食跡 MomentsPrivacy Policy隱私權與個人資料保護政策
Last updated: 24 August 2026最後更新：2026 年 8 月 24 日
1. Who we are1. 我們是誰（蒐集者）
食跡 Moments ("Moments", "the app", "we") is operated by Jen Ho Tai, an individual developer based in Taichung, Taiwan. For any privacy question or request, contact us at foodprintmoments@gmail.com.食跡 Moments（以下稱「本 App」「我們」）由個人開發者 Jen Ho Tai 營運，所在地為台灣台中。任何隱私相關問題或請求，請來信 foodprintmoments@gmail.com。
2. The short version2. 重點摘要
- We collect what you give us (your account, the meals and places you log, your messages) and, with your permission, your device location.我們蒐集你提供的資料（帳號、你記錄的餐點與地點、你的訊息），並在你同意下取得裝置位置。
- We use it to run the app's features — your map, logbook, circles, and the plan-a-dinner flow.我們用這些資料提供 App 功能 — 你的地圖、手帳、圈子與聚餐決策流程。
- We do not sell your personal data and we don't use advertising trackers.我們不販售你的個人資料，也不使用廣告追蹤工具。
- Place look-ups use Google Maps/Places, and the map background is drawn with OpenStreetMap tiles.餐廳查詢會使用 Google 地圖／Places，地圖底圖則以 OpenStreetMap 圖磚繪製。
- You can ask us to access, correct, or delete your data at any time — including deleting your whole account.你可以隨時要求查詢、更正或刪除你的資料 — 包含刪除整個帳號。
3. What we collect3. 我們蒐集的資料類別
Account帳號資料
When you sign up, we collect your email address, a password (stored only as a secure hash by our authentication provider), and an optional display name and profile photo. If you sign in with Google or Apple (Sign in with Apple), we receive a basic profile (such as name and email) from your chosen provider.當你註冊時，我們蒐集你的電子郵件、密碼（僅由我們的驗證服務商以安全雜湊形式儲存），以及選填的顯示名稱與大頭貼。若你使用 Google 或 Apple（透過 Apple 登入）登入，我們會從你選擇的登入服務商取得基本資料（例如姓名與電子郵件）。
Content you create你建立的內容
The places you save, the meals you log (ratings, cuisine and vibe tags, notes, and any photos you add), and any share links you create for a moment.你收藏的地點、你記錄的餐點（評分、菜系與氛圍標籤、筆記，以及你加入的照片），以及你為紀錄建立的分享連結。
Social activity社群活動
Your friends, the circles you create or join, the messages you send in circle chats and direct messages, reactions, poll votes, dinner invites, and short-lived "hungry" broadcasts.你的好友、你建立或加入的圈子、你在圈子聊天與私訊中傳送的訊息、按讚回應、投票、聚餐邀請，以及短時效的「想吃」廣播。
Location位置資料
With your permission, we use your device location to centre the map, find nearby places, and tag where a moment happened. Location is opt-in — you can turn it off in your device settings or in the app at any time.在你同意下，我們使用你的裝置位置來定位地圖、尋找附近地點，並標記用餐地點。位置功能採同意制（opt-in） — 你可隨時於裝置設定或 App 內關閉。
Preferences & dietary notes偏好與飲食備註
Your language, theme, default map area, and any dietary notes you choose to enter. These notes are optional; please do not enter medical or health information (such as allergies framed as medical conditions) — treat them as general preferences.你的語言、主題、預設地圖區域，以及你選填的飲食備註。此欄位為選填；請勿填入醫療或健康資訊（例如以病症形式描述的過敏），請將其視為一般偏好。
Push notifications推播通知
If you turn on notifications, we store a device push token (issued by Apple or Google) so we can deliver notifications such as friend requests and dinner invites to this device. The token identifies your device install, not your identity. Turning notifications off, signing out, or deleting your account removes it. Notifications are opt-in.若你開啟通知，我們會儲存由 Apple 或 Google 核發的裝置推播權杖（push token），以便將好友邀請、聚餐邀約等通知傳送到此裝置。此權杖識別的是裝置安裝，而非你的身分。關閉通知、登出或刪除帳號後即會移除。通知功能採同意制（opt-in）。
