核心承诺:本应用是完全离线的工具类软件。应用代码中不包含任何网络访问功能,不会收集、上传或传输任何个人信息到任何服务器。你的照片、视频及其元数据始终保留在你的设备本地。
1. 我们收集哪些信息
1.1 主动收集的信息
本应用不主动收集任何个人信息,包括但不限于:
- 不收集设备信息(设备型号、硬件标识、广告标识符等);
- 不收集位置信息;
- 不收集照片、视频以外的任何个人数据(联系人、短信、通话记录等);
- 不要求注册账号或登录;
- 不嵌入任何广告、统计分析或用户行为追踪组件;
- 不上传任何用户内容。
1.2 本应用在本地处理的数据
你通过本应用打开的图片 / 视频文件及其元数据(EXIF 信息、文件名、文件时间等)仅在应用内存与本地磁盘上处理,用于实现查看、编辑、恢复等核心功能。这些数据不离开你的设备。为支持"操作记录与一键恢复"功能,本应用会在本地创建一个操作记录数据库(SQLite),详见第 6 节。
1.3 被动收集的信息
本应用代码不包含网络通信功能,因此不存在任何形式的被动数据收集(Cookie、网络信标、设备指纹、遥测等均不存在)。
2. 权限说明
本应用基于文件选择器方式工作,只访问你主动选择导入的文件和文件夹:
| 操作 | 用途 | 是否必需 |
| 读取你选择的文件 / 文件夹 | 打开、读取你指定的图片和视频文件,查看其 EXIF 信息与文件属性 | 是(核心功能) |
| 写入你选择的文件 / 文件夹 | 修改 EXIF 信息、同步文件时间戳、批量重命名 | 是(核心功能) |
- 上述访问范围仅限你通过文件选择对话框主动选择的路径,本应用不会扫描选择范围之外的文件;
- 本应用不申请位置、摄像头、麦克风、通讯录、日历等任何设备或个人权限;
- 你可以在系统设置中管理应用权限;限制文件访问权限将影响核心功能的使用。
3. 我们如何使用信息
本应用不收集个人信息,因此不存在对个人信息的使用。你打开和编辑的文件内容及其元数据仅用于实现你主动触发的功能(查看、对比、修改、重命名、恢复等),完全保留在你的设备本地,不会被上传、传输或同步至任何网络位置。
4. 第三方组件
本应用基于以下开源组件构建。这些组件在本应用中均只执行本地计算,不执行任何网络通信,不收集任何数据:
| 组件 | 用途 | 许可证 |
| Qt / PySide6 | 图形界面框架 | LGPL-3.0 |
| ExifTool | EXIF / 元数据读写引擎(独立子进程随包分发) | Artistic License 2.0 |
| Python | 运行时 | PSF License |
| Pillow | 图像解码与预览 | MIT-CMU |
| pillow-heif | HEIC/HEIF 格式支持(内嵌 libheif) | MIT / LGPL-3.0 |
| xxHash | 文件哈希(用于操作恢复校验) | BSD-2-Clause |
| SQLite | 本地操作记录数据库 | Public Domain |
| cryptography | 程序完整性校验(Ed25519 签名验证) | Apache-2.0 |
上述组件的许可证全文随软件分发于安装目录的 LICENSES/ 文件夹,也可在应用"关于"页面查看。
本应用不包含广告、统计、推送、社交分享、支付等任何类型的第三方 SDK。
5. 信息共享
- 应用自身无网络通信能力(见第 1、4 节);
- 不连接任何云端服务;
- "关于"页面及升级入口中的外部链接(如开源项目官网、商店页面)仅在你主动点击时由系统浏览器打开,属于浏览器行为,本应用不借此传输任何数据。
6. 信息存储地点和期限
- 存储地点:所有数据仅存储在你的设备本地。唯一的本地数据文件是操作记录数据库,位于
%APPDATA%\ExifMate\exif.db(可通过 设置 → 打开数据目录 直接访问),其中记录:被处理文件的路径与文件名、操作前后的元数据快照、文件哈希、操作时间——用途仅为支持"操作记录与一键恢复"功能,不用于其他任何目的。
- 查看与删除:你可随时通过上述入口查看该数据库文件;直接删除该文件不影响应用运行,但你将失去历史操作的恢复能力。
- 卸载:通过 Microsoft Store 卸载本应用时,上述本地数据将随应用数据一并移除;卸载前如需保留操作记录,请自行备份。你通过本应用编辑、保存的媒体文件不受卸载影响。
- 存储期限:媒体文件由你全权管理;操作记录数据库保留至你删除或卸载为止。
7. 我们如何保护信息
本应用所有处理均在本地完成,不存在网络传输环节的数据泄露风险。我们建议你:妥善保管设备,启用系统锁屏等安全措施;定期备份重要文件;仅从 Microsoft Store 官方渠道下载和更新本应用。本应用内置程序完整性校验,程序文件被篡改时写入功能将自动锁定,以保护你的文件安全。
8. 你的权利
- 知情与选择:在了解本政策后自主决定是否使用本应用;
- 权限控制:随时通过系统设置授予或限制本应用的文件访问权限;
- 数据管理:随时查看、备份或删除本地操作记录数据库,以及通过系统文件管理器管理你的媒体文件;
- 卸载自由:随时卸载本应用并一并清除其本地数据。
9. 儿童个人信息保护
本应用不面向未满 14 周岁的儿童(或你所在国家 / 地区适用的法定年龄),也不会以任何方式收集儿童的个人信息。如果你是监护人,认为儿童可能在未经你同意的情况下使用了本应用,请通过第 11 节的联系方式与我们沟通。
10. 隐私政策的更新
- 如发生重大变更(例如未来版本增加网络功能),我们将通过 Microsoft Store 更新说明或应用内提示告知你;
- 文字性调整将直接更新本页面,以"最近更新日期"为准;
