我們（「JotHero 營運團隊」或「我們」）嚴肅對待個人私隱。本聲明向《通告救星 JotHero》應用程式（「本程式」）的用戶解釋了我們收集、使用、披露及保護個人資料的政策，以及我們服務的免責條款。
個人與帳號資料： 當您透過電子郵件註冊，或使用 Apple / Google 登入時，我們收集電郵地址、加密密碼及授權 ID。
兒童與被照顧者資料： 若您輸入子女或被照顧者資料（姓名、學校、班別），即表示您為其法定監護人或已獲授權。本程式主要供家長、監護人或成人照顧者使用，我們不會故意向 13 歲以下兒童直接提供帳號註冊。
本機安全處理： 為保障最高級別的兒童私隱，您於「生活防呆清單」及「升學 Portfolio 自動生成器」中輸入的學童真實姓名，以及系統所生成的 PDF 履歷檔案，均嚴格受限於您的本機裝置內處理及儲存。在進行家庭進度同步時，系統僅會傳輸匿名的狀態代碼（如項目勾選狀態），絕對不會將兒童的真實姓名或 PDF 檔案上傳、收集或傳輸至我們的雲端伺服器。
雲端通告、AI 用量與財務資料： 上載通告時，我們收集 AI 辨識內容、金額以生成報表。我們亦會記錄您的 AI 掃描用量，以執行訂閱方案、管理一次性獎勵配額及防止濫用。
「風格市集」數位商品與授權資料： 當您在「風格市集」領取免費或購買付費數位商品（包括但不限於貼紙包、桌布、主題，皆為單次買斷制／非消耗型數位商品）時，我們透過 RevenueCat 及 Firebase 雲端資料庫記錄您的數位商品擁有權、授權狀態及家庭共享解鎖記錄，以實現跨裝置及符合資格之家庭成員間的同步顯示（受限於角色權限，詳見第 2 點）。
照顧者回報資料： 經授權的外傭/照顧者帳號可回報任務完成狀態及語言偏好，僅限家庭作用域內可見。
裝置權限存取（經您明確授權）：
自動收集的資料與推播 Token： 我們會收集設備資訊、推播通知 Token（如 FCM / Expo Push Token）以發送提醒。為防止推薦獎勵遭濫用，在您兌換邀請碼時，我們可能收集裝置指紋（Android ID / iOS IDFV）作防刷用途，絕不用於跨程式追蹤。
數據收集與第三方分析工具： 本應用程式使用了 Google Analytics for Firebase 及其他第三方分析工具，以協助我們了解用戶如何使用本應用程式，從而改善產品體驗。這些工具可能會收集您的匿名使用數據、裝置資訊（如裝置型號、操作系統版本）及隨機生成的識別碼。這些數據皆為匿名，不會與您的個人身份直接關聯。
訂閱與支付狀態： 我們記錄您的訂閱方案狀態（例如：免費試用、標準版、尊貴版）及風格市集商品解鎖狀態以啟用對應權限。我們絕不會儲存、處理或接觸您的信用卡號碼、銀行帳戶或任何支付資訊，所有付款流程與金流均由 Apple App Store 或 Google Play Store 及授權驗證服務商安全管理。
雲端基礎設施： 連接雲端後，資料將傳輸並加密儲存於 Google Cloud（Firebase Auth、Firestore、Storage、Functions 等服務），以實現跨裝置同步及「風格市集」購買狀態的跨裝置同步。
權限隔離與服務限制： 您的資料用於判斷「可見範圍」及「可用服務」，以確保照顧者（如外傭）之權限被嚴格隔離。系統將自動限制受限角色進入家長專區，且絕對限制該等帳號存取、同步或共享「風格市集」內之任何數位商品。離線時若無法確認角色，系統將採用最高級別的限制保護。
AI 處理： 圖片與文字將加密傳輸至第三方 AI 平台。我們透過 API 設定要求供應商實行「不保留資料作模型訓練」偏好。惟我們無法 100% 控制第三方之內部政策，請勿上傳極度敏感之個人身分證件。
支付與授權驗證服務： 我們整合了 RevenueCat 服務以管理應用程式內購及「風格市集」的購買收據與權限驗證。該服務商僅處理交易授權與狀態同步，絕不涉及您的個人財務或信用卡資料。
廣告與分析： 本應用程式整合了 Google AdMob 以提供廣告服務。廣告合作夥伴可能會使用技術（如 Cookie 或裝置廣告識別碼，如 iOS 的 IDFA 或 Android 的 AAID）來收集非個人識別資訊，以向您展示更符合您興趣的廣告。您隨時可以在裝置的系統設定中管理或撤銷廣告追蹤的授權。
跨境傳輸： 您的資料可能被傳輸至香港以外地區（如 Google、OpenAI 或 RevenueCat 伺服器所在地）並在當地處理。
法律要求之披露： 我們深明保護您私隱的重要性。然而，為了遵守適用法律、法規、法律程序或政府強制要求（如法庭命令或警方搜查令），或為了保護開發者、用戶或公眾的生命財產安全，我們有法律義務及權利在必要時查閱、保留或披露相關資料。在此等法定情況下之資料配合，開發者將獲完全豁免相關之私隱違約責任。