Feedback you send us你送出的意見回饋
If you use the in-app Send feedback form, we store the message you write and, if you are signed out, the optional email address you give us so we can reply. To make a report actionable we also attach the app version, platform, language, and the screen you were on when you wrote it. Feedback is used only to fix problems and improve the app.若你使用 App 內的意見回饋表單，我們會儲存你填寫的訊息內容；若你在未登入狀態下送出，也會儲存你選填的電子郵件，以便回覆你。為了讓回報可被處理，我們同時附上送出當下的 App 版本、平台、語言與所在畫面。意見回饋僅用於修正問題與改善 App。
Reports and blocks檢舉與封鎖紀錄
If you report a person or a piece of content, we store what was reported, the reason you chose, and who filed it, so a moderator can review it. If you block someone, we store that block so we can hide their content from you. We keep these records after the reported content is removed, because enforcing our zero-tolerance policy and handling repeat offenders depends on them.當你檢舉某位使用者或某則內容時，我們會儲存被檢舉的對象、你選擇的檢舉理由，以及提出檢舉的人，供審核人員處理。當你封鎖某人時，我們會儲存該封鎖設定，以便為你隱藏對方的內容。即使被檢舉的內容已被移除，我們仍會保留這些紀錄，因為執行零容忍政策與處理累犯需要它們。
How you use the app你的使用行為
We record a small number of product-interaction events about the group-decision flow — when a place is added as a candidate, when a vote is cast, and when a group finalises or un-finalises a decision — together with your user ID and the circle involved. We use these only to understand whether the decision feature actually works. They are not used for advertising, are not shared with data brokers, and are not used to track you across other companies’ apps or websites.我們會記錄少量與聚餐決策流程有關的產品互動事件 — 加入候選餐廳、投票，以及群組完成或取消決定 — 並一併記錄你的使用者 ID 與相關圈子。這些資料僅用於了解決策功能是否真的有效。它們不會用於廣告、不會提供給資料仲介，也不會用於跨其他公司的 App 或網站追蹤你。
Stored on your device儲存在你裝置上的資料
We use your browser/device local storage to keep you signed in and to remember your consent, language, theme, and onboarding progress. To make the app work in places with poor reception, we also keep an offline copy of your own recently viewed content (your moments, places, and friends list) on your device; it is removed when you sign out or delete the app. We do not use third-party advertising or analytics cookies.我們使用你瀏覽器／裝置的本機儲存（local storage）來維持登入狀態，並記住你的同意、語言、主題與導覽進度。為了讓 App 在收訊不佳的地方也能使用，我們也會在你的裝置上保留你自己近期瀏覽內容的離線副本（你的食跡、地點與好友清單）；登出或刪除 App 後即會移除。我們不使用第三方廣告或分析 Cookie。
Who can see your content誰能看到你的內容
Your @username is public: any signed-in user can find you by it, and it appears on your shareable identity card. Your display name is not unique and does not have to be unique. The rest of your profile (avatar and basic stats) is visible to people you are friends with and to members of any circle you join. Anyone who has your friend code or QR code can send you a friend request, so only share it with people you want to be reachable by. Moments you log are visible to your friends; anything you post in a circle chat or direct message is visible to the other participants. We don't publish your content to the open web unless you create a share link for it (see below).你的 @帳號名稱為公開資訊：任何已登入的使用者都可以用它找到你，它也會出現在你可分享的身分卡上。你的顯示名稱則不需要是唯一的。個人檔案的其餘部分（大頭貼與基本統計）會對你的好友、以及你加入的任何圈子成員顯示。任何持有你好友碼或 QR code 的人都可以向你送出好友邀請，因此請只分享給你願意被聯繫的對象。你記錄的食跡會對你的好友顯示；你在圈子聊天或私訊中張貼的內容，會對其他參與者顯示。除非你為某則紀錄建立分享連結（見下方），否則我們不會將你的內容公開到網路上。
