EyeScore 隐私与许可

EyeScore 隐私政策

更新日期:2026 年 10 月 27 日

1. 谁负责与如何选择

EyeScore 的开发者及个人信息处理者为梁锎匀,联系邮箱 eyescore@163.com。启用眼控前,请选择当前使用者的年龄类别,阅读用途并明确同意;未满 14 周岁须由监护人确认。拒绝仍可手动读谱、导入乐谱和使用节拍器。

2. 本机处理与保存

相机画面、人脸与眼部特征、视线和姿态在本机处理,用于校准、滚动和书签,不用于身份识别。相机帧仅在内存中暂存,不保存照片或视频,不自动上传。

主动保存的校准档案包括名称、映射系数、面部/眼部及姿态参考、创建时间、方向、窗口与缩放信息,保留至你在档案页面删除;可改名,建议使用昵称。缺少方向和窗口记录的旧档案会因兼容规则自动清除;其他档案不因切换年龄类别而删除。

本机还保存语言、注视时间、节拍器预设、当前年龄类别和同意选择,不登记生日或每份档案的年龄。监护人密码及恢复验证信息仅保护儿童诊断和相关设置,不核验身份。当前乐谱、书签用于阅读会话。应用没有自有账号或云同步;系统备份与导出副本按相应系统或服务设置管理。

3. 第三方组件与访问

Google 开源 MediaPipeTasksVision/MediaPipeTasksCommon 0.10.35 及其基础库在本机处理相机帧、特征和数值。本发行版不记录或自动发送 SDK 任务指标,不自动向 Google 或开发者发送上述数据。应用没有广告 SDK、跨应用追踪,不出售数据。组件许可见“第三方许可”。

Apple 系统功能用于相机、显示乐谱、保存和分享。主动打开政策网页时,托管服务可能收到 IP 与网页请求信息;主动保存、邮件或分享适用所选服务的政策。

4. 问题数据与导出

点击“开始收集”才记录视线、校准、人脸几何与姿态、动作状态、延迟、应用/系统版本、设备及屏幕信息,不含照片、视频或乐谱。倒计时 5 分钟,可提前结束;到时自动生成问题包。进入后台、切换语言或取消会停止并清除本次记录。

生成后可保存、分享或取消,不自动发送。保存/分享成功、取消或下次启动时清理应用临时包。已导出的副本须在相应服务管理,本机清除不会删除它们。儿童收集和导出由监护人分别确认,并使用本机密码保护;正常读谱不要求每次验证。

5. 反馈与儿童保护

你主动发给 eyescore@163.com 的问题包、反馈、发件邮箱及必要往来信息,仅用于处理本次问题,处理完成后 30 天内删除;可要求提前删除。请勿发送无关身份证件或住址。

未满 14 周岁适用可单独查看的《儿童个人信息保护规则》。监护人决定眼控和诊断选择,可停止处理、撤回同意、管理档案或联系删除已提交的数据。首次眼控不强制设置密码;密码用于减少误操作,不能证明监护关系。多人共用时请更新当前类别。

6. 停止、删除与联系

在“使用者设置”可停止眼控、切换类别或撤回同意,也可在系统设置关闭相机权限。“暂停滚动”不等于停止相机。仅停止会保留既有同意;撤回或切换类别后需重新确认。这些操作不删除现有档案,档案另行管理。停止、撤回、取消收集和提出删除请求不要求密码。

查阅、更正、删除反馈或投诉请联系 eyescore@163.com,我们在收到请求后 15 个工作日内核查处理,必要时仅核实与请求有关的信息。数据用途、方式或范围发生实质变化时,重新告知并按需取得同意。

儿童个人信息保护规则 · 第三方许可

EyeScore Privacy & Licenses

EyeScore Privacy Policy

Updated: October 27, 2026

1. Responsibility and choices

EyeScore’s developer and personal information handler is 梁锎匀. Contact eyescore@163.com. Before enabling eye control, select the current user’s age group, read its purposes, and explicitly agree. A guardian must confirm for users under 14. Manual reading, score import, and the metronome remain available if you decline.

2. On-device processing and storage

Camera images, face and eye features, gaze, and posture are processed on this device for calibration, scrolling, and bookmarks, not identification. Camera frames are held temporarily in memory. Photos and video are not saved. Data is not uploaded automatically.

Profiles you choose to save contain the name, mapping coefficients, numeric face/eye and posture references, creation time, orientation, window, and zoom information. They remain until deleted in Profiles; names can be edited, and a nickname is recommended. Older profiles without orientation and window records are removed under compatibility rules. Other profiles are not deleted when you change the age group.

Local settings include language, dwell time, metronome presets, the current age group, and consent choices, with no birth date or per-profile age. Guardian passcode and recovery verification information protect children’s diagnostics and related settings, not identity. The current score and bookmarks belong to the reading session. The app has no proprietary account or cloud sync. System backups and exported copies follow the respective system or service settings.

3. Third-party components and access

Google’s open-source MediaPipeTasksVision/MediaPipeTasksCommon 0.10.35 and their supporting libraries process camera frames, features, and numeric data on this device. This distribution neither records nor automatically sends SDK task metrics, and does not automatically send the data above to Google or the developer. There is no advertising SDK or cross-app tracking, and data is not sold. See Third-Party Licenses for component licenses.

Apple system features provide the camera, score display, saving, and sharing. Opening the public policy page may disclose IP and page request information to its hosting service. Saving, email, and sharing follow the policies of the services you choose.

4. Diagnostics and export

Recording starts only when you tap Start Collection. It includes gaze, calibration, numeric face geometry/posture, action states, latency, app/system versions, device, and screen information, with no photos, video, or score content. A 5-minute countdown runs; you may finish early, and a package is created automatically when time runs out. Backgrounding, changing language, or canceling stops collection and clears the current records.

You may save, share, or cancel the resulting package; it is not sent automatically. The app clears its temporary package after successful saving/sharing, cancellation, or the next launch. Manage exported copies in the respective services; clearing local data does not remove them. A guardian separately confirms children’s collection and export, protected by the local passcode. Verification is not required each time the child reads.

5. Feedback and children

Packages, feedback, the sender’s email, and necessary correspondence you send to eyescore@163.com are used only to handle that issue and deleted within 30 days after handling is completed. Earlier deletion can be requested. Do not send unrelated identity documents or addresses.

Users under 14 are covered by the separately accessible Children’s Personal Information Protection Rules. Guardians decide eye-control and diagnostic choices and can stop processing, withdraw consent, manage profiles, or request deletion of submitted data. Passcode setup is not required for first enabling eye control. The passcode reduces accidental or unauthorized local actions; it does not establish guardianship. Update the current age group when sharing the device.

6. Stopping, deletion, and contact

Use User Settings to stop eye control, change the age group, or withdraw consent. Camera permission can also be revoked in system Settings. Pause Scrolling does not stop the camera. Stopping alone retains consent; withdrawal or an age-group change requires renewed confirmation. These actions do not delete existing profiles; manage profiles separately. Stopping, withdrawing, canceling collection, and submitting deletion requests do not require the passcode.

Contact eyescore@163.com to access, correct, or delete submitted feedback, or make a complaint. We examine and handle requests within 15 working days of receipt, verifying only information relevant to the request where needed. Material changes to data purposes, methods, or scope are explained again and require renewed consent where applicable.

Children’s Personal Information Protection Rules · Third-Party Licenses