業務轉移： 若我們涉及合併、收購、資產出售或破產重組，您的個人資料可能會作為商業資產被轉移。我們將在資料轉移並受不同私隱政策約束前發出通知。
您可以隨時透過 App 內行使查閱、更正或刪除權利。此外，除了在應用程式內直接操作外，您亦可隨時透過外部網頁提出申請。如需在不登入應用程式的情況下申請刪除您的帳戶及所有相關雲端資料，請直接發送電郵至 hello@jothero.com。我們收到電郵核實身份後，將會啟動相同的 30 日永久清除程序。
帳號刪除的實際範圍與 30 日清除承諾： 若您為家庭成員（非戶主），選擇「刪除帳號」將立即抹除您的登入資料、個人設定及推播 Token，您所屬家庭的共用通告及「風格市集」家庭授權記錄將不受影響並繼續保留。若您為家庭戶主，刪除帳號將導致家庭解散；為保障系統安全與落實資料最小化，與該解散家庭相關的所有雲端通告及圖片資料（不包含已永久綁定之風格市集數位商品授權），將進入系統的自動清理隊列，並保證於 30 日內徹底且永久清除。
登出清除： 每次登出時，系統將自動清除本機上的敏感快取（如外傭同意書狀態）。
本機自動清理： 開啟後，程式將自動清理手機內超過 3 個月的過期通告圖片快取。
雲端資料定期清理 (分級保留機制)： 為有效控制儲存空間並提供良好的歷史查閱體驗，我們的伺服器設有每日自動清理機制。系統會根據家庭戶主的訂閱方案或通告建立時的會籍狀態，自動且永久刪除佔用雲端空間的「通告圖片檔案」，但會為您保留通告的基本文字紀錄以便隨時查閱歷史資訊。具體分級保留期限如下：
數位資產保留特例： 「風格市集」已解鎖之付費或免費數位商品（如貼紙、桌布、主題）授權記錄將隨帳號永久保留，不受上述通告圖片清理機制影響。
此外，所有無主資料（例如無效邀請碼等）將被定期掃描並徹底刪除。
「風格市集」數位商品與應用程式內購免責條款：
第三方連結與聯盟行銷聲明： 本應用程式的「週末秘書」或其他頁面中，可能包含前往第三方網站的連結。部分連結為聯盟行銷連結，這意味著當您點擊並透過該連結完成購買時，我們可能會獲得少許佣金，而這絕對不會影響您所需支付的最終價格。本程式僅提供活動資訊整合與推薦，並不參與您與第三方平台之間的交易。任何因購票、退款、活動更改或取消而產生的爭議，均由該第三方平台全權負責，開發者及本公司恕不承擔任何直接或間接的任何財務、商業或法律賠償責任。
AI 辨識與翻譯準確度： 「AI 智能掃描與翻譯」僅為輔助工具，可能會出現嚴重辨識或翻譯錯誤。用戶有絕對責任自行核對實體通告內容並與照顧者口頭確認。因依賴本程式而導致的任何意外、人身傷害、醫療疏忽、錯過限期、財務損失或衍生損害，開發者及本公司概不承擔任何法律責任。完整責任限制請參閱《服務條款》。
訂閱與自動續費機制： 本程式提供的訂閱方案（含免費試用）均透過 Apple App Store 或 Google Play Store 進行管理。若您參與免費試用，試用期滿後系統將根據平台設定自動轉為付費訂閱，除非您在試用期結束前至少 24 小時於裝置系統設定中取消訂閱。我們無法代您執行管理、取消訂閱或退款操作。用戶有絕對責任自行透過 Apple 或 Google 的帳戶設定頁面管理其訂閱狀態。
費用與扣款爭議： 用戶同意，任何關於訂閱扣款、退款申請或收費爭議，必須直接聯繫 Apple 或 Google 支援部門處理。因用戶未適時取消訂閱而產生的費用，開發者及本公司概不承擔任何退款責任。
數據安全之絕對免責： 我們採用業界標準保護您的資料。然而，互聯網上的數據傳輸或雲端儲存方法絕非 100% 安全。我們無法保證其絕對的安全性。對於因第三方駭客攻擊、惡意軟件、不可抗力或非我們故意疏忽而導致的任何資料外洩、遺失或損壞，開發者及本公司概不承擔任何法律及財務責任。
任何關於本私隱政策的爭議，均受香港法律管轄。 本私隱政策及您對本程式的使用，均受香港特別行政區法律專屬管轄，並按其解釋，排除其衝突法原則之適用。您同意，任何因本私隱政策引起或與之相關的法律訴訟或爭議，均必須提交至香港特別行政區之法院作為專屬管轄法院。
如本私隱政策的中、英文版本之間有任何差異，概以英文版本為準。
如有問題，請聯絡：hello@jothero.com
We ("JotHero Team", "we", or "our") take your privacy seriously. This Privacy Policy explains our practices regarding data collection and our limitation of liability.
