隐私政策
适用于 Drivo · 车记（应用标识 com.drivo.carji，支持 macOS 与 iOS / iPadOS）
生效日期：2026年6月7日
一句话总结：Drivo · 车记 是一款本地优先的特斯拉行车记录仪（TeslaCam / 哨兵 / 遥测）视频编辑工具。我们不收集、不上传、不追踪你的任何数据。没有账号系统，没有分析统计，没有崩溃上报，没有广告或第三方追踪 SDK，也没有由我们运营的服务器。你的视频和数据始终留在你自己的设备上。
1. 我们收集什么
什么都不收集。本应用不含任何分析（analytics）、遥测（telemetry）、崩溃上报、广告或追踪类 SDK，不使用广告标识符（IDFA），也没有用户账号或登录系统。我们不会把你的任何信息发送给我们或任何第三方——因为不存在「我们的服务器」。应用也不会自动检查更新。
2. 本地优先：你的数据存在哪里
你导入的 TeslaCam 视频文件夹是由你自己选择的，应用只读取、从不写回该文件夹。扫描得到的事件列表、缩略图、逐帧遥测（SEI）等元数据仅在本地内存与设备上处理。导出的 MP4 写入你自己指定的磁盘位置（保存面板默认 ~/Movies）或你选择的相册。应用在本地保存的内容仅包括：
- UserDefaults（偏好设置）：上次使用的导出布局、画幅比例、时区偏移、TeslaMate 对齐偏移、TeslaMate 服务器地址字符串，以及指向你所选文件夹的「安全作用域书签」（仅用于重新打开该文件夹，不含文件夹内容）。
- 系统钥匙串（Keychain）：仅当你配置了 TeslaMate 时，才会保存 TeslaMate 的访问令牌（token）。令牌只存于钥匙串，绝不以明文写入磁盘、绝不写入偏好设置、绝不被记录到日志。
- 诊断日志（
carji-diag.txt）：一个仅含技术事件的纯文本排错记录（状态切换、计数、耗时毫秒数等），不含定位 / GPS 坐标、不含文件路径、不含任何用户文本。它被标记为「排除备份」，因此不会进入 iCloud / iTunes 备份；它绝不会自动上传，只有当你在「设置」中主动点按「导出诊断日志」时才会通过系统分享面板离开设备。你可随时在「设置 → 诊断」中点按「清除诊断日志」将其删除。
3. 可选的 TeslaMate 连接（默认关闭）
TeslaMate 是一个由你自行搭建（self-hosted）的开源行程记录服务。本应用仅在你主动于「设置」中填入你自己的 TeslaMate 服务器地址（TM_API_URL）和访问令牌后，才会与之通信。全新安装从不调用 TeslaMate。
启用后，应用会向你自己的服务器发起请求，以获取所选行车片段对应的 GPS 轨迹，用于在「小地图」组件中绘制路线。该请求只发往你自己输入的服务器地址，使用你自己的令牌——绝不发送给我们，绝不发送给任何第三方。令牌存于系统钥匙串；服务器地址（非机密）存于偏好设置。你可随时在「设置」中清空地址与令牌，请求即不再发出。
4. 地图
当「小地图」组件启用且对应片段有 TeslaMate 轨迹时，应用使用 Apple 的 MapKit / MKMapSnapshotter 渲染小地图底图（与系统「地图」App 使用同一套地图服务，由操作系统解析；在中国大陆，Apple 地图瓦片由高德基础设施按 Apple 的协议提供）。该瓦片请求会向 Apple 透露所记录行程的大致地理范围（外接矩形）。此过程适用 Apple 的隐私条款，本应用不会持久化任何瓦片缓存。
关于路名：导出的地图默认使用带道路 / 街道名称的卫星图（.hybrid），而商户 / 兴趣点（POI）与街道地址已被排除。之所以默认显示路名，是因为在中国大陆，无标注的纯卫星瓦片有时会渲染为空白，故默认以「可见」优先。如不希望导出中出现路名，可在编辑器组件设置中开启「隐藏路名」，预览与导出将切换为无标注卫星图。
5. 内购与付费
Pro 高级功能通过 Apple 的「应用内购买」/ StoreKit 解锁。付款全程由 Apple 处理，我们不会收到任何支付信息（卡号、账单地址等一概不经手）。
6. 第三方与品牌说明
本应用不集成任何第三方 SDK。涉及的外部方仅为：你自己搭建的 TeslaMate 服务器（由你掌控）、Apple 的地图与内购服务（适用 Apple 隐私条款）。本应用与 Tesla, Inc. 无任何隶属、赞助或背书关系；文中对「Tesla」「特斯拉摄像头」等的提及仅为描述用途。
7. 数据保留与删除
由于所有数据都只存在于本地，数据保留与删除完全由你掌控：删除导出的 MP4、清除诊断日志、在「设置」中清空 TeslaMate 地址与令牌，或直接卸载应用，即可移除相应数据。卸载应用会一并移除其偏好设置与钥匙串中保存的令牌。
8. 儿童隐私
本应用不面向 13 岁以下儿童，也不会有意收集儿童的任何个人信息。由于本应用根本不收集个人信息，故不存在针对儿童的数据收集行为。
9. 你的权利
因为我们不持有你的任何数据，所以无需向我们提出访问、更正或删除请求——这些操作你都可以在自己的设备上直接完成（见第 7 条）。若你对本政策有疑问，可通过下方邮箱联系我们。
10. 政策变更
若本应用未来新增任何涉及数据的行为，我们会在更新前修订本政策，并更新页面顶部的「生效日期」。重大变更将通过本页面公示。
11. 联系我们
如对本隐私政策有任何疑问，请联系：[email protected]
Privacy Policy
For Drivo · 车记 (bundle com.drivo.carji, available on macOS and iOS / iPadOS)
Effective date: June 7, 2026
In one sentence: Drivo · 车记 is a local-first editor for Tesla dashcam footage (TeslaCam / Sentry / Telemetry). We collect nothing, upload nothing, and track nothing. There is no account, no analytics, no crash reporting, no advertising or third-party tracking SDK, and no server operated by us. Your videos and data always stay on your own device.
