隱私權政策
一句話版本：你寫的每一則回憶都存在你的手機上；有開 iCloud 的話，也存在你自己的 iCloud 裡。我們沒有伺服器，看不到、也收不到你寫的內容。
1. 我們是誰
回憶蛋（Memory Egg）由 Binlight Studio（以下稱「我們」）開發。聯絡方式見第 11 節。
2. 你的回憶存在哪裡
- 你寫的好事、難過的事、「有多難受」的程度、蛋、孵出的生物、好感度等，存在你手機上的 App 資料裡。
- 我們沒有帳號系統，也沒有自己的伺服器，不會把回憶內容上傳到我們這裡。
iCloud 同步
- iPhone、iPad 登入 iCloud 時，回憶蛋會把上面這些資料同步到你自己的 iCloud（Apple 的 CloudKit 私人資料庫），用同一個 Apple ID 的裝置會看到一樣的回憶，換手機、重裝 App 也能放回來。
- 這些資料放在你的 iCloud 帳號裡，由 Apple 依其隱私權政策保管，占用你自己的 iCloud 空間。我們看不到、也拿不到：私人資料庫只有你的 Apple ID 能讀，我們沒有任何伺服器或後台可以查看。
- 回憶的內容放在 CloudKit 的加密欄位；如果你開了 iCloud 的「進階資料保護」，這些內容是端對端加密的，連 Apple 都看不到。
- 不同步的：付費狀態（照 App Store）、這支手機的通知權限、Face ID／密碼鎖的設定、寫到一半的草稿。
- 不想同步的話，到 iPhone 的「設定 → 你的名字 → iCloud」關掉回憶蛋；之後回憶只存在這支手機。
- 沒開 iCloud、而且刪除 App 時，回憶會永久消失，我們也沒辦法幫你救回。
3. 匿名的使用紀錄與當機紀錄
為了知道哪些功能有人在用、App 有沒有當掉，iOS 正式版會透過 Google 的 Firebase Analytics 和 Firebase Crashlytics 傳送匿名的使用事件和當機紀錄。這些紀錄：
- 不含你寫的任何文字、不含「有多難受」的程度、不含姓名、Email、電話、精確位置、通訊錄、照片、廣告識別碼（IDFA）。
- 用 Firebase 隨機產生的匿名識別碼區分不同裝置，這組 ID 無法對應到你是誰；重新安裝 App 就會換一組。Firebase 可能由連線推估大概的國家或地區。
- 不用於廣告，不賣給任何人，不跨 App 追蹤你。
記錄的事件（只記「有發生」和固定的代碼）：
| 類型 | 事件 |
|---|---|
| 主功能 | 完成開場、記下一件好事、按「我又做了一次」、孵化、記下一件難過的事（只記「記了一件」，不記內容、難受程度、有沒有扭到蛋） |
| 陪伴 | 進陪伴頁、做完一個放鬆練習（記是哪一種練習）、翻開生物牌、打開小禮物、打開道具箱 |
| 季節與回顧 | 進季節活動頁（記是哪一季）、打開年度回顧、做了一張明信片（記樣式） |
| 購買 | 購買／訂閱面板出現（記是哪一種） |
| 錯誤 | 存檔失敗（記失敗類型） |
| 偏好 | 目前陪伴角色的種類、使用的主題 |
| 技術 | App 版本、系統版本、裝置型號、語言、當機紀錄 |
App Store 的系統也可能讓 Firebase 自動記下訂閱購買這件事（不含付款資訊）。
原始事件資料保留 2 個月後自動刪除（之後只剩不分個人的統計數字）；當機紀錄由 Crashlytics 保留 90 天。服務供應商：Google Firebase（Firebase 隱私與安全）。這些統計沒有開關：內容只有上面的代碼，不含你寫的任何東西。
4. 購買與訂閱
- 所有付費都透過 App Store 完成，付款資訊由 Apple 處理，我們拿不到你的信用卡或帳號資料。
- 我們使用 RevenueCat（隱私權政策）確認訂閱和購買狀態、恢復購買。它會收到匿名的購買紀錄與一組匿名 ID，不會收到你的回憶內容。
- 按「恢復購買」時，App 會在手機上讀你在 App Store 的訂閱紀錄，用來補回訂閱期間的道具；這些紀錄不會傳給我們。
- 取消訂閱、申請退款，請到 iPhone 的訂閱管理（或 App 的「設定 → 購買 → 管理訂閱」）和 Apple 的 reportaproblem.apple.com。
5. Face ID／密碼鎖
你可以在「設定 → 隱私」用 Face ID、Touch ID 或手機密碼鎖住 App。解鎖由 iPhone 系統處理，我們拿不到你的臉部、指紋資料或密碼。
6. 兒童
回憶蛋不是為 13 歲以下的兒童設計的，也不會刻意收集兒童的個人資料。因為我們不收集可以識別身分的資料，也沒有帳號，App 裡沒有兒童的個人資料可以查詢或刪除。如果你是家長而有疑問，請來信聯絡我們。
7. 心理健康聲明
回憶蛋是記錄生活和陪伴的工具，不是醫療或心理治療服務，不能取代專業協助。當你寫下的內容可能和傷害自己有關時，App 會在手機上（不連網）比對字詞，顯示一張求助建議的卡片：找一個信任的人說說話、先讓自己待在安全的地方、聯絡當地的心理支持資源；有立即的危險時，請聯絡當地的緊急服務。這個比對只在你的手機上進行，不會傳給我們。
