LoreLens Privacy Policy

LoreLens (“the App”) is an AI tour guide that identifies landmarks from photos and plays narrated guides. This policy explains what data the App handles and how.

Photos

When you take or select a photo for recognition, a compressed copy is sent over HTTPS to our server, which forwards it to a third-party large-language-model (LLM) provider to identify the landmark.

If the landmark is recognized, your photo is deleted from our server immediately — before the guide is even written. It serves no further purpose, so we do not keep it.

If the landmark is not recognized, or the recognition fails with an error, the photo is kept for up to 7 days and then deleted automatically. This is the only way we can reproduce a failure and work out why the app could not identify what you were looking at. Retained photos are never linked to any identity, are not used to train any model, and are not shared with anyone.

Photos you save to Favorites are stored only on your device.

Location

With your permission, the App uses your device location to find scenic areas nearby. Location is processed entirely on your device against a bundled offline database and is never sent to our server.

Speech

Guide narration is synthesized entirely on your device. No audio or text is sent to any server for speech synthesis.

Anonymous usage data (LoreLens 1.3 and later)

Version 1.3 added a small amount of anonymous product analytics, shown in the App as “Share anonymous usage data” under the Me tab. It exists to answer questions we otherwise cannot answer at all — most importantly whether people actually listen to a guide through to the end, or stop after a minute.

What is sent: app launches, which tab you are viewing, whether a recognition succeeded or failed, how far through a narration you got (25% / 50% / 75% / 100%), error codes, and crash and performance diagnostics provided by Apple’s MetricKit.

What is never sent: your photos, your coordinates, your name or email, any advertising identifier, and any content you have saved.

Events carry a random identifier generated on your device the first time the App runs. It is not Apple’s advertising identifier, it is not shared with any other app, and it is deleted when you delete the App. Its only purpose is to group one install’s events together so that “one person listened ten times” is distinguishable from “ten people listened once”.

Because these events travel over the internet, the endpoint that receives them also records the IP address the request came from. We use it to understand which regions the App is used in and to spot abusive traffic. An IP address is approximate — city-level at best — and we do not combine it with your device’s location, which is never sent to us at all. It is stored only in our own analytics store, is never included in a recognition request to any model provider, and is deleted together with the rest of the event data. Turning the switch off stops the events, and with them the IP address.

The data goes to our own Cloudflare analytics store and is kept for 3 months. It is not shared with advertising networks, not combined with data from other companies, and not used for tracking as Apple defines it.

You can turn it off in the Me tab. Once off, nothing is sent at all — there is no reduced or delayed mode.

Data we do not collect

The App has no user accounts and collects no names, emails, contacts, or identifiers for advertising. We do not build profiles about you, do not use your data for tracking, and do not sell data to anyone.

Service logs

Our server keeps standard technical logs (request time, image size, a random trace ID) for reliability and debugging. These logs contain no photo content and no personal identifiers. Photos retained after a failed recognition are stored as files, separately from these logs, and follow the 7-day rule above.

Third parties

Recognition requests pass through Cloudflare (network delivery) and an LLM API provider (landmark identification and guide generation). These providers process the photo transiently to provide the service and are not authorized by us to use it for other purposes.

Children

The App is not directed at children under 13, and we do not knowingly collect personal data from children. It has no accounts, builds no profiles, and uses no advertising identifiers; apart from the IP address described above, it collects no personal data from any user.

This website

loreroutes.com uses anonymized visit statistics (Google Analytics) to understand which stories readers find useful. This is separate from the App — the App does not use Google Analytics, and website visits are not linked to App usage in any way.

Contact

Questions or requests: support@loreroutes.com

LoreLens 隐私政策（中文）

最后更新：2026 年 8 月 25 日

LoreLens（“本应用”）是一款 AI 导游应用：拍照识别景点并播放语音讲解。本政策说明应用如何处理你的数据。

照片

当你拍摄或选择照片进行识别时，压缩后的副本会通过 HTTPS 发送到我们的服务器，并转发给第三方大模型服务完成地标识别。

如果地标被识别出来，你的照片会立即从服务器删除——早于讲解稿生成。它已经没有任何用途，我们不会留着。

如果没能识别出地标，或识别过程出错，照片会保留至多 7 天，之后自动删除。这是我们复现失败、弄清为什么认不出你眼前那处景物的唯一办法。保留的照片不与任何身份关联，不用于训练任何模型，也不提供给任何人。

你收藏的照片仅保存在你自己的设备上。

位置

在你授权后，应用使用设备位置在本机内置的离线景区库中检索附近景区。位置信息完全在设备端处理，不会发送到服务器。

语音

讲解语音完全在设备端合成，不向任何服务器发送音频或文本。

匿名使用数据（LoreLens 1.3 及以上版本）

1.3 版本起加入了少量匿名产品分析，在应用内对应「我的」页的「共享匿名使用数据」开关。它的存在是为了回答一些我们此前完全无从得知的问题——最重要的一个是：用户到底会把一段讲解听完，还是听一分钟就停。

会上报的内容：应用启动、当前所在的 Tab、一次识别是成功还是失败、一段讲解听到了哪一段（25% / 50% / 75% / 100%）、错误码，以及来自 Apple MetricKit 的崩溃与性能诊断数据。

绝不上报的内容：你的照片、你的经纬度、姓名或邮箱、任何广告标识符，以及你收藏的任何内容。

事件会带一个随机标识符，它在应用首次运行时于你的设备上生成，不是 Apple 的广告标识符，不与任何其他应用共享，卸载应用即随之删除。它唯一的用途是把同一次安装的事件归到一起，好让「一个人听了十次」与「十个人各听一次」能被区分开。

由于这些事件要经网络发送，接收它们的服务端还会一并记录请求来源的 IP 地址。我们用它了解应用在哪些地区被使用、以及识别异常流量。IP 地址是粗略的——最细也只到城市一级——我们不会把它与你设备上的位置信息合并，后者根本不会发送给我们。它只存在我们自己的分析库里，不会出现在发往任何模型服务商的识别请求中，并与其余事件数据一同删除。关掉开关即不再发送事件，IP 地址也随之不再记录。

数据存入我们自己的 Cloudflare 分析库，保留 3 个月。不提供给广告网络，不与其他公司的数据合并，也不用于 Apple 定义的「追踪」。

你可以在「我的」页关掉它。关闭后不再发送任何事件——没有所谓的精简模式或延后上报。

我们不收集的数据

应用无账户体系，不收集姓名、邮箱、通讯录或广告标识符；不为你建立画像，不追踪用户，不向任何人出售数据。

服务日志

服务器保留常规技术日志（请求时间、图片大小、随机 trace ID）用于保障服务可靠性。日志不含照片内容，也不含个人身份信息。识别失败后保留的照片以文件形式单独存放，不在这些日志里，并遵循上面的 7 天规则。

第三方

识别请求经由 Cloudflare（网络加速）与大模型 API 服务商（地标识别与讲解生成）处理。它们仅为提供服务而临时处理照片，未经我们授权不得移作他用。

儿童

本应用不面向 13 岁以下儿童，我们也不会有意收集儿童的个人数据。应用无账户体系、不建立画像、不使用广告标识符；除上文所述的 IP 地址外，不收集任何用户的个人数据。

本网站

loreroutes.com 使用匿名化访问统计（Google Analytics）了解哪些内容对读者有用。这与应用是两回事——应用不使用 Google Analytics，网站访问也不会以任何方式与应用使用情况关联。

联系我们

如有疑问或请求：support@loreroutes.com