Lymark

隐私政策

Last updated: 16 September 2026 · Lymark app, version 1.4.0

This policy describes how Lymark (com.lycosteam.lymark) and this site handle personal data. It is written for the data-protection and consumer regimes of the rule-of-law jurisdictions where the service is offered — including Brazil’s LGPD, the GDPR (EEA), UK GDPR, US state laws (including California’s CCPA/CPRA), PIPEDA (Canada), the Privacy Acts (Australia and New Zealand), APPI (Japan), PDPA (Singapore), POPIA (South Africa), Mexico’s LFPDPPP, Argentina’s Ley 25.326 and equivalent Latin-American laws, plus Brazil’s consumer code and EU/UK consumer rules. Where the mandatory law of your country of residence grants stronger rights, that law prevails. This text does not claim to exhaust every national code, nor worldwide compliance.

一句话概括

Lymark does not transmit your photos or your raw location. Images, visible addresses, history and preferences stay on your device. An account is required to use the app and the subscription: the server keeps your e-mail, account id, plan, export count and, when you request a seal, the file hash — a fingerprint, not the photo.

Besides the account, what leaves the device is: (a) coordinates, via the operating system, to become an address (item 05); (b) the file hash, to issue the seal and, when available, a third-party timestamp (item 18); (c) payment data, handled by the billing processor (item 18). None of these flows send the image.

本政策适用于谁

It applies to anyone who uses the app or this site, in jurisdictions where Lymark is lawful. Brazil: LGPD and ANPD. EEA and United Kingdom: GDPR and UK GDPR. California and other US states with a consumer privacy law: the equivalent rights in item 19. In other countries with a data-protection statute, we honour equivalent rights (access, correction, deletion, objection, portability) through the same channel: contato@lymark.app. We may refuse or limit the service where offering it would be unlawful or subject to sanctions.

谁是控制者

个人数据的控制者——GDPR 术语中的 controller——是 29.015.357 AMAD ALI HAMMOUD，CNPJ 登记号 29.015.357/0001-25，地址为 Avenida Ana Costa, 433, Gonzaga, Santos - SP。

为 LGPD 第 41 条之目的，个人数据处理负责人是 Amad Ali Hammoud，可通过 contato@lymark.app 联系。鉴于处理的规模和性质——既不涉及大规模的敏感数据，也不涉及系统性监控——依照 GDPR 第 37 条无须指定 Data Protection Officer。

应用处理哪些信息

There are two places. On the device (below, through “Preferences”): none of that uploads. On the server (account, payment, seal hash, technical access data): only what items 18 and 14 describe.

照片
您从相册选择或用相机拍摄的图片，以及导出的带水印文件。一张照片可能包含第三方的个人数据——见第 11 项。
定位
大致的纬度和经度，每次拍摄获取一次，唯一的用途是填写地址字段。坐标不会被保存：只有生成的地址文本会随照片一起留下。
日期、时间和星期
在拍摄时从设备时钟读取，可由您修改。
照片编号
随机抽取的十四位十六进制字符。它不由设备标识符或您的标识符派生，也不能用于跨应用追踪。
历史记录
最近两百次导出的记录，包含文件在设备上的路径以及加盖在图片上的数据。
偏好设置
显示的字段、位置、大小以及其他水印选项。
Account
E-mail, account identifier, plan (free or Pro) and export count, at the authentication processor.
Payment
The billing processor handles card data. Lymark does not store the card number; it keeps only subscription state (how long Pro lasts) and billing identifiers needed to cancel or invoice.
Seal hash
A fingerprint of the exported file, sent to issue the seal and, if available, a timestamp. The photo itself never uploads. The hash cannot rebuild the image.
Technical access data
IP address, date, time and requested resource, in hosting and API logs, for as long as service security requires — including fraud prevention.

The app does not collect on-device, for the developer: identity documents, advertising identifiers, contacts, calendar, browsing history, usage metrics, crash reports. There is no analytics, advertising, attribution or tracking SDK. E-mail exists because there is an account; it is not read from the address book and not used for ads.

