WristSnap Privacy Policy and Service Agreement
Last Updated: June 2026
Welcome to WristSnap! This center aims to transparently explain how this application handles your device information, personal data, and compliance policies regarding high system permissions (such as Accessibility Services), third-party advertising SDKs, and User-Generated Content (UGC).
1. Prominent Disclosure and Usage of AccessibilityService API
WristSnap's core function is to serve as a remote operation control tool for smartphone camera apps using Amazfit smartwatches, and a local automation execution tool for smartphone camera applications. To achieve cross-device automated control, this application requires the use of the Android system's AccessibilityService API.
Specific Purposes:
- Remote Shooting Control: Receive and execute commands from your paired Amazfit smartwatch (Zepp OS device) to simulate clicking the shutter in your phone's camera interface.
- Real-time View: Capture the current screen content and transmit it to the smartwatch for composition preview.
- Photo Preview: To confirm the shooting result, the app captures a screenshot of the camera app's interface showing the last photo taken and transmits it back to your smartwatch via local network/Bluetooth channels.
- Automated Instructions: Record and play back your personal tap and drag actions on your phone screen for adjusting camera configurations (including camera shutter, photo playback configuration, recording drivers, and training preset instructions).
- UI State Recognition: During the process of recording drivers and training preset instructions, the system will perform visual analysis on screenshots (including text recognition and icon object recognition) to accurately identify the state of UI elements in the camera interface (such as parameter panels and parameter values), ensuring the accurate execution of automated instructions.
Permissions and Privacy Commitments:
- The use of this permission is strictly limited to the shooting or automation scenarios you actively configure.
- Your screen content and real-time visuals only flow locally and between your actively configured and connected Amazfit smartwatch devices.
- Visual analysis (including text and icon object recognition) is processed exclusively locally on the device, and you are required to cover the camera before recognition. We will never upload any of your screen visuals, photos, or content without your permission to any external cloud servers.
- We will absolutely not use the accessibility service to record your non-essential operations in the background.
Custom App Risk Warning: WristSnap allows you to customize the target "camera app." If you actively set a non-camera app (such as social software, browsers, etc.) as the target app, the smartwatch will also receive and display the screen of that app. Please use this custom feature in a safe and private environment.
2. Cloud Services and Data Processing
This application introduces cloud backup and community sharing features, and data processing strictly follows the principles of lightweight design and maximum privacy:
- Account-less Authentication Mechanism: We do not collect traditional identity information such as your real name, phone number, or email address. The app uses account-less authentication via local Ed25519 key pair technology, generating a public-private key pair locally on your device for identity verification.
- Nickname and Environment Fingerprint: To use the cloud market and configuration backup features, you must set a "user nickname" locally upon your first use. Meanwhile, to prevent configuration misalignments caused by device fragmentation, the system will record an environment fingerprint (including: target camera app package name, system language, phone model, and screen resolution) when you actively upload data.
- Cloud Asset Management: When you backup your recorded "Camera Drivers" or "Preset Instructions", their status is set to [🔒 Private Backup]. At this time, the data is for your personal use only to restore across devices using your key credentials. Only when you actively enable [🌐 Publish to Public Market], will this configuration data be publicly shared for other users with the same phone environment.
- Data Transmission Security: All uploading, restoring, and downloading of cloud data are transmitted through standard HTTPS encrypted channels to ensure data security during transmission.
- Community Governance and UGC Moderation Data: To maintain a safe and pure community environment, the system automatically reviews text uploaded to the public market (such as nicknames, driver, and preset descriptions) for sensitive content. Content that fails the review cannot be uploaded. Additionally, the app provides "Report Resource" and "Block User" functions. When you trigger these functions, the system only records necessary public key instructions to execute content isolation and takedown logic. For specific user conduct guidelines, please refer to the "WristSnap Cloud Community Guidelines & UGC Agreement" in the appendix.
3. Local Diagnostic Logs and Configuration Data Handling
- Local Diagnostic Logs: To facilitate troubleshooting cross-device connection and execution issues, the system records necessary diagnostic information locally (including: phone model, OS version, App version, target package and component names, and local HTTP request interaction records). These logs are strictly stored locally on your device and absolutely do not contain your personally identifiable information or sensitive privacy.
- Local Configuration Backup: To maintain the user experience of the legacy version (V1), your V1 version shortcut instructions (macros) are saved by default in your device's local storage .
- Controlled Data Export: The aforementioned diagnostic logs and local V1 version configuration files will only generate external files through the Android system's native standard file sharing mechanism (Share Intent) after you actively trigger them (e.g., enabling debug mode and tapping "Export Logs," or tapping "Local Export Backup"). We promise that the app will never automatically package or stealthily upload this local diagnostic and configuration data in the background.
