Privacy Policy

1. Scope and operator

This policy covers the CanVision app and website, including photo and motion-media editing, templates, drafts, export and subscriptions.

CanVision is operated by Zhang Detao, referred to below as “CanVision” or “we”. Contact canvision01@gmail.com for privacy questions and requests about your personal information.

Read this policy with the User Agreement and Third-Party Services list. Describing a feature does not cause information to be collected before that feature is available.

2. Editing media and local files

When you select photos, videos or Live Photos, the app reads the selected media and file information needed to process it, such as format, dimensions, duration and orientation. Local caches, thumbnails, intermediate files and exports may be created for previewing, editing and saving.

The current version processes media mainly on your device. Original photos and videos are not sent as product analytics events or uploaded to CanVision servers for advertising or model training. If you email us media or screenshots, we process the material you choose to submit.

Drafts and exports are mainly stored on your device. Uninstalling the app, clearing its data or deleting files may remove local drafts. Works saved to the system photo library are managed by that library.

3. System permissions

Importing or saving media may require photo-library read or add permissions, depending on the feature and system version. The app may also read items selected through the system picker. Saving to the photo library requires the applicable system authorization.

You can change photo permissions in system settings. Refusing a permission affects the import or save operations that depend on it and does not grant analytics consent. Reading or confirming this policy does not replace system permission choices.

4. Network services and support

The app connects to CanVision services for templates, stickers, previews, versions, resource integrity information and subscription verification. Servers and network infrastructure process request times, IP addresses, request paths and app or device information included in requests to deliver responses, provide content, verify access, protect the service and diagnose problems.

After analytics consent, a network request obtains the region used to select the analytics provider. The result is based on network-region information and does not require precise GPS permission.

When you email support, we process your address, description and submitted attachments to respond. Do not send passwords, complete payment-card details or Apple account credentials. Legal pages contain no third-party analytics or advertising scripts; visiting them still generates basic network request information.

5. Usage analytics

We enable the applicable product analytics SDK only after your explicit consent, to understand feature use, diagnose issues and improve the app. Mainland China uses Umeng; other countries and regions use Mixpanel. A single analytics event is not sent to both providers.

Events include app opens, template views, export results, subscription-page views, product selections, and purchase or restoration starts, successes, cancellations and failures. Properties include relevant template or product identifiers, export format, status and error categories. They do not include photo content, phone numbers, email addresses, local file paths or complete transaction credentials.

SDKs also process installation or device identifiers, device model, operating-system and app versions, SDK version, screen information, event times and network information. Requests involve IP addresses; Mixpanel can derive estimated country, region or city information from them. This is different from GPS positioning. See Third-Party Services for provider-specific information and activation conditions.

The current version does not integrate advertising display, advertising attribution or cross-app advertising tracking. Change usage analytics under Profile → Privacy and support. Turning it off prevents new app-submitted product analytics events; it does not automatically delete data already sent. Contact us for related requests. The product analytics switch does not control subscription verification or necessary service-operation information.

6. Purchases and entitlement verification

Apple App Store or the actual purchase platform handles payments. To complete purchases, restore subscriptions, synchronize access and prevent transaction abuse, we process app user or account identifiers, product identifiers, transaction and original transaction identifiers, signed transaction data, purchase dates, subscription status and expiry. Service identifiers associate access with the app; we do not require your Apple account password.

Depending on the version’s configuration, Apple, CanVision verification services and RevenueCat may process subscription information. See the third-party list for RevenueCat’s role. Disabling product analytics does not disable verification needed for subscriptions. We do not receive complete payment-card numbers or security codes.

7. Third parties and international services

We use third parties for the relevant functions and do not sell personal information. The Third-Party Services list explains providers, purposes, information, processing, activation conditions and policy links.

Alibaba Cloud infrastructure hosts CanVision network services. Mixpanel and RevenueCat are overseas providers and may process relevant information in the United States or their configured service regions. Apple handles purchases under its terms and privacy policy. Domestic infrastructure does not mean all information is processed domestically.

Where international transfers or other processing require additional notice or separate consent under applicable law, we will provide that notice and obtain the required authorization. A general first-use confirmation does not replace those requirements.

8. Retention and protection

Local drafts, media caches and works remain subject to your use and device management. Subscription and transaction records support verification, purchase restoration, refunds, disputes and legal obligations. Their retention depends on those purposes and is not simply the subscription expiry date.

Network-operation records support request handling, security and troubleshooting. Analytics providers retain product analytics according to project configuration and applicable rules. We apply the shortest period needed for the stated purposes and delete or anonymize information when those purposes end or a valid deletion request applies, unless retention is legally required. Legally retained information is restricted to permitted purposes.

We use HTTPS transport, access controls and limits on processing. Device locking and appropriate backups also help protect your local drafts.

9. Your choices and rights

You can change analytics choices and system photo permissions, and manage local drafts and works through the app or system. Withdrawal does not affect processing lawfully performed before it.

For access, copies, corrections, deletion, withdrawal or privacy complaints concerning server-side information, email canvision01@gmail.com. Describe the request and provide an app user identifier or relevant order information to help locate records. We request only information needed to verify the request, never account passwords.

If transaction or security records cannot legally be deleted immediately, we explain the reason and restrict other processing. Clearing local app data does not delete information already received by service providers. Cancel subscriptions through the purchase platform.

10. Minors

Minors should read this policy and use the service with a guardian’s guidance. Processing personal information of users under fourteen requires guardian consent. The service is not provided for the purpose of collecting children’s information. If we discover children’s information processed without appropriate guardian consent, we investigate and delete it or take other necessary measures.

11. Updates and contact

We update the policy and date when features, purposes, information types or providers change, and give appropriate notice of material changes. We seek renewed consent where required. An update does not retroactively authorize processing that lacked permission.

Privacy and support contact: canvision01@gmail.com.