1. Scope

一、适用范围

This policy describes how ePassRead processes information when you use its NFC passport reading, image capture, face comparison, record management, encrypted submission, iCloud backup, App Attest, and in-app purchase features.

本政策说明你使用 NFC 护照读取、图片拍摄、人脸相似度辅助比对、记录管理、加密上报、iCloud 备份、App Attest 和应用内购买功能时，ePassRead 如何处理相关信息。

2. Information processed

二、处理的信息

Depending on the features you use, the app may process:

根据你使用的功能，应用可能处理：

• Passport access data: document number, date of birth, and expiry date.
• Passport chip data, including identity fields, document portrait, available data groups, certificates, signatures, and verification results.
• Passport information-page images and face comparison selfie images that you choose to capture.
• Submission endpoint settings, binding IDs, encryption keys, submission status, and server responses.
• Operational logs used to diagnose reading and submission errors.

• 护照访问数据：护照号码、出生日期和有效期。
• 护照芯片数据，包括身份字段、芯片证件照、可用数据组、证书、签名和校验结果。
• 你主动拍摄的护照资料页照片和人脸比对自拍照片。
• 上报地址配置、绑定 ID、加密密钥、上报状态和服务器响应。
• 用于排查读取与上报错误的运行日志。

3. NFC and camera access

三、NFC 与相机权限

NFC is used only when you start an electronic passport read. Camera access is requested when you scan an endpoint QR code, capture a passport information page, or take a selfie for local face similarity comparison. The app does not record continuously in the background.

NFC 仅在你主动开始读取电子护照时使用。扫描上报地址二维码、拍摄护照资料页或进行本地人脸相似度辅助比对时，应用会请求相机权限。应用不会在后台持续拍摄。

4. Local storage and processing

四、本地存储与处理

Passport records, settings, and submission history are stored in the app's local database. Image files are stored in the app's private container and loaded only when needed. Face similarity comparison is performed locally. Runtime logs remain on the device unless you choose to share them.

护照记录、设置和上报历史保存在应用的本地数据库中。图片文件保存在应用私有目录，并仅在需要时加载。人脸相似度辅助比对在本地完成。运行日志保留在设备中，除非你主动选择分享。

5. Data submission to your configured server

五、向你配置的服务器上报数据

ePassRead does not operate a central passport-data collection service. A passport record is submitted only after you select an endpoint and confirm the action. The report is encrypted on the device with AES-GCM before transmission. Depending on endpoint settings, the report may include chip data, raw data groups, the chip portrait, a passport information-page image, and a face comparison selfie.

ePassRead 不运营集中式护照数据收集服务。只有在你选择上报地址并二次确认后，护照记录才会被发送。上报内容会先在设备上使用 AES-GCM 加密。根据上报地址配置，内容可能包含芯片数据、原始数据组、芯片证件照、护照资料页照片和人脸比对自拍照片。

The person or organization operating the configured endpoint independently determines how submitted information is collected, retained, used, and deleted. Review that operator's privacy policy before submitting a record.

配置服务器的个人或组织独立决定已上报信息的收集、保留、使用和删除方式。上报前请查看该服务器运营方的隐私政策。

6. App Attest

六、App Attest

When supported, ePassRead uses Apple's App Attest service to help a configured server assess whether a request came from a genuine instance of the app. Apple may process device and attestation information under its own privacy terms. App Attest private keys remain protected by the operating system and are not included in app backups.

在设备支持时，ePassRead 使用 Apple 的 App Attest 服务，帮助已配置的服务器判断请求是否来自真实的应用实例。Apple 可能依据其隐私条款处理设备与认证相关信息。App Attest 私钥由操作系统保护，不包含在应用备份中。

7. iCloud backup

七、iCloud 备份

iCloud backup is optional and begins only when an eligible user selects Upload Backup. Backup data is stored in the user's private iCloud container and is subject to Apple's iCloud terms. Runtime logs and App Attest private material are excluded. You can use the app's iCloud backup page to upload or restore supported data.

iCloud 备份为可选功能，仅在符合条件的用户主动选择“上传备份”后开始。备份保存在用户的私有 iCloud 容器中，并受 Apple 的 iCloud 条款约束。运行日志和 App Attest 私密材料不会进入备份。你可以在应用的 iCloud 备份页面上传或恢复支持的数据。

8. In-app purchases

八、应用内购买

Purchases and refunds are processed by Apple through the App Store. ePassRead receives transaction status and product entitlement information needed to unlock Pro features, but does not receive your complete payment card details.

购买与退款由 Apple 通过 App Store 处理。ePassRead 会接收用于解锁 Pro 功能的交易状态和产品权益信息，但不会获取你的完整支付卡信息。

9. Retention and deletion

九、保留与删除

Local passport records, endpoint configurations, submission history, and runtime logs remain until you delete them in the app or remove the app. Deleting the app removes its local application data. You must contact the operator of a configured endpoint to request deletion of information already submitted to that server. iCloud backup data must be managed through the backup controls provided by the app or your Apple account.

本地护照记录、上报地址、上报历史和运行日志会保留至你在应用内删除，或删除应用为止。删除应用会移除其本地应用数据。对于已经上报至服务器的信息，你需要联系对应服务器的运营方申请删除。iCloud 备份数据需要通过应用提供的备份控制或你的 Apple 账户进行管理。

10. Security

十、安全措施

The app uses operating-system storage protections, encrypted report payloads, submission confirmation, and App Attest where available. No technical measure can guarantee absolute security. Keep your device protected and configure only servers you trust.

应用使用操作系统存储保护、上报消息加密、二次确认以及设备支持时的 App Attest 等措施。任何技术措施都无法保证绝对安全，请妥善保护设备，并仅配置你信任的服务器。

11. Children's privacy

十一、未成年人隐私

ePassRead is a document utility and is not directed to children. Passport information should be processed only when you have the legal authority and appropriate consent to do so.

ePassRead 是证件工具，并非面向儿童设计。只有在具备合法权限并取得适当同意的情况下，才应处理他人的护照信息。

12. Policy changes

十二、政策变更

This policy may be updated when app features or legal requirements change. The effective date at the top of this page will be revised when material changes are published.

当应用功能或法律要求发生变化时，本政策可能更新。发布重要变更时，页面顶部的生效日期也会相应调整。

13. Contact

十三、联系我们

For privacy questions, contact Contact@HaoQi.uk. Do not include passport images, raw passport data, encryption keys, or other sensitive identity information in your email.

如有隐私相关问题，请联系 Contact@HaoQi.uk。请勿在邮件中附带护照照片、护照原始数据、加密密钥或其他敏感身份信息。