我們（「JotHero 營運團隊」或「我們」）嚴肅對待個人私隱。本聲明向《通告救星 JotHero》應用程式（「本程式」）的用戶解釋了我們收集、使用、披露及保護個人資料的政策，以及我們服務的免責條款。
個人與帳號資料： 當您透過電子郵件註冊，或使用 Apple / Google 登入時，我們收集電郵地址、加密密碼及授權 ID。
兒童與被照顧者資料： 若您輸入子女或被照顧者資料（姓名、學校、班別），即表示您為其法定監護人或已獲授權。本程式主要供家長、監護人或成人照顧者使用，我們不會故意向 13 歲以下兒童直接提供帳號註冊。
本機安全處理： 為保障最高級別的兒童私隱，您於「生活防呆清單」及「升學 Portfolio 自動生成器」中輸入的學童真實姓名，以及系統所生成的 PDF 履歷檔案，均嚴格受限於您的本機裝置內處理及儲存。在進行家庭進度同步時，系統僅會傳輸匿名的狀態代碼（如項目勾選狀態），絕對不會將兒童的真實姓名或 PDF 檔案上傳、收集或傳輸至我們的雲端伺服器。
雲端通告、AI 用量與財務資料： 上載通告時，我們收集 AI 辨識內容、金額以生成報表。我們亦會記錄您的 AI 掃描用量，以執行訂閱方案、管理一次性獎勵配額及防止濫用。
照顧者回報資料： 經授權的外傭/照顧者帳號可回報任務完成狀態及語言偏好，僅限家庭作用域內可見。
裝置權限存取（經您明確授權）：
自動收集的資料與推播 Token： 我們會收集設備資訊、推播通知 Token（如 FCM / Expo Push Token）以發送提醒。為防止推薦獎勵遭濫用，在您兌換邀請碼時，我們可能收集裝置指紋（Android ID / iOS IDFV）作防刷用途，絕不用於跨程式追蹤。
數據收集與第三方分析工具： 本應用程式使用了 Google Analytics for Firebase 及其他第三方分析工具，以協助我們了解用戶如何使用本應用程式，從而改善產品體驗。這些工具可能會收集您的匿名使用數據、裝置資訊（如裝置型號、操作系統版本）及隨機生成的識別碼。這些數據皆為匿名，不會與您的個人身份直接關聯。
訂閱與支付狀態： 我們記錄您的訂閱方案狀態（例如：免費試用、標準版、尊貴版）以啟用對應權限。我們絕不會儲存、處理或接觸您的信用卡號碼、銀行帳戶或任何支付資訊，所有付款流程與金流均由 Apple App Store 或 Google Play Store 安全管理。
雲端基礎設施 (Google Firebase)： 連接雲端後，資料將傳輸並加密儲存於 Google Cloud（Firebase Auth、Firestore、Storage、Functions 等服務），以實現跨裝置同步。
權限隔離： 您的資料用於判斷「可見範圍」，確保照顧者（如外傭）權限被嚴格隔離。離線時若無法確認角色，系統將自動限制進入家長專區。
AI 處理 (OpenRouter)： 圖片與文字將加密傳輸至第三方 AI 平台。我們透過 API 設定要求供應商實行「不保留資料作模型訓練 (Zero Data Retention)」偏好。惟我們無法 100% 控制第三方之內部政策，請勿上傳極度敏感之個人身分證件。
廣告與分析 (Google AdMob)： 本應用程式整合了 Google AdMob 以提供廣告服務。廣告合作夥伴可能會使用技術（如 Cookie 或裝置廣告識別碼，如 iOS 的 IDFA 或 Android 的 AAID）來收集非個人識別資訊，以向您展示更符合您興趣的廣告。您隨時可以在裝置的系統設定中管理或撤銷廣告追蹤的授權。
跨境傳輸： 您的資料可能被傳輸至香港以外地區（如 Google 或 OpenAI 伺服器所在地）並在當地處理。
您可以隨時透過 App 內行使查閱或刪除權利。此外，除了在應用程式（App）內直接操作外，您亦可隨時透過外部網頁提出申請。如需在不登入應用程式的情況下申請刪除您的帳戶及所有相關雲端資料，請直接發送電郵至 hello@jothero.com。我們收到電郵核實身份後，將會啟動相同的 30 日永久清除程序。
帳號刪除的實際範圍與 30 日清除承諾： 若您為家庭成員（非戶主），選擇「刪除帳號」將立即抹除您的登入資料、個人設定及推播 Token，您所屬家庭的共用通告將不受影響並繼續保留。若您為家庭戶主，刪除帳號將導致家庭解散；為保障系統安全與落實資料最小化，與該解散家庭相關的所有雲端通告及圖片資料，將進入系統的自動清理隊列，並保證於 30 日內徹底且永久清除。
登出清除： 每次登出時，系統將自動清除本機上的敏感快取（如外傭同意書狀態）。
本機自動清理： 開啟後，程式將自動清理手機內超過 3 個月的過期通告圖片快取。
雲端資料定期清理 (分級保留機制)： 為有效控制儲存空間並提供良好的歷史查閱體驗，我們的伺服器設有每日自動清理機制。系統會根據家庭戶主的訂閱方案或通告建立時的會籍狀態，自動且永久刪除佔用雲端空間的「通告圖片檔案」，但會為您保留通告的基本文字紀錄（Metadata）以便隨時查閱歷史資訊。具體分級保留期限如下：
此外，所有無主資料（例如無效邀請碼等）將被定期掃描並徹底刪除。
