更新日期：2026 年 10 月 13 日
本政策适用于 EyeScore 眼动翻谱软件。隐私或反馈相关问题请联系开发者：eyescore@163.com。
在你允许相机权限后，应用使用前置摄像头在本机估计视线与演奏姿态，用于校准、眼动滚动和书签触发。相机帧在处理期间暂存于内存，不保存为照片或视频，也不上传给开发者或模型供应商。你可以随时在系统设置中关闭相机权限；关闭后眼控功能无法使用。
保存的校准档案包含你输入的名称、视线映射系数和校准姿态参考数值，用于恢复对应的眼控映射，不用于身份识别。语言、注视时间及节拍器预设等设置也保存在本设备。档案保留至你在档案页面删除，其他设置保留至你修改或删除应用及其数据。当前乐谱和书签用于当前阅读会话。应用不提供自有账号或云同步；系统备份及你自行保存的文件副本由相应系统设置管理。
诊断记录默认关闭。你可以从帮助中的“本地诊断”主动开启本次记录，用于排查眼控问题。记录包含视线位置、校准系数、人脸几何与姿态数值、动作状态、处理延迟及设备环境，不包含摄像头照片、视频或乐谱内容。开启后，滚动缓存仅保留在本机，最多约 5 分钟、16 MB。进入后台、切换语言或关闭记录会停止记录并清除缓存；“清除本地问题数据”还会清除应用暂存的问题包。
每次生成问题包前，应用会说明内容并由你点击开始。诊断记录关闭时，仅收集开始后的 15 秒；已主动开启诊断时，还可包含此前最多 120 秒。问题包包含上述诊断数值、应用/系统版本、设备类型和屏幕方向。它仅在你使用系统分享界面选择保存或发送时离开应用，不会自动发送。分享结束、点击完成或下次启动时，应用清理暂存副本；你在文件、邮件或其他服务保存/发送的副本需在相应服务中管理。若将问题包发给开发者，问题包和反馈数据仅用于处理这次反馈，在问题处理期间保留，并在处理完成后 30 天内删除。你可随时通过联系邮箱要求停止使用或提前删除已提交的问题包和反馈数据。邮件等第三方服务的处理方式同时受其政策约束。
应用使用 MediaPipe 模型在本机识别人脸与眼睛。本发行版采用不记录任务指标的日志实现，不自动向 Google 发送 SDK 性能或使用指标。应用没有广告 SDK，不进行跨 App 或网站追踪，不向开发者服务器自动上传上述数据，也不出售或用于广告、营销或身份识别。用户主动使用的分享服务及公开政策网页可能按其自身政策处理访问数据。
你可以撤回相机权限、关闭并清除诊断记录、删除校准档案，或删除应用及其本地数据。撤回诊断不会影响正常眼控。已分享的副本不会因本机清除而自动删除。需要协助或请求删除你发给开发者的反馈，请联系 eyescore@163.com。数据用途发生变化时，应用会更新本政策，并在需要时重新取得你的同意。
Updated: October 13, 2026
This policy applies to the EyeScore eye-controlled score reader. Contact the developer at eyescore@163.com for privacy or feedback questions.
After you grant camera permission, the app uses the front camera to estimate gaze and playing posture on this device for calibration, scrolling and bookmark actions. Camera frames are held in memory during processing, are not saved as photos or video, and are not uploaded to the developer or model provider. You can revoke camera permission in Settings; eye control then becomes unavailable.
Saved profiles contain your chosen name, gaze mapping coefficients and numeric calibration posture references to restore the corresponding gaze mapping, not to identify you. Language, dwell time and metronome presets are also stored on this device. Profiles remain until you delete them in Profiles. Other settings remain until changed or the app and its data are deleted. The current score and bookmarks belong to the current reading session. The app has no account or proprietary cloud sync. System backups and copies you save are governed by their respective system settings.
Diagnostic recording is off by default. You can enable it for the current session under Local Diagnostics in Help to investigate eye-control issues. Records include gaze positions, calibration coefficients, numeric face geometry/posture, action status, processing latency and device environment, but no camera photos, video or score content. The on-device rolling cache retains up to approximately 5 minutes or 16 MB. Recording stops and the cache is cleared when the app enters the background, changes language, or you turn it off. Clear Local Diagnostic Data also removes diagnostic packages temporarily held by the app.
Before each package, the app explains its contents and requires you to start collection. With recording off, only the following 15 seconds are collected. If you enabled recording, up to the preceding 120 seconds may also be included. The package contains the diagnostic numbers above, app/system version, device type and orientation. It leaves the app only when you choose to save or send it using system sharing; it is never sent automatically. The app removes temporary copies after sharing, when you tap Done, or on the next launch. Manage copies saved or sent through Files, email or other services in those services. If you send a package to the developer, the package and feedback data are used only to handle that feedback. They are retained while the issue is being handled and deleted within 30 days after handling is completed. You may contact the email above at any time to request that use stop or that your submitted package and feedback data be deleted sooner. Third-party sharing and email services are also subject to their own policies.
MediaPipe models detect faces and eyes on this device. This distribution uses a task logger that records no metrics and does not automatically send SDK performance or usage metrics to Google. The app has no advertising SDK or cross-app/website tracking, does not automatically upload the data above to developer servers, and does not sell or use it for advertising, marketing or identification. Sharing services and the public policy website you choose to use may process access data under their own policies.
You can revoke camera permission, turn off and clear diagnostics, delete profiles, or remove the app and its local data. Turning off diagnostics does not affect normal eye control. Clearing local data does not automatically delete copies already shared. Contact eyescore@163.com for help or deletion of feedback you sent to the developer. If data uses change, this policy will be updated and new consent obtained where required.