Lymark

隱私政策

Last updated: 16 September 2026 · Lymark app, version 1.4.0

This policy describes how Lymark (com.lycosteam.lymark) and this site handle personal data. It is written for the data-protection and consumer regimes of the rule-of-law jurisdictions where the service is offered — including Brazil’s LGPD, the GDPR (EEA), UK GDPR, US state laws (including California’s CCPA/CPRA), PIPEDA (Canada), the Privacy Acts (Australia and New Zealand), APPI (Japan), PDPA (Singapore), POPIA (South Africa), Mexico’s LFPDPPP, Argentina’s Ley 25.326 and equivalent Latin-American laws, plus Brazil’s consumer code and EU/UK consumer rules. Where the mandatory law of your country of residence grants stronger rights, that law prevails. This text does not claim to exhaust every national code, nor worldwide compliance.

一句話概括

Lymark does not transmit your photos or your raw location. Images, visible addresses, history and preferences stay on your device. An account is required to use the app and the subscription: the server keeps your e-mail, account id, plan, export count and, when you request a seal, the file hash — a fingerprint, not the photo.

Besides the account, what leaves the device is: (a) coordinates, via the operating system, to become an address (item 05); (b) the file hash, to issue the seal and, when available, a third-party timestamp (item 18); (c) payment data, handled by the billing processor (item 18). None of these flows send the image.

本政策適用於誰

It applies to anyone who uses the app or this site, in jurisdictions where Lymark is lawful. Brazil: LGPD and ANPD. EEA and United Kingdom: GDPR and UK GDPR. California and other US states with a consumer privacy law: the equivalent rights in item 19. In other countries with a data-protection statute, we honour equivalent rights (access, correction, deletion, objection, portability) through the same channel: contato@lymark.app. We may refuse or limit the service where offering it would be unlawful or subject to sanctions.

誰是控制者

個人資料的控制者——GDPR 術語中的 controller——是 29.015.357 AMAD ALI HAMMOUD，CNPJ 登記號 29.015.357/0001-25，地址為 Avenida Ana Costa, 433, Gonzaga, Santos - SP。

為 LGPD 第 41 條之目的，個人資料處理負責人是 Amad Ali Hammoud，可透過 contato@lymark.app 聯絡。鑑於處理的規模和性質——既不涉及大規模的敏感資料，也不涉及系統性監控——依照 GDPR 第 37 條無須指定 Data Protection Officer。

應用處理哪些資訊

There are two places. On the device (below, through “Preferences”): none of that uploads. On the server (account, payment, seal hash, technical access data): only what items 18 and 14 describe.

照片
您從相簿選擇或用相機拍攝的圖片，以及匯出的帶水印檔案。一張照片可能包含第三方的個人資料——見第 11 項。
定位
大致的緯度和經度，每次拍攝獲取一次，唯一的用途是填寫地址欄位。座標不會被儲存：只有生成的地址文字會隨照片一起留下。
日期、時間和星期
在拍攝時從裝置時鐘讀取，可由您修改。
照片編號
隨機抽取的十四位十六進位制字元。它不由裝置識別符號或您的識別符號派生，也不能用於跨應用追蹤。
歷史記錄
最近兩百次匯出的記錄，包含檔案在裝置上的路徑以及加蓋在圖片上的資料。
偏好設定
顯示的欄位、位置、大小以及其他水印選項。
Account
E-mail, account identifier, plan (free or Pro) and export count, at the authentication processor.
Payment
The billing processor handles card data. Lymark does not store the card number; it keeps only subscription state (how long Pro lasts) and billing identifiers needed to cancel or invoice.
Seal hash
A fingerprint of the exported file, sent to issue the seal and, if available, a timestamp. The photo itself never uploads. The hash cannot rebuild the image.
Technical access data
IP address, date, time and requested resource, in hosting and API logs, for as long as service security requires — including fraud prevention.

The app does not collect on-device, for the developer: identity documents, advertising identifiers, contacts, calendar, browsing history, usage metrics, crash reports. There is no analytics, advertising, attribution or tracking SDK. E-mail exists because there is an account; it is not read from the address book and not used for ads.