唯一离开设备的信息

当您授予定位权限时，应用会请求操作系统把 GPS 坐标转换成邮政地址。这项转换——反向地理编码——由操作系统自己执行，为此它会把坐标发送给它的地图服务提供方：Android 设备上是 Google，iOS 设备上是 Apple。

这项通信来自操作系统，而不是 Lymark。应用不会收到它的副本，不做中转，除了返回的地址之外无法接触任何内容。这些提供方所进行的处理受它们各自的隐私政策约束。

没有任何照片会因应用的行为离开设备。如果您使用分享按钮，传输图片的是您在系统分享面板中选择的目标应用——即时通讯、电子邮件、云存储——并受该应用的隐私政策约束。

申请哪些权限，以及为什么

相机
To take the photo or record the video that will receive the watermark. Requested when you capture.
照片和媒体
用于选择已有的图片，以及把导出的文件保存到相册。访问范围仅限于照片，写入权限只用于写入——应用不会浏览或读取您的相册。
使用期间的定位
用于填写地址字段。仅在前台、仅在使用期间申请，绝不在后台。
Microphone
Only when recording video with sound. Not used for still photos or in the background.

所有权限都是可选的，并且可以随时在设备设置中撤销。拒绝定位后应用仍然完全可用：地址改由您输入。拒绝相册访问只会妨碍自动保存，照片依然可以分享。

法律依据和目的

对定位的处理基于您的同意——LGPD 第 7 条第 I 项和 GDPR 第 6 条第 1 款 (a) 项——该同意通过授予系统权限表示，并可随时撤销，撤销不影响此前处理的合法性。

对其他数据的处理是为了执行您所请求的功能——LGPD 第 7 条第 V 项和 GDPR 第 6 条第 1 款 (b) 项——因为没有这些数据，应用要生成的水印就不存在。

账号数据的处理以履行合同为依据（LGPD 第7条第五项；GDPR 第6(1)(b)条）。基于正当利益的处理（LGPD 第7条第九项；GDPR 第6(1)(f)条）仅限于安全和防欺诈——例如记录向服务器发出请求的 IP 地址。开发者不为广告、画像、行为分析或任何次要目的处理数据，也不处理特殊类别数据或敏感数据。

国际传输

Account and payment data are handled by processors in the United States (authentication and billing), and hosting may process access logs outside Brazil. The seal hash, when a timestamp is requested, may go to an independent timestamp authority. These transfers rest on standard contractual clauses and LGPD art. 33 and GDPR arts. 44–49, or an equivalent under your law. Geocoding in item 05 follows the OS providers’ own transfer tools.

This site is hosted by Vercel Inc., under items 14 and 18.

与第三方共享

The developer does not sell, rent or hand personal data to advertising or data brokerage. Contracted processors are listed in item 18. If you sign in with Google or Apple, those providers handle the login under their own policies; the developer receives the e-mail and identifier needed for the account. Photos and raw location pass through no processor, because they never leave the device.

存储、保留与安全

数据保存在应用的私有区域，受操作系统的应用间隔离和设备的锁屏保护。在 Android 版本中，系统的自动备份已关闭，因此历史记录和偏好设置不会被发送到用户的 Google 账号。

保留完全由您控制：记录会一直存在，直到在应用内被删除；历史记录在超过两百条时会自动丢弃最旧的记录，并同时删除对应的文件。卸载应用会清除它所存储的一切。已经保存到设备相册的照片属于相册，会继续留在那里——如需删除，由您自行处理。

没有系统是万无一失的。账号数据——邮箱、标识、方案和计数——保存在身份验证处理者处，受其安全措施保护。照片、地址和位置不存在于任何中央存储库，因此不可能从开发者的基础设施泄露。若发生涉及账号数据的安全事件，开发者将依据 LGPD 第48条和 GDPR 第33条通知监管机构和数据主体。您照片面临的主要风险仍是他人实际接触到已解锁的设备。

当您拍摄他人时

在从事专业活动时拍摄可识别的人物，您就成为这些数据面向被拍摄主体的控制者，法律依据、告知义务以及回应他们权利的责任都在您。开发者不参与该处理，也无法接触这些图片。

您的权利

LGPD 第 18 条以及 GDPR 第 15 至 22 条赋予您确认与访问、更正、删除、匿名化、封锁、可携带、限制处理、反对、撤销同意以及了解共享情况的权利。

照片、地址、历史记录和偏好设置只保存在您的设备上，这些权利直接在应用内行使：在“图库”标签中查看和删除记录，导出前更正任何字段，在系统设置中撤销位置权限，以及卸载应用以清除全部——开发者无法替您访问、导出或删除这些数据，因为并不持有它们。至于账号数据——邮箱、方案和计数——您可以在账号页面查看，并通过本政策的联系邮箱申请更正、导出或删除；删除账号会在身份验证处理者处清除这些数据。

Requests: contato@lymark.app. You may complain to your country’s authority — in Brazil, the ANPD; in the EEA, your Member State’s supervisory authority; in the UK, the ICO; in California, the CPPA; elsewhere, the equivalent body. Item 19 lists the rights we honour outside the LGPD/GDPR pair.

