隱私權政策 · Privacy Policy

中文

總則

本隱私權政策適用於在 Google Play 商店與 App Store 上架的行動應用程式 Tea Story（Android 套件名稱：com.teastory.chabary）， 以及官方網站與後台管理系統（合稱「本服務」）。

本服務由個人開發者 wiwilab（「我們」）開發與維運， 即 Google Play 商店資訊所列之開發人員。聯絡信箱： wiroger9595@gmail.com。

我們重視你的隱私權，本政策說明我們會蒐集哪些資料、如何使用，以及你擁有哪些權利。 使用本服務即表示你同意本政策所述之內容。

我們蒐集的資料

類型	內容	用途
帳號資料	電子郵件、密碼（加密儲存）、顯示名稱、電話（選填）	建立帳號、登入驗證、客服聯絡
訂單與物流資料	收件地址、聯絡電話、訂單內容與金額	處理訂單、安排出貨、客服查詢
付款資料	由第三方金流商 Stripe 直接處理；我們不會接觸或儲存你的完整卡號	完成付款
裝置與使用資料	裝置型號、作業系統版本、App 版本、當機日誌、使用行為（例如瀏覽了哪些頁面）	排除錯誤、改善產品體驗
概略位置	裝置的概略位置（城市等級，非精確定位）。僅在你開啟「在地連結」地圖、並同意系統的定位權限時才會取得	把地圖開在你附近的茶園、製茶廠與茶行
個人照片	你主動選擇上傳的頭像圖片。僅在你於帳號頁面選圖上傳時才會取得，我們不會讀取你相簿中的其他照片	在 App 內顯示你的頭像

位置資料只在你的裝置上使用，用來決定地圖一開始顯示的位置；我們不會將它傳送到我們的伺服器、 不會儲存、也不會提供給第三方。你可以拒絕定位權限或於系統設定中隨時關閉，地圖會改為顯示台灣全島， 其他功能不受影響。

頭像照片與位置資料不同：它會上傳並儲存在我們的圖片託管服務商（Cloudinary）， 以便你換裝置登入時頭像仍在。你可以隨時在帳號頁面移除頭像，或刪除整個帳號。

我們使用的第三方服務

• Stripe——處理金流付款，遵循 PCI-DSS 規範
• Sentry——蒐集當機與錯誤日誌，協助我們修復問題
• PostHog——匿名化的產品使用分析，協助我們了解功能使用狀況
• Cloudinary——儲存與提供你上傳的頭像圖片
• 雲端主機服務商——儲存資料庫與伺服器運算（資料儲存於雲端服務供應商的資料中心）

這些服務商僅會取得完成其功能所必要的資料，並各自受其隱私權政策規範。

資料保存與刪除

我們會保留帳號資料至你主動要求刪除帳號，或依法令要求之保存期限屆滿為止。 你可以隨時透過下方聯絡方式，要求我們刪除你的帳號與個人資料；若涉及已完成之交易紀錄， 我們可能因會計與法規要求需保留部分資料一段期間。

刪除步驟、以及哪些資料會刪除／保留，詳見 刪除帳號說明。

你的權利

• 查詢、更正你的個人資料
• 要求刪除你的帳號與個人資料
• 要求提供你的資料副本
• 撤回同意（撤回後可能無法繼續使用部分功能）

兒童隱私

本服務不是為 13 歲以下兒童設計，我們不會刻意蒐集其個人資料。若你發現有此情況，請與我們聯絡，我們會盡快處理刪除。

政策異動

我們可能不定期更新本政策，重大異動會於本頁面公告並更新「最後更新」日期。建議你定期回來查看。

ENGLISH

Overview

This Privacy Policy applies to Tea Story, the mobile application published on Google Play (package name: com.teastory.chabary) and the App Store, together with our website and admin dashboard (collectively, "the Service").

The Service is developed and operated by wiwilab, an individual developer ("we", "us") — the developer identified on the Google Play store listing. Contact: wiroger9595@gmail.com.

We take your privacy seriously. This policy explains what data we collect, how we use it, and the rights you have. By using the Service, you agree to this policy.

Information We Collect

Type	Details	Purpose
Account data	Email, password (stored hashed), display name, phone (optional)	Account creation, authentication, customer support
Order & shipping data	Shipping address, contact phone, order contents and totals	Order processing, fulfillment, support
Payment data	Handled directly by our payment processor, Stripe; we never see or store your full card number	Completing payment
Device & usage data	Device model, OS version, app version, crash logs, in-app usage (e.g. pages viewed)	Debugging, product improvement
Approximate location	Your device's approximate (city-level, not precise) location. Requested only when you open the Places map and grant the system location permission	Opening the map near the tea gardens, factories and tea shops around you
Photos	The profile photo you choose to upload. Read only when you pick an image on the account screen — we never access the rest of your photo library	Showing your avatar in the app

Location is used on your device only, to decide where the map opens. We do not transmit it to our servers, store it, or share it with third parties. You may decline the permission or revoke it in your system settings at any time; the map then simply opens on Taiwan, and nothing else in the app is affected.

Profile photos are different from location: they are uploaded to and stored with our image host (Cloudinary) so your avatar follows you to a new device. You can remove your avatar from the account screen, or delete your account entirely, at any time.

Third-Party Services We Use

• Stripe — payment processing, PCI-DSS compliant
• Sentry — crash and error reporting, to help us fix bugs
• PostHog — anonymized product usage analytics
• Cloudinary — storing and serving the profile photos you upload
• Cloud hosting providers — database and server infrastructure

These providers only receive the data necessary to perform their function, and are each governed by their own privacy policies.

Data Retention & Deletion

We retain account data until you request deletion, or as required by law. You may request deletion of your account and personal data at any time via the contact below. We may need to retain some transaction records for a period to meet accounting and legal obligations.

For the steps, and exactly what is erased versus kept, see how to delete your account.

Your Rights

• Access and correct your personal data
• Request deletion of your account and personal data
• Request a copy of your data
• Withdraw consent (some features may stop working if you do)

Children's Privacy

The Service is not intended for children under 13, and we do not knowingly collect their personal data. If you believe this has happened, please contact us so we can promptly delete it.

Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.