Effective Date: 2026-09-09
PhotoShuttle (Chinese name: 影渡; formerly PhotoToDrive) is a local-first photo and video backup app. It helps you back up iPhone photos and videos to storage you control: a USB drive or portable disk, or a Mac running the companion app PhotoDepot (Chinese name: 影仓). This Privacy Policy explains what data is processed, how it is used, and your rights.
This policy applies to the PhotoShuttle iOS app and related support communication.
Air Backup and Wired Backup send photos from your iPhone to PhotoDepot on your Mac. That transfer happens between your own devices. It does not go through our servers. PhotoDepot is a separate Mac app. If PhotoDepot publishes its own privacy policy, that policy applies to the Mac app.
With your permission, PhotoShuttle reads photos, videos, Live Photos, and related metadata from Apple Photos (for example capture date, file size, and location embedded in the photo if present). You may grant access to all photos or to selected photos, depending on iOS settings.
This access is used to list, preview, and back up the items you select, including Live Photo still + video pairs. If you choose a move-style backup, originals are removed from Photos only after you confirm.
For Drive Backup, PhotoShuttle uses Apple’s document and file-access APIs (including security-scoped bookmarks) to read and write the USB drive or portable disk you authorize in Files. The app may keep a local bookmark so it can find that drive again later.
Backup records may be stored on the destination itself (for example a hidden .backupdb folder)
so the app can skip items already backed up and resume interrupted transfers.
A hidden device marker may also be written in the backup folder so multiple iPhones can share one drive without mixing folders.
Air Backup uses local network / Bonjour access, with your permission, to find a nearby Mac running PhotoDepot and to transfer the items you selected over Wi-Fi. Wired Backup uses a USB cable between iPhone and Mac; PhotoDepot must be open on the Mac.
A pairing code is used so you connect to the Mac you intend. Photo and video files travel directly to your Mac. We do not receive a copy.
You can turn off Local Network access for PhotoShuttle in iOS Settings. Air Backup will then be unable to discover PhotoDepot.
If you use “jump to city,” PhotoShuttle reads GPS already stored in your photos and asks Apple’s on-device / system geocoding to resolve a city name. Coordinates are not sent to our servers. Resolved city names may be cached locally on your iPhone to speed up later jumps. Photos without location data are simply omitted from this feature.
The app stores a random device identifier in the iOS Keychain so it can recognize this iPhone on a drive it has used before. Uninstalling the app does not always erase Keychain items. Local settings (for example drive bookmarks, last-used destination, and display preferences) are stored on device.
PhotoShuttle may offer a limited number of free backups and a one-time in-app purchase for unlimited backup. Purchase status and trial usage may be stored in:
These records do not include photo or video content. Payments are processed by Apple. We do not receive your card number.
The app may keep diagnostic logs on the device to help debug transfer or crash issues. Logs stay on the iPhone unless you choose to send information when contacting support.
PhotoShuttle may open our website (https://www.pengstudio.cc/) so you can download PhotoDepot. Visiting the site is optional and uses Safari / the system browser.
We do not sell your personal data.
We do not share your photo or video content with third parties for advertising.
Limited disclosures may occur only when required by applicable law, regulation, legal process, or an enforceable governmental request.
The app relies on Apple platform services, including Photos, Files, local network APIs, StoreKit / in-app purchase, iCloud Key-Value storage for license sync, and system geocoding for city names. When an original is only in iCloud Photos, iOS may download it from Apple’s iCloud before backup can finish.
We use reasonable measures aligned with Apple platform capabilities, including user-authorized file access, local pairing before companion transfer, and HTTPS when opening our website. No system can guarantee absolute security. Keep your devices locked and only pair with a Mac you trust.
PhotoShuttle is not directed to children under the age required by applicable law in your region. If you believe a child provided personal data improperly, please contact us.
Depending on your jurisdiction, you may have rights regarding access, correction, deletion, restriction, objection, or portability of personal data. Because PhotoShuttle is primarily local-first, many controls are on-device: revoke Photos / Local Network / Files permissions, delete backup files, restore or manage purchases in your Apple ID settings, or uninstall the app.
If you use PhotoShuttle in different regions, local data-protection laws may apply. We aim to operate this app in a privacy-respecting manner across markets.
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.