Personal & Account Data: Email, hashed passwords, and Auth IDs.
Children's Data: By inputting dependents' details, you confirm you are the legal guardian or authorized to do so. The App is primarily for parents, guardians, and adult caregivers; we do not knowingly offer accounts directly to children under 13.
Local-First Processing (Strict Privacy): To ensure the highest level of children's privacy, the real names of the children entered in the "Back-to-School Checklist" and "Portfolio Auto-Generator", as well as the generated PDF files, are strictly processed and stored locally on your device. When syncing checklist progress with family members, the system only transmits anonymous status codes (e.g., checkbox states). We NEVER upload, collect, or transmit children's real names or the generated PDF files to our cloud servers.
Cloud Notices & AI Usage: We collect AI-recognized content and track AI scanning usage for subscription management, one-time reward quota management, and abuse prevention.
Style Market & Digital Entitlement Data: When you claim free or purchase paid digital goods (including but not limited to sticker packs, wallpapers, and themes as one-time non-consumable digital goods) in the "Style Market", we record your digital goods ownership, entitlement status, and family sharing unlock records via RevenueCat and Firebase to sync across devices and eligible family members (subject to role-based access restrictions, see Section 2). We never store your payment information.
Caregiver Reports: Authorized helpers can report task completions and language preferences.
Device Permissions (With Consent):
Auto-Collected Data & Tokens: We collect Push Tokens (FCM/Expo) for reminders. To prevent referral fraud, we may collect device fingerprints (Android ID/IDFV) strictly during code redemption, not for cross-app tracking.
Data Collection & Analytics: This application uses Google Analytics for Firebase and other third-party analytics tools to help us understand how users interact with the app, thereby improving the product experience. These tools may collect anonymous usage data, device information (such as device model and OS version), and randomly generated identifiers. This data is strictly anonymous and is not directly linked to your personal identity.
Subscription & Payment Status: We record your subscription plan status (e.g., free trial, Standard, Premium) and Style Market digital asset unlock statuses to enable the corresponding features and entitlements. We never store, process, or have access to your credit card numbers, bank account details, or any payment information. All payment processing and billing are securely managed by the Apple App Store or Google Play Store and authorized validation service providers.
Cloud Infrastructure (Google Firebase): Data is encrypted and processed via Google Firebase for cross-device syncing, including "Style Market" purchase synchronization across family members.
Permission Isolation & Service Restrictions (RBAC): Your data is used to determine the "Visibility Scope" and "Accessible Services" to ensure that caregivers (e.g., domestic helpers) are strictly isolated. The system will automatically restrict restricted roles from entering the Parents' Zone and absolutely restrict such accounts from accessing, syncing, or sharing any digital goods within the "Style Market". When offline and the role cannot be verified, the system defaults to the highest level of restriction to protect privacy.
AI Processing (OpenRouter): Data is sent to third-party AI platforms. We request Zero Data Retention via API settings so data isn't used for training. However, we cannot 100% control third-party internal policies; please do not upload highly sensitive ID documents.
Purchase & Entitlement Verification (RevenueCat): We utilize RevenueCat to manage in-app purchases (IAPs) and "Style Market" receipt validation and entitlement status syncing. This service processes purchase transactions without accessing your credit cards or private financial data.
Ads (Google AdMob): We integrate Google AdMob to provide advertising services. Our advertising partners may use technologies (such as Cookies or device advertising identifiers, like IDFA on iOS or AAID on Android) to collect non-personally identifiable information in order to show you ads that are more relevant to your interests. You can manage or revoke your ad tracking consent at any time in your device's system settings.
Cross-Border Transfer: Your data may be processed outside of Hong Kong (such as Google, OpenAI, or RevenueCat server locations).
