隐私政策Privacy Policy

拾趣 · Hey Magpie · 最后更新 2026 年 11 月 3 日Hey Magpie · 拾趣 · Last updated 3 November 2026

这是测试阶段的草稿版本，正式上架前会补全并由我们复核。This is a draft for the test period. It will be completed and reviewed before the app is released on the stores.

一句话

拾趣是一个收集身边小美好的 App，由悉尼的 Holding Systems Pty Ltd 运营。你的照片、位置和收藏都留在你的手机上，除非你自己点「认一认」、开备份或发起一起走。我们不放广告，不卖数据，不追踪你。

留在手机上的

  • 你的收藏：卡片、相册、花园、便签、今日小记，都只存在你的手机里。删掉 App 就没有了，除非你开了备份。
  • 位置：用来显示所在地的天气、附近能遇见什么，以及给卡片盖上地点章。位置不会发给我们的服务器。查天气时，会把取整到约 1 公里的大致位置发给 Open-Meteo（见下方）。开了备份的话，备份里会带上你所在地的名字、家附近的大致位置和卡片上的地点章。
  • 步数和距离（可选）：如果你允许，App 从 Apple 健康或 Health Connect 只读取当天的步数和距离，显示在当天的页面上。只读，从不写入，也不上传。
  • 相机和相册：用来拍照和保存照片。只有你拍下并点「认一认」的照片会离开手机；没网或当天次数用完时先收起来的照片，会在你同意过 AI 识别后稍后再发去认（见下一条）。

会离开手机的

  • 认一认的照片：你点「认一认」时，那张照片会发到我们的服务器，再交给 Anthropic 的 Claude 模型（服务器在美国）辨认它是什么。我们的服务器不保存这张照片；Anthropic 按它的政策短期保留后删除，不用于训练模型。为了防止滥用，服务器只按设备和当天计次数；网络地址不会原样保存，只记一个当天的打乱编码，7 天后一并删除。不记录是谁、在哪里。
  • 备份（可选）：如果你用 Apple 或 Google 登录开启备份，你的收藏和照片会存一份在我们的服务器（由 Supabase 托管，服务器在澳大利亚以外的地区也可能有副本）。只有你本人能读取。退出登录后，这份备份仍留在服务器上，等你下次登录取回；在「我的 › 设置」里「删除账号和云端备份」才会把它删掉。
  • 一起走（可选）：你发起或加入徒步时，这次徒步的名字、邀请码、集合点和大家分享的照片会存在我们的服务器上，给同一次徒步的人看。徒步结束 7 天后自动删除。
  • 活动的一句评价（可选）：去过活动后点的「值得专程去 / 顺路可以 / 不适合我」会匿名存到我们的服务器，只用来看哪类活动值得推荐。至少 3 个人答过的活动才会汇总，没有人能看到单条回答。
  • 分享遇见（可选）：如果你在「今天」的小卡片或「设置」里打开了分享遇见，AI 认得准的那些遇见会匿名存到我们的服务器：只有是什么、在哪个公园或哪个约 1 公里的格子、哪个月。没有照片，没有准确位置，没有时间，也没有你的账号。胆小的、受威胁的物种从不上传。至少 3 个不同的人在同一处遇见过，3 天后才会计入推荐。关掉分享就不再上传；「删掉我分享过的」会删掉服务器上你分享过的全部记录，删除账号时也一并删除。
  • 崩溃报告：App 闪退时会发一份报告到 Sentry（我们的崩溃分析服务，服务器在美国），里面只有出错的代码位置、App 版本、系统版本和手机型号，没有照片、位置、名字或账号。
  • 检查更新：App 启动时会向 Expo 的更新服务问一声有没有新版本。这个请求带 App 版本、系统类型和一个随机生成的安装编号（用来数更新送到了多少台手机），不带你的收藏或位置。
  • 活动信息：这周的悉尼活动列表从我们的服务器下载，这个请求不带任何关于你的信息。

我们不做的

  • 没有广告，没有广告追踪，没有第三方分析 SDK。
  • 不出售、不出租、不与他人交换你的任何数据。
  • 不读你的通讯录，不读你的其他照片。

我们用到的服务

  • Supabase：账号、备份、一起走的数据存储。
  • Anthropic（Claude）：辨认你拍的照片。
  • Sentry：崩溃报告。
  • Expo（EAS Update）：检查和下载 App 更新。
  • Open-Meteo：天气。请求只带取整到约 1 公里的大致位置和时间，不带其他信息。
  • Apple / Google 登录：只用于备份，可以不登录。

你的选择

  • 可以随时在系统设置里关掉位置、健康、相机或相册权限，App 还能用，只是少了对应的功能。
  • 在「我的 › 设置」里可以「删除账号和云端备份」，或「清空我的收集」。
  • 有任何问题，写信给我们（见下方），我们会在合理时间内回复。

你的照片归你

你拍的照片和写的记录版权都是你的。我们只在你发起操作时用它们（认一认、备份、一起走），不会拿去做广告、放上官网或训练模型。详细写在用户条款里。

孩子

拾趣适合所有年龄，但不面向 13 岁以下的孩子收集任何信息。

变化

这份政策如有更新，会在这个页面公布并改动日期。重要变化会在 App 里提醒你。

联系

邮箱：

拾趣 · Hey Magpie 由 Holding Systems Pty Ltd（ABN 48 695 538 115）运营，澳大利亚新南威尔士州悉尼。

In one line

Hey Magpie is an app for collecting the small wonders around you, made by Holding Systems Pty Ltd in Sydney. Your photos, location and collection stay on your phone unless you tap Identify, turn on Backup or start a walk. No ads, no selling data, no tracking.