自动化决策

不存在自动化决策、画像，也不存在依照 LGPD 第 20 条和 GDPR 第 22 条会对您产生法律效果的处理。

关于本网站

本网站没有分析工具，不展示广告，也不嵌入社交网络按钮。它只使用账号会话严格必需的 Cookie，由身份验证处理者（第09项）在您登录时设置；没有任何跟踪或广告 Cookie。字体由本站域名提供。您的浏览器向第三方发出的唯一请求来自登录和账号页面，指向身份验证处理者——以及您选择时的登录服务商（Google 或 Apple）。

网站由 Vercel Inc. 托管，它作为处理者会记录访问的技术数据——IP 地址、日期、时间和所请求的资源——保留时间以托管的安全和运行所必需为限。法律依据是维护服务安全的合法利益，即 LGPD 第 7 条第 IX 项和 GDPR 第 6 条第 1 款 (f) 项。

本政策的变更

变更将发布在本页面，并附上新的更新日期。对数据处理有重大改变的变更，还会在生效前在应用内告知。

儿童与青少年

Lymark 是一款工作工具，面向 18 岁以上的人士。它不面向儿童也不面向青少年，也不会有意收集该群体的数据。

适用法律

Brazilian law governs this policy, without prejudice to the GDPR, UK GDPR, CCPA/CPRA and any mandatory data-protection or consumer law of the data subject’s country of residence. Forum: the data subject’s domicile when consumer law so requires; otherwise Santos, Brazil.

Processors

Who handles data on the controller’s instructions only:

Clerk, Inc.
Account authentication (e-mail, identifier, plan and quota metadata). United States.
Stripe
Pro subscription billing. Lymark never receives the card number. United States, and, where applicable, a Stripe entity in the billing country.
RevenueCat, Inc.
Acts as intermediary for the Pro subscription made through the Android app: it receives from Google Play the purchase data, your Lymark account identifier and technical data from the device needed for the purchase (OS and app version), and notifies Lymark when the subscription starts, renews, is cancelled or refunded. The charge itself is made by Google Play, under its own terms. It does not receive photos, videos or location. United States.
Vercel Inc.
Hosting of the site and APIs; technical access logs (item 14).
Timestamp authority
When the seal asks for a third-party time, only the file hash is sent, not the photo. The current provider is a public RFC 3161 service; it may be replaced by a contracted authority, including ICP-Brasil, without changing this purpose.

Google and Apple appear as sign-in providers (if you choose them) and as geocoders (via the OS, item 05), under their policies — not as our processors for the photo.

Rights outside Brazil and the EEA

On request at contato@lymark.app we honour access, correction, deletion, portability, restriction and objection, to the extent the data exist on the server (account, plan, count, hash, technical logs). What lives only on the device, you delete in the app or by uninstalling.

California and US states with a consumer privacy law: we do not sell personal information and we do not “share” it for cross-context advertising (there are no ads). You may ask to know, delete, and opt out of sale/sharing — we already do not sell. We do not use data for automated decisions with legal effect (item 13).

Canada (PIPEDA), Australia and New Zealand (Privacy Act), Japan (APPI), Singapore (PDPA), South Africa (POPIA), India (DPDP), Switzerland (nFADP), Mexico, Argentina, Colombia, Chile and other countries with an equivalent statute: the same channel and the same practical rights, limited to what the server actually keeps.

Scope and limits of this policy

Lymark is offered where that is lawful. We do not operate to evade sanctions, nor in jurisdictions where offering the service would be unlawful. This document is not legal advice and does not claim that every article of every national code has been reproduced. If your mandatory law is more protective, it prevails; write to contato@lymark.app.

另请查阅使用条款。