[email protected]生效日期：2026-09-09
影渡（英文名 PhotoShuttle，曾用名 PhotoToDrive）是一款以本地处理为主的照片/视频备份应用。 它帮助您将 iPhone 中的照片和视频备份到您自己控制的存储：优盘或移动硬盘， 或运行伴侣应用「影仓」（英文名 PhotoDepot）的 Mac。 本隐私政策说明我们处理哪些数据、如何使用，以及您的相关权利。
本政策适用于 iOS 应用「影渡」及相关用户支持沟通。
「隔空备份」和「一线备份」会把您选中的照片从 iPhone 传到您自己电脑上的影仓。 传输发生在您的设备之间，不经过我们的服务器。 影仓是独立的 Mac 应用；若影仓另行发布隐私政策，则以该政策为准。
在您授权后，影渡会从系统相册读取照片、视频、实况照片及相关元数据 （例如拍摄日期、文件大小，以及照片中已有的位置信息）。 您可以按 iOS 设置授予全部照片或仅选中项目的访问权限。
上述访问用于列出、预览并备份您选择的内容，包括实况照片的静帧与视频成对导出。 若您选择「移动」类备份，仅在您确认后才会从相册删除原片。
「插盘备份」会使用 Apple 提供的文件访问机制（包括安全作用域授权/书签）， 读写您在「文件」中授权的优盘或移动硬盘，并可能在本机保存书签以便下次识别该硬盘。
备份记录可能写在目标存储上（例如隐藏的 .backupdb 文件夹），
用于跳过已备份项目、支持中断后续传。
备份文件夹内也可能写入隐藏的设备标记，以便多台 iPhone 共用一块硬盘时使用各自的文件夹。
「隔空备份」在您授权后使用本地网络 / Bonjour，发现附近运行影仓的 Mac，并通过 Wi‑Fi 传输您选中的内容。 「一线备份」使用 USB 数据线连接 iPhone 与 Mac，并需在 Mac 上打开影仓。
连接前会使用配对码，确认您连到的是自己的 Mac。 照片和视频直接传到您的电脑，我们不会收到副本。
您可在 iPhone「设置」中关闭影渡的「本地网络」权限。关闭后将无法搜索影仓。
若您使用「跳转到城市」，影渡会读取照片中已有的 GPS 信息，并交给系统逆地理编码解析城市名。 坐标不会发送到我们的服务器。解析出的城市名可能缓存在本机，以便下次更快跳转。 没有位置信息的照片不会出现在该功能中。
应用会在钥匙串中保存一个随机设备标识，用于在曾经使用过的硬盘上识别这台 iPhone。 卸载应用不一定会清除钥匙串中的该项。 本机还会保存必要设置（例如硬盘书签、最近使用的备份目标、界面偏好）。
影渡可能提供有限次数的免费备份，以及一次性买断的无限备份内购。 购买状态和试用次数可能保存在：
上述记录不含照片或视频内容。付款由 Apple 处理，我们不会收到您的银行卡号。
应用可能在本机保存诊断日志，用于排查传输或异常问题。 日志默认留在 iPhone 上；仅当您联系支持并主动提供时，我们才会看到相关信息。
影渡可能会打开我们的网站 （https://www.pengstudio.cc/）， 供您下载影仓。访问网站是可选的，将通过系统浏览器打开。
我们不会出售您的个人信息。
我们不会将您的照片/视频内容用于广告，或为此与第三方共享。
仅在适用法律法规、法律程序或具有约束力的政府要求下，才可能进行必要披露。
本应用依赖 Apple 平台能力运行，包括照片、文件、本地网络、StoreKit 内购、 用于许可同步的 iCloud 钥匙值存储，以及用于城市名解析的系统逆地理编码。 当原片仅存在于 iCloud 照片中时，iOS 可能需要先从 Apple 的 iCloud 下载后再完成备份。
我们会结合 Apple 平台能力采取合理措施，包括由您授权的文件访问、伴侣连接前的配对， 以及打开官网时使用 HTTPS。任何系统都无法保证绝对安全。请妥善锁定设备，并只与您信任的 Mac 配对。
影渡并非面向未达到当地法定年龄的儿童。 如您认为存在儿童不当提供信息的情形，请联系我们。
根据您所在地区法律，您可能享有访问、更正、删除、限制处理、反对处理、数据可携等权利。 对于本地数据，您通常可通过设备侧操作直接管理：撤销照片 / 本地网络 / 文件权限、 删除备份文件、在 Apple ID 设置中管理购买，或卸载应用。
若您在不同国家或地区使用本应用，可能适用当地数据保护法律。 我们将尽力以尊重隐私的方式运营本应用。
我们可能不时更新本政策，更新后会在本页面发布并更新生效日期。