What stays on your phone

  • Your collection: cards, album, garden, notes and day pages live only on your phone. Deleting the app deletes them, unless you turned on Backup.
  • Location: used to show the weather where you are, what you might meet nearby, and to put a place stamp on a card. It is not sent to our servers. Weather lookups send your approximate position, rounded to about 1 km, to Open-Meteo (see below). If you turn on Backup, the backup carries the name of your suburb, the rounded position of your home area and the place stamps on your cards.
  • Steps and distance (optional): if you allow it, the app reads only today's steps and distance from Apple Health or Health Connect and shows them on the day's page. Read only, never written, never uploaded.
  • Camera and photos: used to take and save pictures. Only a photo you take and tap "Identify" on leaves the phone; a photo kept while you were offline or over the day's limit is sent later for the same purpose, once you have agreed to AI identification (see below).

What leaves your phone

  • Photos you ask us to identify: when you tap "Identify", that photo is sent to our server and on to Anthropic's Claude model (servers in the United States), which works out what it is. Our server does not keep the photo; Anthropic keeps it for a short time under its own policy, then deletes it, and does not use it to train models. To prevent abuse, the server only counts requests per device per day. Your network address is never stored as it is: only a scrambled code for the day, deleted after 7 days. Nothing records who or where you are.
  • Backup (optional): if you sign in with Apple or Google to turn on Backup, a copy of your collection and photos is stored on our servers (hosted by Supabase, which may keep copies outside Australia). Only you can read it. Signing out leaves the copy on the server for your next sign-in; "Delete account and backup" in Me › Settings deletes it.
  • Walk Together (optional): when you start or join a walk, its name, invite code, meeting point and the photos people share are stored on our servers for the people on that walk. They are deleted 7 days after the walk.
  • One-tap event verdicts (optional): after an event, your "worth the trip / fine if nearby / not for me" tap is stored anonymously on our server, only to learn which kinds of events are worth recommending. An event is summed up only once at least 3 people have answered, and nobody can see a single answer.
  • Share meetings (optional): if you turn on Share meetings on Today's small card or in Settings, the meetings the AI was sure of are stored anonymously on our server: only what it was, which park or roughly 1 km square, and which month. No photo, no exact location, no time and no account. Shy and threatened species are never uploaded. A place counts towards recommendations only once at least 3 different people have met the same thing there, and 3 days after it was shared. Turning sharing off stops uploads; "Delete what I shared" removes everything you shared from the server, and deleting your account removes it too.
  • Crash reports: if the app crashes, a report goes to Sentry, our crash-analysis service (servers in the United States). It holds only where the code failed, the app version, the OS version and the phone model. No photo, location, name or account.
  • Update checks: when the app starts it asks Expo's update service whether there is a newer version. That request carries the app version, the platform and a randomly generated install id (used to count how many phones received an update), not your collection or location.
  • Events: this week's Sydney events list is downloaded from our server. The request carries nothing about you.

What we do not do

  • No ads, no ad tracking, no third-party analytics SDKs.
  • We do not sell, rent or trade any of your data.
  • We do not read your contacts or your other photos.

Services we use

  • Supabase: accounts, backups and Walk Together data.
  • Anthropic (Claude): identifying the photos you ask about.
  • Sentry: crash reports.
  • Expo (EAS Update): checking for and downloading app updates.
  • Open-Meteo: weather. The request carries only your approximate position, rounded to about 1 km, and the time.
  • Sign in with Apple / Google: only for Backup; you can use the app without signing in.

Your choices

  • You can turn off location, health, camera or photo access in your phone's settings at any time. The app keeps working without that feature.
  • In Me › Settings you can "Delete account and backup" or "Clear my collection".
  • Questions? Write to us (below) and we will reply within a reasonable time.

Your photos are yours

You keep the copyright in the photos you take and the notes you write. We use them only when you ask for something (Identify, Backup, Walk Together), never for advertising, our website or training models. The details are in the Terms of Use.

Children

Hey Magpie is for all ages, but it does not knowingly collect information from children under 13.

Changes

Updates to this policy are posted on this page with a new date. We will tell you in the app about important changes.

Contact

Email:

Hey Magpie · 拾趣 is operated by Holding Systems Pty Ltd (ABN 48 695 538 115), Sydney, New South Wales, Australia.