Privacy Policy

1. Overview

Astrocean builds lightweight macOS utilities and iOS / watchOS apps. This policy applies to all Astrocean apps and the astrocean.love website. Our apps are designed to run entirely on your device and do not collect or transmit personal data to our servers.

2. Information We Do Not Collect

Our apps do not collect, store, or transmit: screen content, application names, usage patterns, keystroke data, photos, or any personally identifiable information. There are no user accounts and no cloud sync.

2a. zizaiRemote (iOS / watchOS) — Bluetooth and Location

zizaiRemote (自在相机遥控) is an iPhone and Apple Watch app that controls compatible cameras over Bluetooth. It uses two device permissions:

• Bluetooth — used solely to scan for, connect to, and send control commands (shutter, zoom, countdown) to your camera. No Bluetooth data is uploaded, stored, or shared.
• Location (When In Use) — only when you explicitly enable "Location Sync" inside the app. Your current location is transmitted directly to your camera over Bluetooth so newly captured photos can be tagged with GPS metadata. Location data is never stored on our servers, never shared with third parties, and is not retained by the app between sessions.

zizaiRemote does not access your photo library, contacts, microphone, or any other system data. It works entirely offline — no network connection is required.

2b. zizai TV Remote (iOS / watchOS) — Local Network

zizai TV Remote (自在电视遥控) is an iPhone and Apple Watch app that controls Xiaomi smart TVs over the local Wi-Fi network. It uses one device permission:

• Local Network — required to discover and send control commands (key events such as direction, enter, back, home, volume, and app launch intents) to a Xiaomi TV on the same Wi-Fi LAN as your device. All discovery probes and control requests are sent directly from your device to the TV's IP address over your Wi-Fi router. No traffic is routed through Astrocean servers.

What is stored locally and what stays local:

• Favorited TVs (display name, IP address, Wi-Fi SSID, optional platform identifier) are stored only on your device, inside an App Group container shared between the iOS app, the Apple Watch app, and the widget extension. They sync between your own iPhone and paired Apple Watch via Apple's standard App Group / WatchConnectivity mechanism. They are never uploaded to any server.
• Custom shortcut sequences (named lists of key events / app launches you create) are stored the same way and remain local.
• Widget configurations (which TV / shortcut a small or medium widget points at) are stored by WidgetKit on your device.

No Xiaomi account, no cloud, no telemetry. zizai TV Remote does not access your photo library, contacts, microphone, or location. It requires no internet connection beyond your local Wi-Fi to function. Siri integration runs entirely through Apple's on-device App Intents framework — voice phrases are processed by Apple under Apple's privacy policy and are not visible to us.

2c. Remove RAW (iOS) — Photo Library Access

Remove RAW is an iPhone utility that helps you reclaim photo library storage by removing RAW originals and replacing them with a renderable copy — either the embedded JPEG / HEIF when the asset already contains one, or a HEIF transcoded from the RAW via Apple's on-device image pipeline. It uses a single device permission:

• Photo Library (Full Access) — required to scan your library for assets containing RAW resources, export the renderable image data, create the replacement asset, and remove the original. All image decoding and HEIF encoding happens on your device through Apple's PhotoKit and CIRAWFilter frameworks.

Safety design:

• Hidden photos are always excluded from candidate scans and can never appear in the processing list.
• Favorited photos are excluded by default. You may opt them in via an in-app setting.
• The replacement asset preserves the original creation date, location (GPS coordinates), album membership, favorite status, and hidden status.
• The original asset is removed via the iOS system "Recently Deleted" album and remains recoverable for 30 days from within Apple's Photos app.

Network use. Remove RAW has no analytics, no telemetry, no third-party SDKs, no user accounts, and no cloud sync of its own. The only network activity is downloading your own photos from iCloud Photos when you ask Remove RAW to process a photo that is not currently stored on your device. This download is performed by Apple's PhotoKit framework directly between your device and Apple's iCloud, and is required because RAW image data must be locally available to be transcoded or extracted. Your photos are not sent to Astrocean or any third party.