8. 你的權利
- 刪除一則回憶：設定 → 隱私 → 刪除一則回憶。
- 清除所有資料：設定 → 隱私 → 清除所有資料。有 iCloud 同步時，你 iCloud 裡的回憶蛋資料會一起清掉，同一個 Apple ID 的其他裝置也會清掉。只刪除 App 不會清掉 iCloud 裡的；也可以到 iPhone 的「設定 → 你的名字 → iCloud → 管理帳號儲存空間 → 回憶蛋」刪除。
- 匿名使用紀錄：因為無法對應到你是誰，我們沒辦法單獨找出或刪除「你的」紀錄；保留期限見第 3 節。
- 依台灣《個人資料保護法》，你享有查詢、閱覽、複製、補充更正、停止蒐集處理利用及刪除等權利。如有需要，請來信。
9. 資料安全
資料存在 App 的沙盒裡，受作業系統保護；也可以用第 5 節的 Face ID／密碼鎖多一層保護。iCloud 同步由 Apple 的 CloudKit 處理，傳輸和儲存都經過加密（見第 2 節）。傳送匿名紀錄和購買狀態都走加密連線（HTTPS）。
10. 政策變更
政策有重大變更時，會在 App 裡通知，並更新這一頁的日期。
11. 聯絡我們
Privacy Policy
In short: every memory you write is kept on your phone, and in your own iCloud if you use it. We don't run any servers, and we never see or receive what you write.
1. Who we are
Memory Egg (回憶蛋) is made by Binlight Studio ("we"). See section 11 for how to reach us.
2. Where your memories are kept
- The good things and sad things you write, how sad something felt, your eggs, critters, and bond levels are stored in the app's data on your phone.
- There are no accounts and no servers of ours, so what you write is never uploaded to us.
iCloud sync
- When your iPhone or iPad is signed in to iCloud, Memory Egg syncs this data to your own iCloud (Apple's CloudKit private database). Devices using the same Apple ID see the same memories, and you can bring them back on a new phone or after reinstalling.
- The data sits in your iCloud account, kept by Apple under its privacy policy, and uses your own iCloud storage. We can't see or access it. Only your Apple ID can open it, and we have no servers or tools that could look at it.
- What you write is stored encrypted. If you turn on Advanced Data Protection for iCloud, it's also end-to-end encrypted, so not even Apple can read it.
- Not synced: purchases (the App Store keeps those), notification permission on this phone, the Face ID / passcode lock setting, and unfinished drafts.
- To stop syncing, go to your iPhone's Settings → your name → iCloud and turn off Memory Egg. Your memories then stay only on this phone.
- If iCloud is off and you delete the app, your memories are gone for good, and we have no way to bring them back.