- 建议你定期查看本政策了解最新内容。
11. 如何联系我们
电子邮箱:dev@exifmate.com
我们将在收到邮件后的 30 个工作日内予以回复。
附:权限声明摘要(供 Microsoft Store 审核参考)
- 文件系统(用户选择的文件 / 文件夹)读写:用于打开用户指定的图片、视频文件,读取其 EXIF 信息与文件属性(文件名、创建 / 修改时间等),并在用户明确操作下写入元数据修改、同步文件时间戳、批量重命名。访问范围仅限用户主动选择的路径。
- 本应用不申请任何其他权限(无位置、摄像头、麦克风、通讯录等),不具备网络访问能力,不包含广告 / 统计 / 追踪类 SDK。随包分发的第三方开源组件清单及许可证见第 4 节与安装目录
LICENSES/。
Our core promise: ExifMate is a fully offline desktop tool. The application contains no networking code whatsoever — it does not collect, upload, or transmit any personal information to any server. Your photos, videos, and their metadata never leave your device.
1. Information We Collect
1.1 Information actively collected
None. The app does not collect any personal information, including but not limited to:
- No device information (model, hardware identifiers, advertising IDs, etc.);
- No location data;
- No personal data of any kind beyond the media files you choose to open (no contacts, messages, call logs);
- No account registration or sign-in;
- No advertising, analytics, or behavioral tracking components;
- No uploading of user content.
1.2 Data processed locally
The images/videos you open, and their metadata (EXIF tags, file names, timestamps), are processed only in the app's memory and on your local disk to deliver its core features (viewing, editing, restoration). This data never leaves your device. To support the "operation history & one-click restore" feature, the app keeps a local operation-history database (SQLite) — see Section 6.
1.3 Passively collected information
The app contains no networking code, so no passive data collection of any form exists (no cookies, web beacons, device fingerprinting, or telemetry).
2. Permissions
The app works through the file picker and accesses only the files and folders you actively choose to import:
| Access | Purpose | Required |
| Read files/folders you select | Open the images and videos you designate; read their EXIF metadata and file attributes | Yes (core feature) |
| Write files/folders you select | Modify EXIF metadata, sync file timestamps, batch rename | Yes (core feature) |
- Access is limited to the paths you explicitly select in the file dialog; the app never scans other locations;
- The app does not request location, camera, microphone, contacts, calendar, or any other device/personal permissions;
- You can manage app permissions in system settings; restricting file access will affect core features.
