住语言和深浅色偏好，不使用统计或广告脚本。

12. 儿童隐私

一卷面向胶片摄影用户，并非专为儿童设计。App 不要求注册个人资料，也不进行广告追踪。如果监护人认为儿童通过反馈邮件等方式向开发者提供了个人信息，可联系我们请求协助或删除。

13. 政策变更

本政策可能随 App 功能的变化而更新。更新后会在本页发布，并修改顶部的“最后更新”日期。

1. Scope and contact

This policy applies to the iOS app 一卷 Rollbook (“Rollbook”) and this website. Some features and permissions are available only in versions that support them. Camera, location and other processing depend on the features you use and the permissions you grant. Rollbook is developed and maintained by independent developer Jovany Liu. For any question about this policy or your data, write to slowscopy@gmail.com.

Rollbook requires no account and has no developer-operated server for collecting film archives or photos. We do not sell personal information. Network features include optional iCloud backup, Apple Maps services and StoreKit purchases. Voluntary support email, external links and this website’s hosting are described separately below.

2. Data Rollbook processes

  • Your records: film archives, shot and exposure settings, metering results, processing sessions, recipes, chemical and gear inventory, notes and ratings.
  • Photos: scans of finished frames or negatives you import through the system photo picker, reference photos taken when you record an exposure, and images you set for your gear.
  • Location: coordinates and their accuracy captured when you record an exposure, place names resolved from those coordinates, places you choose manually, and location metadata carried by imported photos.
  • App settings and Pro status: preferences such as language, color and reminders. Whether you own Rollbook Pro is provided on your device by Apple’s StoreKit.

These app records are primarily processed and stored on your device, with Apple services used as described below. They are not automatically sent to the developer. Rollbook does not require your name, email address or phone number and does not use advertising identifiers to track you. If you voluntarily email support, the developer receives your email address, message and attachments. Feedback text prepared by the app includes device model, OS version, app version, build number and time; you can review or edit it before sending.

3. Camera and photos

  • Camera: used with your permission only while you use the light meter. It is used for live metering, for checking whether the framing has moved during area metering, and for taking one reference photo when you record an exposure. Metering and image analysis happen on your device. Apart from reference photos, camera frames are neither saved nor uploaded.
  • Reading photos: imports use the system photo picker, so Rollbook can read only the photos you select. It does not request access to your whole photo library. Negative conversion, mask removal and other image processing happen on your device.
  • Adding to your photo library: Rollbook requests “add photos only” access only when you choose to save photos to the Photos app.
  • Information in exported photos: “Original File” export retains existing EXIF/GPS metadata. “Export with Archive Information” writes available capture time, camera, lens, aperture, shutter speed, ISO and GPS location into a copy where the format supports it. Saving that export to Photos can also set the asset’s location and time. This does not modify the archived original. Check metadata before sharing: recipients may be able to read location and other details.

4. Location and Apple Maps services

  • When location is used: when you use the light meter inside a film archive and record an exposure, Rollbook asks for “While Using the App” location permission (the system prompts you the first time). After permission is granted, it attempts a single location reading and saves a successful result with that shot record. If you have already granted permission, Rollbook may also read your location once when you open that metering screen, so it is ready when you record.
  • No continuous tracking: Rollbook only takes single location readings. It never reads your location in the background and does not request “Always” permission.
  • Apple Maps services: to show place names, Rollbook sends a shot’s coordinates to Apple Maps services to look up the address. Searches you type when choosing a place, and the archive map display, also use Apple Maps services. Apple handles these requests; the developer does not receive them.
  • Other sources: you can also choose a place for an archive manually. If an imported photo carries location metadata, it is saved with the photo.
  • Where location is stored: on your device. It can also be included with the relevant records in exported backup files, enabled iCloud backups and photo exports that contain location metadata.
  • You can decline or revoke location permission at any time. You can still save shot records without a new device location. Revoking permission does not automatically delete previous locations, manually entered places or location metadata in imported photos.

5. On-device storage and optional iCloud backup

Rollbook stores its data in the app’s storage on your device by default. It does not offer real-time multi-device sync.