3. Anonymous usage and crash reports
To learn which features people use and whether the app crashes, the iOS release version sends anonymous usage events and crash reports through Google's Firebase Analytics and Firebase Crashlytics. These reports:
- Never include anything you write, how sad something felt, your name, email, phone number, precise location, contacts, photos, or advertising identifier (IDFA).
- Use a random anonymous ID created by Firebase to tell devices apart. It can't be linked to who you are, and it changes if you reinstall the app. Firebase may estimate your rough country or region from the connection.
- Are never used for ads, never sold, and never used to track you across apps.
What gets recorded (only that something happened, plus fixed codes):
| Type | Events |
|---|---|
| Main features | Finished the intro, kept a good thing, tapped "I did it again," hatched an egg, wrote down something sad (only that one was written: not what it said, how sad it felt, or whether an egg came out) |
| Companion | Opened the companion page, finished a relaxing exercise (which one), drew cards, opened a little gift, opened the toy box |
| Seasons and review | Opened a seasonal event page (which season), opened the Year in Review, made a postcard (which style) |
| Purchases | A purchase or subscription sheet appeared (which one) |
| Errors | Saving failed (what kind of failure) |
| Preferences | Which kind of critter your companion is, which theme you use |
| Technical | App version, OS version, device model, language, crash reports |
The App Store may also let Firebase automatically record that a subscription was bought (without any payment details).
Raw event data is deleted automatically after 2 months (after that, only totals that aren't about any one person remain). Crashlytics keeps crash reports for 90 days. Provider: Google Firebase (Firebase privacy and security). There's no switch for these statistics: they only contain the codes above, never anything you write.
4. Purchases and subscriptions
- All payments go through the App Store. Apple handles payment details; we never receive your card or account information.
- We use RevenueCat (privacy policy) to check your subscription and purchases and to restore them. It receives an anonymous purchase record and an anonymous ID, never your memories.
- When you tap "Restore Purchases," the app reads your App Store subscription history on your phone to give back the toys from the months you were subscribed. That history is never sent to us.
- To cancel a subscription or ask for a refund, use your iPhone's subscription settings (or Settings → Purchases → Manage Subscription in the app) and Apple's reportaproblem.apple.com.
5. Face ID / passcode lock
You can lock the app with Face ID, Touch ID, or your phone's passcode in Settings → Privacy. Unlocking is handled by iOS; we never get your face, fingerprint, or passcode.
6. Children
Memory Egg is not designed for children under 13, and we don't knowingly collect children's personal information. Because we collect nothing that identifies anyone and there are no accounts, there's no child's personal information in the app to look up or delete. If you're a parent with questions, please email us.
7. A note about mental health
Memory Egg is a little tool for keeping good things and some company. It is not a medical or therapy service and can't replace professional help. If something you write may be about hurting yourself, the app checks words on your phone (offline) and shows a card with suggestions: talk to someone you trust, get to a safe place, and reach out to local support services. If you are in immediate danger, please contact your local emergency services. This check happens only on your phone and is never sent to us.
8. Your rights
- Delete a memory: Settings → Privacy → Delete a Memory.
- Clear all data: Settings → Privacy → Delete All Data. With iCloud sync on, Memory Egg's data in your iCloud is deleted too, and so is the data on your other devices with the same Apple ID. Deleting the app alone doesn't remove what's in iCloud. You can also delete it in Settings → your name → iCloud → Manage Account Storage → Memory Egg.
- Anonymous usage records: since they can't be linked to you, we can't find or delete "your" records on their own; see section 3 for how long they're kept.
- You may ask to access, copy, correct, stop the use of, or delete your personal information under Taiwan's Personal Data Protection Act. Please email us.
9. Security
Your data lives in the app's sandbox and is protected by the operating system. The Face ID / passcode lock in section 5 adds another layer. iCloud sync is handled by Apple's CloudKit, encrypted in transit and at rest (see section 2). Anonymous reports and purchase checks are sent over encrypted connections (HTTPS).
10. Changes to this policy
If this policy changes in an important way, we'll let you know in the app and update the date on this page.
11. Contact us
Email: binlight.support@gmail.com