唯一離開裝置的資訊

當您授予定位許可權時，應用會請求作業系統把 GPS 座標轉換成郵政地址。這項轉換——反向地理編碼——由作業系統自己執行，為此它會把座標傳送給它的地圖服務提供方：Android 裝置上是 Google，iOS 裝置上是 Apple。

這項通訊來自作業系統，而不是 Lymark。應用不會收到它的副本，不做中轉，除了返回的地址之外無法接觸任何內容。這些提供方所進行的處理受它們各自的隱私政策約束。

沒有任何照片會因應用的行為離開裝置。如果您使用分享按鈕，傳輸圖片的是您在系統分享面板中選擇的目標應用——即時通訊、電子郵件、雲端儲存——並受該應用的隱私政策約束。

申請哪些許可權，以及為什麼

相機
To take the photo or record the video that will receive the watermark. Requested when you capture.
照片和媒體
用於選擇已有的圖片，以及把匯出的檔案儲存到相簿。訪問範圍僅限於照片，寫入許可權只用於寫入——應用不會瀏覽或讀取您的相簿。
使用期間的定位
用於填寫地址欄位。僅在前臺、僅在使用期間申請，絕不在後臺。
Microphone
Only when recording video with sound. Not used for still photos or in the background.

所有許可權都是可選的，並且可以隨時在裝置設定中撤銷。拒絕定位後應用仍然完全可用：地址改由您輸入。拒絕相簿訪問只會妨礙自動儲存，照片依然可以分享。

法律依據和目的

對定位的處理基於您的同意——LGPD 第 7 條第 I 項和 GDPR 第 6 條第 1 款 (a) 項——該同意透過授予系統許可權表示，並可隨時撤銷，撤銷不影響此前處理的合法性。

對其他資料的處理是為了執行您所請求的功能——LGPD 第 7 條第 V 項和 GDPR 第 6 條第 1 款 (b) 項——因為沒有這些資料，應用要生成的水印就不存在。

賬號資料的處理以履行合同為依據（LGPD 第7條第五項；GDPR 第6(1)(b)條）。基於正當利益的處理（LGPD 第7條第九項；GDPR 第6(1)(f)條）僅限於安全和防欺詐——例如記錄向伺服器發出請求的 IP 地址。開發者不為廣告、畫像、行為分析或任何次要目的處理資料，也不處理特殊類別資料或敏感資料。

國際傳輸

Account and payment data are handled by processors in the United States (authentication and billing), and hosting may process access logs outside Brazil. The seal hash, when a timestamp is requested, may go to an independent timestamp authority. These transfers rest on standard contractual clauses and LGPD art. 33 and GDPR arts. 44–49, or an equivalent under your law. Geocoding in item 05 follows the OS providers’ own transfer tools.

This site is hosted by Vercel Inc., under items 14 and 18.

與第三方共享

The developer does not sell, rent or hand personal data to advertising or data brokerage. Contracted processors are listed in item 18. If you sign in with Google or Apple, those providers handle the login under their own policies; the developer receives the e-mail and identifier needed for the account. Photos and raw location pass through no processor, because they never leave the device.

儲存、保留與安全

資料儲存在應用的私有區域，受作業系統的應用間隔離和裝置的鎖屏保護。在 Android 版本中，系統的自動備份已關閉，因此歷史記錄和偏好設定不會被髮送到使用者的 Google 賬號。

保留完全由您控制：記錄會一直存在，直到在應用內被刪除；歷史記錄在超過兩百條時會自動丟棄最舊的記錄，並同時刪除對應的檔案。解除安裝應用會清除它所儲存的一切。已經儲存到裝置相簿的照片屬於相簿，會繼續留在那裡——如需刪除，由您自行處理。

沒有系統是萬無一失的。賬號資料——郵箱、標識、方案和計數——儲存在身份驗證處理者處，受其安全措施保護。照片、地址和位置不存在於任何中央儲存庫，因此不可能從開發者的基礎設施洩露。若發生涉及賬號資料的安全事件，開發者將依據 LGPD 第48條和 GDPR 第33條通知監管機構和資料主體。您照片面臨的主要風險仍是他人實際接觸到已解鎖的裝置。

當您拍攝他人時

在從事專業活動時拍攝可識別的人物，您就成為這些資料面向被拍攝主體的控制者，法律依據、告知義務以及回應他們權利的責任都在您。開發者不參與該處理，也無法接觸這些圖片。