4. Third-Party Advertising SDK and Advertising ID
To maintain the app's daily operations and cloud server expenses, this application integrates the Google AdMob advertising service network.
- Use of Advertising ID: The Google AdMob SDK may collect and use your device's Advertising ID and some non-personally identifiable device information (such as device model, network status, etc.) to provide personalized ad displays, control ad frequency, and analyze ad performance.
- Control and Opt-out: You can reset your Advertising ID or opt-out of personalized ads at any time via Android system settings (e.g., "Settings" > "Privacy" > "Ads"). For users in specific regions like the EU, the app integrates UMP privacy settings. We will strictly comply with GDPR regulations to obtain your explicit consent via pop-ups, allowing you to independently choose to accept or decline.
- PRO In-App Purchase Ad-Free Privilege: This application offers a "PRO Version" in-app purchase service. Once upgraded to a PRO user, the app will completely remove all ad displays. We promise that for devices with an activated PRO status, we will block the data tracking logic of the advertising SDK, and your Advertising ID will no longer be used for any advertising purposes.
5. User Data Control and Complete Deletion
We respect and guarantee your absolute right to control your own data:
- One-Click Toggle and Deletion: In your "My Cloud" asset list, you can toggle uploaded resources between "Public" and "Private" statuses at any time, and you can delete cloud asset data.
- Complete Account Deletion and Clearing: This application provides a prominent red [DEACTIVATE AND ERASE PROFILE] function on the "My Cloud" page. Once you actively trigger this action, the system will immediately and irreversibly delete your public key, nickname, all interaction/like records, and all private and public configuration presets you have uploaded from our cloud database.
6. Contact Us
If you have any questions regarding this privacy policy or the app's data compliance, please contact the developer via: Email: hermes.sun@gmail.com
Appendix: WristSnap Cloud Community Guidelines & UGC (User-Generated Content) Agreement
Notice: When you use the cloud services in the app for the first time, you must read and agree to this agreement before generating cloud identity credentials.
1. Content Ownership and Visibility
Your ownership of the "Camera Drivers" and "Preset Instructions" recorded using this app belongs solely to you. When you choose to "Publish to Public Market," it indicates your consent to publicly share this configuration item for other community users with the same phone environment to download and use for free.
2. User Conduct and UGC Content Guidelines
When setting a user nickname and describing custom preset configurations, you must comply with local laws, regulations, and community consensus. Publishing content with the following characteristics is strictly prohibited:
- Content containing pornography, vulgarity, violence, gore, or disturbing explicit material;
- Statements or nicknames promoting hate, discrimination, personal attacks, insults, or harassment;
- Any content infringing on others' intellectual property rights (e.g., stealing someone else's original macro and claiming it as your own) or invading others' privacy;
- Forged configuration files containing malicious fraud, phishing, viruses, or destructive scripts;
- Configuration files where descriptions severely mismatch the actual content;
- Any other content violating Google Play Developer Policies.
3. Pre-Content Review and Sensitive Word Filtering Mechanism
To prevent the spread of violating content from the source, the app has a built-in pre-content review mechanism. When you create/modify your user nickname or upload resource names and descriptions, the system automatically checks for sensitive words and violating text. For content containing political, pornographic, violent, abusive, or other violating words, the system will automatically block and refuse the upload.
4. Real-time Reporting and User Blocking Mechanism
To ensure the safety and purity of the community, the app provides content governance tools for all users:
- Real-time Reporting of Resources: If you find any violating names, descriptions, or abnormal presets in the public market, you can tap the [Report] button next to the resource item at any time. When a public content item receives violation reports from multiple different users reaching a system-set threshold, the system will automatically trigger a protection mechanism to temporarily hide or remove it from the public market. Meanwhile, the developer will also manually review and finalize the violation resolution for the received report list.
- Block/Mute Authors: If you do not wish to see content published by a specific user, you can use the [Block this Author] function. Once blocked, all past and future resources uploaded by this author will immediately become invisible to you and be completely isolated from your public market list.
- Credential Ban: For users who maliciously publish violating content, manipulate likes, or attempt to compromise the cloud API, the platform reserves the right to ban their local Ed25519 public key credentials, permanently terminating their access to the cloud market.
5. Disclaimer
Preset instructions in the community market are voluntarily recorded and uploaded by users. Limited by the intelligence of user-uploaded resources, system version upgrades of various phone manufacturers, and minor tweaks to underlying interfaces, we cannot guarantee that all public instructions will run 100% perfectly on your specific device. Please assess the risks yourself before downloading and executing.