4. Why we use it4. 蒐集與利用目的
- To create and secure your account and sign you in.建立並保護你的帳號、提供登入。
- To run the core features: your map, logbook, circles, friends, activity feed, and the plan-a-dinner (group → agree → book) flow.提供核心功能：地圖、手帳、圈子、好友、動態，以及聚餐決策（揪團 → 共識 → 訂位）流程。
- To help your group decide: we detect when the group has agreed on a place from your reactions and poll votes, and then show booking or contact links for it.協助你的群組做決定：我們依你們的按讚回應與投票判斷群組是否對某家餐廳達成共識，並顯示其訂位或聯絡連結。
- To enrich place details (hours, address) via Google Maps/Places.透過 Google 地圖／Places 補充餐廳資訊（營業時間、地址）。
- To review reports, enforce our zero-tolerance policy, and act on feedback you send us.審核檢舉、執行零容忍政策，並依你送出的意見回饋改善服務。
- To measure whether the group-decision feature works, using the product-interaction events described above.透過上述產品互動事件，衡量聚餐決策功能是否有效。
- To contact you about the beta (including the email you submit on this site) and to respond to your requests.就測試版與你聯絡（包含你在本網站提交的電子郵件），並回應你的請求。
5. Who we share it with (service providers)5. 我們的資料處理服務商
We don't sell your data. We share it only with the service providers that make the app work. Some are located outside Taiwan, so your data may be transferred and processed abroad (PDPA §21):我們不販售你的資料，僅與讓 App 得以運作的服務商共用。部分服務商位於台灣境外，故你的資料可能被傳輸並於境外處理（個資法第 21 條）：
| Provider服務商 | What it handles處理內容 |
|---|---|
| Supabase | Database, authentication, and file (photo) storage. Hosted on Amazon Web Services cloud infrastructure, which may be located outside Taiwan.資料庫、帳號驗證與檔案（照片）儲存。建置於 Amazon Web Services 雲端，伺服器可能位於台灣境外。 |
| Google (Google LLC) | Google Sign-In, and Google Maps/Places for place look-ups.Google 登入，以及用於餐廳查詢的 Google 地圖／Places。 |
| Apple (Apple Inc.) | Sign in with Apple, and App Store delivery of the app to your device.透過 Apple 登入，以及經由 App Store 將本 App 派送到你的裝置。 |
| Have I Been Pwned (Cloudflare) | At sign-up, checks whether your chosen password has appeared in a known data breach. Only a short anonymised hash prefix is sent (k-anonymity) — never your password or email.在註冊時檢查你選擇的密碼是否曾出現在已知的資料外洩事件中。僅傳送一段匿名化的雜湊前綴（k-匿名性）— 絕不傳送你的密碼或電子郵件。 |
| CARTO / OpenStreetMap | Serves the map background tiles. Receives only the approximate map view coordinates needed to return tiles — no account data.提供地圖底圖圖磚。僅接收回傳圖磚所需的概略地圖視野座標 — 不含任何帳號資料。 |
| Formspree | Processes the beta-signup form on this website (your email and optional name). Located in the United States.處理本網站的測試版報名表單（你的電子郵件與選填姓名）。位於美國。 |
We may also disclose data if required by law. We share your information with other users only as you direct (for example, posts you make in a circle, or moments you mark as public).若法律要求，我們可能依法揭露資料。我們僅依你的指示與其他使用者分享你的資訊（例如你在圈子中的貼文，或你標記為公開的紀錄）。
6. How long we keep it6. 保存期間
We keep your account and content for as long as your account is active. When you ask us to delete your account, we remove your personal data from our live systems as soon as practicable and within 7 business days, and from routine backups shortly thereafter.在你的帳號存續期間，我們會保存你的帳號與內容。當你要求刪除帳號時，我們會儘速並於 7 個工作日內 自運作系統移除你的個人資料，並於其後不久自例行備份移除。
