隐私政策
Privacy Policy

This Privacy Policy applies to the floato iPhone app (Chinese name: 浮屏) and its supporting cloud services. floato does not require an account and does not collect your name, email address, phone number, or password. We process only the data needed for screenshot recognition, Live Activities, subscription entitlement, and service security.

floato is not a merchant or credential issuer. Recognition results are provided for convenience; always verify them against the merchant’s original information before use.

• Screenshots you submit: When you submit an image through the system share menu or photo picker, it is sent to cloud AI for recognition. The app provides a separate notice and asks for your consent before the first upload.
• Extracted credential information: This may include merchant name, pickup or collection code, item summary, date and time, expiration, and location hints visible in the screenshot.
• Subscription and usage: We process Apple-signed transaction information and retain a hashed anonymous subscription identifier, subscription status, current-period usage, and expiration. We do not receive your Apple Account password or full payment details.
• Security and push data: We use Apple App Attest to validate legitimate installations and process request-scoped push tokens for Live Activities. Push tokens are not used for marketing.
• Operational logs: For reliability and troubleshooting, we record request outcome, duration, error category, and short anonymous IDs. Logs do not contain screenshots, pickup codes, item summaries, or precise locations.
• On-device data: Credential results, archive state, custom brand images, reminder settings, and locations you choose to calibrate are stored on your device. Calibrated locations and reminder information are not uploaded to floato.

We use the data only to recognize credentials in screenshots; create and update lock-screen Live Activities; provide local credential management, reminders, and navigation; verify subscription entitlement and recognition allowance; prevent abuse and protect service security; and diagnose errors and maintain reliability. We do not sell personal data, serve third-party ads, track you across apps or websites, or use screenshots to build user profiles.

Core features may involve the following services:

• Apple: StoreKit, App Attest, Apple Push Notification service, ActivityKit, and MapKit.
• Cloudflare: Hosts floato’s cloud endpoints and processes network requests.
• Cloud AI providers: The current recognition path may use Xiaomi MiMo. The provider may vary according to your App Store region and service availability. Screenshots are used only to complete the requested recognition.

We require processors to provide the same or equivalent protection described here and required by Apple, not to use screenshots for training, and not to retain images after real-time processing is complete.

• Original screenshots are used briefly during upload and recognition and are not persistently stored on our servers or your device.
• Structured recognition results are retained on the server for no more than 24 hours and are then automatically deleted.
• Operational logs are retained for no more than 30 days.
• Anonymous subscription records are automatically deleted 180 days after the subscription becomes inactive.
• App Attest security records are kept only as long as needed to validate installations, prevent abuse, and protect the service.
• On-device data remains until you delete the related credential or settings in the app, or uninstall the app.

• You may choose not to submit a screenshot; cloud recognition will not begin without a submission.
• You may revoke Photos, Location, or Notifications permissions in iOS Settings. Location and notifications are not required to use screenshot recognition.
• You may delete local credentials and their related location, reminder, and brand customization data within the app.
• You may cancel auto-renewal through Apple’s subscription management interface.
• Because floato has no account system, most server-side recognition data is deleted automatically under the periods above. To ask a privacy question or request deletion, contact the developer through the floato Support page and provide enough anonymous information to locate the request. Do not send a full pickup code or original screenshot.

We use encryption in transit, Apple App Attest, short-lived session tokens, access controls, and data minimization. No system can guarantee absolute security. If a security incident may affect your rights, we will provide notice and take remedial steps as required by applicable law.

floato is a general-audience utility and is not directed to children. We do not knowingly collect children’s personal information. If you believe a child submitted personal information without appropriate authorization, contact the developer through the floato Support page.

We may update this policy when our product, processors, or legal requirements change. Material changes will be highlighted in the app or on this page, and the date above will be updated. For questions, use the floato Support page.