3. How Information Is Used
The app collects no personal information, so none is used. The files you open and edit are used solely for the actions you initiate (view, compare, edit, rename, restore) and remain entirely on your device — never uploaded, transmitted, or synced anywhere.
4. Third-Party Components
The app is built on the following open-source components. Each performs only local computation inside this app — none performs network communication or collects data:
| Component | Purpose | License |
| Qt / PySide6 | GUI framework | LGPL-3.0 |
| ExifTool | EXIF/metadata engine (bundled as a separate subprocess) | Artistic License 2.0 |
| Python | Runtime | PSF License |
| Pillow | Image decoding & preview | MIT-CMU |
| pillow-heif | HEIC/HEIF support (bundles libheif) | MIT / LGPL-3.0 |
| xxHash | File hashing (restore verification) | BSD-2-Clause |
| SQLite | Local operation-history database | Public Domain |
| cryptography | Program integrity verification (Ed25519 signatures) | Apache-2.0 |
Full license texts ship with the app in the LICENSES/ folder and are also viewable in the in-app About page.
The app contains no advertising, analytics, push, social-sharing, or payment SDKs of any kind.
5. Information Sharing
- The app itself has no networking capability (see Sections 1 and 4);
- It connects to no cloud services;
- External links (open-source project websites, the store listing) in the About page or upgrade entry open in your system browser only when you click them; that is ordinary browser behavior and transmits no data from the app.
6. Data Storage Location and Retention
- Location: All data stays on your device. The only local data file is the operation-history database at
%APPDATA%\ExifMate\exif.db (reachable via Settings → Open data folder). It records: paths and file names of processed files, before/after metadata snapshots, file hashes, and operation times — used solely for the operation-history & restore feature, for no other purpose.
- View & delete: You can inspect the file at any time; deleting it does not break the app, but you lose the ability to restore past operations.
- Uninstall: When you uninstall the app from Microsoft Store, this local data is removed along with the app's data. Back it up first if you want to keep it. Media files you edited or saved with the app are not affected by uninstalling.
- Retention: Media files remain entirely under your control; the history database is kept until you delete it or uninstall the app.
7. How We Protect Information
All processing happens locally, so there is no network-transmission exposure. We recommend you: keep your device secure with a screen lock; back up important files regularly; download and update the app only from the Microsoft Store. The app includes built-in integrity verification — if program files are tampered with, write operations are automatically locked to protect your files.
8. Your Rights
- Informed choice: decide whether to use the app after reading this policy;
- Permission control: grant or restrict file access at any time in system settings;
- Data management: view, back up, or delete the local history database at any time, and manage your media files through the file manager;
- Freedom to uninstall: remove the app and its local data at any time.
9. Children's Privacy
The app is not directed at children under 14 (or the applicable legal age in your jurisdiction) and does not collect children's personal information in any way. If you are a guardian and believe a child used this app without your consent, contact us via Section 11.
10. Changes to This Policy
- Material changes (for example, if a future version adds networking features) will be announced via Microsoft Store update notes or in-app notices;
- Minor textual updates will be made directly to this page; see the "last updated" date;
- We encourage you to review this policy periodically.
11. Contact Us
Email: dev@exifmate.com
We will reply within 30 business days of receiving your message.
Appendix: Permission Summary (for Microsoft Store review)
- File system access (user-selected files/folders), read/write: to open the user-designated images/videos, read their EXIF metadata and file attributes (file name, creation/modification times), and — only on explicit user action — write metadata changes, sync file timestamps, and batch rename. Access is limited to paths the user actively selects.
- The app requests no other permissions (no location, camera, microphone, contacts, etc.), has no networking capability, and contains no advertising/analytics/tracking SDKs. The bundled open-source components and their licenses are listed in Section 4 and in the
LICENSES/ folder.