Privacy Policy

Effective 28 September 2026

The short version

• Your photos and Recipes stay on your phone. We never upload them.
• When you tap Scan, one small, downscaled still of the camera view goes to our server and to Google's AI so it can compose Frames. We don't keep the image, and it isn't used to train AI models.
• No ads, no tracking across other apps and websites, and we don't sell or share your data for advertising.
• We use a random ID instead of your name, email or phone number, and we measure how the app is used with our own analytics.

Who we are

Kozu is an AI composition camera made by Ka Wai Tong ("Kozu", "we", "us"). This policy covers the Kozu app and kozu.camera. Questions or requests: support@kozu.camera.

What we collect, and why

1. Scans

When you tap Scan, the app sends:

• a still of the camera view, downscaled to at most 1024 pixels on its long side, with its metadata (such as GPS location and camera details) removed;
• what your phone detected on the device: labels and positions of objects and people in the frame, the horizon, and the scene's light;
• your camera's capabilities (lenses, zoom, ISO and shutter ranges), the Looks your app can apply, your language, and short notes about the kinds of shots you rated Great.

We use this only to create Frames for that scene. It goes to our server and to Google's Gemini API, which returns the Frames. We don't store the image or the AI's answer. We keep a record of each Scan (time, result, number of Frames, the AI model, processing cost and error codes, but no image) to count your free Scans, bill correctly and improve quality. Scans don't include your location.

2. Photos and Recipes

Photos you take are saved to your Photos library and to the app on your phone. Recipes (the Frame, the camera settings, a thumbnail and, if you choose, where it was shot) are stored on your phone only. When you share a photo or a Recipe card, you choose where it goes.

3. Location

Only if you allow it, and only to save where a Recipe was shot when you choose to. Your phone turns the location into a place name with Apple's services. We don't receive your location.

4. Your account and allowance

The app creates an anonymous account for you: a random ID, with no email, phone number or name. We store your plan, your free Scan allowance and usage, your language, and referral codes and whether a referral counted.

5. Purchases

Payments are handled by Apple (and by Google Play on Android). We never see your card or bank details. The app receives the purchase's status (product, dates and transaction ID) to unlock Kozu Pro, a pass or a Scan pack.

6. Usage analytics

We record events about how the app is used, for example: the app opened, a Scan started or failed, a Frame was chosen, a photo was saved or shared, the paywall was shown. Each event carries a random install ID, your anonymous account ID, the app version, device model, operating system version, language, region and time. We use this to understand what works, fix problems and improve Kozu. The analytics run on our own server; the app contains no third-party analytics or advertising code and doesn't use your device's advertising identifier.

7. Feedback and support

When you send a rating, feedback or a problem report in the app, we store what you wrote and your star rating, together with the app version, device model, operating system, language, region and install ID. The report is also posted in the Kozu team's private Discord channel so we can respond. If you email us or join our Discord community, we receive what you send there; Discord's own privacy policy covers your use of Discord.

8. App settings

The app downloads settings from our server (for example, the community link). This sends nothing about you beyond your account's sign-in token.

What we don't do

• We don't sell your personal data or share it for advertising.
• We don't track you across other companies' apps or websites.
• We don't use facial recognition or try to identify anyone in a photo.
• We don't use your photos or Scans to train AI models, and we don't allow our providers to.

Who processes data for us

Provider	What for	Where
Supabase	Our database, anonymous sign-in and server functions	Tokyo, Japan
Google (Gemini API)	Composing Frames from a Scan. Google processes the Scan to return the result and doesn't use it to improve its products.	Google's data centers
Apple	App Store purchases, TestFlight, and crash reports if you choose to share them	Apple's data centers
Discord	The team's feedback channel and the Kozu community server	United States
Vercel	Hosting this website	Global edge network

So your data may be processed outside your country, including in Japan and the United States. We only work with providers that protect it under their own terms and the law.