您的權利

LGPD 第 18 條以及 GDPR 第 15 至 22 條賦予您確認與訪問、更正、刪除、匿名化、封鎖、可攜帶、限制處理、反對、撤銷同意以及瞭解共享情況的權利。

照片、地址、歷史記錄和偏好設定只儲存在您的裝置上，這些權利直接在應用內行使：在“相簿”標籤中檢視和刪除記錄，匯出前更正任何欄位，在系統設定中撤銷位置許可權，以及解除安裝應用以清除全部——開發者無法替您訪問、匯出或刪除這些資料，因為並不持有它們。至於賬號資料——郵箱、方案和計數——您可以在賬號頁面檢視，並透過本政策的聯絡郵箱申請更正、匯出或刪除；刪除賬號會在身份驗證處理者處清除這些資料。

Requests: contato@lymark.app. You may complain to your country’s authority — in Brazil, the ANPD; in the EEA, your Member State’s supervisory authority; in the UK, the ICO; in California, the CPPA; elsewhere, the equivalent body. Item 19 lists the rights we honour outside the LGPD/GDPR pair.

自動化決策

不存在自動化決策、畫像，也不存在依照 LGPD 第 20 條和 GDPR 第 22 條會對您產生法律效果的處理。

關於本網站

本網站沒有分析工具，不展示廣告，也不嵌入社交網路按鈕。它只使用賬號會話嚴格必需的 Cookie，由身份驗證處理者（第09項）在您登入時設定；沒有任何跟蹤或廣告 Cookie。字型由本站域名提供。您的瀏覽器向第三方發出的唯一請求來自登入和賬號頁面，指向身份驗證處理者——以及您選擇時的登入服務商（Google 或 Apple）。

網站由 Vercel Inc. 託管，它作為處理者會記錄訪問的技術資料——IP 地址、日期、時間和所請求的資源——保留時間以託管的安全和執行所必需為限。法律依據是維護服務安全的合法利益，即 LGPD 第 7 條第 IX 項和 GDPR 第 6 條第 1 款 (f) 項。

本政策的變更

變更將釋出在本頁面，並附上新的更新日期。對資料處理有重大改變的變更，還會在生效前在應用內告知。

兒童與青少年

Lymark 是一款工作工具，面向 18 歲以上的人士。它不面向兒童也不面向青少年，也不會有意收集該群體的資料。

適用法律

Brazilian law governs this policy, without prejudice to the GDPR, UK GDPR, CCPA/CPRA and any mandatory data-protection or consumer law of the data subject’s country of residence. Forum: the data subject’s domicile when consumer law so requires; otherwise Santos, Brazil.

Processors

Who handles data on the controller’s instructions only:

Clerk, Inc.
Account authentication (e-mail, identifier, plan and quota metadata). United States.
Stripe
Pro subscription billing. Lymark never receives the card number. United States, and, where applicable, a Stripe entity in the billing country.
RevenueCat, Inc.
Acts as intermediary for the Pro subscription made through the Android app: it receives from Google Play the purchase data, your Lymark account identifier and technical data from the device needed for the purchase (OS and app version), and notifies Lymark when the subscription starts, renews, is cancelled or refunded. The charge itself is made by Google Play, under its own terms. It does not receive photos, videos or location. United States.
Vercel Inc.
Hosting of the site and APIs; technical access logs (item 14).
Timestamp authority
When the seal asks for a third-party time, only the file hash is sent, not the photo. The current provider is a public RFC 3161 service; it may be replaced by a contracted authority, including ICP-Brasil, without changing this purpose.

Google and Apple appear as sign-in providers (if you choose them) and as geocoders (via the OS, item 05), under their policies — not as our processors for the photo.

Rights outside Brazil and the EEA

On request at contato@lymark.app we honour access, correction, deletion, portability, restriction and objection, to the extent the data exist on the server (account, plan, count, hash, technical logs). What lives only on the device, you delete in the app or by uninstalling.

California and US states with a consumer privacy law: we do not sell personal information and we do not “share” it for cross-context advertising (there are no ads). You may ask to know, delete, and opt out of sale/sharing — we already do not sell. We do not use data for automated decisions with legal effect (item 13).

Canada (PIPEDA), Australia and New Zealand (Privacy Act), Japan (APPI), Singapore (PDPA), South Africa (POPIA), India (DPDP), Switzerland (nFADP), Mexico, Argentina, Colombia, Chile and other countries with an equivalent statute: the same channel and the same practical rights, limited to what the server actually keeps.

Scope and limits of this policy

Lymark is offered where that is lawful. We do not operate to evade sanctions, nor in jurisdictions where offering the service would be unlawful. This document is not legal advice and does not claim that every article of every national code has been reproduced. If your mandatory law is more protective, it prevails; write to contato@lymark.app.

另請查閱使用條款。