7. Your rights & how to use them7. 你的權利與行使方式
Under Taiwan's Personal Data Protection Act you may, at no improper cost, ask us to: review and get a copy of your data; correct it; stop collecting, processing, or using it; and delete it.依個人資料保護法第 3 條，你可（於不收取不當費用之前提下）要求我們：查詢、閱覽並取得你資料的複本；更正；停止蒐集、處理或利用；以及刪除。
To delete your account: in the app, go to Settings → Account → Delete account and confirm. This permanently and irreversibly deletes your account and all associated personal data — your profile, logged moments, saved places, circles, messages, reactions, and uploaded photos — from our live systems straight away, and from routine backups shortly thereafter. If you can't access the app, you can instead email foodprintmoments@gmail.com from your account email with "Delete my account" in the subject, and we'll handle it within 7 business days.刪除帳號：請於 App 內前往 「設定 → 帳戶 → 刪除帳號」 並確認。此操作會將你的帳號及所有相關個人資料（個人檔案、記錄的片刻、收藏的地點、圈圈、訊息、互動與上傳的相片）立即自運作系統永久且不可復原地刪除，並於其後不久自例行備份移除。若你無法登入 App，亦可改以你的帳號信箱寄信至 foodprintmoments@gmail.com，主旨註明「Delete my account」，我們將於 7 個工作日內處理。
8. Children8. 兒童
食跡 Moments is not directed to children under 13, and we do not knowingly collect their personal data. You must be old enough to consent under the law where you live. If you believe a child has given us data, contact us and we'll delete it.食跡 Moments 並非以未滿 13 歲兒童為對象，我們也不會在知情下蒐集其個人資料。你必須達到你居住地法律所要求的同意年齡。若你認為有兒童向我們提供了資料，請與我們聯絡，我們會予以刪除。
9. How we protect your data9. 我們如何保護你的資料
Data is encrypted in transit (HTTPS), passwords are stored only as secure hashes by our authentication provider, and access to your data is restricted by row-level security rules so users can only reach what they're allowed to. At sign-up we also check your chosen password against a public breach database by sending only a short anonymised hash prefix (k-anonymity) — your password itself never leaves your device. Note that profile avatars and shared "moment-page" images are served from public URLs. Your food photos and chat photos are private by default — but if you create a share link for a moment, we generate a card image containing that photo and host it at a public, unguessable URL so the link can preview. You can revoke a share link at any time, which stops the page from loading. No method of storage or transmission is 100% secure, but we work to protect your information and to address issues promptly.資料於傳輸過程加密（HTTPS），密碼僅由我們的驗證服務商以安全雜湊儲存，並透過列級安全（row-level security）規則限制資料存取，使每位使用者只能取得其被授權的內容。在註冊時，我們亦會以僅傳送一段匿名化雜湊前綴（k-匿名性）的方式，比對你選擇的密碼是否出現在公開的外洩資料庫中 — 你的密碼本身絕不離開你的裝置。請注意，個人大頭貼與分享的「片刻頁面」圖片會透過公開網址提供。你的食物照片與聊天照片預設為私密，但當你為某則紀錄建立分享連結時，我們會產生一張含有該照片的卡片圖片，並存放在一個公開、無法猜測的網址，以便連結能顯示預覽。你可以隨時撤銷分享連結，撤銷後該頁面即無法載入。沒有任何儲存或傳輸方式是 100% 安全，但我們會盡力保護你的資訊並儘速處理問題。
10. Changes to this policy10. 政策異動
As 食跡 Moments grows, we may update this policy. We'll change the "last updated" date above and, for material changes, give notice in the app or by email.隨著食跡 Moments 發展，我們可能更新本政策。我們會更新上方的「最後更新」日期；如有重大變更，將於 App 內或以電子郵件通知。
11. Contact11. 聯絡我們
Jen Ho Tai · Taichung, Taiwan台灣台中 · foodprintmoments@gmail.com