How long we keep it

• Usage analytics and feedback: deleted 24 months after we receive them.
• Scan records (no images): deleted 24 months after the Scan.
• Your account, plan and allowance: kept while you use Kozu, and deleted when you ask.
• On your phone: until you delete it or the app.

Your choices and rights

• Camera, Photos and Location access can be changed at any time in your phone's Settings.
• You can ask to see, correct, export or delete the data linked to your account. The easiest way is in the app: Me → Settings → Community & support → Report a problem, starting with "Privacy request", so we can find the data linked to your install. You can also email support@kozu.camera.
• Depending on where you live (for example under the GDPR, Taiwan's Personal Data Protection Act, Hong Kong's Personal Data (Privacy) Ordinance or California law), you may have further rights, including objecting to processing and complaining to your data protection authority. We will respond within 30 days.

Children

Kozu is intended for people aged 18 and over. We don't knowingly collect data from children. If you believe a child has used Kozu, contact us and we will delete the data.

Security

Data is encrypted in transit, your sign-in token is kept in your phone's secure storage, Scan images are stripped of metadata before they leave the server, and access to our systems is limited to the team.

Changes

If this policy changes, we will update the date above, and tell you in the app before a significant change takes effect.

Contact

Ka Wai Tong (Kozu) · support@kozu.camera

隱私權政策

生效日期：2026 年 9 月 28 日

重點整理

• 你的照片和拍法都留在你的手機裡，我們絕不會上傳。
• 你點「掃描」時，App 會把一張縮小的相機畫面傳到我們的伺服器和 Google 的 AI 來設計構圖。我們不會保存這張畫面，它也不會被拿去訓練 AI 模型。
• 沒有廣告，不會跨 App 或網站追蹤你，也不會為了廣告出售或分享你的資料。
• 我們用一組隨機 ID 代替你的姓名、Email 或電話，並用我們自己的分析工具了解 App 的使用情形。

我們是誰

Kozu 是由 Ka Wai Tong 開發的 AI 構圖相機（以下稱「Kozu」或「我們」）。本政策適用於 Kozu App 和 kozu.camera 網站。有任何問題或請求，請寫信到 support@kozu.camera。

我們蒐集哪些資料，以及用途

1. 掃描

你點「掃描」時，App 會傳送：

• 一張相機畫面的靜態影像，長邊最多縮小到 1024 像素，並移除 GPS 位置和相機資訊等中繼資料；
• 手機在裝置上辨識到的內容：畫面中物件和人的標籤與位置、地平線，以及現場光線；
• 你的相機能力（鏡頭、變焦、ISO 和快門範圍）、App 可以套用的風格、你的語言，以及你評為「超讚」的照片類型摘要。

這些資料只用來為當下的場景設計構圖。資料會傳到我們的伺服器和 Google 的 Gemini API，由它回傳構圖。我們不會保存影像，也不會保存 AI 的回覆。我們會保留每次掃描的紀錄（時間、結果、構圖數量、使用的 AI 模型、處理成本和錯誤代碼，但沒有影像），用來計算你的免費掃描次數、正確計費和改善品質。掃描不會包含你的位置。

2. 照片和拍法

你拍的照片會存到你的「照片」App 和手機上的 Kozu 裡。拍法（構圖、相機設定、縮圖，以及你選擇保存的拍攝地點）只存在你的手機。你分享照片或拍法卡時，由你決定要傳到哪裡。

3. 位置

只有在你允許、而且你選擇保存拍法的拍攝地點時才會使用。你的手機會透過 Apple 的服務把位置轉成地名，我們不會收到你的位置。

4. 你的帳號和額度

App 會幫你建立一個匿名帳號：一組隨機 ID，沒有 Email、電話或姓名。我們會保存你的方案、免費掃描額度和使用量、語言，以及邀請碼和邀請是否生效。

5. 購買

付款由 Apple 處理（Android 則由 Google Play 處理），我們看不到你的信用卡或銀行資料。App 會收到購買狀態（商品、日期和交易編號），用來開通 Kozu Pro、暢拍方案或掃描次數包。