1. What we collect
Nothing. The app contains no analytics, telemetry, crash reporters, advertising, or tracking SDKs of any kind. It uses no advertising identifier (IDFA) and has no user account or login. We never send any of your information to us or to any third party — because there is no "our server." The app also never checks for updates automatically.
2. Local-first: where your data lives
The TeslaCam folder you import is one you choose yourself; the app only reads it and never writes back into it. The event list, thumbnails, and per-frame telemetry (SEI) it derives are processed locally on your device. Exported MP4s are written to a disk location you choose (the save panel defaults to ~/Movies) or to a photo library you select. The only things the app stores locally are:
- UserDefaults (preferences): your last-used export layout, aspect ratio, timezone offset, TeslaMate alignment offset, the TeslaMate server URL string, and a "security-scoped bookmark" pointing at the folder you picked (used only to re-open that folder — it never contains the folder's contents).
- System Keychain: only if you configure TeslaMate, your TeslaMate access token is stored there. The token lives in the Keychain only — never written to disk in cleartext, never in preferences, never logged.
- Diagnostic log (
carji-diag.txt): a plain-text troubleshooting trail of technical events only (state transitions, counts, millisecond durations) — it contains no location / GPS coordinates, no file paths, and no user text. It is marked "excluded from backup," so it does not propagate to iCloud / iTunes backups; it is never uploaded automatically and leaves the device only if you tap "Export Diagnostic Log" in Settings (via the system share sheet). You can delete it any time with "Clear Diagnostic Log" in Settings → Diagnostics.
3. Optional TeslaMate connection (off by default)
TeslaMate is an open-source, self-hosted trip-logging service that you run yourself. The app communicates with it only after you enter your own TeslaMate server URL (TM_API_URL) and access token in Settings. A fresh install never calls TeslaMate.
Once enabled, the app requests the GPS track for the selected dashcam clip from your own server, to draw the route in the Mini Map widget. That request goes only to the server address you typed, using your own token — it is never sent to us and never to any third party. The token is kept in the system Keychain; the server URL (not a secret) is kept in preferences. You can clear the URL and token in Settings at any time, after which no such request is made.
4. Maps
When the Mini Map widget is enabled and the clip has a TeslaMate track, the app uses Apple's MapKit / MKMapSnapshotter to render the map background (the same map service used by the system Maps app, resolved by the operating system; in mainland China, Apple Maps tiles are served from AutoNavi infrastructure under Apple's contract). This tile request discloses the rough geographic bounding box of the recorded drive to Apple. Apple's privacy terms apply to this; the app persists no tile cache of its own.
About road names: the exported map by default uses satellite imagery with road / street name labels (.hybrid), while business / points-of-interest (POI) and street addresses are excluded. Road names are shown by default because, in mainland China, label-free satellite tiles can sometimes render blank, so visibility is preferred by default. If you do not want road names in the export, enable "Hide road names" on the Mini Map widget in the editor; both the preview and the export then switch to label-free satellite imagery.
5. Purchases
Pro features are unlocked via Apple's In-App Purchase / StoreKit. Payment is handled entirely by Apple, and we receive no payment data (no card numbers, no billing address — none of it passes through us).
6. Third parties & brand notice
The app integrates no third-party SDKs. The only external parties involved are: your own self-hosted TeslaMate server (under your control), and Apple's Maps and In-App Purchase services (Apple's privacy terms apply). The app is not affiliated with, sponsored by, or endorsed by Tesla, Inc.; references to "Tesla" / "Tesla camera" are descriptive only.
7. Data retention & deletion
Because all data lives only on your device, retention and deletion are entirely under your control: delete the exported MP4s, clear the diagnostic log, clear the TeslaMate URL and token in Settings, or uninstall the app to remove the corresponding data. Uninstalling also removes its preferences and the token stored in the Keychain.
8. Children's privacy
The app is not directed at children under 13 and does not knowingly collect any personal information from children. Since the app collects no personal information at all, there is no data collection targeting children.
9. Your rights
Because we hold none of your data, there is no access, correction, or deletion request to make to us — you can perform all of these directly on your own device (see section 7). If you have questions about this policy, contact us at the email below.
10. Changes to this policy
If the app ever introduces any new data-related behavior, we will revise this policy before that change ships and update the "Effective date" at the top of this page. Material changes will be announced on this page.
11. Contact
For any questions about this Privacy Policy, contact: [email protected]