Privacy Policy

This policy explains how individual developer Xiaojia Fan (樊晓佳) handles information associated with MultiLive and its public documentation website. Core photo editing takes place on your device. Voluntary feedback and website visits involve separate data processing.

This policy is available in Simplified Chinese, Traditional Chinese and English. Other app languages use the English policy by default.

1. Operator and scope

Operator: Xiaojia Fan (Chinese name: 樊晓佳), an individual developer. Contact: fanevantech@outlook.com.

This policy covers MultiLive’s on-device editing, drafts, offline tutorials, diagnostics and voluntary feedback, and public documentation under docs.fanevan.com/multilive. System Photos, iCloud, system mail, other sharing services you choose, and TestFlight are also subject to their providers’ privacy information.

2. On-device editing and local data

After you grant access or select media, the app reads photos, videos and their audio on your device to generate previews, edit images and sound, and save or export the results you choose. Core editing does not upload source media, drafts or finished work to a developer server. The app has no accounts, developer-operated cloud sync, advertising or third-party behavioral analytics.

Drafts contain editing parameters, media references, names, color labels, creation and modification times, and thumbnails. Drafts created from the photo library generally reference the original media. Media imported from a complete project package is copied into storage managed locally by the app. Recovery snapshots, format-migration backups and export-status records support recovery of unfinished operations.

The app also stores your nickname, preset avatar, biography, preferences such as appearance and language, import and save counts, and tutorial practice projects and progress locally. Caches speed up previews. Switching languages does not rewrite this information or send it to the developer.

The app does not modify original media in your photo library. Photos, videos and complete project packages you deliberately export may include the media and its metadata. You choose the recipient or sharing destination, and exported copies are no longer controlled solely by the app.

3. Permissions, system services and backups

Photo access is used to read media you allow for editing and to save work at your request. You can change permissions or the available photos in system settings. Denying or withdrawing access may affect importing, draft recovery and saving to Photos; existing editing parameters are retained where possible.

If selected originals are stored in iCloud, PhotoKit or a system file provider may download them according to your system settings. This does not create an app-operated cloud-sync service. The operating system and your settings determine whether app data is included in device or iCloud backups. Restoring a backup may bring back earlier local data.

When you use a beta through TestFlight, Apple may process tester identity, usage and crash information through its testing service. This is separate from voluntary in-app feedback; refer to Apple and TestFlight’s information.

4. Diagnostic logs

Diagnostic logs record processing stages, elapsed times, technical runtime conditions and error codes to help investigate import, preview and export problems. The app does not write photo pixels or audio content into logs and filters local paths and photo-resource identifiers passed to the logger. Detailed logging can be disabled; important errors and completion states may still be recorded.

Logs are stored locally and rotated by size rather than kept as a permanent history. You can inspect, export or clear them in settings. Exports and feedback use a snapshot, shared with the relevant service only when you choose to share or confirm sending. Log filtering does not mean that metadata has been removed from photos, videos or files you attach separately.

5. Voluntary feedback

Feedback is addressed to fanevantech@outlook.com. Before sending, you can review your description, app version and build, technical information such as the system and device category, optional diagnostic logs, and files you deliberately attach. Attachments can be removed. Please provide only what is necessary to investigate the problem, avoiding identification documents, passwords, unrelated private originals or sensitive information about others.

The app presents a system mail composer for you to review and send. If mail is not configured, you can copy the contact details or hand a local feedback package to a service you choose. The app does not independently upload feedback in the background. Creating a file, opening mail or completing a system share does not mean the developer has received your message.

Mail received by the developer may include your sender address, mail display name, message, technical information, logs and chosen attachments. It is used only to understand the issue, communicate, provide technical support and address privacy requests. The support mailbox uses Microsoft Outlook. Your chosen sending or sharing provider also processes content under its own terms.

Importing or compressing an attachment creates a locally managed copy without changing the original. Uncompressed files may contain metadata such as location or capture time. Temporary sending copies are cleaned up by the feedback flow; cancelled or failed attempts may retain copies temporarily for retry. Copies you save in mail drafts, other apps or file locations must be managed there.

6. Retention and deletion

You control local drafts, settings and learning progress; they have no single automatic expiry period. Available deletion and cleanup controls separately manage drafts, caches and diagnostics. Clearing caches does not delete drafts or original photos. Deleting the app generally removes its container; offloading while keeping data, backups, the photo library and exported copies are governed by the system or corresponding service. Deletion is not a secure-erasure guarantee.

The developer will delete feedback emails and attachments within 90 days after the issue is closed, including downloaded copies and related items in trash under the developer’s control. Open issues are retained only as needed for handling them. If specific records must be retained by law, their use is restricted and they are deleted when that obligation ends.

This feedback-deletion rule applies to copies the developer controls. It does not guarantee deletion of copies held by senders, other recipients, your chosen sharing services, or mail-provider backups retained under their mechanisms or legal obligations.

7. Website and service providers

Public documentation is hosted on Cloudflare Pages. When you visit, Cloudflare may process an IP address, request time, URL, browser and network-related information to deliver content, maintain security and operate its service. The website has no deliberately added advertising, visitor-analytics scripts or feedback-upload forms, and does not link visits to your local drafts.

Microsoft, Cloudflare, Apple and mail or sharing services you choose may operate infrastructure in different countries or regions and process information under their applicable terms. We do not represent every feature or safeguard offered by those providers as a feature or safeguard of this app. Their information is linked below.

The developer does not sell personal information or use voluntary feedback for advertising profiles. Feedback is not disclosed to unrelated parties except where necessary to provide the service you request, follow your instructions or meet legal requirements.

8. Your choices and privacy requests

You can choose not to send feedback, omit logs or attachments, and change system photo permissions. Manage local data in the app, or email fanevantech@outlook.com with “MultiLive privacy request” in the subject to exercise applicable rights such as access, correction, deletion or restriction of processing.

Describe your request and provide an email address or time range sufficient to locate the relevant correspondence. Identity documents are normally unnecessary; proportionate verification may be required. We usually respond within 15 business days, following a shorter deadline where applicable law requires one. A response does not mean every request is immediately completed. If more information is needed or a request cannot be fulfilled, we explain why and the applicable next steps.

The developer cannot remotely inspect or delete drafts that exist only on your device, or delete data controlled by another provider on its behalf. You may contact the relevant provider or the applicable data-protection authority with a request or complaint.

9. Security and minors

Use of and access to feedback information is limited to what is needed for investigation and support. No storage or transmission method can guarantee absolute security. Do not send passwords or unrelated sensitive information in feedback. The app does not provide a separate encrypted vault or a secure-erasure guarantee.

The app is not a service specifically directed at children. Minors should select media or send feedback with appropriate guidance from a parent or guardian. If you believe a child provided personal information without appropriate authorization, contact the mailbox above.

10. Policy changes

This policy may be revised when features or actual processing change. The page shows its version, effective date and update date, with a revision history. The offline edition included with the app may predate the website; use “Read the latest online policy” to check. Material changes will be communicated appropriately, and consent will be handled where required by law.

Simplified Chinese, Traditional Chinese and English editions are intended to express the same policy. Please contact the developer if you find a translation inconsistency.

Revision history

• 2026-10-03 — Initial edition covering on-device editing, voluntary feedback and the public documentation website.