  • iCloud Backup is off by default. You turn it on yourself under Settings > iCloud Backup in Rollbook. Once on, data is kept in a private iCloud database dedicated to Rollbook under your own Apple Account, which the developer cannot access.
  • What is backed up:
    • “Full Backup” includes your records (including location), custom gear images, original film photos and shot reference photos.
    • “Lightweight Backup” includes only your records and custom gear images. Original film photos and reference photos are not uploaded.
  • Turning iCloud Backup off stops future uploads but does not delete data already in iCloud. “Clear Data on This Device” does not delete iCloud data either.
  • To delete cloud data, look for Rollbook in iOS iCloud storage management and use the deletion control provided by the system. Availability and menu names can vary with iOS and account state. See Apple’s guidance on third-party app data in iCloud. If no entry is shown, contact Apple Support or email us for help; switching off backup in Rollbook is not confirmation of deletion. This in-app backup is separate from iPhone device backups in iCloud, which you manage separately.

6. Backup files and exports

  • Under Settings > Backup & Restore you can export a local backup file (.rollbookbackup) and save it wherever you choose. A full backup includes your records and original photos.
  • Backup files are not encrypted and contain your records, including location. Keep them somewhere you trust, and check who you are sending them to before you share them.
  • A backup file can be restored only on a fresh installation or when the app has no data.

7. In-app purchase (StoreKit)

Rollbook Pro is sold as an Apple in-app purchase. Apple handles payment, refunds, restoring purchases and redeeming codes. Rollbook receives only product information (name and price) and Apple-signed, verified purchase records from Apple, which it uses on your device to confirm whether you own Rollbook Pro. Rollbook never has access to your bank card details or Apple Account password, and it does not send purchase records to the developer.

8. Notifications, alarms and biometrics

  • Notifications and alarms: Rollbook asks for notification and system alarm permission only when you use reminders such as the processing timer, so it can alert you when a step ends. Reminders are scheduled on your device and never pass through a developer server.
  • Face ID / Touch ID / device passcode: used only to confirm you are the device owner before a private archive opens. iOS performs the check, and Rollbook receives only a pass or fail result. It never has access to biometric data.

9. How long data is kept and how to delete it

  • Rollbook retains local records for your use until you delete them; device failure or removal of the app can also cause data loss. In the app you can delete individual archives, shots, processing sessions, recipes and other records. Some go to the Trash first, from where you can delete them permanently.
  • “Clear Data on This Device” under Settings > Backup & Restore removes archives, photos, processing and inventory data from this device. It does not affect data in iCloud.
  • When you delete the Rollbook app, iOS removes the app’s data from your device. Your iCloud backup, any backup files you exported, and photos you saved to Photos or shared are not removed.
  • Manage iCloud data separately. Delete exported files and saved Photos content at their respective locations, including any Trash or Recently Deleted area. Copies shared with others are outside Rollbook’s control. The developer cannot delete records on your device or in your private iCloud database for you. Support emails and attachments you send are used to handle your request; you may request deletion of those communications through the email address above.

10. Withdrawing system permissions

You can turn off camera, location, photos, notifications and other permissions at any time under Rollbook in the iPhone Settings app. Location can also be changed under Settings > Privacy & Security > Location Services, and Face ID access under Settings > Face ID & Passcode > Other Apps. Declining a permission limits the part that requires it, such as camera metering or saving to Photos; recording an exposure still works without location permission. Device authentication is in-app access control and does not encrypt exported backup files.

11. Third-party services and data sharing

  • Rollbook contains no advertising, analytics or user-tracking SDKs. It does not sell or rent your data, and does not share it with anyone for advertising.
  • The Apple services Rollbook uses are iCloud (only when you turn on iCloud Backup), Apple Maps services and App Store in-app purchases. Apple handles the related data under the Apple Privacy Policy.
  • Components such as ZIPFoundation, libjpeg-turbo and libtiff package backups and process images on your device. These operations do not send images to the component maintainers.
  • External links you open in the app, such as manufacturer data sheets, open in your browser and are covered by those websites’ own privacy policies.
  • This website is hosted on GitHub Pages. According to GitHub’s documentation, when a GitHub Pages site is visited, the visitor’s IP address is logged and stored for security purposes. This website only remembers your language and light or dark preference in your browser, and uses no analytics or advertising scripts.

12. Children’s privacy

Rollbook is designed for film photography users, not specifically for children. The app does not require a personal profile or use advertising tracking. If a guardian believes a child has sent personal information to the developer, for example by support email, please contact us for assistance or deletion.

13. Changes to this policy

This policy may be updated as the app’s features change. Updates will be posted on this page, and the “Last updated” date at the top will be revised.