第三方連結與聯盟行銷聲明 (Affiliate Disclosure)： 本應用程式的「週末秘書」或其他頁面中，可能包含前往第三方網站的連結。部分連結為聯盟行銷連結（Affiliate Links），這意味著當您點擊並透過該連結完成購買時，我們可能會獲得少許佣金，而這絕對不會影響您所需支付的最終價格。本程式僅提供活動資訊整合與推薦，並不參與您與第三方平台之間的交易。任何因購票、退款、活動更改或取消而產生的爭議，均由該第三方平台全權負責，開發者及本公司恕不承擔任何直接或間接的法律及財務責任。
AI 辨識與翻譯準確度： 「AI 智能掃描與翻譯」僅為輔助工具，可能會出現嚴重辨識或翻譯錯誤。用戶有絕對責任自行核對實體通告內容並與照顧者口頭確認。因依賴本程式而導致的任何意外、人身傷害、醫療疏忽、錯過限期、財務損失或衍生損害，開發者及本公司概不承擔任何法律責任。完整責任限制請參閱《服務條款》。
訂閱與自動續費機制： 本程式提供的訂閱方案（含免費試用）均透過 Apple App Store 或 Google Play Store 進行管理。若您參與免費試用，試用期滿後系統將根據平台設定自動轉為付費訂閱，除非您在試用期結束前至少 24 小時於裝置系統設定中取消訂閱。我們無法代您執行管理、取消訂閱或退款操作。用戶有絕對責任自行透過 Apple 或 Google 的帳戶設定頁面管理其訂閱狀態。
費用與扣款爭議： 用戶同意，任何關於訂閱扣款、退款申請或收費爭議，必須直接聯繫 Apple 或 Google 支援部門處理。因用戶未適時取消訂閱而產生的費用，開發者及本公司概不承擔任何退款責任。
如本私隱政策的中、英文版本之間有任何差異，概以英文版本為準。
如有問題，請聯絡：hello@jothero.com
We ("JotHero Team", "we", or "our") take your privacy seriously. This Privacy Policy explains our practices regarding data collection and our limitation of liability.
Personal & Account Data: Email, hashed passwords, and Auth IDs.
Children's Data: By inputting dependents' details, you confirm you are the legal guardian or authorized to do so. The App is primarily for parents, guardians, and adult caregivers; we do not knowingly offer accounts directly to children under 13.
Local-First Processing (Strict Privacy): To ensure the highest level of children's privacy, the real names of the children entered in the "Back-to-School Checklist" and "Portfolio Auto-Generator", as well as the generated PDF files, are strictly processed and stored locally on your device. When syncing checklist progress with family members, the system only transmits anonymous status codes (e.g., checkbox states). We NEVER upload, collect, or transmit children's real names or the generated PDF files to our cloud servers.
Cloud Notices & AI Usage: We collect AI-recognized content and track AI scanning usage for subscription management, one-time reward quota management, and abuse prevention.
Caregiver Reports: Authorized helpers can report task completions and language preferences.
Device Permissions (With Consent):
Auto-Collected Data & Tokens: We collect Push Tokens (FCM/Expo) for reminders. To prevent referral fraud, we may collect device fingerprints (Android ID/IDFV) strictly during code redemption, not for cross-app tracking.