2d. AlbumBee (iOS) — Photo Library Access

AlbumBee (相册小蜜蜂) is an iPhone library-tidying utility. It helps you find oversized files, process RAW photos (delete the RAW half of a RAW+JPG pair, or transcode a solo RAW to HEIF), compress videos using HEVC, backfill missing location metadata on photos, and view per-day / per-month statistics. It uses a single device permission:

• Photo Library (Full Access) — required to read photo and video metadata, scan for RAW resources, transcode RAW originals via Apple's CIRAWFilter, re-encode videos via AVAssetWriter, write replacement assets back to the library, and apply location metadata edits to existing assets. All processing happens entirely on your device through Apple's PhotoKit, ImageIO, AVFoundation, and Vision frameworks.

What AlbumBee does with your library:

• Metadata-only scans. The main library scan, the big-files Top list, the RAW candidate scan, and incremental refreshes all read only PhotoKit metadata (creation date, modification date, pixel dimensions, file size, media subtype, asset resource list). Your image and video pixel data is never read during scanning.
• Per-asset processing on demand. RAW transcoding, video compression, and original-RAW deletion are triggered only by your explicit action (a confirmation button after a per-job summary). The pixel data of an asset is read only at the moment you start processing that asset.
• Two-phase safety for RAW. RAW processing creates a replacement asset first, the system confirms it was written successfully, and only then is the original (with the RAW resource) removed. The replacement carries over creation date, GPS coordinates, album membership, favorite status, and hidden status. Removed assets go to Apple's "Recently Deleted" album and remain recoverable for 30 days.
• Hidden assets. Hidden photos and videos are always excluded from candidate lists and cannot be processed by AlbumBee.
• Favorites. Favorited photos and videos appear in candidate lists with a visible heart badge; AlbumBee never acts on them without your explicit selection.
• Location backfill. The bulk location-backfill feature reads the GPS coordinates of nearby (in time) photos that already have a location and writes a copy of those coordinates to nearby photos that don't, using the standard PHAssetChangeRequest.location API. Original photos remain in place; only location metadata is updated.

Map rendering. The "地点" tab uses Apple MapKit to display photo clusters on a map. MapKit loads its map tiles from Apple's servers; tile requests are issued by Apple's framework using only the visible map region. AlbumBee does not see and does not forward any of your photo content or location data to Apple beyond what MapKit's tile loading requires. Reverse geocoding (turning coordinates into place names) uses Apple's CLGeocoder; this sends the coordinate to Apple under Apple's privacy policy.

Network use. AlbumBee has no analytics, no telemetry, no third-party SDKs, no user accounts, and no cloud sync. The only network activity is (a) Apple MapKit tile loading and CLGeocoder reverse-geocoding as described above, and (b) downloading your own photos from iCloud Photos via Apple's PhotoKit when you process a photo that is not currently stored on your device (required because video and RAW data must be local to be re-encoded). Your photos are not sent to Astrocean or any third party.

3. Purchase and Payment Data

For Mac apps purchased directly from astrocean.love, payment is processed by Stripe, Inc. We receive only the information necessary to fulfill your order (e.g., email address for license delivery, order ID, and transaction status). We do not store your credit card number or full payment details. Stripe's privacy policy governs the handling of your payment data: stripe.com/privacy. For apps distributed via the Apple App Store (including zizaiRemote), all purchase data is handled by Apple under Apple's privacy policy; we do not receive your personal payment information.

4. Automatic Updates

Mac apps distributed from astrocean.love use Sparkle for automatic updates. When checking for updates, Sparkle contacts our update server and sends your macOS version and app version number. No personal data is transmitted. iOS / watchOS apps are updated through the App Store and are governed by Apple's update mechanism.

5. Website Analytics

We do not use third-party analytics or tracking scripts on astrocean.love. We may review aggregate server access logs (IP addresses, page requests) for operational purposes only. These logs are not shared with third parties.

6. Cookies

Our website uses only functional cookies (e.g., to remember your language preference). No advertising or tracking cookies are used.

7. Data Sharing

We do not sell, rent, or share your personal data with third parties, except as required by law or as necessary to fulfill your purchase (e.g., Stripe for payment processing).

8. Data Retention

Purchase records (order IDs, email addresses) are retained as required for tax and legal compliance. You may request deletion of your data by contacting us.

9. Children's Privacy

Our apps and website are not directed at children under 13. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

Questions about this policy? Contact us at jiangzuomeilang.claw@gmail.com.