腕影 (WristSnap) 隐私政策与服务协议
最后更新日期： 2026年6月
欢迎使用腕影 (WristSnap)！本中心旨在向您公开透明地说明本应用如何处理您的设备信息、个人数据，以及关于系统高权限（如无障碍服务）、第三方广告 SDK 和用户生成内容（UGC）的合规政策。
1. 无障碍服务 (AccessibilityService API) 的醒目披露与使用说明
腕影的核心功能是作为使用华米手表对手机相机类APP的远程操作控制与手机相机类应用本地自动化执行工具。为了实现跨设备的自动化控制，本应用需要使用 Android 系统的无障碍服务 API。
具体用途：
- 远程拍摄控制：接收并执行来自您配对华米智能手表（Zepp OS 设备）的指令，在您的手机相机界面中模拟点击快门。
- 实时取景：捕获当前屏幕内容并传输至手表端进行构图预览。
- 照片预览：为了确认拍摄结果，会对相机应用的查看最后一张拍摄的照片界面截图，通过本地网络/蓝牙通道回传至您的智能手表端。
- 自动化指令：记录并在您的手机屏幕上回放您个人设定的点击、拖拽等相机配置调整动作（包括相机快门、回看图片配置、录制驱动、训练预设指令）。
- UI 状态识别：在录制驱动和训练预设指令过程，系统会对截屏画面进行视觉分析（包括文字识别和图标对象识别），从而精准识别相机界面的 UI 元素状态（如参数面板、参数数值），以确保自动化指令的准确执行。
权限与隐私承诺：
- 此权限的使用严格限制在您主动配置的拍摄或自动化场景中。
- 您的屏幕内容和实时画面仅在本地及您主动配置连接的华米手表设备间流转。
- 视觉分析（含文字识别和图标对象识别）仅在本机处理，并在识别前要求您遮盖摄像头，不会将您的任何屏幕画面、照片或未经您允许的内容上传至任何外部云端服务器。
- 我们绝对不会利用无障碍服务在后台记录您的非必要操作。
自定义应用风险提示：腕影允许您自定义目标“相机应用”。如果您主动将非相机类应用（如社交软件、浏览器等）设置为目标应用，手表端同样会接收并显示该应用的屏幕画面。请在安全的私密环境下使用此自定义功能。
2. 云端服务与数据处理
本应用引入了云端备份与社区分享功能，数据处理严格遵循轻量化与隐私最大化原则：
- 无账户鉴权机制：我们不收集您的真实姓名、手机号、电子邮箱等传统身份信息。应用采用无账户鉴权的本地 Ed25519 密钥对技术，在您的设备本地生成公私钥对进行身份验证。
- 昵称与环境指纹：为了使用云端大厅和配置备份功能，您在首次使用时必须在本地设置一个“用户昵称”。同时，为了阻断碎片化带来的配置错位，系统在您主动上传数据时会记录环境指纹（包括：相机应用目标包名、系统语言、手机机型、屏幕分辨率）。
- 云端资产管理：当您备份录制的“相机驱动”或“预设指令”时，其状态设为【🔒 私密备份】，此时数据仅供您个人使用密钥凭证进行跨设备恢复；只有当您**主动开启【🌐 发布到公共大厅】**时，该配置数据才会被公开分享给使用相同手机环境的其他用户。
- 数据传输安全：所有云端数据的上传、恢复与下载，均采用标准的 HTTPS 加密通道传输，确保数据在传输过程中的安全性。
- 社区治理与 UGC 审核数据：为了维护安全、纯粹的社区环境，系统会对您上传至公共大厅的文本（如昵称、驱动与预设描述）进行自动化的敏感内容审核，未通过审核的内容无法上传。同时，应用内提供了“举报资源”与“拉黑分享者”功能。当您触发这些功能时，系统仅记录必要的公钥指令以执行内容隔离与下架逻辑。关于具体的用户行为规范，请参阅附录的《腕影云端社区规范与 UGC 协议》。
3. 本地诊断日志与配置数据的处理
- 本地诊断日志：为了便于排查跨设备连接与运行故障，系统会在本地记录必要的诊断信息（包括：手机型号、系统版本、App 版本、目标包名与组件名称、本地 HTTP 请求交互记录）。这些日志严格存储于您的设备本地，绝对不包含您的个人身份信息或敏感隐私。
- 本地配置备份：为了延续旧版（V1）应用体验，您的V1版本快捷指令（宏）默认保存在您的设备本地存储中。
- 受控的数据导出：上述的诊断日志与本地V1版本配置文件，只有在您主动触发（如开启调试模式并点击“导出日志”，或点击“本地导出备份”）后，才会通过 Android 系统原生的标准文件分享机制（Share Intent）生成对外文件。我们承诺，应用绝不会在后台自动打包或隐蔽上传这些本地诊断与配置数据。