Data Collection & Analytics: This application uses Google Analytics for Firebase and other third-party analytics tools to help us understand how users interact with the app, thereby improving the product experience. These tools may collect anonymous usage data, device information (such as device model and OS version), and randomly generated identifiers. This data is strictly anonymous and is not directly linked to your personal identity.
Subscription & Payment Status: We record your subscription plan status (e.g., free trial, Standard, Premium) to enable the corresponding features and entitlements. We never store, process, or have access to your credit card numbers, bank account details, or any payment information. All payment processing and billing are securely managed by the Apple App Store or Google Play Store.
Cloud Infrastructure (Google Firebase): Data is encrypted and processed via Google Firebase for cross-device syncing.
Permission Isolation: Used for strict Role-Based Access Control. Offline roles default to restricted access to protect privacy.
AI Processing (OpenRouter): Data is sent to third-party AI platforms. We request Zero Data Retention via API settings so data isn't used for training. However, we cannot 100% control third-party internal policies; please do not upload highly sensitive ID documents.
Ads (Google AdMob): We integrate Google AdMob to provide advertising services. Our advertising partners may use technologies (such as Cookies or device advertising identifiers, like IDFA on iOS or AAID on Android) to collect non-personally identifiable information in order to show you ads that are more relevant to your interests. You can manage or revoke your ad tracking consent at any time in your device's system settings.
Cross-Border Transfer: Your data may be processed outside of Hong Kong.
In addition to the in-app deletion option, you can also request account and data deletion externally. If you wish to delete your account and all associated cloud data without signing into the app, please email us directly at hello@jothero.com. Upon verification, we will initiate the same 30-day permanent clearance process.
Account Deletion Scope & 30-Day Clearance: If you are a family member (non-owner), deleting your account immediately removes your login, settings, and tokens; shared family notices will remain unaffected. If you are a Family Owner, deleting your account dissolves the family. To ensure data minimization, all cloud notices and images associated with the dissolved family will enter an automated cleanup queue and are guaranteed to be permanently and thoroughly deleted within 30 days.
Logout Clearance: Sensitive local caches are cleared upon logout.
Local Auto-Cleanup: The App can auto-clear image caches older than 3 months on your device.
Cloud Data Auto-Cleanup (Tiered Retention): To manage storage efficiently while maintaining a good user experience for historical searches, our system runs a daily automated cleanup. The system will automatically and permanently delete the storage-heavy "image files" of expired notices based on the Family Owner's subscription tier or member status at creation, while retaining the basic text metadata for your records. The specific tiered retention periods are as follows:
Furthermore, all orphaned data (e.g., invalid invite codes) will be periodically scanned and permanently deleted.
Third-Party Links & Affiliate Disclosure: Sections such as the "Weekend Secretary" may contain links to third-party websites (e.g., Klook). Some of these are affiliate links, which means we may earn a small commission if you click through and make a purchase. This will absolutely not affect the final price you pay. The App strictly provides activity information and recommendations and is not involved in transactions between you and third-party platforms. Any disputes regarding ticket purchases, refunds, event changes, or cancellations are solely the responsibility of the third-party platform. The developer and our company assume no direct or indirect legal or financial liability.
AI Recognition & Translation Accuracy: The App's AI features are purely assistive tools and may produce severe errors. Users hold absolute responsibility to manually verify original notices and verbally confirm details with caregivers. The developer holds NO liability for any accidents, personal injury, medical negligence, financial losses, missed deadlines, or consequential damages resulting from reliance on the App. Refer to the Terms of Service for full liability limitations.
Subscriptions & Auto-Renewal: All subscription plans offered by the App (including free trials) are managed through the Apple App Store or Google Play Store. If you participate in a free trial, your subscription will automatically convert to a paid subscription at the end of the trial period in accordance with the platform's settings, unless you cancel at least 24 hours before the trial expires via your device's system settings. We cannot manage, cancel, or process refunds on your behalf. Users bear sole responsibility for managing their subscription status through their Apple or Google account settings.
Billing & Payment Disputes: You agree that any disputes regarding subscription charges, refund requests, or billing issues must be resolved directly with Apple or Google support. The developer and our company assume no refund liability for fees incurred due to your failure to cancel a subscription in a timely manner.
In the event of any discrepancy between the English and Chinese versions of this Privacy Policy, the English version shall prevail.
Email: hello@jothero.com