Legal Requirements: We deeply understand the importance of protecting your privacy. However, to comply with applicable laws, regulations, legal processes, or enforceable governmental requests (such as court orders or police warrants), or to protect the rights, property, and safety of the Developer, our users, or the public, we have the legal obligation and right to access, preserve, and disclose relevant data when necessary. In such statutory circumstances, the Developer shall be fully exempt from any liability for breach of privacy.
Business Transfers: If we are involved in a merger, acquisition, asset sale, or bankruptcy restructuring, your personal data may be transferred as a business asset. We will provide notice before your personal information is transferred and becomes subject to a different Privacy Policy.
In addition to the in-app deletion option, you can also request account and data deletion externally. If you wish to delete your account and all associated cloud data without signing into the app, please email us directly at hello@jothero.com. Upon verification, we will initiate the same 30-day permanent clearance process.
Account Deletion Scope & 30-Day Clearance: If you are a family member (non-owner), deleting your account immediately removes your login, settings, and tokens; shared family notices and Style Market family entitlements will remain unaffected. If you are a Family Owner, deleting your account dissolves the family. To ensure data minimization, all cloud notices and images associated with the dissolved family (excluding permanently bound digital asset entitlements from the Style Market) will enter an automated cleanup queue and are guaranteed to be permanently and thoroughly deleted within 30 days.
Logout Clearance: Sensitive local caches are cleared upon logout.
Local Auto-Cleanup: The App can auto-clear image caches older than 3 months on your device.
Cloud Data Auto-Cleanup (Tiered Retention): To manage storage efficiently while maintaining a good user experience for historical searches, our system runs a daily automated cleanup. The system will automatically and permanently delete the storage-heavy "image files" of expired notices based on the Family Owner's subscription tier or member status at creation, while retaining the basic text metadata for your records. The specific tiered retention periods are as follows:
Digital Asset Exception: Unlocked paid or free digital asset entitlement records (such as stickers, wallpapers, and themes) in the "Style Market" are permanently retained with the account and are exempt from the notice image cleanup mechanism.
Furthermore, all orphaned data (e.g., invalid invite codes) will be periodically scanned and permanently deleted.
Disclaimer for "Style Market" Digital Goods and In-App Purchases:
Third-Party Links & Affiliate Disclosure: Sections such as the "Weekend Secretary" may contain links to third-party websites (e.g., Klook). Some of these are affiliate links, which means we may earn a small commission if you click through and make a purchase. This will absolutely not affect the final price you pay. The App strictly provides activity information and recommendations and is not involved in transactions between you and third-party platforms. Any disputes regarding ticket purchases, refunds, event changes, or cancellations are solely the responsibility of the third-party platform. The developer and our company assume no direct or indirect financial, commercial, or legal liability.
AI Recognition & Translation Accuracy: The App's AI features are purely assistive tools and may produce severe errors. Users hold absolute responsibility to manually verify original notices and verbally confirm details with caregivers. The developer holds NO liability for any accidents, personal injury, medical negligence, financial losses, missed deadlines, or consequential damages resulting from reliance on the App. Refer to the Terms of Service for full liability limitations.
Subscriptions & Auto-Renewal: All subscription plans offered by the App (including free trials) are managed through the Apple App Store or Google Play Store. If you participate in a free trial, your subscription will automatically convert to a paid subscription at the end of the trial period in accordance with the platform's settings, unless you cancel at least 24 hours before the trial expires via your device's system settings. We cannot manage, cancel, or process refunds on your behalf. Users bear sole responsibility for managing their subscription status through your Apple or Google account settings.
Billing & Payment Disputes: You agree that any disputes regarding subscription charges, refund requests, or billing issues must be resolved directly with Apple or Google support. The developer and our company assume no refund liability for fees incurred due to your failure to cancel a subscription in a timely manner.
Absolute Disclaimer of Data Security: We use industry-standard measures to protect your data. However, no method of transmission over the internet or method of cloud storage is 100% secure. We cannot guarantee its absolute security. The developer and our company assume absolutely NO legal or financial liability for any data breaches, loss, or corruption caused by third-party cyberattacks, malware, force majeure, or events other than our willful misconduct.
Simply put: Any disputes regarding this Privacy Policy are strictly governed by the laws of Hong Kong. This Privacy Policy and your use of the App shall be exclusively governed by and construed in accordance with the laws of the Hong Kong Special Administrative Region, without regard to its conflict of law provisions. You agree that any legal action or dispute arising out of or relating to this Privacy Policy must be submitted to the exclusive jurisdiction of the courts of the Hong Kong Special Administrative Region.
In the event of any discrepancy between the English and Chinese versions of this Privacy Policy, the English version shall prevail.
If you have any questions, please contact: hello@jothero.com