4. 第三方广告 SDK 与广告 ID (Advertising ID) 说明
为了维持应用的日常运营与云端服务器开支，本应用集成了 Google AdMob 广告服务网络。
- 广告 ID 的使用：Google AdMob SDK 可能会收集并使用您设备的广告 ID (Advertising ID) 以及部分非个人身份的设备信息（如设备型号、网络状态等），用于提供个性化广告展示、广告频次控制和效果分析。
- 控制与退出：您可以随时通过 Android 系统的设置（如“设置” > “隐私” > “广告”）重置您的广告 ID 或选择退出个性化广告。对于欧盟等特定地区的用户，应用集成了 UMP 隐私设置，我们将严格遵照 GDPR 规定，通过弹窗获取您的明确授权，您可自主选择拒绝或同意。
- PRO 内购免广告特权：本应用提供“PRO 版本”的应用内购买服务。一旦升级为 PRO 用户，应用将全面移除所有广告展示。我们承诺，对于已激活 PRO 状态的设备，我们将阻断广告 SDK 的数据追踪逻辑，您的广告 ID 将不再被用于任何广告目的。
5. 用户的数据控制权与彻底删除
我们尊重并保障您对自身数据的绝对控制权：
- 一键切换与删除：您可以在“我的云端”资产列表中，随时将已上传的资源在“公开”与“私密”状态之间进行一键切换，可删除云端资产数据。
- 彻底注销与清空：本应用在“我的云端”页面提供了醒目的红色**【注销并彻底抹除档案】**功能。一旦您主动触发此操作，系统将立即且不可逆地从我们的云端数据库中彻底删除您的公钥、昵称、所有互动点赞记录，以及您上传的所有私密和公开的配置预设。
6. 联系我们
如果您对本隐私政策或应用的数据合规有任何疑问，请通过以下方式联系开发者： 电子邮箱：hermes.sun@gmail.com
附录：腕影云端社区规范与 UGC (用户生成内容) 协议
提示：当您在应用内首次使用云端服务时，必须阅读并同意本协议，方可生成云端身份凭证。
1. 内容所有权与可见性
您使用本应用录制的“相机驱动”及“预设指令”的所有权归您个人所有。当您选择将配置“发布到公共大厅”时，即表示您同意将该配置项公开分享给使用相同手机环境的其他社区用户免费下载与使用。
2. 用户行为与 UGC 内容规范
您在设置用户昵称以及在描述自制预设配置时，必须遵守当地法律法规及社区共识。严禁发布包含以下特征的内容：
- 含有色情、低俗、暴力、血腥或引人不适的露骨内容；
- 含有宣扬仇恨、歧视、人身攻击、侮辱或骚扰性质的言论与昵称；
- 任何侵犯他人知识产权（如盗用他人录制的独创宏且声称为原创）或侵犯他人隐私的内容；
- 包含恶意欺诈、网络钓鱼、病毒或破坏性脚本的伪造配置文件；
- 描述与实际内容严重不符的配置文件；
- 其他违反 Google Play 开发者政策的内容。
3. 前置内容审查与敏感词过滤机制
为了从源头上阻止违规内容的传播，应用内置了前置内容审查机制。当您创建/修改用户昵称，或者上传资源的名称与描述时，系统会自动进行敏感词与违规文本检测。对于包含政治、色情、暴恐、辱骂等违规词汇的内容，系统将自动拦截并拒绝上传。
4. 实时举报、用户拉黑机制
为了保障社区的安全与纯净，应用为所有用户提供了内容治理工具：
- 实时举报资源：如果您在公共大厅中发现任何违规的名称、描述或异常预设，可随时点击资源项旁的【举报】按钮。当某一公开内容收到多名不同用户的违规举报达到系统设定的阈值时，系统将自动触发保护机制，将其从公共大厅临时隐藏或下架。同时，开发者也会对收到的举报清单进行人工复核与最终违规清算。
- 拉黑/屏蔽分享者：如果您不想看到特定用户发布的内容，可以使用【屏蔽此作者】功能。一旦执行屏蔽，该作者上传的所有历史及未来资源将立即对您隐身，从您的公共大厅列表中彻底隔离。
- 凭证封禁：对于恶意发布违规内容、刷赞或尝试破坏云端接口的用户，平台将有权封禁其本地 Ed25519 公钥凭证，永久终止其使用云端大厅的权限。
5. 免责声明
社区大厅中的预设指令均由用户自发录制与上传。受限于用户上传资源智联、各手机厂商系统版本升级和底层界面的微调，我们无法保证所有公开指令在您的特定设备上都能 100% 完美运行，请在下载执行前自行评估风险。