6. 使用情形分析

我們會記錄 App 的使用事件，例如：開啟 App、開始或中斷掃描、選擇構圖、儲存或分享照片、看到付費方案頁。每個事件都帶有隨機安裝 ID、你的匿名帳號 ID、App 版本、裝置型號、作業系統版本、語言、地區和時間。我們用這些資料了解哪些功能好用、修正問題並改善 Kozu。分析在我們自己的伺服器上執行，App 沒有第三方分析或廣告程式碼，也不會使用你裝置的廣告識別碼。

7. 意見回饋和支援

你在 App 裡送出評分、意見或問題回報時，我們會保存你寫的內容和星等，以及 App 版本、裝置型號、作業系統、語言、地區和安裝 ID。回報也會張貼到 Kozu 團隊的私人 Discord 頻道，方便我們回覆。如果你寫信給我們或加入我們的 Discord 社群，我們會收到你在那裡傳送的內容；你使用 Discord 時適用 Discord 自己的隱私權政策。

8. App 設定

App 會從我們的伺服器下載設定（例如社群連結）。除了帳號的登入權杖之外，不會傳送任何關於你的資料。

我們不會做的事

• 我們不會出售你的個人資料，也不會為了廣告分享它。
• 我們不會跨其他公司的 App 或網站追蹤你。
• 我們不使用人臉辨識，也不會嘗試辨認照片中的任何人。
• 我們不會用你的照片或掃描訓練 AI 模型，也不允許我們的服務供應商這樣做。

為我們處理資料的服務供應商

供應商	用途	地點
Supabase	我們的資料庫、匿名登入和伺服器功能	日本東京
Google（Gemini API）	根據掃描設計構圖。Google 只為了回傳結果而處理掃描，不會用來改善它的產品。	Google 的資料中心
Apple	App Store 購買、TestFlight，以及你選擇分享的當機報告	Apple 的資料中心
Discord	團隊的意見回饋頻道和 Kozu 社群伺服器	美國
Vercel	架設本網站	全球節點

因此你的資料可能在你所在的國家或地區以外處理，包括日本和美國。我們只與依其條款和法律保護資料的供應商合作。

資料保存多久

• 使用情形分析和意見回饋：收到後 24 個月刪除。
• 掃描紀錄（沒有影像）：掃描後 24 個月刪除。
• 你的帳號、方案和額度：在你使用 Kozu 期間保存，你提出請求時刪除。
• 你手機上的資料：保存到你刪除它或刪除 App 為止。

你的選擇和權利

• 你隨時可以在手機的「設定」中變更相機、照片和位置權限。
• 你可以要求查看、更正、匯出或刪除與你帳號相關的資料。最簡單的方式是在 App 裡：「我的」→「設定」→「社群與支援」→「回報問題」，開頭寫「隱私請求」，我們就能找到與你這次安裝相關的資料。你也可以寫信到 support@kozu.camera。
• 依你所在地的法律（例如歐盟 GDPR、台灣《個人資料保護法》、香港《個人資料（私隱）條例》或美國加州法律），你可能還有其他權利，包括反對資料處理，以及向資料保護主管機關申訴。我們會在 30 天內回覆。

兒童

Kozu 的使用對象為年滿 18 歲的人。我們不會在知情的情況下蒐集兒童的資料。如果你認為有兒童使用了 Kozu，請聯絡我們，我們會刪除相關資料。

資料安全

資料在傳輸時會加密，你的登入權杖存放在手機的安全儲存區，掃描影像在離開伺服器前會移除中繼資料，只有團隊成員能存取我們的系統。

政策變更

本政策如有變更，我們會更新上方的日期；重大變更生效前，會先在 App 裡通知你。

聯絡我們

Ka Wai Tong（Kozu）· support@kozu.camera